0x89, 0x0, 0x0, @pid}, @generic="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", @typed={0x14, 0x6, 0x0, 0x0, @ipv6=@private1}, @generic="bd78d01b2642ea1c23bfab6b664d025acfeb01ac81fa682c7fad6bc22bd59b5a5b3ea5ccc235543d13ba1b36cae12b7afad2e1ea4714f4ce3c1e01342d51aa3096"]}, @nested={0xb4, 0x8e, 0x0, 0x1, [@typed={0x8, 0x4c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}}, @typed={0x8, 0x19, 0x0, 0x0, @str='{#-\x00'}, @generic="7b7ec3db47747d0b6bc2488d7507ad292a3de9bcca52976e2bb660e1664cbfc5d68a0f04e54a4ccb8bed9710d714b4dc3ed7a2fe6cf6ce3a5b95572d61479524f000cfc609bd460aa742c601b057ac79462603ab28e48344cf4e5472fcfe8598ddd59e0e53cabf98f6c42621f98923cdfae88871979cdac3684a6e45fccfdf96207efbe217df6a21e02c0a84b2f35b6201878020dec6858f3ef36ed53e7e46d6"]}, @nested={0x1020, 0x52, 0x0, 0x1, [@typed={0x8, 0x21, 0x0, 0x0, @fd=r1}, @generic="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", @typed={0x14, 0x33, 0x0, 0x0, @ipv6=@loopback}]}, @typed={0x9f, 0x92, 0x0, 0x0, @binary="f0f7862c004dcbf963beb21b373e151eec32776a5b7f40775faf5a57ce92e2394ded65e7922bdf5ceb2aa384b44683ed896ad4ac89e5c246d2755509b4b6bba151db86c64e821dcd4e73789c689da13a7fa527d5cad074fb644f7eefa419ec8e2ed3c75968c8702c6850cae2292368558d54005eb33967c8e18147ee025a5b335de7d9bc92b9a28afdd2d2f8fada4362b9b33f945df67602f9c07c"}, @typed={0x8, 0x19, 0x0, 0x0, @u32=0x4}, @generic="f75388185b3ee6017a53160b2896f2718ec4980a37f0f0df5633b5e27da215157d87e9ecd4fc2229c5dc571e7cdcb93d60fef92ebcb37288418c49a2ea726c58fe30155f58284842bc07fafc058334ca1684f1d0a06af67e9333ce23527696dceeb0c11eb7baf0e0cca8ed6e1377f25ccacbede4ba427043da5183e496435011b563e943c8ff65ed9264e7089f477fc6c0c42d4767e4ba259d8ec90694738b9ce1a0f8e155855647950506b380ba3377cc7dedf12b4d8e233005af90853378aa3781886cf5efd3c20a5ec3e2e8fb192b55b595da95b1ac0d71a998ac4dff61edbf9360351b48298449cf86f7"]}, 0x2664}, 0x1, 0x0, 0x0, 0x1}, 0x4048048) [ 673.679909][ T23] audit: type=1326 audit(1635955388.446:10682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11647 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8058360b32 code=0x7ffc0000 [ 673.762851][ C0] sd 0:0:1:0: tag#1343 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 673.772716][ C0] sd 0:0:1:0: tag#1343 CDB: opcode=0xe5 (vendor) [ 673.779052][ C0] sd 0:0:1:0: tag#1343 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 673.788128][ C0] sd 0:0:1:0: tag#1343 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 673.797180][ C0] sd 0:0:1:0: tag#1343 CDB[20]: ba 16:03:08 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20900, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f0000000200)={0x6, 0x80, 0x8, 0x3f, 0x0, 0x1, 0x0, 0x401, 0xc0014, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x400, 0x1f, 0x5, 0x1, 0x0, 0x3655, 0x5, 0x0, 0x0, 0x0, 0x81b}, 0x0, 0x2, r1, 0x23379927d0169816) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) [ 673.822846][ C0] sd 0:0:1:0: tag#1292 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 673.832727][ C0] sd 0:0:1:0: tag#1292 CDB: opcode=0xe5 (vendor) [ 673.839049][ C0] sd 0:0:1:0: tag#1292 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 673.848118][ C0] sd 0:0:1:0: tag#1292 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 673.857171][ C0] sd 0:0:1:0: tag#1292 CDB[20]: ba 16:03:08 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0xe00, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:09 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) r0 = syz_io_uring_complete(0x0) syz_io_uring_setup(0x6fca, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00005d5000/0x2000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:09 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000040)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}, 0x22}], 0x22}}) 16:03:09 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlockall(0x1) mlock2(&(0x7f000027b000/0x13000)=nil, 0x13000, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 673.944783][T11671] 9pnet: Insufficient options for proto=fd [ 673.953668][T11672] loop1: detected capacity change from 0 to 118 16:03:09 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20900, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f0000000200)={0x6, 0x80, 0x8, 0x3f, 0x0, 0x1, 0x0, 0x401, 0xc0014, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x400, 0x1f, 0x5, 0x1, 0x0, 0x3655, 0x5, 0x0, 0x0, 0x0, 0x81b}, 0x0, 0x2, r1, 0x23379927d0169816) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) [ 674.023333][T11672] 9pnet: Insufficient options for proto=fd [ 674.030345][T11681] loop1: detected capacity change from 0 to 118 [ 674.032342][T11682] 9pnet: Insufficient options for proto=fd [ 674.050132][T11679] 9pnet: Insufficient options for proto=fd [ 674.060608][ C0] sd 0:0:1:0: tag#1325 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 16:03:09 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0xc0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) 16:03:09 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x9, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 674.070482][ C0] sd 0:0:1:0: tag#1325 CDB: opcode=0xe5 (vendor) [ 674.076835][ C0] sd 0:0:1:0: tag#1325 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 674.085884][ C0] sd 0:0:1:0: tag#1325 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 674.094921][ C0] sd 0:0:1:0: tag#1325 CDB[20]: ba 16:03:09 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)={0xa, &(0x7f00000000c0)=[{0x9, 0x7, 0x7, 0xfffffffe}, {0x3, 0x3, 0x7, 0x6}, {0x0, 0x7, 0xf2, 0x10000}, {0x1, 0x16}, {0x5, 0xee, 0x3, 0xffff}, {0x9, 0x7, 0x81, 0x6}, {0x5, 0x2, 0xc1, 0x8000}, {0x4, 0x3f, 0x3, 0x8}, {0x80, 0xfd, 0x3, 0x4}, {0x2, 0x3, 0x3, 0xffffffff}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x349e, &(0x7f0000000040)={0x0, 0xd43a, 0x0, 0x3, 0xfffffffc}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f00009d2000/0x1000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:09 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0xf00, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:09 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20900, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f0000000200)={0x6, 0x80, 0x8, 0x3f, 0x0, 0x1, 0x0, 0x401, 0xc0014, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x400, 0x1f, 0x5, 0x1, 0x0, 0x3655, 0x5, 0x0, 0x0, 0x0, 0x81b}, 0x0, 0x2, r1, 0x23379927d0169816) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) [ 674.239537][T11698] 9pnet: Insufficient options for proto=fd 16:03:09 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) r0 = syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000aa9000/0x4000)=nil, 0x4000, 0x2000002, 0x4010, r0, 0x8000000) syz_io_uring_setup(0x87, &(0x7f0000000140), &(0x7f0000ee4000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_io_uring_setup(0x16ea, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee6000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r4, 0x0, &(0x7f00000001c0)="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", 0x1000, 0x0, 0x1, {0x0, r5}}, 0x587) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) [ 674.288988][ C0] sd 0:0:1:0: tag#1320 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 674.298875][ C0] sd 0:0:1:0: tag#1320 CDB: opcode=0xe5 (vendor) [ 674.305255][ C0] sd 0:0:1:0: tag#1320 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 674.314569][ C0] sd 0:0:1:0: tag#1320 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 674.323646][ C0] sd 0:0:1:0: tag#1320 CDB[20]: ba [ 674.359317][ C0] sd 0:0:1:0: tag#1325 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 674.369238][ C0] sd 0:0:1:0: tag#1325 CDB: opcode=0xe5 (vendor) [ 674.375586][ C0] sd 0:0:1:0: tag#1325 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 674.383005][T11711] 9pnet: Insufficient options for proto=fd [ 674.384631][ C0] sd 0:0:1:0: tag#1325 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 674.399439][ C0] sd 0:0:1:0: tag#1325 CDB[20]: ba 16:03:09 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x5, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:09 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x1100, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 674.404592][ C0] sd 0:0:1:0: tag#1326 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 674.414466][ C0] sd 0:0:1:0: tag#1326 CDB: opcode=0xe5 (vendor) [ 674.420813][ C0] sd 0:0:1:0: tag#1326 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 674.429865][ C0] sd 0:0:1:0: tag#1326 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 674.438950][ C0] sd 0:0:1:0: tag#1326 CDB[20]: ba 16:03:09 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x80000) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) [ 674.472612][T11713] 9pnet: Insufficient options for proto=fd 16:03:09 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x9, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 674.596514][T11725] 9pnet: Insufficient options for proto=fd 16:03:09 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlockall(0x1) mlock2(&(0x7f000027b000/0x13000)=nil, 0x13000, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) 16:03:09 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) r0 = syz_io_uring_complete(0x0) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x690401, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766642a027effc3fe6d52fe836e6f3d", @ANYRESHEX=r1, @ANYBLOB=',uname=+*(.\\\'+,debug=0x0000000000000009,cache=fscache,fscache,dfltgid=', @ANYRESHEX=r2, @ANYBLOB=',noextend,cache=loose,cache=none,access=', @ANYRESDEC, @ANYBLOB=',defcontext=root,subj_role=\x00,\x00']) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:09 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x7fff, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x4, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsmagic={'fsmagic', 0x3d, 0x400d56d}, 0x22}], 0x22}}) 16:03:09 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x1200, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:09 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlockall(0x1) mlock2(&(0x7f000027b000/0x13000)=nil, 0x13000, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1f, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf1", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x4000, 0x0, 0x0, 0x2) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:09 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c726f862cebad9c74636f6e746578743d726f6f74002200000000005f25dd0f646c4fc7d52b79691533df33dfb246ab2bc28c4781b5b550cc053545f5ba2529976ba1527f6e3f81f72ace4e05225ddf2a8cb8f13c5dcdaff621f70c4b81d445fb28558173dde2eecfc03ba1e50b32e818af8bb203d604e1cbf726a243c5aca48c2ca7ef1d2562a31f23d7939908423143e68b44762d68badff84dd5b89a4354a3ebe61e"]) 16:03:09 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) r0 = syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) r2 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r2, &(0x7f00000000c0), 0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x7361, 0x7, 0x7f, 0x1}, {0x3, 0x40, 0xf6, 0x2}, {0x8, 0x1, 0x7, 0x6}, {0x3, 0x1f, 0x1f, 0x10001}, {0x8000, 0x7, 0x7f, 0x1}, {0xfffa, 0xfa, 0x1, 0x6}]}, 0x10) 16:03:09 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x2000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 674.765759][T11738] 9pnet: Insufficient options for proto=fd [ 674.793466][T11740] validate_nla: 29 callbacks suppressed [ 674.793485][T11740] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:09 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x2, 0x1, 0x10, 0x1f}) ptrace$setregs(0xc11223ab56f0b9c0, 0x0, 0x7, &(0x7f0000000200)="ac4a801b136d86ed6ce8ffaa9caceff89b9700b0de09a3aa80747c7d626b64a1f7e304437124b9e9465a99a4db636ca8a8e8a5ab6f9bc553911241a2b9ed35c3962ef07f9b63b4d09891bf1e557cc02f1b18b8c58fb86f4355b5d88b9f504e73299fcce08210496700151f5be206f7310b919f92565cfab40cd49aa5cee570fa3096a8e9c313") mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) 16:03:09 executing program 2: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlockall(0x1) mlock2(&(0x7f000027b000/0x13000)=nil, 0x13000, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1f, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf1", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x4000, 0x0, 0x0, 0x2) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 674.920771][T11753] 9pnet: Insufficient options for proto=fd 16:03:10 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xcda6}}, './file0\x00'}) preadv(r0, &(0x7f00000017c0), 0x0, 0x4000, 0x2) pwrite64(0xffffffffffffffff, &(0x7f0000000040)="25da9e1d4877ae1fc94b400a2410265c30dc0556664de5ec82d5ea927dd834563cd934954f57dc001605cbbc125926f24e66f69cb3473bec05d6e32e696dc58ec0543e116f878b45ad62008dc85158e28bf3edf9c1cca626b7f6cdab31f2a1243fbcda9499255db42f2707b1815bea764884baa0336db2ef5a390e3e3459cf66306a7905ca9a4cda2d295984dd4273b630a1e7054b3398afbddff15fd9710add6b15548eec838c58cf48560ca2a9a75b7c8ea409a79ad8609e35238e882b24126cd358170536008ed556df37e82bb1d900c2e7cd4df767e1211fc0985c8b8aae79b87bc6652e", 0xe6, 0x5) syz_io_uring_setup(0x6914, &(0x7f0000000240), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) [ 674.979548][T11761] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 675.034536][T11761] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 675.066816][T11764] 9pnet: Insufficient options for proto=fd 16:03:10 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlockall(0x1) mlock2(&(0x7f000027b000/0x13000)=nil, 0x13000, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:10 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) acct(&(0x7f0000000340)='./file1\x00') clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x84024400, &(0x7f0000000180)="079a898983e968245e406c62835ba8467bb88ff0c03dd83129224a42332acae8df66c8d6e8ca02aff192eb983390779190a0fa69fb38cc25f95b7434d9adde95583c16ab54bc1b0652c66f7bd6b3813dc55e6ffc6b7c157a8c790673f422631a621953430e79abfafb49ca089896ca501d94568367e92e021c2ac60fdebe4b2cbd699d699c1de60809e6225efd61afc48792929d90a981e19659bfb877f12c2e248c050f", &(0x7f0000000080), &(0x7f0000000240), &(0x7f0000000280)="57c47d6daf670b6ea447f96a2e95fcd8da72f09279be884ae44e4ba1782af5e86a603bfc6a477347f9e0bd18fc6c90dae8eb87e051faa7fc205a2e148a1692c6ca19f8ed2293d476e9924253deba60e3b0921846fe296d5bf051dcd305b478159ac8599351dd7eaf3982a2390e9c6bfa6222375aa9fdec0c285d1c1c672cf6578cc66a660abe63f022980bbc730e78dd594dca908065302cd3f49e54e1566c481c3a6ac0579d4771cccaa3e568049cbb07173c80") mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={r0, 0x80, 0x9, 0x4}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) 16:03:10 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x2500, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:10 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) r0 = syz_io_uring_setup(0x6914, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_setup(0x87, &(0x7f0000000140), &(0x7f0000ee4000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000480)={0x3, &(0x7f0000000340)=[{0x1, 0xb6, 0x9, 0xfffffee0}, {0xf001, 0x7, 0xa0, 0x7}, {0x4, 0x0, 0x8, 0x7ff}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_io_uring_setup(0x16ea, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee6000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_setup(0x16ea, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee6000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000001a00)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7f) syz_io_uring_submit(r2, r7, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd=r1, 0x0, 0x0, 0x4, 0x1, 0x1}, 0x7) syz_io_uring_setup(0x5799, &(0x7f00000017c0)={0x0, 0xa535, 0x0, 0x1, 0xea, 0x0, r6}, &(0x7f00007a6000/0x2000)=nil, &(0x7f00006e6000/0x4000)=nil, &(0x7f0000001840)=0x0, &(0x7f0000001880)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r7, &(0x7f0000001900)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000019c0)={&(0x7f0000001940)=@generic={0x5, "442725fe6e30fb723e47bebd7b19be23cc29682901099250f73118cde4d0e90fabf38c96c214813e3ecce13513008918f357d0a52c846868f6770a4d9a871d6a949c5b93267a141003e120039157664ad97393d686fc0fdd4096167d4d4ece74285cc0d34b284b56f97923d249bee9dd62f66390f3faf00596ba04e796d9"}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001a40)="7236fc4d804c6b4a1882d14c2b98ebedfeb467fe5f210e9ea966ac27ed92b871a2b6650724b2643da1a5290085a392be6350395842a2061f6b13d6962859a046132058b77dfcabc9955d612f1a4b9767c5ef09dde7767d9c8b792d0818955ae290948fa86e238e06dc226268449b19f234f29c4e139f", 0x76}], 0x1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="80000000000000000c01000002000000afc4e0009ca4d2a1056d8c4a33a26e463de9d47d921885254496b2ac3b5d436275ce7c65b74826eadc7c41e22bcc2f8e48a206ca8bd4c97b25b423b4fc936da7276d864274e7d5d6ee45419d4e8d7f8b41411d217cbee17cf33593fa072d23992ab3b4abc6392900000000f9fd540d7545f1d0d6f18bb65ae39750851f4f0c995c4bebc10b10dc4b09e8b794a96d6f74033906b3813e3deec1c08be2ff0fe6732cf1028539bf18f46306a473041d7ccd3d5b99da0f8aff01036e9a711ba5edc2739073cf0b50c302"], 0x80}, 0x0, 0x8014, 0x1}, 0x9d04) sendmsg$unix(r5, &(0x7f00000016c0)={&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000001700)="af05c2a966919601b533dd6962986382ea98e5411a4f34b8010df4ac43b6561f1103db01fed937b1079a8177a197c8c9b12b005c584fd87672d215e0684d0b0bff34fc53792e6a5e63025ce537d9b9267a1d6bd98af852bb35c1113cbc43861f1abbe495e880e108f99891703212de47889f22a6263954bc86a283a601ce5a81c5ad64a768ca6c00b54577d799645f3af3326c0e0382b97458f209c89c0d2f76bb0c6417d3115112b45b70033f49e305795150cdf6b93310a1e710a731", 0xbd}, {&(0x7f0000000380)="d5c2fc606766594b6b53", 0xa}, {&(0x7f00000003c0)="4cc7", 0x2}, {&(0x7f0000000400)="ca5e3d866f8a444617e2751d10983e1cbf4aed6ee03ca94656dc385483adc9cb1626830aa3ca8e6dbe5550967719889f1ff00327f82996616deb330529e434dfe6895a83fb18578d49f707df5dacd5b57d0dc664963e45ff1698422c67b47052ceababc88af8", 0x66}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="91e73d559dac1b1b22f9be4d2b334cc7b0f645412b690064e5823f4c2a895502e8e8ce996ce15b44920825efa6c0b5e4bd71135479cd76db7881e2d1024e7113ea950423178ccf1ba6547e0d210f82361d8088a688dcceba3970c7defae60fc9f87fe51a61dd8b8d5a6f3ea5914f30736ad04c6778c3bc4e9fbf42fa16f254b35eecee6b3f66a392f33719fbf56e628525c440a7eb29d3a153c143967e948ae45e6ec6982f3bdc610c198be3b9756593f0", 0xb1}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001b40)="bd27046143002b0f", 0x8}, {&(0x7f00000015c0)="51777d05f478e7741a8cdf10b392a10d464dc9da9c24578d089c5764612ff95b5f71f799c8c7", 0x26}], 0x9, 0x0, 0x0, 0x4}, 0x4004000) kcmp(0x0, 0xffffffffffffffff, 0x5, r1, r0) 16:03:10 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="a89ea96672616e733d66642c7266646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',rootcontext=root\"\"']) [ 675.510259][T11782] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 675.557197][T11782] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:10 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlockall(0x1) mlock2(&(0x7f000027b000/0x13000)=nil, 0x13000, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1f, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf1", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x4000, 0x0, 0x0, 0x2) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:10 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x2d79, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:10 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:03:10 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) r0 = fork() kcmp(r0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x7fff, 0x8, '9P2000.L'}, 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) openat$cgroup_ro(r3, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r4, &(0x7f00000000c0), 0x1c) signalfd4(r4, &(0x7f0000000080)={[0xff]}, 0x8, 0x80000) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:10 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x7fff, 0x8, '9P2000.L'}, 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) socket$nl_route(0x10, 0x3, 0x0) r4 = io_uring_setup(0x5522, &(0x7f0000000040)={0x0, 0x1f05, 0x0, 0x2, 0x2f0, 0x0, r0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@posixacl}, {@cache_loose}, {@mmap}, {@cache_loose}, {@version_9p2000}, {@access_any}], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000480)) [ 675.786838][T11798] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 675.827002][T11798] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:11 executing program 2: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlockall(0x1) mlock2(&(0x7f000027b000/0x13000)=nil, 0x13000, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1f, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf1", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x4000, 0x0, 0x0, 0x2) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:11 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x3a00, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:11 executing program 0: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfe}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x11) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xbd9a, 0x62, 0x3f, 0x4f}]}) syz_io_uring_setup(0x2da5, &(0x7f00000000c0)={0x0, 0xcf70, 0x20, 0x1, 0xbb}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[{0x20, 0x7f, 0x0, 0xffffffe0}, {0x84, 0x8, 0x0, 0x4}, {0x5, 0x0, 0x1, 0x4e5}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:11 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1000, 0x8000) openat(r0, &(0x7f0000000080)='./file0\x00', 0x80000, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) 16:03:11 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlockall(0x1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:11 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) wait4(0xffffffffffffffff, &(0x7f0000000040), 0x2, &(0x7f0000000180)) [ 676.495420][T11820] 9pnet: Insufficient options for proto=fd 16:03:11 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{0x9d, 0x6, 0x9, 0xb72e}, {0x8ad, 0x3f, 0x7f, 0xffffffff}, {0xa429, 0x6, 0x5, 0x4}, {0x0, 0x3f, 0x3, 0x1ff}, {0x74, 0x8, 0x1, 0x2}, {0x1ce, 0xe1, 0xc8}, {0x3, 0x6, 0x1, 0x7}, {0x5, 0x7, 0x0, 0x3f}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x2, 0x5, 0x2, 0x18}, {0x5, 0x9, 0x1, 0x5}, {0x3, 0x80, 0x9, 0x9}, {0x7, 0x8, 0x0, 0x5}, {0x2, 0xfc, 0x80, 0x8}, {0x8, 0x4, 0x3f, 0x6}, {0xff, 0x8, 0x37, 0x6}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) [ 676.537265][T11828] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 676.563773][T11829] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:11 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) wait4(0xffffffffffffffff, &(0x7f0000000040), 0x2, &(0x7f0000000180)) 16:03:11 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x4800, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:11 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = dup3(r0, r0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xc) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB='o=\x00\x00\x00\x00\x00', @ANYRESHEX, @ANYBLOB=',rootcontext=root\"\"']) [ 676.654617][T11835] 9pnet: Insufficient options for proto=fd [ 676.655342][T11837] 9pnet: Insufficient options for proto=fd 16:03:11 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="5efa8ba2d7e94765df5c53f13617c3f97533182090f71450e46e40bb1172bc89", 0x20}, {&(0x7f0000000080)="3ed7eb3bc26fc813b600023f28f149e103fbe55a9ab95e45ef267df56005f270bc27c38ed62e79c741dda79300d52e463cc933df4e4c352c86e26b03645f174c5615bfface0c89d681c934aea7e4e0358f5a90e26079435ec06628b9db2314078630d767f65be2b130bfde3745b9c2c96fa54fe4e8a027bc42ffbafe42e721d2f1e2904e67a55a1eaa139447a12052363b8b232fe28eb59330c30fa2c4f358b24d3d71", 0xa3}, {&(0x7f00000001c0)="295c392f9c4ecf86fc14fb12ef10274b1b8561c40ba81357096b5e56ced7f92e44c0eee898b65c89a0bf7d8ab430757e54a7f1cb2b313677f0a21b60149b72eca44a52f62792258305ca2fc50cc508154328097f8bc49dc0242ba9173a7ed685f320539ec942c51e2c18cd3eab1c20344307c058a96fcc4f7dbf891b4812769bbff5a09b61170899a9c04a7cee5a31849e1acc8231953db9e7a9c6b9375f9a977aef889456c3e1688987ed6c7fbdddcc4b99be2fd8031f9b982141ab5b379bb2e85194c554df401efc43fe3762f18318dc30b90069d3137a8ae213dface506e4f0dfde2bcfa4c0c3f55f70e137168e52cbc2d7d60ef400f3ece9a1", 0xfb}], 0x3) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) [ 676.747598][T11843] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:11 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x4c00, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 676.796154][T11845] 9pnet: Insufficient options for proto=fd [ 676.863312][T11855] 9pnet: Insufficient options for proto=fd 16:03:12 executing program 2: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) mlockall(0x1) mlock2(&(0x7f000027b000/0x13000)=nil, 0x13000, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x1f, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf1", 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x801100, 0x4000, 0x0, 0x0, 0x2) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:12 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000040)="d991c29c47c6d4bf626649bac2cfa1d454317a62a76a3cd949824c5294620f87aa43ecf0c832f24fd580521ad18c61637b0c3630f9bae176fc07428bf85c4458e838c1e9b54a76fc38ed3a7916c45f1ce7d6f56ee3beba587526d27c7dc1713507dfa2c2f9ac324a", &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="1eed183650ba21fd6438bde036b3af8f6603c8f7bd2ce0ce06fd63200a1414406eb97f13b85723970d37b2bffe71d0f0e62daa64b69ad205748f6efd3ec6e7edc5ee24adae0e93ae39e4161960df1f40c6ac6984a783863be77504fd60c06e5605c95745df253fb3d38d00fe4bf985b21218aaf6a8") mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) 16:03:12 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x6000, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:12 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/81, 0x51}], 0x1, 0x8, 0x5) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:12 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x6000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:12 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:12 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) r0 = syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0xfa26, 0x6, 0x4, 0x94}, {0x7ff, 0x3f, 0x6, 0x81}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x3, &(0x7f0000000100)=[{0x5, 0x1f, 0x7, 0x7fffffff}, {0x81, 0x12, 0x1, 0x3}, {0x55, 0x1, 0x0, 0x5}]}) io_uring_enter(r0, 0x64d5, 0xb8c8, 0x1, &(0x7f00000000c0)={[0x3cb6]}, 0x8) 16:03:12 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r5 = getpid() sched_setattr(0x0, 0x0, 0x0) sched_setattr(r5, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) socket(0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r8, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000000c0)=ANY=[], 0x20001290}], 0x1, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x18}, 0x0) recvmmsg(r9, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x2100, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x1c) sendmsg$unix(r1, &(0x7f0000000500)={&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r6, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r8, @ANYBLOB="1c0000000000000001000002000040000000000000000000f500f3438f02b8fc5c989c94e24ab236b90a1f329e79fd105bf8778fb3855bbcc063ff39c691efc74254b0f0c03f750f6079d7efc4f8827ccdfc0390287b7986b798dd66e20ab80fe55fac131272bf7ed3847c7275402a83c73c070f8227a787a6f17f4d348d1ff170642d5e0a7406feeaa63834fe5a4dd91e2386e148ac16d6f9d81d8db6cd60f9ba906c0ee4575882d8b56678bbe072dafb49b3f18bd46223f5ef2bc05eb57706a1c2aac39fd809b5e24bb1e9277c201146afdb3e0b1067c3df73e2f8eae3b2869ccc4e41f3085a94b2efb021a836813f47a1ed09f43ec780038d06cf6b70903a5e6af2b30818403819d9c788e3797d8078df", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x108, 0x40041}, 0x4000050) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:12 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x6800, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:12 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0xecd03a8cf7cdb533, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000400)) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r2, @ANYBLOB="045e035229b82385882e620f3354b77f8df55b133cbaa55d18c1a7e2468fa54954456867f38fbd1681fe80fb1b1f5ae4dee6e8ea36026e68962e9c7449d40ef890ea28764ec8ddaeda6b4f1f48b4516afacff670242409e6a596180483bd0a21cf6ede3e83ab7b023e2b4f045816f01b88d0af17058d3fb1e262c0abfb95e9ba68e60994c87a08b077efb10546324b45a4f3b53dd6185082", @ANYRES64, @ANYRESHEX, @ANYRES16=r1, @ANYRESOCT=r2, @ANYRES16]) 16:03:12 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 677.350775][T11870] 9pnet: Insufficient options for proto=fd [ 677.378971][T11882] 9pnet: Insufficient options for proto=fd 16:03:12 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x8, &(0x7f00000001c0)=[{0x101, 0x6, 0x0, 0xffff}, {0x4, 0x8e, 0x3f, 0xff}, {0x7, 0x7f, 0x80, 0x3}, {0x86, 0x81, 0x1, 0x7}, {0x6b, 0x9, 0x7f, 0x8}, {0x1, 0xff, 0x5, 0x8}, {0x0, 0xb6, 0x3, 0xee}, {0x6, 0x7, 0xec, 0x3}]}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x400, 0x0, 0x28, 0x8f}, {0x8, 0x0, 0x1, 0x8773}, {0xfff, 0x5, 0x78, 0xeaf7}, {0x0, 0x7, 0xfb}, {0x81, 0x2, 0x7, 0x7}, {0x0, 0x9, 0x7, 0x4}]}) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{0x3, 0x6, 0x0, 0x1}, {0x0, 0x9c, 0xeb, 0x8}, {0x4, 0x8, 0x1, 0x3ff}, {0x780, 0x1, 0x8, 0x80000001}, {0x16, 0x40, 0xdf, 0x4}, {0x800, 0xf7, 0xfd, 0x40}, {0x7, 0x3, 0x1, 0x9}, {0x200, 0x7, 0x0, 0x283c}]}) 16:03:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) 16:03:13 executing program 4: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:13 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000180)={0x1, 0x1, 0x1000, 0x20, &(0x7f0000000040)="35b85a8cd5125119d7a4794a2c5be5004ca47245bf4ac708ae383f9e40c8ec3b", 0x3f, 0x0, &(0x7f0000000080)="9d09d52dce3fbc965708051083b71605fbeea9d0d70bf1c009ef345978ee4c59048fe2756bed0306ebaf834770d8595cb3966b879dcecf7ed1893526885087"}) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) 16:03:13 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x6c00, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:13 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x6, 0x1, 0x1, 0x3}, {0xbd, 0x1, 0x7, 0x8001}, {0xfff, 0xff, 0xf9, 0x6}, {0x48f, 0x1, 0x0, 0x1}, {0x7, 0x0, 0x3, 0xffffffff}, {0x603b, 0x8, 0x4, 0xbf22}, {0x2, 0x8, 0xfe, 0x4}, {0xb47d, 0xbe, 0x9, 0x9}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{0x5a, 0x20, 0x8}, {0x81, 0x2, 0x2}, {0x1, 0x6f, 0x40, 0x5}, {0x800, 0x9, 0x3f, 0xffffffff}, {0xffff, 0x1f, 0x0, 0x5}, {0x89, 0x40, 0x5e, 0xc000000}]}) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000200)={0x7, &(0x7f00000001c0)=[{0x1, 0x6, 0x1, 0x6023e4ae}, {0x7ff, 0x0, 0x6, 0x7}, {0x5, 0x0, 0x6, 0xff}, {0x2, 0x0, 0x4, 0x101}, {0x3, 0x1f, 0xf4, 0x10000}, {0x8, 0x9, 0x9, 0x1}, {0xff00, 0x80, 0x6, 0xe58}]}) [ 678.051594][ C1] scsi_io_completion_action: 19 callbacks suppressed [ 678.051624][ C1] sd 0:0:1:0: tag#1347 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 678.068149][ C1] sd 0:0:1:0: tag#1347 CDB: opcode=0xe5 (vendor) [ 678.074502][ C1] sd 0:0:1:0: tag#1347 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 678.083542][ C1] sd 0:0:1:0: tag#1347 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 678.092573][ C1] sd 0:0:1:0: tag#1347 CDB[20]: ba 16:03:13 executing program 4: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:13 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_secret(0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20900, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f0000000200)={0x6, 0x80, 0x8, 0x3f, 0x0, 0x1, 0x0, 0x401, 0xc0014, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x400, 0x1f, 0x5, 0x1, 0x0, 0x3655, 0x5, 0x0, 0x0, 0x0, 0x81b}, 0x0, 0x2, r1, 0x23379927d0169816) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) [ 678.101181][T11914] 9pnet: Insufficient options for proto=fd 16:03:13 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_secret(0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20900, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f0000000200)={0x6, 0x80, 0x8, 0x3f, 0x0, 0x1, 0x0, 0x401, 0xc0014, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x400, 0x1f, 0x5, 0x1, 0x0, 0x3655, 0x5, 0x0, 0x0, 0x0, 0x81b}, 0x0, 0x2, r1, 0x23379927d0169816) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) 16:03:13 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x7400, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:13 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x1, 0xc7, 0x1f, 0x4}, {0x7f, 0x1, 0x5, 0x2}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:13 executing program 4: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:13 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_secret(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) [ 678.435470][ C0] sd 0:0:1:0: tag#1369 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 678.445474][ C0] sd 0:0:1:0: tag#1369 CDB: opcode=0xe5 (vendor) [ 678.451843][ C0] sd 0:0:1:0: tag#1369 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 678.460887][ C0] sd 0:0:1:0: tag#1369 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 678.469946][ C0] sd 0:0:1:0: tag#1369 CDB[20]: ba [ 678.493012][T11939] 9pnet: Insufficient options for proto=fd [ 678.503486][ C0] sd 0:0:1:0: tag#1353 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 678.513326][ C0] sd 0:0:1:0: tag#1353 CDB: opcode=0xe5 (vendor) [ 678.519662][ C0] sd 0:0:1:0: tag#1353 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 678.528748][ C0] sd 0:0:1:0: tag#1353 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 678.537794][ C0] sd 0:0:1:0: tag#1353 CDB[20]: ba 16:03:13 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x900, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:13 executing program 4: r0 = open(0x0, 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:13 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0xed, 0x1, 0x3e, 0xd4}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{0x2, 0xff, 0x6, 0x6}, {0xfffb, 0x1, 0x1, 0x3}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x4000, 0x3) r0 = syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) mmap(&(0x7f0000f88000/0x4000)=nil, 0x4000, 0x1, 0x30, r0, 0xfcb81000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x470, 0x3, &(0x7f00000001c0)="bca95518cc53f5176b7b7d8f306f78a40b08ad52828d1d8109c88d12b80ed264eaa922e7fd452f04cbdf87dc8a01ba5ebe034aca02a7776ad3c71146b7e2c8c1685128a73fcfd388972d86f428e3272c9502384bc73cac34b75c2935b23e4cdd0c2221692f895bfee7c36e72d0ae61cbcde1f82825ef8b49d6f38de747a3717cc15ba36b43a66954640778cabbdbe6a699604254e2cb2a323dafe655e4e1cd24cc848da62916cf60e9f2ca2de37106d1a2837eb511a2073a0d91367bff4c4e1bc67bceff9d62fcb42b3b82828765d09a30df438d05d46c95faf6795a736d052f540eb7a1307f6dffd425dc94206bbb43e15b0fe99416a2ca", 0x6}, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x2, 0x3, 0xf7, 0x6a1}, {0x1, 0x54, 0x81, 0x1}, {0x2, 0xf2, 0x7, 0x20}, {0xb42, 0x5, 0x1f, 0x3ff}, {0x7f, 0x5, 0x8, 0x33ab}, {0x3, 0x1, 0x20, 0xfffffffe}, {0x7, 0x5d, 0x80, 0x9}, {0xc0, 0x7, 0x0, 0x7}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x7fff, 0x9, 0x1, 0x3}, {0x195, 0x0, 0x3, 0x9}, {0x4, 0x1, 0x0, 0xfffffff8}, {0x9, 0x4, 0x8, 0x100}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x5, &(0x7f0000000300)=[{0x0, 0x3, 0x1, 0x200006}, {0x4, 0x62, 0x3, 0x4}, {0x1000, 0x4, 0xff, 0x101}, {0x9, 0x7, 0x40, 0x7f}, {0x100, 0x5, 0xaf, 0x8}]}) 16:03:13 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x50001, 0x0) fallocate(r0, 0x58, 0x8, 0x5) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) 16:03:13 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_secret(0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20900, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f0000000200)={0x6, 0x80, 0x8, 0x3f, 0x0, 0x1, 0x0, 0x401, 0xc0014, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x400, 0x1f, 0x5, 0x1, 0x0, 0x3655, 0x5, 0x0, 0x0, 0x0, 0x81b}, 0x0, 0x2, r1, 0x23379927d0169816) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) 16:03:13 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x792d, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 678.824316][ T23] kauditd_printk_skb: 529 callbacks suppressed [ 678.824329][ T23] audit: type=1326 audit(1635955393.826:11212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11948 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 16:03:13 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x2292, 0x0, 0x3, 0xffffffff}, {0x7, 0xff, 0xc, 0x6}, {0x9, 0xc, 0x6, 0x5}, {0x401, 0x0, 0x20, 0xfff}, {0x5, 0x1, 0x5, 0x3ff}, {0x315, 0x8, 0x40, 0x9}, {0x0, 0x4, 0xfb, 0x4}, {0x40, 0x3, 0x8, 0x6}]}) [ 678.854649][ T23] audit: type=1326 audit(1635955393.826:11213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11948 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 678.878719][ T23] audit: type=1326 audit(1635955393.826:11214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11948 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 16:03:13 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_secret(0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20900, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f0000000200)={0x6, 0x80, 0x8, 0x3f, 0x0, 0x1, 0x0, 0x401, 0xc0014, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x400, 0x1f, 0x5, 0x1, 0x0, 0x3655, 0x5, 0x0, 0x0, 0x0, 0x81b}, 0x0, 0x2, r1, 0x23379927d0169816) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) [ 678.903143][ T23] audit: type=1326 audit(1635955393.826:11215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11948 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 678.910898][T11952] 9pnet: Insufficient options for proto=fd [ 678.927279][ T23] audit: type=1326 audit(1635955393.826:11216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11948 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 678.927305][ T23] audit: type=1326 audit(1635955393.826:11217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11948 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 678.981440][ T23] audit: type=1326 audit(1635955393.826:11218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11948 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 679.005518][ T23] audit: type=1326 audit(1635955393.826:11219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11948 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 679.029595][ T23] audit: type=1326 audit(1635955393.826:11220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11948 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 16:03:14 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)=0x1) 16:03:14 executing program 4: r0 = open(0x0, 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 679.053719][ T23] audit: type=1326 audit(1635955393.826:11221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11948 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 679.056053][T11957] 9pnet: Insufficient options for proto=fd [ 679.084595][ C0] sd 0:0:1:0: tag#1360 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 679.094447][ C0] sd 0:0:1:0: tag#1360 CDB: opcode=0xe5 (vendor) [ 679.100781][ C0] sd 0:0:1:0: tag#1360 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 679.110024][ C0] sd 0:0:1:0: tag#1360 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 679.119083][ C0] sd 0:0:1:0: tag#1360 CDB[20]: ba 16:03:14 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x7a00, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:14 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{0xfff, 0x6, 0x9, 0xe}, {0x7, 0xc1, 0x0, 0xc3}, {0x2, 0x81, 0x9, 0x6}, {0xf8, 0x7, 0x80, 0x19}, {0x9, 0x1, 0x8, 0x7fdf}, {0x1, 0x81, 0x4, 0xffffff2a}, {0x81, 0x9, 0xe0}, {0x4000, 0x0, 0x32, 0x4}, {0x200, 0x1e, 0x1, 0x6}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) [ 679.225365][ C0] sd 0:0:1:0: tag#1363 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 679.235236][ C0] sd 0:0:1:0: tag#1363 CDB: opcode=0xe5 (vendor) [ 679.241600][ C0] sd 0:0:1:0: tag#1363 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 679.250696][ C0] sd 0:0:1:0: tag#1363 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 679.257135][T11971] 9pnet: Insufficient options for proto=fd [ 679.259847][ C0] sd 0:0:1:0: tag#1363 CDB[20]: ba 16:03:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) 16:03:14 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x792d, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:14 executing program 4: r0 = open(0x0, 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:14 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x26808000, &(0x7f0000000180)="98df10c77d1faeb0fc9f76fdbe15c40242e3236d82486d2d8b11b3f470cd2ac14c505f047bcad65abbc8700c9f57b8342e3df0b2d1c9eefcb21153c1e84a454841a62427012793527af8c77dd6368ef235a2d4c9a6c26462939e87f9a1326c7c1aff4d7f4376ec8223572300850943f70903cb3d63b35bdb2c9a64af230f5cafe106edfb1034db03d971ef1f289f774b82a95e84a4eb518d537feee56cfd418a55299514c5b828a237a30c14ea078aef4f9a703b8efaa7ca3ced3e7ecb41edf914fe5770e2e5da5b7c3f87c958278bba6e1b67b51f4e05", &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000280)="38433af91eef98d9f7493fe8331077ed800f3f0d798e35d3b948ff17be18002a0ae524da8ba9edbd85cfa4256a6a373fe82cff0e14aa4c829a6407b389200b65bb33d1c1492b1bc420ad33284ec3c8540a613db9b8a543c0ac99407829010e3b6fa858b98d34793ef82a426d3b5e03e8c3b92bbed4d6bd75e554245ab66a70c63b72b8749984763c2607ccd60c11306136c6adea15ec035b9910f8af8f2fad117f9dd57d86ee145ca9dd84c4895f1dc5152530e0b71c333d2bc7051a1b86bc4b8932ce6d747518b4c1b2be25d1e24b4103abb44ec6066c4c") mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) [ 679.289214][T11973] 9pnet: Insufficient options for proto=fd [ 679.305323][T11979] 9pnet: Insufficient options for proto=fd [ 679.333340][ C1] sd 0:0:1:0: tag#1344 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 679.343605][ C1] sd 0:0:1:0: tag#1344 CDB: opcode=0xe5 (vendor) [ 679.349922][ C1] sd 0:0:1:0: tag#1344 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 679.358978][ C1] sd 0:0:1:0: tag#1344 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 679.368025][ C1] sd 0:0:1:0: tag#1344 CDB[20]: ba 16:03:14 executing program 0: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0x7, 0x5}) waitid$P_PIDFD(0x3, r0, 0x0, 0x1000000, &(0x7f0000000080)) close(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0xff80, 0x7f, 0xf4, 0x1ff}]}) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:14 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x34000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 679.393042][ C1] sd 0:0:1:0: tag#1353 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 679.402908][ C1] sd 0:0:1:0: tag#1353 CDB: opcode=0xe5 (vendor) [ 679.409271][ C1] sd 0:0:1:0: tag#1353 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 679.418328][ C1] sd 0:0:1:0: tag#1353 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 679.427421][ C1] sd 0:0:1:0: tag#1353 CDB[20]: ba 16:03:14 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 679.539088][ C0] sd 0:0:1:0: tag#1405 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 679.548937][ C0] sd 0:0:1:0: tag#1405 CDB: opcode=0xe5 (vendor) [ 679.555290][ C0] sd 0:0:1:0: tag#1405 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 679.564349][ C0] sd 0:0:1:0: tag#1405 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 679.573402][ C0] sd 0:0:1:0: tag#1405 CDB[20]: ba 16:03:14 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x792d, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 679.588096][T11995] 9pnet: Insufficient options for proto=fd 16:03:14 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) r0 = syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) syz_io_uring_setup(0xc37, &(0x7f0000000040)={0x0, 0x2252, 0x0, 0x1, 0x2c0, 0x0, r0}, &(0x7f000058e000/0x3000)=nil, &(0x7f0000d41000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r2 = socket$inet6(0xa, 0x80803, 0x87) syz_io_uring_setup(0x28cf, &(0x7f0000000340)={0x0, 0x4a22, 0x2, 0x2, 0x9e, 0x0, r0}, &(0x7f00007b0000/0x1000)=nil, &(0x7f0000929000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r2, &(0x7f00000000c0), 0x1c) r3 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r6}}, 0x10001) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd_index=0x1, 0x101, {0x0, r2}, 0x1ff, 0x4, 0x0, {0x0, r6, r0}}, 0x1ff) 16:03:14 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@initdev, @in6=@dev}}, {{@in=@private}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) clock_gettime(0x0, &(0x7f00000014c0)={0x0, 0x0}) r3 = semget$private(0x0, 0x6, 0x0) semop(r3, &(0x7f0000000000)=[{}], 0x1) semtimedop(r3, &(0x7f0000000100)=[{0x0, 0xa4aa}], 0x1, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) semtimedop(r3, &(0x7f0000000280)=[{0x2, 0xfff, 0x1000}], 0x1, &(0x7f00000002c0)={0x0, 0x989680}) recvmmsg$unix(r0, &(0x7f0000001400)=[{{&(0x7f0000000300), 0x6e, &(0x7f0000000000)=[{&(0x7f0000000480)=""/198, 0xc6}, {&(0x7f0000000380)=""/124, 0x7c}, {&(0x7f0000000580)=""/229, 0xe5}], 0x3, &(0x7f00000000c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000400)=""/52, 0x34}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000740)=""/113, 0x71}, {&(0x7f00000007c0)=""/126, 0x7e}, {&(0x7f0000000840)=""/99, 0x63}, {&(0x7f00000008c0)=""/122, 0x7a}, {&(0x7f0000000940)=""/135, 0x87}, {&(0x7f0000000a00)=""/188, 0xbc}, {&(0x7f0000000ac0)=""/94, 0x5e}, {&(0x7f0000000b40)=""/58, 0x3a}], 0xa, &(0x7f0000000c40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1800007ac80000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x70}}, {{&(0x7f0000000cc0)=@abs, 0x6e, &(0x7f0000001280)=[{&(0x7f0000000d40)=""/132, 0x84}, {&(0x7f0000000e00)=""/245, 0xf5}, {&(0x7f0000000f00)=""/195, 0xc3}, {&(0x7f0000001000)=""/157, 0x9d}, {&(0x7f00000010c0)=""/148, 0x94}, {&(0x7f0000001180)=""/250, 0xfa}], 0x6, &(0x7f00000015c0)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000136d5dd21050f5a3565be197f13e30393811825040f483fbf76261452c459dbec746f27cf4d1486afc24dd6f62e6cf5b87cfdd9e117f7a40d3402cf9404dc72ed8432ecd0c3e590ff4ce32c9f000000ec5f161319f4aa84bf05c3cf095a31", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0xf8}}], 0x3, 0x1, &(0x7f0000001500)={r1, r2+60000000}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440), 0x4400, &(0x7f0000001540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@fsname={'fsname', 0x3d, 'wfdno'}, 0x22}, {@dont_measure}, {@euid_lt={'euid<', r4}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}], 0x22}}) [ 679.634623][ C0] sd 0:0:1:0: tag#1394 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 679.644481][ C0] sd 0:0:1:0: tag#1394 CDB: opcode=0xe5 (vendor) [ 679.650847][ C0] sd 0:0:1:0: tag#1394 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 679.659894][ C0] sd 0:0:1:0: tag#1394 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 679.668942][ C0] sd 0:0:1:0: tag#1394 CDB[20]: ba 16:03:14 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x400300, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:14 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:14 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x26808000, &(0x7f0000000180)="98df10c77d1faeb0fc9f76fdbe15c40242e3236d82486d2d8b11b3f470cd2ac14c505f047bcad65abbc8700c9f57b8342e3df0b2d1c9eefcb21153c1e84a454841a62427012793527af8c77dd6368ef235a2d4c9a6c26462939e87f9a1326c7c1aff4d7f4376ec8223572300850943f70903cb3d63b35bdb2c9a64af230f5cafe106edfb1034db03d971ef1f289f774b82a95e84a4eb518d537feee56cfd418a55299514c5b828a237a30c14ea078aef4f9a703b8efaa7ca3ced3e7ecb41edf914fe5770e2e5da5b7c3f87c958278bba6e1b67b51f4e05", &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000280)="38433af91eef98d9f7493fe8331077ed800f3f0d798e35d3b948ff17be18002a0ae524da8ba9edbd85cfa4256a6a373fe82cff0e14aa4c829a6407b389200b65bb33d1c1492b1bc420ad33284ec3c8540a613db9b8a543c0ac99407829010e3b6fa858b98d34793ef82a426d3b5e03e8c3b92bbed4d6bd75e554245ab66a70c63b72b8749984763c2607ccd60c11306136c6adea15ec035b9910f8af8f2fad117f9dd57d86ee145ca9dd84c4895f1dc5152530e0b71c333d2bc7051a1b86bc4b8932ce6d747518b4c1b2be25d1e24b4103abb44ec6066c4c") mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) 16:03:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) [ 679.724493][ C0] sd 0:0:1:0: tag#1355 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 679.734365][ C0] sd 0:0:1:0: tag#1355 CDB: opcode=0xe5 (vendor) [ 679.740728][ C0] sd 0:0:1:0: tag#1355 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 679.749777][ C0] sd 0:0:1:0: tag#1355 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 679.758835][ C0] sd 0:0:1:0: tag#1355 CDB[20]: ba 16:03:14 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) 16:03:14 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001680)={0x2, &(0x7f0000001640)=[{0x0, 0xdf, 0x31, 0xa7}, {0x101, 0xff, 0x9, 0x94d}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000001600)=0xe6) r0 = syz_io_uring_setup(0x6914, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) vmsplice(r0, &(0x7f0000001580)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f0000000040)="6357ea7f393293562d26cef7634b08ad66312307b0703acafdd2b6a219fffa83e3f89c469f2411d3236246ae18b2d26139411cc4dc72e03812c5bc95b3cfddabdb8e2618a2635a9d06665b0ff133c30c03cddd68d2494cec6d54c6f2e8d95df470a9322281c3b8f760f32c3adbe7c328ff2a0f5de6cf9a230b33fd059c879a93e28676394e5748fee7425f6e8915deed4c41d4d97507bf2b23c1e9af223fdec9d6c8bf8b66ded9ef79630d6b8b070bf22a9a881a4027205f15e87307c5afb4156e861673c3a6", 0xc6}, {&(0x7f00000011c0)="cabb13e43bc7cedff289f972be20836eb75a851acb2b29e5865b7c5f06a277e1f9f5ac3ba1d01eca2f5980d056cc8b55b372d3e8b492c6ca376df777815ca4cbe61861b6f7600f5bc8576ecaa070d17ca9aa60cc2f6b38e70919501c5d862f1e70f13e809230bc8879b598f25b10cc2b4732a55864fab2f95b38104a512a5ef0a1e49720b524d4c658bc61d5737dbb6ddc8d1fac63792933e7086daeb4888cb48404105b3290fe570408eb9eedf967b12899c9a8cd5c81ff9c66e07aa0f80df97936d3554e829a6b43a40d9ee59a20482471517f4369c0e2cf416a7158463f526071834bbac27888c3a7aea16791d4a3e98bae29d7d6bf8224", 0xf9}, {&(0x7f00000012c0)="f3b3f7726403293656475414398b9aa66fdabc7bac524a013e5b4a55a1e869fc26f9288013d24b5516154a132c8909c855865ffe9a73af4c3d6ea4133236b3b92e8cfa22d4db57df4635364623e49719b7c9df0231fb073c7ba7ac70cd938269eb0f327bc9e236bce60c83ba5cc5f2d10db681c642fbb34fb136b5b0ce848711ae54", 0x82}, {&(0x7f0000001380)="1419ea092fd10f2208caef6780f3d8dfa55324847b882bb0d7f59368caaae23bd4f06bb411df5a57efb9dee87e865e6b261d1055b673f6f44ba80fb0c01dcaf8d6b17c7a2e96c21b6142535bd90bd2b50fe9a333fa5e29925b4671f882a087a4346284434f6d8dbf3813b3bd45b39318525a5da8ae3221bbe62871595ff2c7", 0x7f}, {&(0x7f0000001400)="96ed00d5ea928234d01c16bf2a6f6aa0b0d0e92adb8b73daf2ee6dc2ffdb1bdc60df2ba78b2a7a5d70bc511dea6ac3f48b33dfec12d3b8f0e8a244ffc20c05ffb6582f983f9b4d77dbd98ea2e296dca107945ca3bd5c97a73d5326c3aabe45df420349879ff9c7", 0x67}, {&(0x7f0000001480)="6e7de9d64efd01e70ff20915d825f87485987abbef375420d001e50a4f54ddde3aaa34dd52fcce7ccff9097c19804b4c0b4cdaf0405c4b8494d750831fa195033946548c9ca01fd6edf8e874a70b1665179df74fa9a7af41113fedab8d3e041f7cec64fc9d2f15762c27f1fb2cac947db9c9acb74c2f9ec807c0b6e5f331baeeb4f07d14c3e0c6fd6c83", 0x8a}, {&(0x7f0000001540)="e6c73c49fa389829ad8ceda606372aa785166bc1101b609acc34f36f00715173fdd4c92a10396043bfef326b55", 0x2d}], 0x8, 0x7) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000016c0)=0x7, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000001780)={0x9, &(0x7f0000001700)=[{0x0, 0x1, 0x0, 0x6}, {0x1, 0x6, 0x9}, {0x0, 0x5, 0x1, 0x10001}, {0x8, 0x1, 0x6, 0x5}, {0x5, 0xe1, 0x20, 0x7}, {0x9, 0x5, 0x1, 0x800}, {0x7, 0x97, 0x8, 0x7}, {0x983c, 0x8, 0x5, 0x57}, {0x80, 0x0, 0x15, 0x2}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:14 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 679.852610][T12022] validate_nla: 20 callbacks suppressed [ 679.852638][T12022] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:14 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x1000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 679.893507][T12022] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f00000000c0)={0xf1c, 0xd886}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) [ 679.939830][T12031] 9pnet: Insufficient options for proto=fd 16:03:15 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) pread64(r0, &(0x7f0000000040)=""/11, 0xb, 0x162) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x7fff, 0x8, '9P2000.L'}, 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) 16:03:15 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:15 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{0x1, 0x6, 0x0, 0x7fffffff}, {0xc0, 0x4, 0x0, 0x99}, {0x4, 0x6, 0x22, 0x6}, {0x800, 0x1, 0xf0, 0x679}, {0x86, 0xff, 0x8}, {0x0, 0x9, 0x7, 0xfffffffd}, {0x9, 0x1, 0xfd, 0x3238}, {0x0, 0x6, 0xc3, 0x9}, {0x3, 0x2}]}) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) [ 680.022817][T12033] 9pnet: Insufficient options for proto=fd 16:03:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) [ 680.111304][T12046] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 680.144818][T12048] 9pnet: Insufficient options for proto=fd 16:03:15 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) 16:03:15 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x2000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 680.164900][T12046] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 680.175227][T12053] 9pnet: Insufficient options for proto=fd 16:03:15 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:15 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x9, 0x81, 0x7, 0x8}, {0x5a4, 0x37, 0x1f, 0x80000001}, {0x8000, 0x5d, 0x0, 0x6}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0xff, 0x7f, 0x8, 0x3}, {0x9, 0x12, 0x8c, 0x101}, {0x1, 0x7, 0x0, 0x5b}, {0x3, 0x8, 0x3f, 0x6}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:15 executing program 2: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:15 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) 16:03:15 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x3000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 680.348049][T12065] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 680.366714][T12066] 9pnet: Insufficient options for proto=fd [ 680.374861][T12065] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:15 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0xb, 0x4, 0x3, 0x81, 0x0, 0xfffffffffffffff7, 0x802a, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x1d4577c2e6f89798, @perf_config_ext={0x8, 0x1}, 0x400, 0x81, 0x7, 0x3, 0x8, 0x8001, 0x710f, 0x0, 0xfffffffc, 0x0, 0x791}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0xb) preadv(r0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f0000000500)=""/23, 0xfffffffffffffe46}, {&(0x7f00000002c0)=""/249, 0xfe}, {&(0x7f00000003c0)=""/159, 0x9f}, {&(0x7f0000000840)=""/245, 0xfffffffffffffcb7}, {&(0x7f0000000580)=""/232, 0xf7}, {&(0x7f0000000680)=""/110, 0x3e}, {&(0x7f0000000700)=""/183, 0xb7}, {&(0x7f0000000a00)=""/185, 0xb9}], 0x9, 0x80, 0x8000639b) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x2, &(0x7f0000000280)=[{0x2, 0x6, 0x0, 0x10000}, {0x9, 0x3f, 0x0, 0x2}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x401, 0x80, 0x0, 0x4}, {0xb9, 0xff, 0x6, 0x1f}, {0x0, 0x1, 0x5, 0x6}, {0x2, 0x4, 0xf5, 0x6}, {0x6, 0xf7, 0x9, 0x5fc}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{0xf296, 0x4, 0x4}, {0x800, 0x6d, 0x9, 0x400}, {0x0, 0x2, 0x0, 0x3}, {0x4, 0x5b, 0x7, 0x6}, {0x7, 0x5, 0x3, 0x9}, {0x7, 0x4a, 0x7}, {0x224, 0x4, 0x40, 0x4}]}) 16:03:15 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:15 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x1100, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) 16:03:15 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 16:03:15 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x141101, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}, 0x22}], 0x22}}) 16:03:15 executing program 0: mmap(&(0x7f0000c75000/0x4000)=nil, 0x4000, 0x1000001, 0x40010, 0xffffffffffffffff, 0xe08b3000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) r0 = syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) gettid() syz_io_uring_setup(0x5553, &(0x7f0000000040)={0x0, 0x9daf, 0x20, 0x0, 0x378, 0x0, r0}, &(0x7f0000fe6000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r2 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r2, &(0x7f00000000c0), 0x1c) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000001c0)='ns/pid_for_children\x00') syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x100, 0x12, 0x0, {0x0, 0x0, r3}}, 0x7) [ 680.530838][T12080] 9pnet: Insufficient options for proto=fd [ 680.543968][T12084] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:15 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x4000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:15 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:15 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x1100, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) [ 680.584423][T12084] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 680.683932][T12096] FAULT_INJECTION: forcing a failure. [ 680.683932][T12096] name failslab, interval 1, probability 0, space 0, times 0 [ 680.691642][T12097] 9pnet: Insufficient options for proto=fd [ 680.696560][T12096] CPU: 0 PID: 12096 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 680.708468][T12099] 9pnet: Insufficient options for proto=fd [ 680.710719][T12096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.710732][T12096] Call Trace: [ 680.710739][T12096] [ 680.710745][T12096] dump_stack_lvl+0xd6/0x122 [ 680.737329][T12096] dump_stack+0x11/0x1b [ 680.741581][T12096] should_fail+0x23c/0x250 [ 680.746004][T12096] __should_failslab+0x81/0x90 [ 680.750774][T12096] should_failslab+0x5/0x20 [ 680.755308][T12096] kmem_cache_alloc_bulk+0x3e/0x390 [ 680.760498][T12096] __io_alloc_req_refill+0x1b1/0x32d [ 680.765834][T12096] io_submit_sqes+0x297/0x670 [ 680.770501][T12096] ? __rcu_read_unlock+0x5c/0x290 [ 680.775512][T12096] __se_sys_io_uring_enter+0x212/0xb00 [ 680.781017][T12096] ? __fget_light+0x219/0x260 [ 680.785700][T12096] __x64_sys_io_uring_enter+0x74/0x80 [ 680.791062][T12096] do_syscall_64+0x44/0xa0 [ 680.795491][T12096] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 680.801373][T12096] RIP: 0033:0x7f0e3c102ae9 [ 680.805824][T12096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 680.825431][T12096] RSP: 002b:00007f0e39e79188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 16:03:15 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20900, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f0000000200)={0x6, 0x80, 0x8, 0x3f, 0x0, 0x1, 0x0, 0x401, 0xc0014, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x400, 0x1f, 0x5, 0x1, 0x0, 0x3655, 0x5, 0x0, 0x0, 0x0, 0x81b}, 0x0, 0x2, r2, 0x23379927d0169816) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x3, 0xb0, 0x0, 0x9, 0x0, 0x1f, 0x50200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000040), 0x9}, 0x10001, 0x9a, 0x8001, 0x6, 0x3, 0x200, 0x400, 0x0, 0x10000, 0x0, 0x6}, 0x0, 0x0, r1, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000087beda1879de96e506000000000000003e888d0008000000000000c37376a6a22323b5543a010ae3e1b17399e587ede883697dcdde097ea7cd2660ef", @ANYRESHEX, @ANYBLOB="2c777964ee6f3d", @ANYRESHEX, @ANYBLOB=',rootcontext=root\"']) clone(0x60800000, &(0x7f0000000480)="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", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000280)="24c2687be753bb0d1e8a0d666ea9c06896d21556c95c362e7b171651b4ac7efbd418ccba28d73f569632774e926a1a59c640a0dc2e4e677b152917c5299a598cf9c336502c49e97cfd705838f4df1018843d080a0f865a48a5802ec2ccf3e541") [ 680.833876][T12096] RAX: ffffffffffffffda RBX: 00007f0e3c215f60 RCX: 00007f0e3c102ae9 [ 680.841834][T12096] RDX: 0000000000000000 RSI: 00000000000002ff RDI: 0000000000000004 [ 680.849788][T12096] RBP: 00007f0e39e791d0 R08: 0000000000000000 R09: 0000000000000000 [ 680.857782][T12096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.865777][T12096] R13: 00007ffd0ce1d33f R14: 00007f0e39e79300 R15: 0000000000022000 [ 680.873732][T12096] 16:03:15 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 16:03:15 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) r0 = syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) syz_io_uring_setup(0x7d44, &(0x7f0000000040)={0x0, 0x6501, 0x20, 0x3, 0x111, 0x0, r0}, &(0x7f00004f8000/0x3000)=nil, &(0x7f0000609000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r2, 0x0, &(0x7f0000000200)="6f159bacea33ace2a28faf0b71d5094c001f54983f40da2999fa47bfbf6b4c34cc8f9f5a22c0cd0e783b9d3a76d65bbf7fe364357470885de6f42366f101fc0791cd1e365e6e8eec9197f8987b5f80ce73deaf78a255dce43b0b7ae5cea541c856", 0x61, 0x2000, 0x0, {0x0, r3}}, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:15 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:16 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x1100, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) 16:03:16 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x5000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 680.918505][T12106] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 680.953224][T12106] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:16 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB=',rootcontext=root\"\"']) 16:03:16 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x1cfd, &(0x7f0000000040)={0x0, 0x20005c04, 0x0, 0x0, 0x41}, &(0x7f0000700000/0x3000)=nil, &(0x7f0000de5000/0x3000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) [ 681.090275][T12127] FAULT_INJECTION: forcing a failure. [ 681.090275][T12127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.103409][T12127] CPU: 0 PID: 12127 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0 [ 681.111823][T12127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.121940][T12127] Call Trace: [ 681.125448][T12127] [ 681.128370][T12127] dump_stack_lvl+0xd6/0x122 [ 681.132939][T12127] dump_stack+0x11/0x1b [ 681.137072][T12127] should_fail+0x23c/0x250 [ 681.141557][T12127] should_fail_usercopy+0x16/0x20 [ 681.146709][T12127] _copy_to_user+0x1c/0x90 [ 681.151194][T12127] simple_read_from_buffer+0xab/0x120 [ 681.156624][T12127] proc_fail_nth_read+0x10d/0x150 [ 681.161638][T12127] ? proc_fault_inject_write+0x230/0x230 [ 681.167290][T12127] vfs_read+0x1e6/0x750 [ 681.171438][T12127] ? __fget_light+0x219/0x260 [ 681.176252][T12127] ksys_read+0xd9/0x190 [ 681.180393][T12127] __x64_sys_read+0x3e/0x50 [ 681.184878][T12127] do_syscall_64+0x44/0xa0 [ 681.189357][T12127] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 681.195240][T12127] RIP: 0033:0x7f0e3c0b569c [ 681.199726][T12127] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 681.219408][T12127] RSP: 002b:00007f0e39e79170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 681.227803][T12127] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f0e3c0b569c 16:03:16 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20900, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f0000000200)={0x6, 0x80, 0x8, 0x3f, 0x0, 0x1, 0x0, 0x401, 0xc0014, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x400, 0x1f, 0x5, 0x1, 0x0, 0x3655, 0x5, 0x0, 0x0, 0x0, 0x81b}, 0x0, 0x2, r2, 0x23379927d0169816) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x3, 0xb0, 0x0, 0x9, 0x0, 0x1f, 0x50200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000040), 0x9}, 0x10001, 0x9a, 0x8001, 0x6, 0x3, 0x200, 0x400, 0x0, 0x10000, 0x0, 0x6}, 0x0, 0x0, r1, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000087beda1879de96e506000000000000003e888d0008000000000000c37376a6a22323b5543a010ae3e1b17399e587ede883697dcdde097ea7cd2660ef", @ANYRESHEX, @ANYBLOB="2c777964ee6f3d", @ANYRESHEX, @ANYBLOB=',rootcontext=root\"']) clone(0x60800000, &(0x7f0000000480)="11602023b63e0e9dd680e634a4fb76542b99fe843fb9360f040c2b99f004ab71afe0863dfbe64057917e37f1d6a816a71f4394995ba35db13e5d773ce4990521670956eec972ecc96459c0539eac69d6357c18855cd074b9215bc36c0cab1fa4bff08f92f224f87587920cbe8692e52d9406d158c2e02bbdd2fab9cf51cd36f8df25d37f2135e7160964c45d0c1faf0c6b5afe9178b97d6aac79392b99089a60c679cc6aec36941c70219c53c5a08bd1fb5309bc25057462357ac26a8b69e251603892ebad3474901773fa8fd461dbbc41c9d9a9e3c27cad6ff2933b16de7978d43e91a21617f8fb29a8045d8f8eb16d7b9fc9f0e8779007df1f59238c7834a0020ca097265d34859e104845bbf3858e2f20e29552e189a0cd4629ae486d20a70892a57e19b6fcbdbe3f3834a8df26bfca69d863406566b8bd5b1b803bafd45738332a3ba7d54830acf1143a81a31f5447ff25384f2221fb9a4154cc0da6c7343691699b8eb949e0a85ce5a72068227e726b38a7dd6b0cb78df92988bf5ba171889fd81de2b1e260476deee7722b83636c99f4c8267066f935f74a387729815e9fdd4a0108bfe054bdf0978ac0d6945b8459113f308ccf666a574f808a077bc6ae894737f81f294d215411f8d98896ab375a147d79ca09642f4d040223bb024bc15e075cf135ab71fe42948a355d3d69a7b014169a5660343208407cec9ddade05a56cb902a328b78792b573ad7407353156ee66038b62b75e20ad0e809ba5580daecce61cc63f9e65c81c7052a6bfd9c5d9a500db020d2adba781b87bd3a1ff568d6e6abab07a561e2b79d235c88d9c230c1869e8ec994d46a13a11ba519e31b46823dc775ebff87b8175f9c883faf2ce3515a854c5c84eedd3f6d6abccd9d25ff9a9338d1ec39d36c4ea0031d503c0b51d3834c03f6320bdbfa9d380784ceb6dc288bd3b1239ca53f64ae8e5e0ffb6dbb762a6d17d7801b0805da436df7a544c13ec0363280257f97716d51370350fcc7fe10a1724dcfb48da2362c5108175d00ada35b261e113c9f3aa1121d3c76da6bfef80166f9f58eb386d2d93d0be03e2731a004d2f72d055cf5b061d776ed6310f6292bf77065e324afd41dc90c6686ec3429b9b771b7a2b59af816f5b58e622e657b0a99974ae91f803324ecb1e9318567bbb17d3fe37d2df0511472d401c9e207d57e24bb85a75774e064b696990a9c4a43ec61c72385d8fe7f6043fdfce5197fd75be00fe8d3fa530be67e82b038573b32f5f5182878e26079eb6d28ba43b385ce999f4d780f9524526af062d3cf4df59e009086f0f12d2f92b76a0cc94ea92fad7df5c0ed30ca8c2588ead1436484453f1601b5e205e96277d0c595decbf84baca6e70e08f502200d531b4e2beafa59dc3bbfa85246836c2968e4874ed0fc4d301a5195b160a132c213aa332674af1c1f83ff7c45d4883c22d04272c425df4b34a8c1d96dd28a44fe60e993e1c5f79465bb1e8c427b24342d7ca733bfec38240bc66a5db4ac82f5bd33d71a71a442a4349e5550b72f12683398f8c35c6442c6d161177083140135cf1ae210b45c20bda7ffa0b033fed2aeafc7b539e9ae7972aa7ca29d4d0580a9d6792aa98ec7c1d7e1a3cfd9e64555b16826426c1f1dc2b738f326d7c5e2e0fde837257d1e131a9a2169a134af5ac72257aef3da250490d4941cda256b6b14ce4b37c15d281fc0e6e71369f548a5482a18adb89a0e36c5deda8b629694bf3556cd34ae62bbde568b848e8320d16543a2231ab357597dbe8d95d031e1b43e31209430eda34e1b098810e14dfe3ae0d55fb11023a590d1fac979375b7f974dda527f90d7e7b78564af716738e748f543f7a625743a80b9c41835e7f8de40d02d6a508e74be90b089eb7f31d47b8a43e72417ca705df4ed934aa59b985adf6ab5e5416094e9018395f2dba4684485d009c1a79681cf83d55249d9af60069358aea6cc78d41bc0d5e2a33c61ee5a4ff29088c0dc3ea91bbd3d4ce28b3b0ac2f5c598e654d83bada4858e78b6330a44f3d332125b1b2747002ae018562526ec06dfb7870e358ce4b15ed4c105d3fdab3469943e9f35ce32318fa832d71352d942f84400872078d25561f8d4df939b0f871fbf422a5d58b67f54252513dc0b206699961d237d871697734c8e266732e2d16dd3d80e3db6e1e74aa70616b22b2f056cfad8abe1771a252739df8aed3d7570a042334526b6b3bfd10146686541ec5b15414ab16390258b039053e5804b24c43c56c34505b39f8d0dba05d0c795ec3b86a947b20d96c293f9b2ce9507de2f67a6e8c583d3590ed0cecaab9d8dc61700250822812a73957b69b7f4e82bb281b78ccc2363ac83f808f9fe6996bf9306c2f85dbc97f6b05d5e5161db47dbe239d55e0921ef18349ff06b56ff8026b62e5629925cf47bcf8367bdc2efb9065925beb58f8f3c482f3b6e340941639310f32bee301d5948c4860419614bf2a109982ef4507a52f34f96a51caafbfba7597df08507f667a77b7bc119859ec6587b65f788e135010da29ba76c0759585bc29e079fa91ba96b65d6b2de31ca601c0ac0772f85a89145efadd003f1b5421181fcbad77d76d1b7e2851a3b559fd98946b7200d486c0e08bd0dd408a97085d7347955e4d087b0e843de99052eab43cf0276b18b37b96b579e78cd6d72ea1a04af2c09ca16799d6b9aee63704031e484c6bb6b07cb2d96cbbb3d5993afafedc66c82bf11ed4a98223d4481f479304e0249e6edf700282ce5eb9df0a8f70d73a2bb5cefba9f69c6c819b835f3370b57d4bc963817c138eeb3ffa4d5a187624fcf99b1c46571f8535818f51e01606b2fcdd31393a4bf1c4c025471c3410bfc770d640f6dc7dab5528e90f41c3385612f05fc4d51329763018eee7b96b121dbb3fd348235bf1fff7a8de263ea8c2d0d3d45f706f79bde4851679da7565b0108edb2e54dc8cb200cd91a18451fd8d8c158ed21090c7a19a7d43a6e51d93f60696bd4b9bd40b61a6bd9952f54812096dfd7b8ca15e739cceec567da3b29400b355d7efe17e3bc63e3aae261b39ff74cfdd7578a2fdc4bfd6b90442f4abf74c6b8a7267121d0ac428c9136e13630e9e7952038eb30cf05e522505bb1ca523bfa5a07e3ee756d873eb225c3b87f97a3678c1551d222f3c880234d2fc6fa86f09ed4891debccbb304a525352597b1e9da66f9df251514e8088e5a4e75011ef1c7af71ac2c4a60be16147030c5fb2d3352c43c86947396d66e9b9cd872e815f63231597d5244276f38f8bded10246295990ead21d12e337c53e4c47a9c94097e3cd90a05e4922e537a9278115fda1c0c79703a9e74b1432293572f018a0bd51cac4c478a25b218e1460814f4fb63f6b5ece36b1e73ab14621fb1b698c20d6c08889ff2b9a56c1b58045665a2b3e8d095b1a7b51583f7537795505298a8041c781bc8f1f594444f759c2df1372c9398605149031fddd912f191850955e44b54eea5a6d6c64b24115af9d961aa43a5adf70d73e290a5aa000a540aa19b43c85dd0a8d8190b48ddbed0a321d9ed80e3a7ac73273695fd946c4865dd11e1e8fa30ebe3d94260a8510632bdb2107d22bd216684cc8f954b9b29d1c099e3cee9a405bca329fe683b626f40cc0b071e74f5474967e8aea446b5c6a482c6e4fde85e7f7b0cbe0ba6bced748a9bd8194509ee751f85efd5e8361ecd7a443f539d587b0e2ccb41e011df6a8dc1cde9801911cbcf0e72be3da74ffbc54257772003dbb4cf08d2a7223f6697060562175a95be01b52ed95b73522a15e6d83d896cdf7c294d81a63f82e36a6084067763e1f41cfa01a9053056c406240bf10f1a71971d4a278f67e7074fbab1e573984f1e5c4a2c5e5e5ca3226367a997ae29e530df4ef53aaeaa634bd17224e5c6498eb8c8b77cc7d1a0864d92ad45a27da65d261be22bdaf317fe9a9da71a9f31712ff17ff54c09cf6536dcd013b4426585e2b7cc9ac7e1e00b244ace7da2749cbce3f51f55e31f3c35657f1b8a6a9ff84200dd048e1c655137b07a8d601269ca49a8fb0995994759e1059e31bbd0d67c18f5268f4728df3ccff69b013297dde48eb46f199886af60f008c774857540fb5c6ac1f20227c2013fcb3c90eb766afd3a146531273e4a681780c9f46d991359e92691f62ac880f107e46058e55968616bb69accb99836c7f1e1def794ae82175da7656c00f216aef64cba7c761f0652f9240e6cfb13001372d3067bface1405254fe7e169b634e6fd4f5dc8cf82029c048e87e4c71f8beb556079cec9c59b7b179c2761ccd4f5e29a917be1d6fdbb3eaa989553ae7a8b2b3d1b1d7777ba0c31b67b84d5cb493baf753bfc28f5250e3b3ee78dfb7247beef54edb5f0787dacc8a75e7f38e7b3b3c8154f71c7f8483b43191bee5de735c8d9796d467722cc5bcea85a89e404c6852a3224654682c203932f2973494c688e63085e8ce79c5c689e7d728359be9e42538aee7102d7f5b60d06648835e74a702aeaee6f8345b11becc41f124d90a7b95627222785e2e224af32036b9be49fe805e1ddcd9777b3d3ada1be53f347c7c40208d2f2bd61226f4f00ddc17637cf00886c33f30a773b615dca1a27ea21ca1cd3bb95126c1201d3761c7fe5a6e31ee50e4171a287ddb65b3f25716d030d15a0322ad843e32f4dcb13def890445bce7dfa13f0558206e2eeca591c30b29dd609f313446bd7285c2da580d5d7cf0129a89752989f64d28cd337206fc6dbf0acf669529fbf27155e44f557602636b5ae85544e62e11f0c9ac6e2a03f37d088c129e0d7130bee91c2fecdfe99da7f310d95ea600ff578fac5288976e6f50e112e489a88532d098910f925817291d93dddda78b8090afb6c76edf90ee46816514d9ba8db647bd096af7c6494c028a8e7d7009b5bc553e256b85f3da55992b3c3c3dbb7fc7cde002e5497616210d7ec79f628b50bcf477833a21dcbb9c2d0c39dfad14053a9c3df81e1399c722f4c4f296c33345384898006265bbd9cad760f6e6310edf3a2c987e04617c6f6c03d269c44dc921309cfd891b16529bb43649136727c7347cd6dcba10c35e8ef67882bc69ee97bc619bf66a63d6153f467b640853610a5e6b0606ee7d428d7c6a8538efa7c974bc9cb6e88edb0d95b927ec2f30baa9120e5c944b81cc7d9717a3693e64a14ed66fcf48a82a89ef3b448826ea5c96cbd0b265d37ea9e0901667003e26756d01d9d873d43a68736d9a08400ab788cf1a5efc729d00344a7ba0615fc414f4c1a26151621db9d9df17e24bf1ea42c6e6d0133bfc10bd6a5594c8e6619a2df1b5227e41589647b5c97f314d4e56a958bbc49b3a47cd11f6deab0243042f7b80d0e24bb2ec32c09919ccefdbb847ddcf7e2c25a567a0a6b622ad68dc008495aae5669f1cac039413bb3f3b9844ab485ee6146e46506c731fa010166077cb99c6137fae9a73bd8e407036aff021751a9f5e371a411d885d26779b37ed2d90d995f6b44511688373e2542144e4933ab61a39baec2240daf9dd5b9c4b85322c21ec288a5a4103b4c4b9b0b92328daae931bc540701ab67ccb3dfd64373891f516fcf710310a3c5c10977714121d636dfd2144c3a703c46645805cb2b3101aa3760271245f352a948dd9d0a8a5a464ccdc91175fbfd28210f6d5f9bbf7cbd999dd53a03576242b539069bcde3c3755c27b40e64edaf384393ed8c55bc748765bea773653502bcae783e965ae3be0898584905a9b6ff1fa994c2b80d0062bde42d64b3f77e", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000280)="24c2687be753bb0d1e8a0d666ea9c06896d21556c95c362e7b171651b4ac7efbd418ccba28d73f569632774e926a1a59c640a0dc2e4e677b152917c5299a598cf9c336502c49e97cfd705838f4df1018843d080a0f865a48a5802ec2ccf3e541") 16:03:16 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:16 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 681.235821][T12127] RDX: 000000000000000f RSI: 00007f0e39e791e0 RDI: 0000000000000005 [ 681.243775][T12127] RBP: 00007f0e39e791d0 R08: 0000000000000000 R09: 0000000000000000 [ 681.251783][T12127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.259736][T12127] R13: 00007ffd0ce1d33f R14: 00007f0e39e79300 R15: 0000000000022000 [ 681.267694][T12127] 16:03:16 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) exit_group(0x80) 16:03:16 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x6000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:16 executing program 0: ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x3120}, {0xffffffffffffffff, 0x5010}, {0xffffffffffffffff, 0x680}, {0xffffffffffffffff, 0x3022}, {0xffffffffffffffff, 0xc080}], 0x5, &(0x7f0000000080), &(0x7f00000000c0), 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x6914, &(0x7f00000001c0), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) [ 681.330495][T12138] 9pnet: Insufficient options for proto=fd 16:03:16 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20900, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f0000000200)={0x6, 0x80, 0x8, 0x3f, 0x0, 0x1, 0x0, 0x401, 0xc0014, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x400, 0x1f, 0x5, 0x1, 0x0, 0x3655, 0x5, 0x0, 0x0, 0x0, 0x81b}, 0x0, 0x2, r2, 0x23379927d0169816) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x3, 0xb0, 0x0, 0x9, 0x0, 0x1f, 0x50200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000040), 0x9}, 0x10001, 0x9a, 0x8001, 0x6, 0x3, 0x200, 0x400, 0x0, 0x10000, 0x0, 0x6}, 0x0, 0x0, r1, 0x4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000087beda1879de96e506000000000000003e888d0008000000000000c37376a6a22323b5543a010ae3e1b17399e587ede883697dcdde097ea7cd2660ef", @ANYRESHEX, @ANYBLOB="2c777964ee6f3d", @ANYRESHEX, @ANYBLOB=',rootcontext=root\"']) clone(0x60800000, &(0x7f0000000480)="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", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000280)="24c2687be753bb0d1e8a0d666ea9c06896d21556c95c362e7b171651b4ac7efbd418ccba28d73f569632774e926a1a59c640a0dc2e4e677b152917c5299a598cf9c336502c49e97cfd705838f4df1018843d080a0f865a48a5802ec2ccf3e541") 16:03:16 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:16 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x4000, 0x0, 0x0, 0x0, 0x0) 16:03:16 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@subj_type={'subj_type', 0x3d, 'root'}, 0x22}], 0x22}}) 16:03:16 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000780)={0xa, &(0x7f0000000700)=[{0x8, 0xfb, 0x1f, 0x7}, {0x4, 0x4, 0x9, 0x6}, {0x9, 0x8, 0xf0, 0x2}, {0x9, 0x1f, 0x1f, 0x101}, {0x81, 0x5, 0x20, 0x9}, {0x2, 0x0, 0x1, 0x8}, {0x8, 0x3f, 0xb3, 0x7fff}, {0x0, 0x1, 0x0, 0x8}, {0xffbc, 0x84, 0x1, 0x1}, {0x8000, 0x4, 0x0, 0x944}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000640)={0x0, 0xfffffffffffffffd, 0x2f, 0x71, @scatter={0x6, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/202, 0xca}, {&(0x7f00000001c0)=""/53, 0x35}, {&(0x7f0000000200)=""/215, 0xd7}, {&(0x7f0000000300)=""/216, 0xd8}, {&(0x7f0000000400)=""/84, 0x54}, {&(0x7f0000000480)=""/73, 0x49}]}, &(0x7f0000000580)="2385fc564c09dc819123fe18b5a5ea8ef9389912f0623d7079b8de1dc32785f5d0e04bda164085d7d610ee5835a353", &(0x7f00000005c0)=""/22, 0x6, 0x24, 0x0, &(0x7f0000000600)}) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000006c0)) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:16 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x7000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 681.483438][T12155] 9pnet: Insufficient options for proto=fd [ 681.490013][T12159] 9pnet: Insufficient options for proto=fd 16:03:16 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) (fail_nth: 1) 16:03:16 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:16 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 681.672404][T12179] 9pnet: Insufficient options for proto=fd 16:03:16 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x8000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 681.844986][T12194] FAULT_INJECTION: forcing a failure. [ 681.844986][T12194] name failslab, interval 1, probability 0, space 0, times 0 [ 681.857674][T12194] CPU: 0 PID: 12194 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 681.866094][T12194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.876155][T12194] Call Trace: [ 681.879440][T12194] [ 681.882400][T12194] dump_stack_lvl+0xd6/0x122 [ 681.886984][T12194] dump_stack+0x11/0x1b [ 681.891129][T12194] should_fail+0x23c/0x250 [ 681.895633][T12194] ? alloc_pipe_info+0xac/0x350 [ 681.900503][T12194] __should_failslab+0x81/0x90 [ 681.905259][T12194] should_failslab+0x5/0x20 [ 681.909752][T12194] kmem_cache_alloc_trace+0x52/0x350 [ 681.915065][T12194] alloc_pipe_info+0xac/0x350 [ 681.919725][T12194] splice_direct_to_actor+0x5f7/0x650 [ 681.925156][T12194] ? security_file_permission+0x7c/0xa0 [ 681.930701][T12194] ? do_splice_direct+0x190/0x190 [ 681.935715][T12194] ? security_file_permission+0x87/0xa0 [ 681.941263][T12194] do_splice_direct+0x106/0x190 [ 681.946115][T12194] do_sendfile+0x675/0xc40 [ 681.950573][T12194] __x64_sys_sendfile64+0x102/0x140 [ 681.955805][T12194] do_syscall_64+0x44/0xa0 [ 681.960325][T12194] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 681.966215][T12194] RIP: 0033:0x7f5f65a3dae9 [ 681.970683][T12194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 681.990279][T12194] RSP: 002b:00007f5f63793188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 681.998747][T12194] RAX: ffffffffffffffda RBX: 00007f5f65b51020 RCX: 00007f5f65a3dae9 [ 682.006701][T12194] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 682.014653][T12194] RBP: 00007f5f637931d0 R08: 0000000000000000 R09: 0000000000000000 [ 682.022608][T12194] R10: 0000000100002000 R11: 0000000000000246 R12: 0000000000000001 [ 682.030587][T12194] R13: 00007ffdd8b17f4f R14: 00007f5f63793300 R15: 0000000000022000 [ 682.038657][T12194] 16:03:17 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:17 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0xf, 0x0, 0x0, 0x0) 16:03:17 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x9000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:17 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20900, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f0000000200)={0x6, 0x80, 0x8, 0x3f, 0x0, 0x1, 0x0, 0x401, 0xc0014, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x400, 0x1f, 0x5, 0x1, 0x0, 0x3655, 0x5, 0x0, 0x0, 0x0, 0x81b}, 0x0, 0x2, r1, 0x23379927d0169816) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x80020, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x22}}) 16:03:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) (fail_nth: 2) 16:03:17 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r2, &(0x7f00000000c0), 0x1c) r3 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0xff}, 0x0, @in=@local, 0x0, 0x0, 0x1}}, 0xe8) ioctl$RTC_PIE_OFF(r0, 0x7006) connect$inet6(r3, &(0x7f00000000c0), 0x1c) r4 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x9, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff}}, 0xe8) connect$inet6(r4, &(0x7f00000000c0), 0x1c) fcntl$getownex(r4, 0x10, &(0x7f0000000080)={0x0, 0x0}) pidfd_open(r5, 0x0) fcntl$setown(r0, 0x8, r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000040)=0x400) 16:03:17 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:17 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0xf00, 0x0, 0x0, 0x0) 16:03:17 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0xa000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:17 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x24ac80, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x7fff, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x101000, 0x4) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2cefc77900"]) [ 682.501445][T12217] 9pnet: Insufficient options for proto=fd [ 682.512098][T12219] 9pnet: Insufficient options for proto=fd [ 682.532455][T12222] FAULT_INJECTION: forcing a failure. [ 682.532455][T12222] name failslab, interval 1, probability 0, space 0, times 0 [ 682.545121][T12222] CPU: 1 PID: 12222 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 682.553605][T12222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.563665][T12222] Call Trace: [ 682.566954][T12222] [ 682.569893][T12222] dump_stack_lvl+0xd6/0x122 [ 682.574500][T12222] dump_stack+0x11/0x1b [ 682.578731][T12222] should_fail+0x23c/0x250 [ 682.583225][T12222] ? kcalloc+0x32/0x40 [ 682.587302][T12222] __should_failslab+0x81/0x90 [ 682.592107][T12222] should_failslab+0x5/0x20 [ 682.596677][T12222] __kmalloc+0x6f/0x370 [ 682.600935][T12222] ? kmem_cache_alloc_trace+0x24b/0x350 [ 682.606545][T12222] kcalloc+0x32/0x40 [ 682.610507][T12222] alloc_pipe_info+0x1be/0x350 [ 682.615272][T12222] splice_direct_to_actor+0x5f7/0x650 [ 682.620649][T12222] ? security_file_permission+0x7c/0xa0 [ 682.626200][T12222] ? do_splice_direct+0x190/0x190 [ 682.631269][T12222] ? security_file_permission+0x87/0xa0 [ 682.636900][T12222] do_splice_direct+0x106/0x190 [ 682.641768][T12222] do_sendfile+0x675/0xc40 [ 682.646190][T12222] __x64_sys_sendfile64+0x102/0x140 16:03:17 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x0, 0x0, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x408d1}, 0x20040040) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4018) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x24004884) [ 682.651474][T12222] do_syscall_64+0x44/0xa0 [ 682.655902][T12222] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 682.661873][T12222] RIP: 0033:0x7f5f65a3dae9 [ 682.666323][T12222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 682.685914][T12222] RSP: 002b:00007f5f63793188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 682.694327][T12222] RAX: ffffffffffffffda RBX: 00007f5f65b51020 RCX: 00007f5f65a3dae9 16:03:17 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) (fail_nth: 3) [ 682.702281][T12222] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 682.710277][T12222] RBP: 00007f5f637931d0 R08: 0000000000000000 R09: 0000000000000000 [ 682.718288][T12222] R10: 0000000100002000 R11: 0000000000000246 R12: 0000000000000001 [ 682.726254][T12222] R13: 00007ffdd8b17f4f R14: 00007f5f63793300 R15: 0000000000022000 [ 682.734207][T12222] 16:03:17 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) r0 = syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000001c0)={0x0, r3, "a38e1f96da5a250e5f1d57ed72fff53e508f44f60cf87fd6bdb19bca53955adf70f8b36a19278fa6c6f0b3512006d97d254811e827dc7bfca2f87b5afc195cff84cb16ac781b61af306c7cc18ede47f39ba4c8fc61b93611492bdee697ed8216246b5d580e19195df98215965ba0bb4f8abdef5c04311f674b1f7c8f5f30e6a849eca8d6fc4644273f03f2190844a61e85eec82c6f0cbe801a1f64cdd7e292b54c3146c8910aedfdec98b6d45834b712bfcedcb91f59a42d15811fc1c1ce2e0a5bce411e2a78369581b0e9ed45a254d0a5e2305d149292404edaf3c0a2406f0f1cbd0531607ef96f30c663adb40ea13ccaf20214f86c43cb77cf690794265f22", "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"}) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:17 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x2000, 0x0, 0x0, 0x0) 16:03:17 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0xb000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:18 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x7fff, 0x8, '9P2000.L'}, 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r5, &(0x7f00000000c0), 0x1c) clone(0x14000800, &(0x7f0000000080)="4d602f94bb9d90cf9278d7220ce75546f311e6d3e7fbf8c3a33874b1998323e71d19a063256f7929fde9c63f1fa36fa2829ee7f402", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="1e4796b967fa7517547d1bd3f84bfaa03490b6e21cb51fe7eaaa441986a90a1c6caf28a5eeeb4f1f32f54981fb5971864f81eca3b37ff611ae7965f0160ce6af2e08f088172b9a6ee4478085257b0a8b7607ad8442ea097360fcf859e8d3fc5702f5a5ad4b7d3187dcd41e637f2dd628181465ea6f9850285a2538") r6 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r6, &(0x7f00000000c0), 0x1c) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000040)=[r1, r5, r1, r6, r1, r0, r1, r0], 0x8) 16:03:18 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:18 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '\x00'}, {}, {}, {}], 0xa, "fc6eff8200b55c1ea08ba4882fb0d7dc24e093b0da8a1a48dcb8f9ff49e06b86be83ee5d4b86c6cd8744a1f46d5467dd2b27c281422f96631db1bd6502364fa5d0c08ced76579f583339e0bb3f59a4678452db6638c208b0614881bd3f60542ef617e8f877f63ae72768599c0a2c91b5cd1f4a7be824fe04761d069ebf55ae7df58610b3e563c4aaab7f728e2e8a517e82ccfdab4ad132287fcd6e1fc68d22fb7a9fad58652e769d2f10cc2ef0223953dec8bbaa277be55639740d07c491f1777d4a23f086ad866cf58aed4ec12f5a7d913bcfbf7d9a4e22db9649474b4f483fed40"}, 0xf2) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:18 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x4000, 0x0, 0x0, 0x0) [ 682.997656][T12243] 9pnet: Insufficient options for proto=fd [ 683.084096][T12257] FAULT_INJECTION: forcing a failure. [ 683.084096][T12257] name failslab, interval 1, probability 0, space 0, times 0 [ 683.096851][T12257] CPU: 1 PID: 12257 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 683.105337][T12257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 683.115494][T12257] Call Trace: [ 683.118943][T12257] [ 683.121878][T12257] dump_stack_lvl+0xd6/0x122 [ 683.126466][T12257] dump_stack+0x11/0x1b [ 683.130602][T12257] should_fail+0x23c/0x250 [ 683.135377][T12257] ? __iomap_dio_rw+0x143/0x1070 [ 683.140324][T12257] __should_failslab+0x81/0x90 [ 683.145149][T12257] should_failslab+0x5/0x20 [ 683.149636][T12257] kmem_cache_alloc_trace+0x52/0x350 [ 683.154941][T12257] __iomap_dio_rw+0x143/0x1070 [ 683.159734][T12257] iomap_dio_rw+0x38/0x80 [ 683.164058][T12257] ext4_file_read_iter+0x21d/0x290 [ 683.169168][T12257] generic_file_splice_read+0x24f/0x330 [ 683.174720][T12257] ? splice_shrink_spd+0x60/0x60 [ 683.179641][T12257] splice_direct_to_actor+0x2aa/0x650 [ 683.185364][T12257] ? do_splice_direct+0x190/0x190 [ 683.190366][T12257] do_splice_direct+0x106/0x190 [ 683.195204][T12257] do_sendfile+0x675/0xc40 [ 683.199621][T12257] __x64_sys_sendfile64+0x102/0x140 [ 683.204796][T12257] do_syscall_64+0x44/0xa0 [ 683.209261][T12257] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 683.215195][T12257] RIP: 0033:0x7f5f65a3dae9 [ 683.219615][T12257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 683.239202][T12257] RSP: 002b:00007f5f63793188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 683.247593][T12257] RAX: ffffffffffffffda RBX: 00007f5f65b51020 RCX: 00007f5f65a3dae9 [ 683.255591][T12257] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 683.263554][T12257] RBP: 00007f5f637931d0 R08: 0000000000000000 R09: 0000000000000000 [ 683.271561][T12257] R10: 0000000100002000 R11: 0000000000000246 R12: 0000000000000001 16:03:18 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0xc000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) (fail_nth: 4) [ 683.279560][T12257] R13: 00007ffdd8b17f4f R14: 00007f5f63793300 R15: 0000000000022000 [ 683.287546][T12257] [ 683.443138][T12262] 9pnet: Insufficient options for proto=fd [ 683.449970][T12262] 9pnet: Insufficient options for proto=fd 16:03:18 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 683.532672][ C0] scsi_io_completion_action: 18 callbacks suppressed [ 683.532699][ C0] sd 0:0:1:0: tag#1350 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 683.549286][ C0] sd 0:0:1:0: tag#1350 CDB: opcode=0xe5 (vendor) [ 683.555636][ C0] sd 0:0:1:0: tag#1350 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 683.564673][ C0] sd 0:0:1:0: tag#1350 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 683.573736][ C0] sd 0:0:1:0: tag#1350 CDB[20]: ba 16:03:18 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x400000, 0x0, 0x0, 0x0) 16:03:18 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0xfb, 0x80, 0x7}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000e57000/0x1000)=nil, &(0x7f0000e56000/0x4000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) [ 683.602752][ C1] sd 0:0:1:0: tag#1363 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 683.612627][ C1] sd 0:0:1:0: tag#1363 CDB: opcode=0xe5 (vendor) [ 683.618959][ C1] sd 0:0:1:0: tag#1363 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 683.628009][ C1] sd 0:0:1:0: tag#1363 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 683.637078][ C1] sd 0:0:1:0: tag#1363 CDB[20]: ba 16:03:18 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0xd000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 683.776943][T12282] FAULT_INJECTION: forcing a failure. [ 683.776943][T12282] name failslab, interval 1, probability 0, space 0, times 0 [ 683.789605][T12282] CPU: 0 PID: 12282 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 683.798044][T12282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 683.808133][T12282] Call Trace: [ 683.811410][T12282] [ 683.814348][T12282] dump_stack_lvl+0xd6/0x122 [ 683.818949][T12282] dump_stack+0x11/0x1b [ 683.823107][T12282] should_fail+0x23c/0x250 [ 683.827537][T12282] ? ext4_init_io_end+0x2d/0xa0 [ 683.832389][T12282] __should_failslab+0x81/0x90 [ 683.837179][T12282] should_failslab+0x5/0x20 [ 683.841714][T12282] kmem_cache_alloc+0x4f/0x320 [ 683.846550][T12282] ext4_init_io_end+0x2d/0xa0 [ 683.851233][T12282] ext4_writepages+0x745/0x1e80 [ 683.856140][T12282] ? debug_smp_processor_id+0x18/0x20 [ 683.861562][T12282] ? mod_objcg_state+0x228/0x2f0 [ 683.866507][T12282] ? ext4_readpage+0x180/0x180 [ 683.871338][T12282] do_writepages+0x1cb/0x320 [ 683.876060][T12282] ? should_fail+0xd6/0x250 [ 683.880635][T12282] filemap_write_and_wait_range+0x1b2/0x340 [ 683.886537][T12282] __iomap_dio_rw+0x4bb/0x1070 [ 683.891311][T12282] iomap_dio_rw+0x38/0x80 [ 683.895704][T12282] ext4_file_read_iter+0x21d/0x290 [ 683.900844][T12282] generic_file_splice_read+0x24f/0x330 [ 683.906400][T12282] ? splice_shrink_spd+0x60/0x60 [ 683.911341][T12282] splice_direct_to_actor+0x2aa/0x650 [ 683.916809][T12282] ? do_splice_direct+0x190/0x190 [ 683.921934][T12282] do_splice_direct+0x106/0x190 [ 683.926794][T12282] do_sendfile+0x675/0xc40 [ 683.931342][T12282] __x64_sys_sendfile64+0x102/0x140 [ 683.936546][T12282] do_syscall_64+0x44/0xa0 [ 683.941042][T12282] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 683.947054][T12282] RIP: 0033:0x7f5f65a3dae9 [ 683.951483][T12282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 683.971121][T12282] RSP: 002b:00007f5f63793188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 683.979625][T12282] RAX: ffffffffffffffda RBX: 00007f5f65b51020 RCX: 00007f5f65a3dae9 [ 683.987618][T12282] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 683.995593][T12282] RBP: 00007f5f637931d0 R08: 0000000000000000 R09: 0000000000000000 [ 684.003564][T12282] R10: 0000000100002000 R11: 0000000000000246 R12: 0000000000000001 [ 684.011532][T12282] R13: 00007ffdd8b17f4f R14: 00007f5f63793300 R15: 0000000000022000 [ 684.019582][T12282] [ 684.082481][ T23] kauditd_printk_skb: 482 callbacks suppressed [ 684.082494][ T23] audit: type=1326 audit(1635955399.086:11704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 684.113057][ T23] audit: type=1326 audit(1635955399.086:11705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 684.137300][ T23] audit: type=1326 audit(1635955399.086:11706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 684.161430][ T23] audit: type=1326 audit(1635955399.086:11707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 684.185591][ T23] audit: type=1326 audit(1635955399.086:11708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 684.209724][ T23] audit: type=1326 audit(1635955399.086:11709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 684.233958][ T23] audit: type=1326 audit(1635955399.086:11710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 684.258115][ T23] audit: type=1326 audit(1635955399.086:11711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 16:03:19 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000480)={0x2, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x20001}, {0x6, 0x80, 0x7, 0x7d76}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_setup(0x16ea, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee6000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) r2 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r5}}, 0x10001) r6 = perf_event_open$cgroup(&(0x7f00000003c0)={0x3, 0x80, 0x9, 0x7e, 0x9, 0x3, 0x0, 0x1, 0x300a8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7c4d464e, 0x0, @perf_bp={&(0x7f0000000380), 0x8}, 0x2, 0x1, 0x4, 0x8, 0x30c0, 0x7, 0x401, 0x0, 0x5, 0x0, 0x75a5}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0, 0x4, 0x1, 0x1, {0x0, r5, r6}}, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r7 = syz_io_uring_setup(0x87, &(0x7f0000000140), &(0x7f0000ee4000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x16ea, &(0x7f00000002c0)={0x0, 0x9f39, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000a63000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r8, r12, &(0x7f0000000280)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd, 0x100000002, 0x0, 0x40}, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r10, 0x0, 0x0}, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000200)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x400, 0x400, 0x1}, 0x9) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000340)=[r7, r11], 0x2) [ 684.282281][ T23] audit: type=1326 audit(1635955399.086:11712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 684.306451][ T23] audit: type=1326 audit(1635955399.086:11713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12283 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8058360b32 code=0x7ffc0000 16:03:19 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000000640)={0x8000000, [{r3}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {0x0, r5}, {r4}, {r4, r5}, {r4}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3}, {r4}, {r3, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r4}, {r4}, {r4, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r3}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r4}, {r3, r5}, {r4}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3}, {r4, r5}, {0x0, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3}, {r4, r5}, {r4, r5}, {r4}, {r3, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4}, {r4, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4}, {r3}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3}, {r4}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4}, {r3, r5}, {r3, r5}, {r3, r5}], 0x80, "addd62d10a1b9b"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000591c0)={0x0, ""/256, 0x0, 0x0}) r10 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}], 0x0, "2156816c73038c"}) r15 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r15, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r18}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000593c0)={0xef64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r9}, {0x0, r14}, {}, {0x0, r19}], 0x7f, "5941d47be9affe"}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) 16:03:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) (fail_nth: 5) 16:03:19 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x800000, 0x0, 0x0, 0x0) 16:03:19 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 684.414969][ C1] sd 0:0:1:0: tag#1371 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 684.424824][ C1] sd 0:0:1:0: tag#1371 CDB: opcode=0xe5 (vendor) [ 684.431183][ C1] sd 0:0:1:0: tag#1371 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 684.440252][ C1] sd 0:0:1:0: tag#1371 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 684.449284][ C1] sd 0:0:1:0: tag#1371 CDB[20]: ba 16:03:19 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0xe000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:19 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) fstat(r0, &(0x7f0000000180)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',rootcontext=root\"\"']) [ 684.517471][T12296] 9pnet: Insufficient options for proto=fd 16:03:19 executing program 0: preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x0, 0x1f, 0x2}, {0x7f, 0x0, 0x2, 0x4}, {0x5, 0x0, 0x3f, 0x10001}, {0x2, 0x40, 0x0, 0x6}]}) [ 684.642964][ C0] sd 0:0:1:0: tag#1385 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 684.652820][ C0] sd 0:0:1:0: tag#1385 CDB: opcode=0xe5 (vendor) [ 684.659139][ C0] sd 0:0:1:0: tag#1385 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 684.668184][ C0] sd 0:0:1:0: tag#1385 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 684.677230][ C0] sd 0:0:1:0: tag#1385 CDB[20]: ba 16:03:19 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x0, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:19 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0xf000000, 0x0, 0x0, 0x0) 16:03:19 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000040)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) clone(0x80080, &(0x7f0000000180)="1213e255fbffd8ec671a2131c7192c4e67dc039e58246adf913aee2c3930d31cd5fd803dfa7639119e006132f2d06c6da81eed5f8209870b5407828bdc5dc4420113674b663341592f00246492a4a18015ada17a0c22b9059616dc973f82c91c0ba5937bada1c47177ccd84b0fec9b50d956555cd57cd5d4d4b1472c4c019a3133c0ae8c5e9a77bd51123b19f1601ade86701bbfe258d4422b8eeb7c9b4cef9a4cc9", &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)="52700de4d126cf042108bd0d030af6cb967e9ff87982658ea2ead2ee354dc7818ebe45135e61e4060549a86065f032ad54003510911a7d") [ 684.703787][ C0] sd 0:0:1:0: tag#1407 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 684.713672][ C0] sd 0:0:1:0: tag#1407 CDB: opcode=0xe5 (vendor) [ 684.720033][ C0] sd 0:0:1:0: tag#1407 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 684.728797][T12320] FAULT_INJECTION: forcing a failure. [ 684.728797][T12320] name failslab, interval 1, probability 0, space 0, times 0 [ 684.729081][ C0] sd 0:0:1:0: tag#1407 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 684.741774][T12320] CPU: 1 PID: 12320 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 684.750770][ C0] sd 0:0:1:0: tag#1407 CDB[20]: ba [ 684.759150][T12320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 684.759162][T12320] Call Trace: [ 684.759167][T12320] [ 684.759173][T12320] dump_stack_lvl+0xd6/0x122 [ 684.785066][T12320] dump_stack+0x11/0x1b [ 684.789213][T12320] should_fail+0x23c/0x250 [ 684.793732][T12320] ? mempool_alloc_slab+0x16/0x20 [ 684.798747][T12320] __should_failslab+0x81/0x90 [ 684.803509][T12320] should_failslab+0x5/0x20 [ 684.808000][T12320] kmem_cache_alloc+0x4f/0x320 [ 684.812787][T12320] mempool_alloc_slab+0x16/0x20 [ 684.817705][T12320] ? mempool_free+0x130/0x130 [ 684.822425][T12320] mempool_alloc+0x9d/0x310 [ 684.826957][T12320] bio_alloc_bioset+0xcc/0x560 [ 684.831793][T12320] ext4_bio_write_page+0x7f5/0xaa0 [ 684.836892][T12320] mpage_process_page_bufs+0x437/0x560 [ 684.842393][T12320] mpage_prepare_extent_to_map+0x4f6/0x650 [ 684.848210][T12320] ext4_writepages+0x766/0x1e80 [ 684.853065][T12320] ? debug_smp_processor_id+0x18/0x20 [ 684.858425][T12320] ? mod_objcg_state+0x228/0x2f0 [ 684.863390][T12320] ? should_fail+0x2a/0x250 [ 684.867886][T12320] ? ext4_readpage+0x180/0x180 [ 684.872785][T12320] do_writepages+0x1cb/0x320 [ 684.877362][T12320] ? should_fail+0xd6/0x250 [ 684.881928][T12320] filemap_write_and_wait_range+0x1b2/0x340 [ 684.887879][T12320] __iomap_dio_rw+0x4bb/0x1070 [ 684.892713][T12320] iomap_dio_rw+0x38/0x80 [ 684.897026][T12320] ext4_file_read_iter+0x21d/0x290 [ 684.902127][T12320] generic_file_splice_read+0x24f/0x330 [ 684.907761][T12320] ? splice_shrink_spd+0x60/0x60 [ 684.912682][T12320] splice_direct_to_actor+0x2aa/0x650 [ 684.918106][T12320] ? do_splice_direct+0x190/0x190 [ 684.923218][T12320] do_splice_direct+0x106/0x190 [ 684.928052][T12320] do_sendfile+0x675/0xc40 [ 684.932526][T12320] __x64_sys_sendfile64+0x102/0x140 [ 684.937710][T12320] do_syscall_64+0x44/0xa0 [ 684.942191][T12320] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 684.948105][T12320] RIP: 0033:0x7f5f65a3dae9 [ 684.952503][T12320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 684.972448][T12320] RSP: 002b:00007f5f63793188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 684.980880][T12320] RAX: ffffffffffffffda RBX: 00007f5f65b51020 RCX: 00007f5f65a3dae9 [ 684.988833][T12320] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 684.996862][T12320] RBP: 00007f5f637931d0 R08: 0000000000000000 R09: 0000000000000000 16:03:20 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0xf000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) (fail_nth: 6) [ 685.004916][T12320] R10: 0000000100002000 R11: 0000000000000246 R12: 0000000000000001 [ 685.012889][T12320] R13: 00007ffdd8b17f4f R14: 00007f5f63793300 R15: 0000000000022000 [ 685.020897][T12320] [ 685.025056][T12309] validate_nla: 19 callbacks suppressed [ 685.025084][T12309] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:20 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x20000000, 0x0, 0x0, 0x0) 16:03:20 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) 16:03:20 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 685.262159][T12328] 9pnet: Insufficient options for proto=fd [ 685.285716][ C0] sd 0:0:1:0: tag#1345 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 685.295621][ C0] sd 0:0:1:0: tag#1345 CDB: opcode=0xe5 (vendor) [ 685.301977][ C0] sd 0:0:1:0: tag#1345 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 685.310988][ C0] sd 0:0:1:0: tag#1345 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 685.320024][ C0] sd 0:0:1:0: tag#1345 CDB[20]: ba [ 685.327606][T12334] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 685.353024][ C0] sd 0:0:1:0: tag#1382 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 685.362877][ C0] sd 0:0:1:0: tag#1382 CDB: opcode=0xe5 (vendor) [ 685.369226][ C0] sd 0:0:1:0: tag#1382 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 685.378275][ C0] sd 0:0:1:0: tag#1382 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 685.387336][ C0] sd 0:0:1:0: tag#1382 CDB[20]: ba 16:03:20 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x10000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 685.396700][T12334] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 685.416407][T12335] FAULT_INJECTION: forcing a failure. [ 685.416407][T12335] name failslab, interval 1, probability 0, space 0, times 0 [ 685.429039][T12335] CPU: 1 PID: 12335 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 685.437481][T12335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 685.447585][T12335] Call Trace: [ 685.450869][T12335] [ 685.453787][T12335] dump_stack_lvl+0xd6/0x122 [ 685.458364][T12335] dump_stack+0x11/0x1b [ 685.462551][T12335] should_fail+0x23c/0x250 [ 685.467008][T12335] ? mempool_alloc_slab+0x16/0x20 [ 685.472122][T12335] __should_failslab+0x81/0x90 [ 685.476914][T12335] should_failslab+0x5/0x20 [ 685.481441][T12335] kmem_cache_alloc+0x4f/0x320 [ 685.486207][T12335] ? mempool_alloc_slab+0x16/0x20 [ 685.491378][T12335] mempool_alloc_slab+0x16/0x20 [ 685.496222][T12335] ? mempool_free+0x130/0x130 [ 685.500897][T12335] mempool_alloc+0x9d/0x310 [ 685.505405][T12335] bio_alloc_bioset+0x1af/0x560 [ 685.510339][T12335] ext4_bio_write_page+0x7f5/0xaa0 [ 685.515467][T12335] mpage_process_page_bufs+0x437/0x560 [ 685.520929][T12335] mpage_prepare_extent_to_map+0x4f6/0x650 [ 685.526753][T12335] ext4_writepages+0x766/0x1e80 [ 685.531684][T12335] ? debug_smp_processor_id+0x18/0x20 [ 685.537042][T12335] ? mod_objcg_state+0x228/0x2f0 [ 685.541982][T12335] ? should_fail+0x2a/0x250 [ 685.546529][T12335] ? ext4_readpage+0x180/0x180 [ 685.551288][T12335] do_writepages+0x1cb/0x320 [ 685.555935][T12335] ? should_fail+0xd6/0x250 [ 685.560434][T12335] filemap_write_and_wait_range+0x1b2/0x340 [ 685.566325][T12335] __iomap_dio_rw+0x4bb/0x1070 [ 685.571195][T12335] iomap_dio_rw+0x38/0x80 [ 685.575504][T12335] ext4_file_read_iter+0x21d/0x290 [ 685.580690][T12335] generic_file_splice_read+0x24f/0x330 [ 685.586261][T12335] ? splice_shrink_spd+0x60/0x60 [ 685.591178][T12335] splice_direct_to_actor+0x2aa/0x650 [ 685.596618][T12335] ? do_splice_direct+0x190/0x190 [ 685.601659][T12335] do_splice_direct+0x106/0x190 [ 685.606507][T12335] do_sendfile+0x675/0xc40 [ 685.611013][T12335] __x64_sys_sendfile64+0x102/0x140 [ 685.616238][T12335] do_syscall_64+0x44/0xa0 [ 685.620660][T12335] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 685.626557][T12335] RIP: 0033:0x7f5f65a3dae9 [ 685.630963][T12335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 685.650552][T12335] RSP: 002b:00007f5f637b4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 685.659394][T12335] RAX: ffffffffffffffda RBX: 00007f5f65b50f60 RCX: 00007f5f65a3dae9 [ 685.667398][T12335] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 685.675352][T12335] RBP: 00007f5f637b41d0 R08: 0000000000000000 R09: 0000000000000000 [ 685.683335][T12335] R10: 0000000100002000 R11: 0000000000000246 R12: 0000000000000001 [ 685.691414][T12335] R13: 00007ffdd8b17f4f R14: 00007f5f637b4300 R15: 0000000000022000 [ 685.699425][T12335] 16:03:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) (fail_nth: 7) 16:03:20 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0xffffffff, 0x0, 0x0, 0x0) [ 685.786554][T12342] 9pnet: Insufficient options for proto=fd 16:03:20 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x2, 0x4, 0x6, 0x3f, 0x0, 0x80, 0x80, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000040)}, 0x40, 0x7, 0x1f, 0x0, 0xfcff, 0x8000, 0x1, 0x0, 0x7ff, 0x0, 0x800}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x4, 0x4010, r0, 0xdc524000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="49a7d5936e6f3d", @ANYRESHEX, @ANYBLOB=',rootcontext=root\"\"']) 16:03:20 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:20 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0xffff, 0x6, 0x7, 0x4}]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000003c0)={{}, 0x0, 0x10, @unused=[0x5, 0x3, 0x401, 0x6], @name="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"}) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001e40)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000001900)=ANY=[@ANYRES32=r1, @ANYRES16, @ANYRES32, @ANYRES64, @ANYBLOB="d101bb7f13f7a647d7067cd7c59affc17c9da961ae1aeccdae704a7693fb9c172fa9371f58b125d4147dc1c8c5ea259127dcce46128ef93c208d7c023b356b73d819f6e513d0d79793f107c3d34895b0038aeff22129f49653706fdfbdc25621998d7d50fbd78defb524b9d8e97ad93d70c5cecb431f98468f79b4ae6982f6fb389a3ced7c662b09b58f949c0f81f5f919150c3a3c5551fe426efeb9f4a715858e9ea6ac00000000000000919d3cb23034280ba87711cd5a091c9414b357225052640efea60418e994de389b3c2cbea3cc7652d7997c45af7e14f7790e23be5143f93804659400"/255], 0x3}, 0x1, 0x0, 0x0, 0x20000014}, 0x40025) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000200)={r1, 0x8, 0x7}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000013c0)={r1, 0x59, 0x0, [0x4, 0x5, 0xff, 0x4, 0x6], [0x200, 0x91, 0x31, 0xe6, 0x75, 0x8, 0xe950, 0x5, 0x100000000, 0x2, 0x66c, 0x8, 0x81, 0x2, 0x80000000, 0x0, 0x6e, 0xa50, 0x5, 0x7fff, 0x4f4d, 0x4, 0x6, 0x0, 0x69, 0x41e, 0x100000001, 0xffff, 0x3, 0x4, 0x400, 0xfff, 0x8, 0x7fffffff, 0x9, 0x3f, 0x1000, 0x2, 0x7fff, 0x40, 0x3, 0x9, 0x4, 0x2, 0x8, 0x13, 0x8, 0x400, 0x9, 0x8, 0x1f, 0x1, 0x101, 0x10000, 0x94bf, 0x4, 0x9, 0x63b, 0x8000, 0x2, 0x1fe, 0x7, 0x3, 0xfffffffffffeffff, 0x0, 0x5, 0x2, 0x6, 0x5, 0x9, 0x1, 0x2, 0xd, 0x48, 0x100, 0xfc6, 0x6, 0x4, 0x80000000, 0x6, 0x0, 0x101, 0x2, 0x0, 0xf7a9, 0xeb5, 0x101, 0x9, 0x907, 0x5, 0x0, 0x8000, 0x42af, 0xfffffffffffffffc, 0x100, 0x14e5, 0x3f, 0x8, 0x80, 0x8000, 0x1000, 0x2, 0x2, 0x3, 0x48000000000000, 0x0, 0x3, 0x1ff, 0x100000000, 0x2, 0x7, 0x7, 0x1, 0x637, 0x7fffffff, 0x7, 0x10001, 0x3, 0x4, 0xffffffff00000000]}) prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f00000001c0)={0x9, &(0x7f00000000c0)=[{0x8, 0x5, 0x5, 0xff}, {0x7ff, 0x0, 0xf8, 0xe1b5}, {0x200, 0x4, 0x5c, 0x18000000}, {0x4, 0x1, 0xff, 0x5}, {0x401, 0xff, 0xfc, 0x1c4}, {0x2bb3, 0x0, 0x20, 0x2}, {0x7, 0x81, 0x3f, 0x41fc}, {0x7, 0x1, 0x1, 0x1}, {0x2, 0x8, 0x2, 0x8}]}) [ 685.937619][ C0] sd 0:0:1:0: tag#1392 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 685.947466][ C0] sd 0:0:1:0: tag#1392 CDB: opcode=0xe5 (vendor) [ 685.953803][ C0] sd 0:0:1:0: tag#1392 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 685.962862][ C0] sd 0:0:1:0: tag#1392 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 685.971925][ C0] sd 0:0:1:0: tag#1392 CDB[20]: ba [ 685.978335][T12351] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:21 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:21 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xf, 0x0, 0x0) [ 686.002855][ C0] sd 0:0:1:0: tag#1350 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 686.012705][ C0] sd 0:0:1:0: tag#1350 CDB: opcode=0xe5 (vendor) [ 686.019244][ C0] sd 0:0:1:0: tag#1350 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 686.028371][ C0] sd 0:0:1:0: tag#1350 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 686.037581][ C0] sd 0:0:1:0: tag#1350 CDB[20]: ba [ 686.044419][T12351] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:21 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x9, 0x3ff, 0x7f}) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/106, 0x6a}, {&(0x7f0000000100)=""/28, 0x1c}, {&(0x7f00000001c0)=""/46, 0x2e}, {&(0x7f0000000200)}], 0x4, 0x3c23, 0x2) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:21 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x11000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 686.074954][T12365] 9pnet: Insufficient options for proto=fd [ 686.084877][T12364] FAULT_INJECTION: forcing a failure. [ 686.084877][T12364] name failslab, interval 1, probability 0, space 0, times 0 [ 686.097561][T12364] CPU: 1 PID: 12364 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 686.106084][T12364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 686.116135][T12364] Call Trace: [ 686.119458][T12364] [ 686.122392][T12364] dump_stack_lvl+0xd6/0x122 [ 686.127052][T12364] dump_stack+0x11/0x1b [ 686.131203][T12364] should_fail+0x23c/0x250 [ 686.135676][T12364] __should_failslab+0x81/0x90 [ 686.140462][T12364] should_failslab+0x5/0x20 [ 686.144956][T12364] kmem_cache_alloc_node+0x61/0x2d0 [ 686.150137][T12364] ? create_task_io_context+0x36/0x1e0 [ 686.155700][T12364] create_task_io_context+0x36/0x1e0 [ 686.160969][T12364] submit_bio_checks+0x828/0x8e0 [ 686.165903][T12364] ? blk_try_enter_queue+0xee/0x1f0 [ 686.171144][T12364] __submit_bio+0x2de/0x480 [ 686.175640][T12364] ? __pagevec_release+0x9e/0xc0 [ 686.180618][T12364] submit_bio_noacct+0x418/0x4e0 [ 686.185543][T12364] ? mpage_release_unused_pages+0x12b/0x3c0 [ 686.191495][T12364] submit_bio+0x10c/0x180 [ 686.195897][T12364] ext4_io_submit+0xcd/0xf0 [ 686.200378][T12364] ext4_writepages+0x780/0x1e80 [ 686.205216][T12364] ? kvm_sched_clock_read+0x15/0x40 [ 686.210699][T12364] ? sched_clock_cpu+0xe/0x1a0 [ 686.215461][T12364] ? select_idle_sibling+0x516/0x700 [ 686.220743][T12364] ? should_fail+0x2a/0x250 [ 686.225284][T12364] ? __rcu_read_unlock+0x5c/0x290 [ 686.230387][T12364] ? ext4_readpage+0x180/0x180 [ 686.235202][T12364] do_writepages+0x1cb/0x320 [ 686.239798][T12364] ? enqueue_entity+0x4bf/0x6c0 [ 686.244650][T12364] ? should_fail+0xd6/0x250 [ 686.249234][T12364] filemap_write_and_wait_range+0x1b2/0x340 [ 686.255696][T12364] __iomap_dio_rw+0x4bb/0x1070 [ 686.260463][T12364] ? ___cache_free+0x46/0x300 [ 686.265125][T12364] iomap_dio_rw+0x38/0x80 [ 686.269439][T12364] ext4_file_read_iter+0x21d/0x290 [ 686.274614][T12364] generic_file_splice_read+0x24f/0x330 [ 686.280212][T12364] ? splice_shrink_spd+0x60/0x60 [ 686.285239][T12364] splice_direct_to_actor+0x2aa/0x650 [ 686.290726][T12364] ? do_splice_direct+0x190/0x190 [ 686.295805][T12364] do_splice_direct+0x106/0x190 [ 686.300637][T12364] do_sendfile+0x675/0xc40 [ 686.305035][T12364] __x64_sys_sendfile64+0x102/0x140 [ 686.310381][T12364] do_syscall_64+0x44/0xa0 [ 686.315004][T12364] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 686.320896][T12364] RIP: 0033:0x7f5f65a3dae9 [ 686.325377][T12364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 686.345217][T12364] RSP: 002b:00007f5f63793188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 686.353703][T12364] RAX: ffffffffffffffda RBX: 00007f5f65b51020 RCX: 00007f5f65a3dae9 [ 686.361733][T12364] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 16:03:21 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000002c0)=0xda9) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) clone(0x800080, &(0x7f0000000180)="3c1a2cd0b747b3b94d5e82fcf93cf0ed93f8332b86f0f04659b8b880bfc8d94b4c514a215e8a6024a54826dc1c02793c7f6757bb63f4283016cafdb299603324a574045a6c628dfb1eb5a9f818d6d7a3ef49fe5cb9751db8fab9c388dee86dad25a62a4ac0899dc285aa05c79fe04760d50afbce51cc1c3dc7f1df838d996600bef5296b8deb6162974f9e12ed99dc87221552622fc53232c482c462962aaa35105359c0aab47bb8b165471c40b4a6bfc79aadc793326f855fca0297888d6032b0c3889e84424c305d8e6fc0c47572c0172d2d460b21abd0f48eed39f9b571c9172a173848bb0ed744a90eadc45ae6", &(0x7f0000000340), &(0x7f0000000080), &(0x7f0000000280)="8eb9d4848fdc57dbd158b626852fe2fbfa5e921ace8d2b9e2fa5191c565aa7bf209e333dc772") [ 686.369695][T12364] RBP: 00007f5f637931d0 R08: 0000000000000000 R09: 0000000000000000 [ 686.377761][T12364] R10: 0000000100002000 R11: 0000000000000246 R12: 0000000000000001 [ 686.385726][T12364] R13: 00007ffdd8b17f4f R14: 00007f5f63793300 R15: 0000000000022000 [ 686.393682][T12364] 16:03:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) (fail_nth: 8) 16:03:21 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) r0 = syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r0, 0x7, 0xfff, 0x7ff}) [ 686.613785][ C1] sd 0:0:1:0: tag#1367 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 686.623627][ C1] sd 0:0:1:0: tag#1367 CDB: opcode=0xe5 (vendor) [ 686.629967][ C1] sd 0:0:1:0: tag#1367 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 686.638981][ C1] sd 0:0:1:0: tag#1367 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 686.648017][ C1] sd 0:0:1:0: tag#1367 CDB[20]: ba [ 686.654316][T12377] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:21 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:21 executing program 1: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x7fff, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x22c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x24}}}}, [@NL80211_ATTR_TESTDATA={0x9d, 0x45, "01b6ca03da43992e2170eec4fc669018bab094a8b0e9d03c93940bcb1abdb44cb00b426bee584c9b3243032e5679b0b10d130cf5ee7496fb65bfc10c762c05446e85c80b29e8436e6de8e9008b77fe3e01692a5246bf1519b09c48665b851e672d76f14dc76cdfe9089c71cfea9ed555c3fda9fc0649c0ffab697ced4743f3460ca122833bd44960f653b2009b619367fcb838abf71892afe4"}, @NL80211_ATTR_TESTDATA={0x57, 0x45, "1a752fd02da97c3c3121876382e018869e54cbc4310aff785928b2661ad2250b4fd6b89d3b546e364b124937698d5a5de1dffeefc24bcd542bb74a8fcff9ecc3d9fc8f2836b56e65f8a7b2334978a783bdd255"}, @NL80211_ATTR_TESTDATA={0x1d, 0x45, "e79ff28ad66fbb2792a633d880d983fc218aea5f87c1c423ae"}, @NL80211_ATTR_TESTDATA={0xf4, 0x45, "f2031d9d47b281b1fbd871206ef3e474e095d2e560afb15c8022f343295890294afce4cc795190dbaffd8fb7585a2de63e600cf20b312f252eecb9917ecf2383d98ee7bc0a853391f0d27a77e3339b637eb55d2128905529ab6b353b35fddb55650f84af493b90caaa41f22db3ffe908f382979184753910ff01e530e122cbb35f57d787721cd072b3708332ca4e6c8b20e388b251f1b3bfca7c54520bcbc983bebcae6af573657350059eb1a5e37c68253805425a3abbefa87366faa9f773481157942be89303c4b976d5f53c9bd9037965308234592577bd90ffdf5c990f926211faf1f1cbd2e562ddaa05afcf6c7e"}]}, 0x22c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) 16:03:21 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xf00, 0x0, 0x0) 16:03:21 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x12000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 686.686330][T12377] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 686.717915][T12384] 9pnet: Insufficient options for proto=fd [ 686.828577][T12391] FAULT_INJECTION: forcing a failure. [ 686.828577][T12391] name failslab, interval 1, probability 0, space 0, times 0 [ 686.841228][T12391] CPU: 0 PID: 12391 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 686.849645][T12391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 686.859784][T12391] Call Trace: [ 686.863064][T12391] [ 686.866008][T12391] dump_stack_lvl+0xd6/0x122 [ 686.870598][T12391] dump_stack+0x11/0x1b [ 686.874785][T12391] should_fail+0x23c/0x250 [ 686.879217][T12391] ? mempool_alloc_slab+0x16/0x20 [ 686.884329][T12391] __should_failslab+0x81/0x90 [ 686.889126][T12391] should_failslab+0x5/0x20 [ 686.893676][T12391] kmem_cache_alloc+0x4f/0x320 [ 686.898424][T12391] mempool_alloc_slab+0x16/0x20 [ 686.903259][T12391] ? mempool_free+0x130/0x130 [ 686.908302][T12391] mempool_alloc+0x9d/0x310 [ 686.912801][T12391] ? preempt_count_add+0x4e/0x90 [ 686.917730][T12391] ? _raw_read_unlock+0x13/0x30 [ 686.922569][T12391] ? jbd2_transaction_committed+0xad/0xc0 [ 686.928350][T12391] bio_alloc_bioset+0xcc/0x560 [ 686.933100][T12391] ? iov_iter_npages+0x37b/0x390 [ 686.938029][T12391] ? iomap_dio_bio_iter+0x562/0xc70 [ 686.943212][T12391] iomap_dio_bio_iter+0x5ed/0xc70 [ 686.948307][T12391] ? ext4_alloc_da_blocks+0x100/0x100 [ 686.953687][T12391] __iomap_dio_rw+0x8b5/0x1070 [ 686.958554][T12391] iomap_dio_rw+0x38/0x80 [ 686.962893][T12391] ext4_file_read_iter+0x21d/0x290 [ 686.968006][T12391] generic_file_splice_read+0x24f/0x330 [ 686.973537][T12391] ? splice_shrink_spd+0x60/0x60 [ 686.978526][T12391] splice_direct_to_actor+0x2aa/0x650 [ 686.983910][T12391] ? do_splice_direct+0x190/0x190 [ 686.988992][T12391] do_splice_direct+0x106/0x190 [ 686.993826][T12391] do_sendfile+0x675/0xc40 [ 686.998225][T12391] __x64_sys_sendfile64+0x102/0x140 [ 687.003498][T12391] do_syscall_64+0x44/0xa0 [ 687.007924][T12391] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 687.013863][T12391] RIP: 0033:0x7f5f65a3dae9 [ 687.018281][T12391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 687.038142][T12391] RSP: 002b:00007f5f63793188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 687.046693][T12391] RAX: ffffffffffffffda RBX: 00007f5f65b51020 RCX: 00007f5f65a3dae9 [ 687.054755][T12391] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 687.062716][T12391] RBP: 00007f5f637931d0 R08: 0000000000000000 R09: 0000000000000000 [ 687.070714][T12391] R10: 0000000100002000 R11: 0000000000000246 R12: 0000000000000001 16:03:22 executing program 0: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="002d4b010000490015005a0870cf5258a812ee665e203deb90b3000000003000"/43]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x2}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x6912, &(0x7f00000001c0)={0x0, 0xe428, 0x0, 0x2, 0x353}, &(0x7f0000ce7000/0x2000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:22 executing program 1: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4803, 0xc6) r2 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r2, &(0x7f00000000c0), 0x1c) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x40000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@smackfsroot={'smackfsroot', 0x3d, '\\{'}}], 0x22}}) r3 = dup2(r1, r0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x9005}, 0x4) [ 687.078669][T12391] R13: 00007ffdd8b17f4f R14: 00007f5f63793300 R15: 0000000000022000 [ 687.086856][T12391] [ 687.099730][T12397] 9pnet: Insufficient options for proto=fd 16:03:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) (fail_nth: 9) 16:03:22 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x2000, 0x0, 0x0) 16:03:22 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x20000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:22 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 687.149568][T12402] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 687.183995][T12402] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:22 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1500570c400000ff7f000008003950323030302e4c"], 0x15) write$P9_RREADDIR(r3, &(0x7f0000000080)={0x2a, 0x29, 0x1, {0x6, [{{0x10, 0x2, 0x7}, 0x6ee, 0x5, 0x7, './file0'}]}}, 0x2a) r4 = dup(r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000640)={0x0, 0xfffffffffffffffc, 0x90, 0x0, @buffer={0x0, 0x92, &(0x7f0000000380)=""/146}, &(0x7f0000000480)="dcc88225fd34a84bd54200ea4b6c7bbd39766894e273a6843ec7c7351f3cf4b8b0482f0954809692b8ba1b9719fdfc98aaa7bda6f39e57ff4f01f6b9f8d5b39c86c079ddb6f1e3c2db8779451bc4ef54747871b5dac6181b01807ecc60d556965a92f37c0478981a91bbc271bc24e025df1c18dcb8c4355347b2112006478f58b8736b0af0e9e72e87c7bf59abe19f8c", &(0x7f0000000540)=""/199, 0x6, 0x10, 0x1, &(0x7f0000000040)}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="74726101733d666462fb08a02e6f3dc70830c672494298fc78cf8e1f2192a99116c20c363c030b99bf916a8428181dd1a94e0c5bcc150a26890c11e6abfb68a1b333da59cca12158b5fd9c8baeef35509514985ea5eb35d88e744553fc04df3dee9ab2cd16b3771c4e031461660b5b62f07a92c0065ad45de784964590d82ca2379188d5002f3c2af68d05b48ff3906a11f49c25dee888ae5b4ba7afadfb8bfa44d9ab31e3eb17e8d5cf375c", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) 16:03:22 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) r0 = syz_io_uring_setup(0x6914, &(0x7f0000000140)={0x0, 0x0, 0x10}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x18a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x200}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r4}}, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x3) syz_io_uring_setup(0x87, &(0x7f0000000140), &(0x7f0000ee4000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_io_uring_setup(0x16ea, &(0x7f0000000080)={0x0, 0x9242, 0x4, 0x0, 0x4c}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ee6000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r8 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040)) syz_io_uring_submit(0x0, r6, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0xffffffff, 0x4, 0x0, {0x0, r7, r8}}, 0x6) syz_io_uring_setup(0x87, &(0x7f0000000140), &(0x7f0000ee4000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_setup(0x16ea, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee6000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r9, r12, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r11, 0x0, 0x0}, 0x0) syz_io_uring_submit(r9, r6, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r8, 0x0, &(0x7f0000000100)="2de3d39a023645da0ef1509c2cfd18361717ded517d514630806", 0x1a, 0x21, 0x0, {0x0, r7}}, 0x16c) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) [ 687.361168][T12420] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:22 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x25000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:22 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x4000, 0x0, 0x0) 16:03:22 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 687.454154][T12426] FAULT_INJECTION: forcing a failure. [ 687.454154][T12426] name failslab, interval 1, probability 0, space 0, times 0 [ 687.466820][T12426] CPU: 0 PID: 12426 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 687.475221][T12426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 687.485300][T12426] Call Trace: [ 687.488567][T12426] [ 687.491482][T12426] dump_stack_lvl+0xd6/0x122 [ 687.496120][T12426] dump_stack+0x11/0x1b [ 687.500262][T12426] should_fail+0x23c/0x250 [ 687.504708][T12426] ? bio_alloc_bioset+0x30c/0x560 [ 687.509742][T12426] __should_failslab+0x81/0x90 [ 687.514600][T12426] should_failslab+0x5/0x20 [ 687.519203][T12426] kmem_cache_alloc+0x4f/0x320 [ 687.523981][T12426] bio_alloc_bioset+0x30c/0x560 [ 687.528837][T12426] iomap_dio_bio_iter+0x5ed/0xc70 [ 687.533936][T12426] ? ext4_alloc_da_blocks+0x100/0x100 [ 687.539395][T12426] __iomap_dio_rw+0x8b5/0x1070 [ 687.544154][T12426] iomap_dio_rw+0x38/0x80 [ 687.548470][T12426] ext4_file_read_iter+0x21d/0x290 [ 687.553571][T12426] generic_file_splice_read+0x24f/0x330 [ 687.559103][T12426] ? splice_shrink_spd+0x60/0x60 [ 687.564080][T12426] splice_direct_to_actor+0x2aa/0x650 [ 687.569540][T12426] ? do_splice_direct+0x190/0x190 [ 687.574722][T12426] do_splice_direct+0x106/0x190 [ 687.579579][T12426] do_sendfile+0x675/0xc40 [ 687.584031][T12426] __x64_sys_sendfile64+0x102/0x140 [ 687.589214][T12426] do_syscall_64+0x44/0xa0 [ 687.593681][T12426] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 687.599694][T12426] RIP: 0033:0x7f5f65a3dae9 [ 687.604093][T12426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 687.623684][T12426] RSP: 002b:00007f5f63793188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 687.632080][T12426] RAX: ffffffffffffffda RBX: 00007f5f65b51020 RCX: 00007f5f65a3dae9 [ 687.640036][T12426] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 687.648002][T12426] RBP: 00007f5f637931d0 R08: 0000000000000000 R09: 0000000000000000 [ 687.655954][T12426] R10: 0000000100002000 R11: 0000000000000246 R12: 0000000000000001 [ 687.663925][T12426] R13: 00007ffdd8b17f4f R14: 00007f5f63793300 R15: 0000000000022000 [ 687.671876][T12426] 16:03:22 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x2, 0xa424, 0x5}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="636f6e746578743d726f6f74226f626a5f547970653d2f6465766e74726f6c002c736d61636b0100726f6f743d7766606e6f2c2200"/65]) 16:03:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) (fail_nth: 10) 16:03:22 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x3a000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:22 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x400000, 0x0, 0x0) [ 687.745198][T12432] 9pnet: Insufficient options for proto=fd 16:03:22 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:22 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setsig(r0, 0xa, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000000c0)={0x2, 'tunl0\x00', {0x2}, 0x7}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d63c3b9ee4dba30160a8b5090ddb689b7f5ca", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',rootcontext=root\"\"']) [ 687.900896][T12451] 9pnet: Insufficient options for proto=fd [ 687.922775][T12458] 9pnet: Insufficient options for proto=fd [ 687.972656][T12460] FAULT_INJECTION: forcing a failure. [ 687.972656][T12460] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 687.985918][T12460] CPU: 1 PID: 12460 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 687.994339][T12460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 688.004400][T12460] Call Trace: [ 688.007686][T12460] [ 688.010618][T12460] dump_stack_lvl+0xd6/0x122 [ 688.015216][T12460] dump_stack+0x11/0x1b [ 688.019416][T12460] should_fail+0x23c/0x250 [ 688.023839][T12460] __alloc_pages+0x102/0x330 [ 688.028430][T12460] alloc_pages+0x382/0x3d0 [ 688.032852][T12460] push_pipe+0x267/0x370 [ 688.037119][T12460] iov_iter_get_pages+0x617/0x810 [ 688.042165][T12460] bio_iov_iter_get_pages+0x468/0xe40 [ 688.047581][T12460] ? bio_alloc_bioset+0x4ec/0x560 [ 688.052656][T12460] iomap_dio_bio_iter+0x749/0xc70 [ 688.057706][T12460] ? ext4_alloc_da_blocks+0x100/0x100 [ 688.063086][T12460] __iomap_dio_rw+0x8b5/0x1070 [ 688.067861][T12460] iomap_dio_rw+0x38/0x80 [ 688.072271][T12460] ext4_file_read_iter+0x21d/0x290 [ 688.077390][T12460] generic_file_splice_read+0x24f/0x330 [ 688.082971][T12460] ? splice_shrink_spd+0x60/0x60 [ 688.087946][T12460] splice_direct_to_actor+0x2aa/0x650 [ 688.093349][T12460] ? do_splice_direct+0x190/0x190 [ 688.098379][T12460] do_splice_direct+0x106/0x190 [ 688.103317][T12460] do_sendfile+0x675/0xc40 [ 688.107801][T12460] __x64_sys_sendfile64+0x102/0x140 [ 688.113046][T12460] do_syscall_64+0x44/0xa0 [ 688.117470][T12460] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 688.123413][T12460] RIP: 0033:0x7f5f65a3dae9 [ 688.127819][T12460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 688.147784][T12460] RSP: 002b:00007f5f63793188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 688.156198][T12460] RAX: ffffffffffffffda RBX: 00007f5f65b51020 RCX: 00007f5f65a3dae9 [ 688.164172][T12460] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 16:03:23 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x48000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:23 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x800000, 0x0, 0x0) [ 688.172141][T12460] RBP: 00007f5f637931d0 R08: 0000000000000000 R09: 0000000000000000 [ 688.180110][T12460] R10: 0000000100002000 R11: 0000000000000246 R12: 0000000000000002 [ 688.188079][T12460] R13: 00007ffdd8b17f4f R14: 00007f5f63793300 R15: 0000000000022000 [ 688.196058][T12460] 16:03:23 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) (fail_nth: 11) 16:03:23 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',sf\t\x00', @ANYRESHEX, @ANYBLOB=',rootcontext=root\"\"']) 16:03:23 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xf000000, 0x0, 0x0) [ 688.427390][T12466] 9pnet: Insufficient options for proto=fd 16:03:23 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x4c000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:23 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:23 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) r0 = syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x0, "2156816c73038c"}) r6 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000058740)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x74, "c8e9eb98776612"}) r12 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000059740)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000059940)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005a940)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {r7}, {r11, r15}, {r17}, {0x0, r18}], 0x9, "20a5b585f3b608"}) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) [ 688.564759][T12477] 9pnet: Insufficient options for proto=fd [ 688.583840][T12480] FAULT_INJECTION: forcing a failure. [ 688.583840][T12480] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 688.597105][T12480] CPU: 0 PID: 12480 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 688.605616][T12480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 688.615843][T12480] Call Trace: [ 688.619187][T12480] [ 688.622112][T12480] dump_stack_lvl+0xd6/0x122 [ 688.626706][T12480] dump_stack+0x11/0x1b [ 688.630893][T12480] should_fail+0x23c/0x250 [ 688.635321][T12480] __alloc_pages+0x102/0x330 [ 688.639911][T12480] alloc_pages+0x382/0x3d0 [ 688.644517][T12480] push_pipe+0x267/0x370 [ 688.648825][T12480] iov_iter_get_pages+0x617/0x810 [ 688.653839][T12480] bio_iov_iter_get_pages+0x468/0xe40 [ 688.659364][T12480] ? bio_alloc_bioset+0x4ec/0x560 [ 688.664631][T12480] iomap_dio_bio_iter+0x749/0xc70 [ 688.669953][T12480] ? ext4_alloc_da_blocks+0x100/0x100 [ 688.675325][T12480] __iomap_dio_rw+0x8b5/0x1070 [ 688.680080][T12480] iomap_dio_rw+0x38/0x80 [ 688.684405][T12480] ext4_file_read_iter+0x21d/0x290 [ 688.689557][T12480] generic_file_splice_read+0x24f/0x330 [ 688.695095][T12480] ? splice_shrink_spd+0x60/0x60 [ 688.700025][T12480] splice_direct_to_actor+0x2aa/0x650 [ 688.705400][T12480] ? do_splice_direct+0x190/0x190 [ 688.710508][T12480] do_splice_direct+0x106/0x190 [ 688.715341][T12480] do_sendfile+0x675/0xc40 [ 688.719737][T12480] __x64_sys_sendfile64+0x102/0x140 [ 688.724916][T12480] do_syscall_64+0x44/0xa0 [ 688.729424][T12480] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 688.735306][T12480] RIP: 0033:0x7f5f65a3dae9 [ 688.739706][T12480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 688.759357][T12480] RSP: 002b:00007f5f63793188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 688.767783][T12480] RAX: ffffffffffffffda RBX: 00007f5f65b51020 RCX: 00007f5f65a3dae9 [ 688.775736][T12480] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 688.783686][T12480] RBP: 00007f5f637931d0 R08: 0000000000000000 R09: 0000000000000000 [ 688.791660][T12480] R10: 0000000100002000 R11: 0000000000000246 R12: 0000000000000002 [ 688.799666][T12480] R13: 00007ffdd8b17f4f R14: 00007f5f63793300 R15: 0000000000022000 [ 688.807719][T12480] [ 688.824762][ C0] scsi_io_completion_action: 10 callbacks suppressed [ 688.824787][ C0] sd 0:0:1:0: tag#1404 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 688.841445][ C0] sd 0:0:1:0: tag#1404 CDB: opcode=0xe5 (vendor) [ 688.847799][ C0] sd 0:0:1:0: tag#1404 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 688.856861][ C0] sd 0:0:1:0: tag#1404 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 688.865923][ C0] sd 0:0:1:0: tag#1404 CDB[20]: ba 16:03:23 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x7fff, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="16000000001e00002c7266646e563d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20900, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f0000000200)={0x6, 0x80, 0x8, 0x3f, 0x0, 0x1, 0x0, 0x401, 0xc0014, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x400, 0x1f, 0x5, 0x1, 0x0, 0x3655, 0x5, 0x0, 0x0, 0x0, 0x81b}, 0x0, 0x2, r3, 0x23379927d0169816) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r4) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20900, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f0000000200)={0x6, 0x80, 0x8, 0x3f, 0x0, 0x1, 0x0, 0x401, 0xc0014, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x400, 0x1f, 0x5, 0x1, 0x0, 0x3655, 0x5, 0x0, 0x0, 0x0, 0x81b}, 0x0, 0x2, r5, 0x23379927d0169816) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) 16:03:23 executing program 0: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000040)=0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:23 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x20000000, 0x0, 0x0) 16:03:23 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="04", 0x1}], 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:23 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x60000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 688.892831][ C0] sd 0:0:1:0: tag#1370 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 688.902697][ C0] sd 0:0:1:0: tag#1370 CDB: opcode=0xe5 (vendor) [ 688.909021][ C0] sd 0:0:1:0: tag#1370 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 688.918076][ C0] sd 0:0:1:0: tag#1370 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 688.927118][ C0] sd 0:0:1:0: tag#1370 CDB[20]: ba 16:03:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) (fail_nth: 12) 16:03:24 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x10) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0)="755674a974614836f8600e17250374a5947fa4a2995ba304fbd07e255f933e45bd38f8bd8e61f088b271247efbdb8cb4938b5e93438ce94e8b10281ff4732d79cd10d15f62107cad94730fcf685896e90def30e68f66a98db1ba7ee2456eb60daf6e7adcaae6d3be824adc4f56f3c56263b9af48c72d3ffe3d5080d219f2fabb885e508c94625b5bffdbc9a4025214e97319906e8bddd3b79568caef1a5f40047d7029c8cc381e2ffa6fbee93a9e2ed0eedcd754affe7948e366221de5594fe670d28af5b4c3e43346fc0403fef81ff35a0938ecdf7a6b68ae0c543ba24645627d8ae0b61fa16c942cdb2999c0fea1df368e883d2adfc028a61245") mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fo=\x00\x00\x00\x00\x00\x00', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',rootcontext=root\"\"']) [ 688.994465][T12493] 9pnet: Insufficient options for proto=fd [ 688.995848][T12495] 9pnet: Insufficient options for proto=fd 16:03:24 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x7fff, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) syz_io_uring_setup(0x50b2, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, 0x4, 0x0, r2}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x5, 0x3, 0x8}]}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x7fff, 0x8, '9P2000.L'}, 0x15) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$KDENABIO(r6, 0x4b36) rt_sigqueueinfo(r3, 0x2e, &(0x7f0000000080)={0x1a, 0x8, 0x8}) 16:03:24 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x40000000000000, 0x0, 0x0) 16:03:24 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 689.104753][ C1] sd 0:0:1:0: tag#1379 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 689.114620][ C1] sd 0:0:1:0: tag#1379 CDB: opcode=0xe5 (vendor) [ 689.120953][ C1] sd 0:0:1:0: tag#1379 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 689.129989][ C1] sd 0:0:1:0: tag#1379 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 689.139187][ C1] sd 0:0:1:0: tag#1379 CDB[20]: ba 16:03:24 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x68000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 689.242172][T12515] 9pnet: Could not find request transport: fo= [ 689.262054][T12521] 9pnet: Could not find request transport: fo= [ 689.268412][T12516] FAULT_INJECTION: forcing a failure. [ 689.268412][T12516] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 689.281652][T12516] CPU: 0 PID: 12516 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 689.290128][T12516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 689.300189][T12516] Call Trace: [ 689.303587][T12516] [ 689.306514][T12516] dump_stack_lvl+0xd6/0x122 [ 689.311107][T12516] dump_stack+0x11/0x1b [ 689.315265][T12516] should_fail+0x23c/0x250 [ 689.319835][T12516] __alloc_pages+0x102/0x330 [ 689.324431][T12516] alloc_pages+0x382/0x3d0 [ 689.328852][T12516] push_pipe+0x267/0x370 [ 689.333095][T12516] iov_iter_get_pages+0x617/0x810 16:03:24 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x7fff, 0x8, '9P2000.L'}, 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20900, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) perf_event_open(&(0x7f0000000200)={0x6, 0x80, 0x8, 0x3f, 0x0, 0x1, 0x0, 0x401, 0xc0014, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f00000001c0)}, 0x400, 0x1f, 0x5, 0x1, 0x0, 0x3655, 0x5, 0x0, 0x0, 0x0, 0x81b}, 0x0, 0x2, r6, 0x23379927d0169816) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6e3d6be3309ca6b54b00061baa342eb1a7aa395b", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',rootcontext=root\"obj_user=rfdno,\"']) [ 689.338128][T12516] bio_iov_iter_get_pages+0x468/0xe40 [ 689.343508][T12516] ? bio_alloc_bioset+0x4ec/0x560 [ 689.348533][T12516] iomap_dio_bio_iter+0x749/0xc70 [ 689.353585][T12516] ? ext4_alloc_da_blocks+0x100/0x100 [ 689.358958][T12516] __iomap_dio_rw+0x8b5/0x1070 [ 689.363763][T12516] iomap_dio_rw+0x38/0x80 [ 689.368160][T12516] ext4_file_read_iter+0x21d/0x290 [ 689.373261][T12516] generic_file_splice_read+0x24f/0x330 [ 689.378834][T12516] ? splice_shrink_spd+0x60/0x60 [ 689.383801][T12516] splice_direct_to_actor+0x2aa/0x650 [ 689.389263][T12516] ? do_splice_direct+0x190/0x190 [ 689.394376][T12516] do_splice_direct+0x106/0x190 [ 689.399244][T12516] do_sendfile+0x675/0xc40 [ 689.403661][T12516] __x64_sys_sendfile64+0x102/0x140 [ 689.408859][T12516] do_syscall_64+0x44/0xa0 [ 689.413376][T12516] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 689.419317][T12516] RIP: 0033:0x7f5f65a3dae9 [ 689.423785][T12516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 689.443433][T12516] RSP: 002b:00007f5f63793188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 689.451909][T12516] RAX: ffffffffffffffda RBX: 00007f5f65b51020 RCX: 00007f5f65a3dae9 [ 689.459863][T12516] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 689.467817][T12516] RBP: 00007f5f637931d0 R08: 0000000000000000 R09: 0000000000000000 [ 689.475782][T12516] R10: 0000000100002000 R11: 0000000000000246 R12: 0000000000000002 [ 689.483757][T12516] R13: 00007ffdd8b17f4f R14: 00007f5f63793300 R15: 0000000000022000 [ 689.491712][T12516] [ 689.496984][ T23] kauditd_printk_skb: 283 callbacks suppressed [ 689.496996][ T23] audit: type=1326 audit(1635955404.496:11997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12523 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 689.500285][ C1] sd 0:0:1:0: tag#1382 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 689.503244][ T23] audit: type=1326 audit(1635955404.496:11998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12523 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 689.527261][ C1] sd 0:0:1:0: tag#1382 CDB: opcode=0xe5 (vendor) [ 689.548083][ T23] audit: type=1326 audit(1635955404.546:11999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12523 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 689.561146][ C1] sd 0:0:1:0: tag#1382 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 689.567415][ T23] audit: type=1326 audit(1635955404.546:12000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12523 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 689.591446][ C1] sd 0:0:1:0: tag#1382 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 689.600436][ T23] audit: type=1326 audit(1635955404.546:12001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12523 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 689.624482][ C1] sd 0:0:1:0: tag#1382 CDB[20]: ba [ 689.662613][ T23] audit: type=1326 audit(1635955404.546:12002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12523 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 16:03:24 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x80000000000000, 0x0, 0x0) [ 689.686680][ T23] audit: type=1326 audit(1635955404.546:12003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12523 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 689.710659][ T23] audit: type=1326 audit(1635955404.546:12004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12523 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 689.734766][ T23] audit: type=1326 audit(1635955404.546:12005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12523 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 689.758961][ T23] audit: type=1326 audit(1635955404.546:12006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12523 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 16:03:24 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:24 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x18) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) 16:03:24 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x5, 0xd2, 0x4, 0x9}, {0x6, 0x9, 0x99, 0x20}, {0x0, 0x9, 0x6, 0x4}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:24 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x6c000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 689.787720][ C1] sd 0:0:1:0: tag#1388 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 689.793237][T12538] 9pnet: Insufficient options for proto=fd [ 689.797631][ C1] sd 0:0:1:0: tag#1388 CDB: opcode=0xe5 (vendor) [ 689.809745][ C1] sd 0:0:1:0: tag#1388 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 689.814064][T12538] 9pnet: Insufficient options for proto=fd [ 689.818803][ C1] sd 0:0:1:0: tag#1388 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 689.833660][ C1] sd 0:0:1:0: tag#1388 CDB[20]: ba 16:03:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) (fail_nth: 13) 16:03:24 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xf00000000000000, 0x0, 0x0) 16:03:25 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4, 0x1}}, './file0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x7, 0x4, 0x9, 0x10000}, {0x9, 0x20, 0x1}]}) r1 = pidfd_open(0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000080)=0x1) syz_io_uring_setup(0x16914, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) [ 690.013584][ C1] sd 0:0:1:0: tag#1363 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 690.023457][ C1] sd 0:0:1:0: tag#1363 CDB: opcode=0xe5 (vendor) [ 690.029792][ C1] sd 0:0:1:0: tag#1363 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 690.038858][ C1] sd 0:0:1:0: tag#1363 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 690.047922][ C1] sd 0:0:1:0: tag#1363 CDB[20]: ba [ 690.054805][T12549] validate_nla: 13 callbacks suppressed 16:03:25 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 690.054884][T12549] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 690.082602][ C1] sd 0:0:1:0: tag#1375 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 690.092428][ C1] sd 0:0:1:0: tag#1375 CDB: opcode=0xe5 (vendor) [ 690.098768][ C1] sd 0:0:1:0: tag#1375 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 16:03:25 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x74000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 690.107829][ C1] sd 0:0:1:0: tag#1375 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 690.113792][T12551] 9pnet: Insufficient options for proto=fd [ 690.116864][ C1] sd 0:0:1:0: tag#1375 CDB[20]: ba [ 690.128389][T12556] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:25 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x7fff, 0x8, '9P2000.L'}, 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x224a08a, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@afid={'afid', 0x3d, 0xffffffff}}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) [ 690.169945][T12554] 9pnet: Insufficient options for proto=fd [ 690.233232][T12561] FAULT_INJECTION: forcing a failure. [ 690.233232][T12561] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 690.246485][T12561] CPU: 1 PID: 12561 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 690.254945][T12561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 690.264978][T12561] Call Trace: [ 690.268234][T12561] [ 690.271244][T12561] dump_stack_lvl+0xd6/0x122 [ 690.275814][T12561] dump_stack+0x11/0x1b [ 690.279945][T12561] should_fail+0x23c/0x250 [ 690.284449][T12561] __alloc_pages+0x102/0x330 [ 690.289085][T12561] alloc_pages+0x382/0x3d0 [ 690.293477][T12561] push_pipe+0x267/0x370 [ 690.297698][T12561] iov_iter_get_pages+0x617/0x810 [ 690.302768][T12561] bio_iov_iter_get_pages+0x468/0xe40 [ 690.308138][T12561] ? bio_alloc_bioset+0x4ec/0x560 [ 690.313155][T12561] iomap_dio_bio_iter+0x749/0xc70 [ 690.318164][T12561] ? ext4_alloc_da_blocks+0x100/0x100 [ 690.323515][T12561] __iomap_dio_rw+0x8b5/0x1070 [ 690.328256][T12561] iomap_dio_rw+0x38/0x80 [ 690.332575][T12561] ext4_file_read_iter+0x21d/0x290 [ 690.337662][T12561] generic_file_splice_read+0x24f/0x330 [ 690.343185][T12561] ? splice_shrink_spd+0x60/0x60 [ 690.348165][T12561] splice_direct_to_actor+0x2aa/0x650 [ 690.353605][T12561] ? do_splice_direct+0x190/0x190 [ 690.358681][T12561] do_splice_direct+0x106/0x190 [ 690.363524][T12561] do_sendfile+0x675/0xc40 [ 690.367945][T12561] __x64_sys_sendfile64+0x102/0x140 [ 690.373133][T12561] do_syscall_64+0x44/0xa0 [ 690.377530][T12561] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 690.383403][T12561] RIP: 0033:0x7f5f65a3dae9 [ 690.387795][T12561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 690.407411][T12561] RSP: 002b:00007f5f63793188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 690.415869][T12561] RAX: ffffffffffffffda RBX: 00007f5f65b51020 RCX: 00007f5f65a3dae9 [ 690.423922][T12561] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 690.431879][T12561] RBP: 00007f5f637931d0 R08: 0000000000000000 R09: 0000000000000000 [ 690.439824][T12561] R10: 0000000100002000 R11: 0000000000000246 R12: 0000000000000002 [ 690.447772][T12561] R13: 00007ffdd8b17f4f R14: 00007f5f63793300 R15: 0000000000022000 [ 690.455729][T12561] 16:03:25 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x2000000000000000, 0x0, 0x0) 16:03:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) (fail_nth: 14) 16:03:25 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) r0 = syz_io_uring_setup(0x6914, &(0x7f0000000080)={0x0, 0x200000, 0x8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00009f7000/0x4000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000040)=0x9) 16:03:25 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 690.601432][ C1] sd 0:0:1:0: tag#1376 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 690.611405][ C1] sd 0:0:1:0: tag#1376 CDB: opcode=0xe5 (vendor) [ 690.617768][ C1] sd 0:0:1:0: tag#1376 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 690.626795][ C1] sd 0:0:1:0: tag#1376 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 690.635816][ C1] sd 0:0:1:0: tag#1376 CDB[20]: ba [ 690.643101][T12570] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:25 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x792d0000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 690.672918][T12570] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 690.726081][T12576] 9pnet: Insufficient options for proto=fd [ 690.732177][T12577] 9pnet: Insufficient options for proto=fd 16:03:25 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 16:03:25 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) r0 = syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x87, 0x6e, 0x1f, 0x8cfc}, {0x800, 0x1, 0x5, 0xb5}, {0xffe1, 0x0, 0x1, 0x1f}, {0x8, 0x0, 0x1, 0x24ef}, {0x100, 0x80, 0x0, 0x1f}, {0x1000, 0x0, 0x9, 0x9}, {0x800, 0x6, 0x52, 0xffffffff}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0xca6, 0x8, 0x4, 0xfbc}, {0x5, 0x1, 0x2, 0x8}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0], 0x3}, 0x1) 16:03:25 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 690.892651][ C1] sd 0:0:1:0: tag#1360 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 690.893909][T12592] FAULT_INJECTION: forcing a failure. [ 690.893909][T12592] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 690.902512][ C1] sd 0:0:1:0: tag#1360 CDB: opcode=0xe5 (vendor) [ 690.916057][T12592] CPU: 0 PID: 12592 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 690.922386][ C1] sd 0:0:1:0: tag#1360 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 690.922425][ C1] sd 0:0:1:0: tag#1360 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 690.930877][T12592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 690.939888][ C1] sd 0:0:1:0: tag#1360 CDB[20]: ba [ 690.948962][T12592] Call Trace: [ 690.948969][T12592] [ 690.948974][T12592] dump_stack_lvl+0xd6/0x122 [ 690.975021][T12592] dump_stack+0x11/0x1b [ 690.979263][T12592] should_fail+0x23c/0x250 [ 690.983765][T12592] __alloc_pages+0x102/0x330 [ 690.988356][T12592] alloc_pages+0x382/0x3d0 [ 690.992773][T12592] push_pipe+0x267/0x370 [ 690.997102][T12592] iov_iter_get_pages+0x617/0x810 [ 691.002158][T12592] bio_iov_iter_get_pages+0x468/0xe40 [ 691.007627][T12592] ? bio_alloc_bioset+0x4ec/0x560 [ 691.012685][T12592] iomap_dio_bio_iter+0x749/0xc70 [ 691.017708][T12592] ? ext4_alloc_da_blocks+0x100/0x100 [ 691.023081][T12592] __iomap_dio_rw+0x8b5/0x1070 [ 691.027916][T12592] iomap_dio_rw+0x38/0x80 [ 691.032317][T12592] ext4_file_read_iter+0x21d/0x290 [ 691.037506][T12592] generic_file_splice_read+0x24f/0x330 [ 691.043054][T12592] ? splice_shrink_spd+0x60/0x60 [ 691.047995][T12592] splice_direct_to_actor+0x2aa/0x650 [ 691.053440][T12592] ? do_splice_direct+0x190/0x190 [ 691.058505][T12592] do_splice_direct+0x106/0x190 [ 691.063378][T12592] do_sendfile+0x675/0xc40 [ 691.067852][T12592] __x64_sys_sendfile64+0x102/0x140 [ 691.073049][T12592] do_syscall_64+0x44/0xa0 [ 691.077536][T12592] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 691.083429][T12592] RIP: 0033:0x7f5f65a3dae9 [ 691.087868][T12592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 691.107467][T12592] RSP: 002b:00007f5f63793188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 691.115882][T12592] RAX: ffffffffffffffda RBX: 00007f5f65b51020 RCX: 00007f5f65a3dae9 [ 691.123847][T12592] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 691.131816][T12592] RBP: 00007f5f637931d0 R08: 0000000000000000 R09: 0000000000000000 [ 691.139789][T12592] R10: 0000000100002000 R11: 0000000000000246 R12: 0000000000000002 [ 691.147757][T12592] R13: 00007ffdd8b17f4f R14: 00007f5f63793300 R15: 0000000000022000 [ 691.155728][T12592] [ 691.161411][T12593] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 691.205300][ C0] sd 0:0:1:0: tag#1406 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 691.215583][ C0] sd 0:0:1:0: tag#1406 CDB: opcode=0xe5 (vendor) [ 691.221938][ C0] sd 0:0:1:0: tag#1406 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 691.230958][ C0] sd 0:0:1:0: tag#1406 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 691.240009][ C0] sd 0:0:1:0: tag#1406 CDB[20]: ba 16:03:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) (fail_nth: 15) 16:03:26 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x7a000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 691.252054][T12594] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:26 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xf) 16:03:26 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 691.429285][T12607] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 691.468116][T12607] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:26 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000240)={0x7, &(0x7f00000001c0)=[{0x1000, 0x40, 0x80, 0x7ff}, {0x8001, 0x2, 0x2, 0x8}, {0x75, 0x1, 0x6a, 0x7}, {0x9f, 0x20, 0x0, 0x20}, {0x3, 0x9, 0x9, 0x3}, {0xff, 0x8, 0x1, 0x4}, {0x0, 0x7, 0x3, 0xf24}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x80, 0xe0, 0x26, 0x3b0b}, {0x16, 0x5, 0x4, 0x80}]}) r0 = syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/191, 0xbf}], 0x1, 0x6, 0xff) r1 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) r4 = gettid() move_pages(r4, 0x6, &(0x7f0000000280)=[&(0x7f0000664000/0x3000)=nil, &(0x7f00008bb000/0x3000)=nil, &(0x7f0000b0a000/0x12000)=nil, &(0x7f0000789000/0x4000)=nil, &(0x7f0000a88000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000000340)=[0x7fffffff, 0x3, 0x1, 0x7, 0x0, 0x8000000, 0xfff, 0x7], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0) r5 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r5, &(0x7f00000000c0), 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000540)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r6}}, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2007, @fd_index=0x9, 0xffff, 0xff, 0x7, 0x5, 0x1, {0x0, r6}}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) [ 691.546837][T12613] FAULT_INJECTION: forcing a failure. [ 691.546837][T12613] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 691.560182][T12613] CPU: 1 PID: 12613 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 691.568670][T12613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 691.578749][T12613] Call Trace: [ 691.582028][T12613] [ 691.584951][T12613] dump_stack_lvl+0xd6/0x122 [ 691.589548][T12613] dump_stack+0x11/0x1b [ 691.593701][T12613] should_fail+0x23c/0x250 [ 691.598124][T12613] __alloc_pages+0x102/0x330 [ 691.602714][T12613] alloc_pages+0x382/0x3d0 [ 691.607135][T12613] push_pipe+0x267/0x370 [ 691.611396][T12613] iov_iter_get_pages+0x617/0x810 [ 691.616424][T12613] bio_iov_iter_get_pages+0x468/0xe40 [ 691.621811][T12613] ? __this_cpu_preempt_check+0x18/0x20 [ 691.627366][T12613] iomap_dio_bio_iter+0x749/0xc70 [ 691.632461][T12613] ? ext4_alloc_da_blocks+0x100/0x100 [ 691.637855][T12613] __iomap_dio_rw+0x8b5/0x1070 [ 691.642634][T12613] iomap_dio_rw+0x38/0x80 [ 691.646978][T12613] ext4_file_read_iter+0x21d/0x290 [ 691.652152][T12613] generic_file_splice_read+0x24f/0x330 [ 691.657752][T12613] ? splice_shrink_spd+0x60/0x60 [ 691.662763][T12613] splice_direct_to_actor+0x2aa/0x650 [ 691.668197][T12613] ? do_splice_direct+0x190/0x190 [ 691.673368][T12613] do_splice_direct+0x106/0x190 [ 691.678222][T12613] do_sendfile+0x675/0xc40 [ 691.682666][T12613] __x64_sys_sendfile64+0x102/0x140 [ 691.687898][T12613] do_syscall_64+0x44/0xa0 [ 691.692330][T12613] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 691.698403][T12613] RIP: 0033:0x7f5f65a3dae9 [ 691.702814][T12613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 691.722418][T12613] RSP: 002b:00007f5f63793188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 691.730842][T12613] RAX: ffffffffffffffda RBX: 00007f5f65b51020 RCX: 00007f5f65a3dae9 [ 691.738815][T12613] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 16:03:26 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xf00) 16:03:26 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x9effffff, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:26 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:26 executing program 1: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a100)={0x0, ""/256, 0x0, 0x0}) r8 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x0, "2156816c73038c"}) r13 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r13, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005a300)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "328681e001de76"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f000005b300)={{0x0, 0x8000, 0x3, 0x1000, 0x9, 0x0, 0x2, 0xd6, 0x20, 0x10000, 0x2, 0x3, 0x4, 0x0, 0xff}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005c300)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r7}, {r10, r16}, {0x0, r19}, {r20}], 0x9, "da0fe74196d3e2"}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='rrhns=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',ot\"\"']) 16:03:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) (fail_nth: 16) [ 691.746786][T12613] RBP: 00007f5f637931d0 R08: 0000000000000000 R09: 0000000000000000 [ 691.754762][T12613] R10: 0000000100002000 R11: 0000000000000246 R12: 0000000000000002 [ 691.762743][T12613] R13: 00007ffdd8b17f4f R14: 00007f5f63793300 R15: 0000000000022000 [ 691.770772][T12613] 16:03:26 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x210201, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000002900)={0x53, 0xffffffffffffffff, 0x1000, 0x9, @scatter={0x8, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/254, 0xfe}, {&(0x7f0000000280)=""/148, 0x94}, {&(0x7f0000000340)=""/69, 0x45}, {&(0x7f0000000480)=""/141, 0x8d}, {&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/209, 0xd1}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/184, 0xb8}]}, &(0x7f0000001800)="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", &(0x7f0000002800)=""/204, 0x7fff, 0x24, 0xffffffffffffffff, &(0x7f0000000080)}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000002980)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) 16:03:27 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x80000000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:27 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2000) [ 691.972026][T12630] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 692.005173][T12630] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:27 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0xefffffff, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:27 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0xa00400, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@dont_appraise}, {@audit}], 0x22}}) [ 692.032926][T12639] 9pnet: Insufficient options for proto=fd [ 692.085830][T12641] FAULT_INJECTION: forcing a failure. [ 692.085830][T12641] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 692.099179][T12641] CPU: 0 PID: 12641 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 692.107586][T12641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 692.117632][T12641] Call Trace: [ 692.120945][T12641] [ 692.123950][T12641] dump_stack_lvl+0xd6/0x122 [ 692.128549][T12641] dump_stack+0x11/0x1b [ 692.132778][T12641] should_fail+0x23c/0x250 [ 692.137222][T12641] __alloc_pages+0x102/0x330 [ 692.141811][T12641] alloc_pages+0x382/0x3d0 [ 692.146290][T12641] push_pipe+0x267/0x370 [ 692.150548][T12641] iov_iter_get_pages+0x617/0x810 [ 692.155571][T12641] bio_iov_iter_get_pages+0x468/0xe40 [ 692.160948][T12641] ? bio_alloc_bioset+0x4ec/0x560 [ 692.165983][T12641] iomap_dio_bio_iter+0x749/0xc70 [ 692.172222][T12641] ? ext4_alloc_da_blocks+0x100/0x100 [ 692.177642][T12641] __iomap_dio_rw+0x8b5/0x1070 [ 692.182505][T12641] iomap_dio_rw+0x38/0x80 [ 692.186845][T12641] ext4_file_read_iter+0x21d/0x290 [ 692.191959][T12641] generic_file_splice_read+0x24f/0x330 [ 692.197498][T12641] ? splice_shrink_spd+0x60/0x60 [ 692.202426][T12641] splice_direct_to_actor+0x2aa/0x650 [ 692.207796][T12641] ? do_splice_direct+0x190/0x190 [ 692.212803][T12641] do_splice_direct+0x106/0x190 [ 692.217642][T12641] do_sendfile+0x675/0xc40 [ 692.222043][T12641] __x64_sys_sendfile64+0x102/0x140 [ 692.227221][T12641] do_syscall_64+0x44/0xa0 [ 692.231699][T12641] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 692.237614][T12641] RIP: 0033:0x7f5f65a3dae9 [ 692.242009][T12641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 692.262270][T12641] RSP: 002b:00007f5f63793188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 692.270678][T12641] RAX: ffffffffffffffda RBX: 00007f5f65b51020 RCX: 00007f5f65a3dae9 [ 692.278672][T12641] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 16:03:27 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x80000000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 692.286683][T12641] RBP: 00007f5f637931d0 R08: 0000000000000000 R09: 0000000000000000 [ 692.294700][T12641] R10: 0000000100002000 R11: 0000000000000246 R12: 0000000000000002 [ 692.302691][T12641] R13: 00007ffdd8b17f4f R14: 00007f5f63793300 R15: 0000000000022000 [ 692.310647][T12641] [ 692.323342][T12649] 9pnet: Insufficient options for proto=fd 16:03:27 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x4000) 16:03:27 executing program 1: r0 = getpid() pidfd_open(r0, 0x0) ptrace$setregs(0xd, r0, 0x1, &(0x7f0000000280)="e0d89b50f9b4a1a52788d87d76cb4646d1423d4c86d53a6e129f210cfa65ba16a78d6a658bd89797856d55ca836157c01b001632b56d75e51780fbbb6b6d42a4e9cdcb77f4ee7d53c6e80741f8f3a959d1a99e60f8cb07538192a6056878215f83bccb9ba0a78b2c9652b64f07e9f31ae86d3f99080ea072966cec317e263ae7282378311550021f416c023e329880c7336efc35031bce75d30fca524f6db9700ecc820c9ebe1561a26375264b2586b3460e9c2b057828c2797ba3f6cc50cd6995ad2380599e0e0ef6b715f369044bce12dea8d1f910c1dea4abbdaf3159007ff7fb4c") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) 16:03:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) (fail_nth: 17) 16:03:27 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:27 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x80000000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:27 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0xf0ffffff, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:27 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x400000) 16:03:27 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:27 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x7fff, 0x8, '9P2000.L'}, 0x15) write$P9_RRENAMEAT(r1, &(0x7f0000000080)={0x7, 0x4b, 0x1}, 0x7) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) fspick(r2, &(0x7f0000000040)='./file0\x00', 0x0) [ 692.783869][T12665] 9pnet: Insufficient options for proto=fd 16:03:27 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0xf5ffffff, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 692.864526][T12674] FAULT_INJECTION: forcing a failure. [ 692.864526][T12674] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 692.877890][T12674] CPU: 1 PID: 12674 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 692.886308][T12674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 692.896342][T12674] Call Trace: [ 692.899642][T12674] [ 692.902598][T12674] dump_stack_lvl+0xd6/0x122 [ 692.907188][T12674] dump_stack+0x11/0x1b [ 692.911533][T12674] should_fail+0x23c/0x250 [ 692.915959][T12674] __alloc_pages+0x102/0x330 [ 692.920543][T12674] alloc_pages+0x382/0x3d0 [ 692.924950][T12674] push_pipe+0x267/0x370 [ 692.929282][T12674] iov_iter_get_pages+0x617/0x810 [ 692.934335][T12674] bio_iov_iter_get_pages+0x468/0xe40 [ 692.939691][T12674] ? bio_alloc_bioset+0x4ec/0x560 [ 692.944710][T12674] iomap_dio_bio_iter+0x749/0xc70 [ 692.949718][T12674] ? ext4_alloc_da_blocks+0x100/0x100 [ 692.955127][T12674] __iomap_dio_rw+0x8b5/0x1070 [ 692.960077][T12674] iomap_dio_rw+0x38/0x80 [ 692.964404][T12674] ext4_file_read_iter+0x21d/0x290 [ 692.969550][T12674] generic_file_splice_read+0x24f/0x330 [ 692.975142][T12674] ? splice_shrink_spd+0x60/0x60 [ 692.980112][T12674] splice_direct_to_actor+0x2aa/0x650 [ 692.985544][T12674] ? do_splice_direct+0x190/0x190 [ 692.990549][T12674] do_splice_direct+0x106/0x190 [ 692.995377][T12674] do_sendfile+0x675/0xc40 [ 692.999828][T12674] __x64_sys_sendfile64+0x102/0x140 [ 693.005032][T12674] do_syscall_64+0x44/0xa0 [ 693.009428][T12674] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 693.015317][T12674] RIP: 0033:0x7f5f65a3dae9 [ 693.019748][T12674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 693.039379][T12674] RSP: 002b:00007f5f63793188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 693.047824][T12674] RAX: ffffffffffffffda RBX: 00007f5f65b51020 RCX: 00007f5f65a3dae9 [ 693.055775][T12674] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 693.063761][T12674] RBP: 00007f5f637931d0 R08: 0000000000000000 R09: 0000000000000000 [ 693.071769][T12674] R10: 0000000100002000 R11: 0000000000000246 R12: 0000000000000002 [ 693.079730][T12674] R13: 00007ffdd8b17f4f R14: 00007f5f63793300 R15: 0000000000022000 [ 693.087681][T12674] 16:03:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) (fail_nth: 18) 16:03:28 executing program 0: syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:28 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x800000) 16:03:28 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:28 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x100c000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@nodevmap}, {@mmap}, {@afid={'afid', 0x3d, 0x200}}, {@nodevmap}, {@mmap}, {@posixacl}, {@dfltuid={'dfltuid', 0x3d, r1}}], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, 0x0}) pidfd_open(r3, 0x0) clock_gettime(0x0, &(0x7f0000002080)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000002000)=[{{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000580)=""/114, 0x72}, {&(0x7f0000000600)=""/18, 0x12}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000700)=""/149, 0x95}, {&(0x7f00000007c0)=""/197, 0xc5}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000940)=""/150, 0x96}, {&(0x7f0000000a00)=""/3, 0x3}], 0x8}}, {{&(0x7f0000000ac0), 0x6e, &(0x7f0000001ec0)=[{&(0x7f0000000b40)=""/87, 0x57}, {&(0x7f0000000bc0)=""/3, 0x3}, {&(0x7f0000000c00)=""/194, 0xc2}, {&(0x7f0000000d00)=""/213, 0xd5}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/97, 0x61}, {&(0x7f0000001e80)=""/26, 0x1a}], 0x7, &(0x7f0000001f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x2, 0x10002, &(0x7f00000020c0)={r4, r5+60000000}) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x3f, 0x8, 0x7f, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xdc, 0x4, @perf_bp={&(0x7f0000000440), 0xa}, 0xe0, 0x8, 0x8a, 0x7, 0x6, 0x1, 0x9, 0x0, 0x6, 0x0, 0x8}, r3, 0xffffffffffffffff, r6, 0xa) preadv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000000180)=""/43, 0x2b}, {&(0x7f00000001c0)=""/86, 0x56}], 0x3, 0x4, 0x8) 16:03:28 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0xffffff7f, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 693.301760][T12687] 9pnet: Insufficient options for proto=fd [ 693.309916][T12688] 9pnet: Insufficient options for proto=fd 16:03:28 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) r0 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000340)={0x5, &(0x7f0000000300)=[{0x2, 0x14, 0x5, 0xc6}, {0x4, 0x0, 0xe9, 0xec3}, {0x4, 0x0, 0x9, 0x6}, {0x7ff, 0xf3, 0x0, 0x10001}, {0xd3d, 0x8, 0x5, 0x10000}]}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0xa, &(0x7f00000001c0)=[{0x7, 0x80, 0x50}, {0x7, 0x3f, 0x2, 0x100}, {0xcf, 0x6, 0x80, 0x9}, {0xd8f, 0x0, 0xc0, 0x8}, {0x80, 0x3f, 0x9, 0x6115387a}, {0x8, 0x5, 0x7, 0x4}, {0x4000, 0x3, 0xf9, 0xfffffffd}, {0x3, 0x8, 0x1f, 0x8}, {0x80, 0x2, 0x1, 0x8}, {0x80, 0x3, 0x1}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x8, 0xc0, 0x7, 0x7}, {0x101, 0x5, 0x40, 0xc707}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x7, &(0x7f0000000280)=[{0x1f, 0x7f, 0x0, 0x81}, {0x8000, 0x6, 0x80, 0x5}, {0x1, 0xfc, 0x96, 0x9}, {0x200, 0x6, 0x57, 0x800}, {0x87bd, 0x3, 0x1, 0xff}, {0x7, 0xff, 0x7, 0x7}, {0x331, 0x3, 0x1f, 0xb3}]}) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x7, 0x6, 0x1, 0x8}, {0x2, 0x2, 0xa, 0x1}, {0x1, 0x8, 0x1, 0x748}]}) [ 693.428260][T12702] FAULT_INJECTION: forcing a failure. [ 693.428260][T12702] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 693.441781][T12702] CPU: 1 PID: 12702 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 693.450262][T12702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 693.460301][T12702] Call Trace: [ 693.463573][T12702] [ 693.466509][T12702] dump_stack_lvl+0xd6/0x122 [ 693.471081][T12702] dump_stack+0x11/0x1b [ 693.475257][T12702] should_fail+0x23c/0x250 [ 693.479677][T12702] __alloc_pages+0x102/0x330 [ 693.484248][T12702] alloc_pages+0x382/0x3d0 [ 693.488673][T12702] push_pipe+0x267/0x370 [ 693.492964][T12702] iov_iter_get_pages+0x617/0x810 [ 693.497969][T12702] bio_iov_iter_get_pages+0x468/0xe40 [ 693.503401][T12702] ? bio_alloc_bioset+0x4ec/0x560 [ 693.508406][T12702] iomap_dio_bio_iter+0x749/0xc70 [ 693.513466][T12702] ? ext4_alloc_da_blocks+0x100/0x100 [ 693.518846][T12702] __iomap_dio_rw+0x8b5/0x1070 [ 693.523606][T12702] iomap_dio_rw+0x38/0x80 [ 693.527916][T12702] ext4_file_read_iter+0x21d/0x290 [ 693.533069][T12702] generic_file_splice_read+0x24f/0x330 [ 693.538681][T12702] ? splice_shrink_spd+0x60/0x60 [ 693.543635][T12702] splice_direct_to_actor+0x2aa/0x650 [ 693.549079][T12702] ? do_splice_direct+0x190/0x190 [ 693.554094][T12702] do_splice_direct+0x106/0x190 [ 693.559019][T12702] do_sendfile+0x675/0xc40 [ 693.563478][T12702] __x64_sys_sendfile64+0x102/0x140 [ 693.568711][T12702] do_syscall_64+0x44/0xa0 [ 693.573124][T12702] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 693.579000][T12702] RIP: 0033:0x7f5f65a3dae9 [ 693.583407][T12702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 693.603094][T12702] RSP: 002b:00007f5f63793188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 693.611498][T12702] RAX: ffffffffffffffda RBX: 00007f5f65b51020 RCX: 00007f5f65a3dae9 [ 693.619480][T12702] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 693.627434][T12702] RBP: 00007f5f637931d0 R08: 0000000000000000 R09: 0000000000000000 [ 693.635454][T12702] R10: 0000000100002000 R11: 0000000000000246 R12: 0000000000000002 [ 693.643498][T12702] R13: 00007ffdd8b17f4f R14: 00007f5f63793300 R15: 0000000000022000 [ 693.651460][T12702] 16:03:28 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xf000000) 16:03:28 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:28 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440), 0x71feeb425fde2162, &(0x7f0000000040)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@permit_directio, 0x22}, {@euid_eq={'euid', 0x3d, 0xee00}}], 0x22}}) 16:03:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) (fail_nth: 19) [ 693.726417][T12709] 9pnet: Insufficient options for proto=fd [ 693.733602][T12711] 9pnet: Insufficient options for proto=fd 16:03:28 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0xf65, 0x1, 0x0, 0xc82}, {0x401, 0x20, 0x3, 0x3}]}) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x3, 0xa3, 0x5, 0x8}, {0x8, 0x1a, 0x79, 0x200}]}, 0x10) r0 = getpid() pidfd_open(r0, 0x0) syz_open_procfs(r0, &(0x7f00000001c0)='sessionid\x00') prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:28 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0xffffff9e, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:28 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x20000000) 16:03:28 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:28 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) truncate(&(0x7f0000000040)='\x00', 0x3) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) [ 693.941275][ C0] scsi_io_completion_action: 9 callbacks suppressed [ 693.941305][ C0] sd 0:0:1:0: tag#1366 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 693.957803][ C0] sd 0:0:1:0: tag#1366 CDB: opcode=0xe5 (vendor) [ 693.964153][ C0] sd 0:0:1:0: tag#1366 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 693.973179][ C0] sd 0:0:1:0: tag#1366 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 693.982350][ C0] sd 0:0:1:0: tag#1366 CDB[20]: ba 16:03:29 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x81, 0xd9, 0xf4}, {0xf904, 0x3f, 0x3d, 0x827}]}) [ 693.995974][T12737] FAULT_INJECTION: forcing a failure. [ 693.995974][T12737] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 694.009279][T12737] CPU: 1 PID: 12737 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 694.017689][T12737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 694.027744][T12737] Call Trace: [ 694.031006][T12737] [ 694.033920][T12737] dump_stack_lvl+0xd6/0x122 [ 694.038512][T12737] dump_stack+0x11/0x1b [ 694.042656][T12737] should_fail+0x23c/0x250 [ 694.047069][T12737] __alloc_pages+0x102/0x330 [ 694.051652][T12737] alloc_pages+0x382/0x3d0 [ 694.056051][T12737] push_pipe+0x267/0x370 [ 694.060349][T12737] iov_iter_get_pages+0x617/0x810 [ 694.065379][T12737] bio_iov_iter_get_pages+0x468/0xe40 [ 694.070773][T12737] ? bio_alloc_bioset+0x4ec/0x560 [ 694.075813][T12737] iomap_dio_bio_iter+0x749/0xc70 [ 694.080815][T12737] ? ext4_alloc_da_blocks+0x100/0x100 [ 694.086163][T12737] __iomap_dio_rw+0x8b5/0x1070 [ 694.090991][T12737] iomap_dio_rw+0x38/0x80 [ 694.095354][T12737] ext4_file_read_iter+0x21d/0x290 [ 694.100501][T12737] generic_file_splice_read+0x24f/0x330 [ 694.106026][T12737] ? splice_shrink_spd+0x60/0x60 [ 694.110945][T12737] splice_direct_to_actor+0x2aa/0x650 [ 694.116350][T12737] ? do_splice_direct+0x190/0x190 [ 694.121354][T12737] do_splice_direct+0x106/0x190 [ 694.126184][T12737] do_sendfile+0x675/0xc40 [ 694.130585][T12737] __x64_sys_sendfile64+0x102/0x140 [ 694.135769][T12737] do_syscall_64+0x44/0xa0 [ 694.140215][T12737] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 694.146092][T12737] RIP: 0033:0x7f5f65a3dae9 [ 694.150486][T12737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 694.170117][T12737] RSP: 002b:00007f5f63793188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 694.178514][T12737] RAX: ffffffffffffffda RBX: 00007f5f65b51020 RCX: 00007f5f65a3dae9 [ 694.186490][T12737] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 694.194437][T12737] RBP: 00007f5f637931d0 R08: 0000000000000000 R09: 0000000000000000 [ 694.202400][T12737] R10: 0000000100002000 R11: 0000000000000246 R12: 0000000000000002 [ 694.210358][T12737] R13: 00007ffdd8b17f4f R14: 00007f5f63793300 R15: 0000000000022000 [ 694.218315][T12737] [ 694.222959][ C0] sd 0:0:1:0: tag#1349 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 694.232813][ C0] sd 0:0:1:0: tag#1349 CDB: opcode=0xe5 (vendor) 16:03:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) (fail_nth: 20) 16:03:29 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0xffffffef, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 694.239144][ C0] sd 0:0:1:0: tag#1349 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 694.248189][ C0] sd 0:0:1:0: tag#1349 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 694.257262][ C0] sd 0:0:1:0: tag#1349 CDB[20]: ba 16:03:29 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="ae78bde6c0a69d7472616e733d66642c7266646e6f3d2c54ffde9a9d1f000000ae0c0649ca2615a037feacce2ca250987a965692961797bc657ec217d47c334752d5910900c59302", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',rootcontext=root\"\"']) 16:03:29 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x40000000000000) 16:03:29 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 694.387329][T12743] 9pnet: Insufficient options for proto=fd [ 694.391310][T12748] 9pnet: Insufficient options for proto=fd 16:03:29 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x6914, &(0x7f0000000040)={0x0, 0xfffffffb, 0x0, 0x1, 0x24a}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000660000/0x3000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) [ 694.480331][ C1] sd 0:0:1:0: tag#1387 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 694.490243][ C1] sd 0:0:1:0: tag#1387 CDB: opcode=0xe5 (vendor) [ 694.496581][ C1] sd 0:0:1:0: tag#1387 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 694.505593][ C1] sd 0:0:1:0: tag#1387 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 694.514643][ C1] sd 0:0:1:0: tag#1387 CDB[20]: ba 16:03:29 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0xfffffff0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 694.542547][ C0] sd 0:0:1:0: tag#1396 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 694.552433][ C0] sd 0:0:1:0: tag#1396 CDB: opcode=0xe5 (vendor) [ 694.558770][ C0] sd 0:0:1:0: tag#1396 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 694.567855][ C0] sd 0:0:1:0: tag#1396 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 694.576895][ C0] sd 0:0:1:0: tag#1396 CDB[20]: ba [ 694.623249][T12764] FAULT_INJECTION: forcing a failure. [ 694.623249][T12764] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 694.636536][T12764] CPU: 0 PID: 12764 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 694.644956][T12764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 694.655191][T12764] Call Trace: [ 694.658473][T12764] [ 694.661396][T12764] dump_stack_lvl+0xd6/0x122 [ 694.666115][T12764] dump_stack+0x11/0x1b 16:03:29 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index, 0x0, &(0x7f0000000040)=""/18, 0x39, 0x10}, 0x80000000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:29 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x7fff, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x10) fallocate(r3, 0x0, 0x0, 0x2000402) r4 = syz_mount_image$nfs4(&(0x7f0000003bc0), &(0x7f0000003c00)='./file0\x00', 0x8000, 0x3, &(0x7f0000004e40)=[{&(0x7f0000003c40)="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", 0x1000, 0x80000001}, {&(0x7f0000004c80)="b1ceccfa6d6330926b38ed6b96d7bd507ba4ae3f93de9c07d09cd6ba7b8899792da2c06435eb1750f63ff1777a387e69ac3f238a468c2402cab60b7d05240f5e5bb706dddd7e8e56c932725490e6f30c4ca9b5d3d6c8596a757bec4070b6067871de92d56feb0e5d12e96f3ef3f3f5f78263ce36c470d74ed641c8e0c307e3965e4b14a8ae107bd176ce938474a62bd5e2471883d1b0884303b5f68a1dcbdbc9849d57e24a301dd6bf1ce1be7c1e4e951acf0530f6", 0xb5, 0x7}, {&(0x7f0000004d40)="fe3f4e6edf6965e7f2bc75534bfe894d22c511fb5c976fc88a270459d0c141fc6d13909354543db8946bb51c07da2e4aad94f1312726317af6a4c694ec39664a22adc556b0cfb66ec00565714f730f1bd11e4508d1e98399fb30ba00d712efc6dde284a63a5ddf6a26fb497ea31be5e6d8c3131da677e5446bee8ad3bd1803240f68ce93848aefb75164af89574c23626e455c63546dc89c36637d391c4d54f8846cfcb53a5a0fb89cf93cc7914b989b880a88d4ddbe96a7f8624beb02d304accd2e184807bf913cb5dc7613d7344d6b91b9aaa6c550881b3652f0c1490af4901902eea736", 0xe5, 0x9}], 0x30000, &(0x7f0000004ec0)={[{'[!%!^-@:['}, {'\x00'}, {'('}, {}, {'/dev/sg#\x00'}, {}, {'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc'}, {'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc'}], [{@smackfshat={'smackfshat', 0x3d, '/^+&%.'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@fsname={'fsname', 0x3d, 'cpu.stat\x00'}}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004c600)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000062c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x0, "8bebeb894f74c3"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000004f40)={{0x0, 0xff, 0x26890b37, 0x4, 0x800, 0x0, 0x7, 0x236a, 0xff, 0x4, 0x7, 0xbb87, 0x3f, 0x2, 0x9}, 0x8, [0x0]}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10601, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000004fc0)={{}, r7, 0x14, @unused=[0x3, 0x9, 0x7fffffff, 0x5], @name="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"}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f0000000c40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002040)=[{&(0x7f0000000cc0)='K', 0x1}, {&(0x7f0000000d00)="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", 0x2bf}], 0x2, &(0x7f0000002100)=[@rights={{0x14, 0x1, 0x1, [r9]}}], 0x18}, 0x0) 16:03:29 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x80000000000000) [ 694.670280][T12764] should_fail+0x23c/0x250 [ 694.674747][T12764] __alloc_pages+0x102/0x330 [ 694.679344][T12764] alloc_pages+0x382/0x3d0 [ 694.683828][T12764] push_pipe+0x267/0x370 [ 694.688150][T12764] iov_iter_get_pages+0x617/0x810 [ 694.693273][T12764] bio_iov_iter_get_pages+0x468/0xe40 [ 694.698663][T12764] ? bio_alloc_bioset+0x4ec/0x560 [ 694.703691][T12764] iomap_dio_bio_iter+0x749/0xc70 [ 694.708720][T12764] ? ext4_alloc_da_blocks+0x100/0x100 [ 694.714202][T12764] __iomap_dio_rw+0x8b5/0x1070 [ 694.718991][T12764] iomap_dio_rw+0x38/0x80 [ 694.723327][T12764] ext4_file_read_iter+0x21d/0x290 [ 694.728443][T12764] generic_file_splice_read+0x24f/0x330 [ 694.734011][T12764] ? splice_shrink_spd+0x60/0x60 [ 694.738967][T12764] splice_direct_to_actor+0x2aa/0x650 [ 694.744381][T12764] ? do_splice_direct+0x190/0x190 [ 694.749404][T12764] do_splice_direct+0x106/0x190 [ 694.754288][T12764] do_sendfile+0x675/0xc40 [ 694.758892][T12764] __x64_sys_sendfile64+0x102/0x140 [ 694.764181][T12764] do_syscall_64+0x44/0xa0 [ 694.768605][T12764] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 694.774487][T12764] RIP: 0033:0x7f5f65a3dae9 [ 694.778965][T12764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 694.798572][T12764] RSP: 002b:00007f5f63793188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 694.806964][T12764] RAX: ffffffffffffffda RBX: 00007f5f65b51020 RCX: 00007f5f65a3dae9 [ 694.814977][T12764] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 694.822941][T12764] RBP: 00007f5f637931d0 R08: 0000000000000000 R09: 0000000000000000 [ 694.830902][T12764] R10: 0000000100002000 R11: 0000000000000246 R12: 0000000000000002 [ 694.838954][T12764] R13: 00007ffdd8b17f4f R14: 00007f5f63793300 R15: 0000000000022000 [ 694.846915][T12764] [ 694.852324][ T23] kauditd_printk_skb: 265 callbacks suppressed [ 694.852337][ T23] audit: type=1326 audit(1635955409.846:12272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 694.882675][ T23] audit: type=1326 audit(1635955409.846:12273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 694.906735][ T23] audit: type=1326 audit(1635955409.856:12274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 694.930947][ T23] audit: type=1326 audit(1635955409.856:12275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8058360b32 code=0x7ffc0000 [ 694.954889][ T23] audit: type=1326 audit(1635955409.856:12276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 694.978981][ T23] audit: type=1326 audit(1635955409.856:12277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 695.006314][ T23] audit: type=1326 audit(1635955410.006:12278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 695.030486][ T23] audit: type=1326 audit(1635955410.006:12279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 16:03:30 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) (fail_nth: 21) [ 695.054552][ T23] audit: type=1326 audit(1635955410.006:12280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 695.078704][ T23] audit: type=1326 audit(1635955410.056:12281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12770 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 695.131660][ C0] sd 0:0:1:0: tag#1407 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 695.141598][ C0] sd 0:0:1:0: tag#1407 CDB: opcode=0xe5 (vendor) [ 695.147963][ C0] sd 0:0:1:0: tag#1407 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 695.157003][ C0] sd 0:0:1:0: tag#1407 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 695.166027][ C0] sd 0:0:1:0: tag#1407 CDB[20]: ba [ 695.172688][T12776] validate_nla: 12 callbacks suppressed [ 695.172704][T12776] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:30 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0xfffffff5, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 695.212636][ C1] sd 0:0:1:0: tag#1357 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 695.222559][ C1] sd 0:0:1:0: tag#1357 CDB: opcode=0xe5 (vendor) [ 695.228909][ C1] sd 0:0:1:0: tag#1357 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 695.237930][ C1] sd 0:0:1:0: tag#1357 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 695.246997][ C1] sd 0:0:1:0: tag#1357 CDB[20]: ba [ 695.253144][T12776] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:30 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x10}, 0x80000000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 695.391076][ C1] sd 0:0:1:0: tag#1393 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 695.400940][ C1] sd 0:0:1:0: tag#1393 CDB: opcode=0xe5 (vendor) [ 695.407300][ C1] sd 0:0:1:0: tag#1393 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 695.416327][ C1] sd 0:0:1:0: tag#1393 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 695.425357][ C1] sd 0:0:1:0: tag#1393 CDB[20]: ba 16:03:30 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xf00000000000000) 16:03:30 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) r0 = syz_io_uring_setup(0x6914, &(0x7f0000000080)={0x0, 0x200000, 0x8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00009f7000/0x4000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000040)=0x9) 16:03:30 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x6, 0x1f, 0x2, 0x7}, {0x0, 0x0, 0x8a, 0x9}, {0x200, 0xf6, 0x6a, 0x2}, {0xff, 0xff, 0x5, 0x7fff}, {0x0, 0x82, 0x80}, {0x6, 0x3, 0xe6, 0x7}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@private0, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000100)=0xe8) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x6000, 0x100, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="02000000010006000000000002000000", @ANYRES32=r0, @ANYBLOB="edffffff", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32=0xee01, @ANYBLOB="040000000000000008000100", @ANYRES32=r2, @ANYBLOB="10000400000000002000020000000000"], 0x44, 0x2) syz_io_uring_setup(0x6914, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) [ 695.453081][ C0] sd 0:0:1:0: tag#1402 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 695.462953][ C0] sd 0:0:1:0: tag#1402 CDB: opcode=0xe5 (vendor) [ 695.469284][ C0] sd 0:0:1:0: tag#1402 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 695.478334][ C0] sd 0:0:1:0: tag#1402 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 695.487377][ C0] sd 0:0:1:0: tag#1402 CDB[20]: ba [ 695.544210][ C1] sd 0:0:1:0: tag#1371 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 695.554070][ C1] sd 0:0:1:0: tag#1371 CDB: opcode=0xe5 (vendor) [ 695.560923][ C1] sd 0:0:1:0: tag#1371 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 695.569990][ C1] sd 0:0:1:0: tag#1371 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 695.579022][ C1] sd 0:0:1:0: tag#1371 CDB[20]: ba [ 695.586433][T12795] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 695.617493][T12796] FAULT_INJECTION: forcing a failure. [ 695.617493][T12796] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 695.630839][T12796] CPU: 0 PID: 12796 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 695.639250][T12796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 695.649285][T12796] Call Trace: [ 695.652543][T12796] [ 695.655516][T12796] dump_stack_lvl+0xd6/0x122 [ 695.660109][T12796] dump_stack+0x11/0x1b [ 695.664238][T12796] should_fail+0x23c/0x250 [ 695.668663][T12796] __alloc_pages+0x102/0x330 [ 695.673230][T12796] alloc_pages+0x382/0x3d0 [ 695.677700][T12796] push_pipe+0x267/0x370 [ 695.681968][T12796] iov_iter_get_pages+0x617/0x810 [ 695.687079][T12796] bio_iov_iter_get_pages+0x468/0xe40 [ 695.692445][T12796] ? bio_alloc_bioset+0x4ec/0x560 [ 695.697468][T12796] iomap_dio_bio_iter+0x749/0xc70 [ 695.702491][T12796] ? ext4_alloc_da_blocks+0x100/0x100 [ 695.707939][T12796] __iomap_dio_rw+0x8b5/0x1070 [ 695.712682][T12796] iomap_dio_rw+0x38/0x80 [ 695.716989][T12796] ext4_file_read_iter+0x21d/0x290 [ 695.722142][T12796] generic_file_splice_read+0x24f/0x330 [ 695.727672][T12796] ? splice_shrink_spd+0x60/0x60 [ 695.732593][T12796] splice_direct_to_actor+0x2aa/0x650 [ 695.737950][T12796] ? do_splice_direct+0x190/0x190 [ 695.743028][T12796] do_splice_direct+0x106/0x190 [ 695.747858][T12796] do_sendfile+0x675/0xc40 [ 695.752277][T12796] __x64_sys_sendfile64+0x102/0x140 [ 695.757539][T12796] do_syscall_64+0x44/0xa0 [ 695.762030][T12796] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 695.767958][T12796] RIP: 0033:0x7f5f65a3dae9 [ 695.772369][T12796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 695.792244][T12796] RSP: 002b:00007f5f63793188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 695.800641][T12796] RAX: ffffffffffffffda RBX: 00007f5f65b51020 RCX: 00007f5f65a3dae9 [ 695.808651][T12796] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 695.816600][T12796] RBP: 00007f5f637931d0 R08: 0000000000000000 R09: 0000000000000000 [ 695.824556][T12796] R10: 0000000100002000 R11: 0000000000000246 R12: 0000000000000002 [ 695.832579][T12796] R13: 00007ffdd8b17f4f R14: 00007f5f63793300 R15: 0000000000022000 [ 695.840554][T12796] [ 695.846466][ C1] sd 0:0:1:0: tag#1405 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 695.856318][ C1] sd 0:0:1:0: tag#1405 CDB: opcode=0xe5 (vendor) 16:03:30 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x3}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 695.862654][ C1] sd 0:0:1:0: tag#1405 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 695.871689][ C1] sd 0:0:1:0: tag#1405 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 695.880730][ C1] sd 0:0:1:0: tag#1405 CDB[20]: ba [ 695.887282][T12795] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) (fail_nth: 22) 16:03:31 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x80000000) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:31 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000000) 16:03:31 executing program 1: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0xf000000, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:31 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}, {0x1000, 0x3f, 0x5, 0xfffffff9}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7, 0x34000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7fff, 0x80, 0xcd, 0x1}]}, 0x10) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:31 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x4}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:31 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:31 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x7, 0x1) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:31 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xffffffffffffffff) 16:03:31 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x6, 0x1f, 0x2, 0x7}, {0x0, 0x0, 0x8a, 0x9}, {0x200, 0xf6, 0x6a, 0x2}, {0xff, 0xff, 0x5, 0x7fff}, {0x0, 0x82, 0x80}, {0x6, 0x3, 0xe6, 0x7}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@private0, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000100)=0xe8) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x6000, 0x100, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="02000000010006000000000002000000", @ANYRES32=r0, @ANYBLOB="edffffff", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32=0xee01, @ANYBLOB="040000000000000008000100", @ANYRES32=r2, @ANYBLOB="10000400000000002000020000000000"], 0x44, 0x2) syz_io_uring_setup(0x6914, &(0x7f0000000140)={0x0, 0x0, 0x4}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) [ 696.186142][T12823] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 696.229211][T12827] FAULT_INJECTION: forcing a failure. [ 696.229211][T12827] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 696.242547][T12827] CPU: 0 PID: 12827 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 696.250942][T12827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 696.261042][T12827] Call Trace: [ 696.264404][T12827] [ 696.267333][T12827] dump_stack_lvl+0xd6/0x122 [ 696.272002][T12827] dump_stack+0x11/0x1b [ 696.276163][T12827] should_fail+0x23c/0x250 [ 696.280617][T12827] __alloc_pages+0x102/0x330 [ 696.285218][T12827] alloc_pages+0x382/0x3d0 [ 696.289662][T12827] push_pipe+0x267/0x370 [ 696.293943][T12827] iov_iter_get_pages+0x617/0x810 [ 696.298988][T12827] bio_iov_iter_get_pages+0x468/0xe40 [ 696.304444][T12827] ? bio_alloc_bioset+0x4ec/0x560 [ 696.309501][T12827] iomap_dio_bio_iter+0x749/0xc70 [ 696.314579][T12827] ? ext4_alloc_da_blocks+0x100/0x100 [ 696.320040][T12827] __iomap_dio_rw+0x8b5/0x1070 [ 696.324797][T12827] iomap_dio_rw+0x38/0x80 [ 696.329159][T12827] ext4_file_read_iter+0x21d/0x290 [ 696.334271][T12827] generic_file_splice_read+0x24f/0x330 [ 696.339862][T12827] ? splice_shrink_spd+0x60/0x60 [ 696.344882][T12827] splice_direct_to_actor+0x2aa/0x650 [ 696.350278][T12827] ? do_splice_direct+0x190/0x190 [ 696.355316][T12827] do_splice_direct+0x106/0x190 [ 696.360323][T12827] do_sendfile+0x675/0xc40 [ 696.364759][T12827] __x64_sys_sendfile64+0x102/0x140 [ 696.369974][T12827] do_syscall_64+0x44/0xa0 [ 696.374510][T12827] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 696.380480][T12827] RIP: 0033:0x7f5f65a3dae9 [ 696.384891][T12827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 696.404483][T12827] RSP: 002b:00007f5f63793188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 696.412876][T12827] RAX: ffffffffffffffda RBX: 00007f5f65b51020 RCX: 00007f5f65a3dae9 [ 696.420841][T12827] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 16:03:31 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 696.428824][T12827] RBP: 00007f5f637931d0 R08: 0000000000000000 R09: 0000000000000000 [ 696.436778][T12827] R10: 0000000100002000 R11: 0000000000000246 R12: 0000000000000002 [ 696.444796][T12827] R13: 00007ffdd8b17f4f R14: 00007f5f63793300 R15: 0000000000022000 [ 696.452847][T12827] 16:03:31 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) (fail_nth: 23) 16:03:31 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x5, 0xf8, 0x40, 0x2}, {0x953d, 0xfb, 0x2, 0x1}, {0x1, 0x6, 0xeb, 0xfffff16a}, {0x8, 0x3, 0x4, 0x8}, {0x800, 0x0, 0x40, 0xd2b6}, {0xd956, 0xf8, 0x1f, 0x10001}, {0x8001, 0x20, 0x10, 0x7}, {0x6, 0x3f, 0x1, 0x7d10}, {0x6, 0x5, 0xc4, 0xffffff04}, {0x4, 0x0, 0x43}]}) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:31 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x7fff, 0x8, '9P2000.L'}, 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r5, &(0x7f00000000c0), 0x1c) clone(0x14000800, &(0x7f0000000080)="4d602f94bb9d90cf9278d7220ce75546f311e6d3e7fbf8c3a33874b1998323e71d19a063256f7929fde9c63f1fa36fa2829ee7f402", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="1e4796b967fa7517547d1bd3f84bfaa03490b6e21cb51fe7eaaa441986a90a1c6caf28a5eeeb4f1f32f54981fb5971864f81eca3b37ff611ae7965f0160ce6af2e08f088172b9a6ee4478085257b0a8b7607ad8442ea097360fcf859e8d3fc5702f5a5ad4b7d3187dcd41e637f2dd628181465ea6f9850285a2538") r6 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r6, &(0x7f00000000c0), 0x1c) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000040)=[r1, r5, r1, r6, r1, r0, r1, r0], 0x8) 16:03:31 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x408180, 0x0) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000040), &(0x7f00000000c0)=0x8) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:31 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:31 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x1a}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:31 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x7fff, 0x8, '9P2000.L'}, 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r5, &(0x7f00000000c0), 0x1c) clone(0x14000800, &(0x7f0000000080)="4d602f94bb9d90cf9278d7220ce75546f311e6d3e7fbf8c3a33874b1998323e71d19a063256f7929fde9c63f1fa36fa2829ee7f402", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="1e4796b967fa7517547d1bd3f84bfaa03490b6e21cb51fe7eaaa441986a90a1c6caf28a5eeeb4f1f32f54981fb5971864f81eca3b37ff611ae7965f0160ce6af2e08f088172b9a6ee4478085257b0a8b7607ad8442ea097360fcf859e8d3fc5702f5a5ad4b7d3187dcd41e637f2dd628181465ea6f9850285a2538") r6 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r6, &(0x7f00000000c0), 0x1c) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000040)=[r1, r5, r1, r6, r1, r0, r1, r0], 0x8) 16:03:31 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000004000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 696.679375][T12855] 9pnet: Insufficient options for proto=fd 16:03:31 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 696.773940][T12865] FAULT_INJECTION: forcing a failure. [ 696.773940][T12865] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 696.787459][T12865] CPU: 1 PID: 12865 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 696.796090][T12865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 696.806128][T12865] Call Trace: [ 696.809387][T12865] [ 696.812306][T12865] dump_stack_lvl+0xd6/0x122 [ 696.816959][T12865] dump_stack+0x11/0x1b [ 696.821093][T12865] should_fail+0x23c/0x250 [ 696.825569][T12865] __alloc_pages+0x102/0x330 [ 696.830155][T12865] alloc_pages+0x382/0x3d0 [ 696.835008][T12865] push_pipe+0x267/0x370 [ 696.839233][T12865] iov_iter_get_pages+0x617/0x810 [ 696.844243][T12865] bio_iov_iter_get_pages+0x468/0xe40 [ 696.849732][T12865] ? bio_alloc_bioset+0x4ec/0x560 [ 696.854794][T12865] iomap_dio_bio_iter+0x749/0xc70 [ 696.859848][T12865] ? ext4_alloc_da_blocks+0x100/0x100 [ 696.865266][T12865] __iomap_dio_rw+0x8b5/0x1070 [ 696.870100][T12865] iomap_dio_rw+0x38/0x80 [ 696.874443][T12865] ext4_file_read_iter+0x21d/0x290 [ 696.879594][T12865] generic_file_splice_read+0x24f/0x330 [ 696.885235][T12865] ? splice_shrink_spd+0x60/0x60 [ 696.890196][T12865] splice_direct_to_actor+0x2aa/0x650 [ 696.895616][T12865] ? do_splice_direct+0x190/0x190 [ 696.900667][T12865] do_splice_direct+0x106/0x190 [ 696.905690][T12865] do_sendfile+0x675/0xc40 [ 696.910116][T12865] __x64_sys_sendfile64+0x102/0x140 [ 696.915295][T12865] do_syscall_64+0x44/0xa0 [ 696.919728][T12865] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 696.925628][T12865] RIP: 0033:0x7f5f65a3dae9 [ 696.930027][T12865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 696.949721][T12865] RSP: 002b:00007f5f63793188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 696.958117][T12865] RAX: ffffffffffffffda RBX: 00007f5f65b51020 RCX: 00007f5f65a3dae9 [ 696.966100][T12865] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 696.974064][T12865] RBP: 00007f5f637931d0 R08: 0000000000000000 R09: 0000000000000000 [ 696.982054][T12865] R10: 0000000100002000 R11: 0000000000000246 R12: 0000000000000002 [ 696.990015][T12865] R13: 00007ffdd8b17f4f R14: 00007f5f63793300 R15: 0000000000022000 [ 696.997983][T12865] 16:03:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) (fail_nth: 24) 16:03:32 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x7fff, 0x8, '9P2000.L'}, 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r5, &(0x7f00000000c0), 0x1c) clone(0x14000800, &(0x7f0000000080)="4d602f94bb9d90cf9278d7220ce75546f311e6d3e7fbf8c3a33874b1998323e71d19a063256f7929fde9c63f1fa36fa2829ee7f402", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="1e4796b967fa7517547d1bd3f84bfaa03490b6e21cb51fe7eaaa441986a90a1c6caf28a5eeeb4f1f32f54981fb5971864f81eca3b37ff611ae7965f0160ce6af2e08f088172b9a6ee4478085257b0a8b7607ad8442ea097360fcf859e8d3fc5702f5a5ad4b7d3187dcd41e637f2dd628181465ea6f9850285a2538") r6 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r6, &(0x7f00000000c0), 0x1c) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000040)=[r1, r5, r1, r6, r1, r0, r1, r0], 0x8) [ 697.064552][T12867] 9pnet: Insufficient options for proto=fd 16:03:32 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:32 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0xc) stat(&(0x7f0000000a00)='./bus\x00', &(0x7f0000000a40)) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x87, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r3, {r1}}, './bus\x00'}) syz_io_uring_setup(0x87, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000ee4000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_setup(0x16ea, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee6000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r10, 0x0, 0x0}, 0x0) r12 = perf_event_open$cgroup(&(0x7f0000000400)={0x2, 0x80, 0x80, 0x1f, 0x3f, 0x81, 0x0, 0x7f, 0x80000, 0x8f69dba775d619f4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x101, 0x0, @perf_config_ext={0x7, 0x1000}, 0x400, 0x3, 0x1000, 0x2, 0x9, 0x5cd2, 0x6, 0x0, 0xffff}, r0, 0x7, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r5, &(0x7f0000000180)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x4004, @fd=r12, 0xfffffffffffff694, 0x69b0, 0x40, 0x18, 0x1}, 0x0) syz_io_uring_setup(0x16ea, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x240}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000ee6000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r13, r5, &(0x7f00000009c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r10, 0x0, &(0x7f0000000980)={&(0x7f0000000480)=@sco, 0x80, &(0x7f0000000800)=[{&(0x7f0000000500)="95297cbfa5504ce3702c46488d2116c6eb6cf89f3935bfb04fd1f230d70eb964640c16136ada3621806a75cd2eaefbc268095b26836c5f96d2f59b703afee4604ca70591fdc1ae71d45522b0b46b7587e2c0c4246bb1649c496b24466bb9ebefc53ceae54b42eb7b9616a54fc202306805ff84abc8f479f9537298ff310d2dc5c6c9275890da22c4be97e28901c8711bdc79da3a5958cef618e41459f569d820959d30699566ce6bac69f53d318ba7f79d28", 0xb2}, {&(0x7f00000005c0)="a21fdd0556b29965c9cbb6c4205f544cef4ce13e70e4eaf48b928c4ee93913dd02b4d5c1ebf56990553ace405cf8285bba09483bc757bc3d9e4722067bef37f8f99ebdba2d14a9ee01e2871093fab8d84d64cc1f2c51e25015fdc4efafa8b189e04c08a89836c4ee5d762eac779525e49d2ecbf9643dfc60ce70107e77b37ae94479f8d33f5ba0a858bf01f83c809048e6073433ca44a9b2932c183445603976725d52cde73421cb9073d12ad44e2a8929025c5e", 0xb4}, {&(0x7f0000000680)="b9cbdc5e5763d2c458cff259ffe6622965a6337859bd87797e0e14e79f28eeef85ca3a180a2ef3953fb35a2a0ac075131f6a3ff1609f99bf555677fbc4fb39f262ecf49f60e08213b185e9af4a0e970e11ba7a66811896cf339258670a26beb82c2c027e900d6351c3024100848839cba74a21931f030284311dc519624142d21800b056d7d9da", 0x87}, {&(0x7f0000000740)="53d19784087d7d620ded626c29c69f2d3a5ffb462c37593660867dacac38fc12538a6c71769b057f291ff5ea9f235b69b4ccbfb0f7e1c8fc96c3c397e1ef84b55b431301d2a94d0cde344dcf41799ed7152cb72f611863df335cd4e3f3dcf80ac74040d9415d714b45c142b1040689c255cd7e142fc143e2565f3e2374875f49d9512e5035a0967330416a6d763d9e8ff172c475b390d8", 0x97}], 0x4, &(0x7f0000000b00)=[{0xc0, 0x113, 0x7ff, "ee6a2a86bf0fc0f057ed242f7f2d71297e94f222b224c30571baf2c066e841a5ab4edbb9dc4bc6cd6b5948d50896fbf34783138478915c9f14d270084eced906ea35219ee22f0035b72dbcb24eb4e8830a744f720b2e03066e54c481e2e9f5d747c61c53968f4ae6263457daf104b762368998daf03f58aade3ac8e55a3f1e4a6ab35d486a9dc8552f0a11bac493748c5025dac6ffb5fd0fb2e9ae35d41dd889ccf12d509b56ddec90c4"}, {0x58, 0x10e, 0x4, "22806606c35fc3ad8cabdaa326efc659f1c848b865f32be6c7ff9767113a941965fd0dfa3d5cdc0014ddfe779b383cf02045f307436ff64a03ff3a8cc13a092559"}, {0x66, 0x8e, 0x2, "fb515b6a27970b77082ffe7d25103f75b7b51a883602cad720bbc03caa8dfe970b6abd1048942ee5b03d063a733d95d05accd9501a466743efcf9bcb2a5cd7e66c91bb92736f0f3471ea628ee7d5cbfe66b5d81e1eba1103d7d34859258e14d3b66b4d966f0684afb81ee760811888c4b21f155be9976361d803452cf1ee12d8b221e44cbc1a825fcc20483662b43ff216"}], 0x1c0}, 0x0, 0x10, 0x1}, 0x81) syz_io_uring_submit(r4, r14, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x80803, 0x87) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x4004, @fd, 0x4, 0x0, 0x0, 0x1d}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 697.257652][T12884] 9pnet: Insufficient options for proto=fd [ 697.287783][T12887] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 697.313994][T12887] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 697.338780][T12891] FAULT_INJECTION: forcing a failure. [ 697.338780][T12891] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 697.352034][T12891] CPU: 1 PID: 12891 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 697.360429][T12891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 697.370586][T12891] Call Trace: [ 697.373848][T12891] [ 697.376756][T12891] dump_stack_lvl+0xd6/0x122 [ 697.381420][T12891] dump_stack+0x11/0x1b [ 697.385594][T12891] should_fail+0x23c/0x250 [ 697.390077][T12891] __alloc_pages+0x102/0x330 [ 697.394645][T12891] alloc_pages+0x382/0x3d0 [ 697.399041][T12891] push_pipe+0x267/0x370 [ 697.403306][T12891] iov_iter_get_pages+0x617/0x810 [ 697.408489][T12891] bio_iov_iter_get_pages+0x468/0xe40 [ 697.413863][T12891] ? bio_alloc_bioset+0x4ec/0x560 [ 697.418892][T12891] iomap_dio_bio_iter+0x749/0xc70 [ 697.423927][T12891] ? ext4_alloc_da_blocks+0x100/0x100 [ 697.429279][T12891] __iomap_dio_rw+0x8b5/0x1070 [ 697.434027][T12891] iomap_dio_rw+0x38/0x80 [ 697.438414][T12891] ext4_file_read_iter+0x21d/0x290 [ 697.443514][T12891] generic_file_splice_read+0x24f/0x330 [ 697.449061][T12891] ? splice_shrink_spd+0x60/0x60 [ 697.453991][T12891] splice_direct_to_actor+0x2aa/0x650 [ 697.459341][T12891] ? do_splice_direct+0x190/0x190 [ 697.464342][T12891] do_splice_direct+0x106/0x190 [ 697.469175][T12891] do_sendfile+0x675/0xc40 [ 697.473655][T12891] __x64_sys_sendfile64+0x102/0x140 [ 697.478844][T12891] do_syscall_64+0x44/0xa0 [ 697.483243][T12891] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 697.489118][T12891] RIP: 0033:0x7f5f65a3dae9 [ 697.493527][T12891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 697.513305][T12891] RSP: 002b:00007f5f63793188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 697.521712][T12891] RAX: ffffffffffffffda RBX: 00007f5f65b51020 RCX: 00007f5f65a3dae9 [ 697.529663][T12891] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 697.537623][T12891] RBP: 00007f5f637931d0 R08: 0000000000000000 R09: 0000000000000000 [ 697.545587][T12891] R10: 0000000100002000 R11: 0000000000000246 R12: 0000000000000002 [ 697.553549][T12891] R13: 00007ffdd8b17f4f R14: 00007f5f63793300 R15: 0000000000022000 [ 697.561520][T12891] 16:03:32 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'root'}, 0x22}], 0x22}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x7fff, 0x8, '9P2000.L'}, 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r5, &(0x7f00000000c0), 0x1c) clone(0x14000800, &(0x7f0000000080)="4d602f94bb9d90cf9278d7220ce75546f311e6d3e7fbf8c3a33874b1998323e71d19a063256f7929fde9c63f1fa36fa2829ee7f402", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="1e4796b967fa7517547d1bd3f84bfaa03490b6e21cb51fe7eaaa441986a90a1c6caf28a5eeeb4f1f32f54981fb5971864f81eca3b37ff611ae7965f0160ce6af2e08f088172b9a6ee4478085257b0a8b7607ad8442ea097360fcf859e8d3fc5702f5a5ad4b7d3187dcd41e637f2dd628181465ea6f9850285a2538") r6 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r6, &(0x7f00000000c0), 0x1c) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000040)=[r1, r5, r1, r6, r1, r0, r1, r0], 0x8) 16:03:32 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 16:03:32 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:32 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xc66a, 0x2) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:32 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x8, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}, {0x8, 0xf7, 0x2, 0x6}, {0x6, 0x9, 0x1, 0x3}, {0x973, 0x12, 0x80, 0x21a}, {0x80, 0x7, 0x9, 0x8}, {0x400, 0x1, 0x0, 0x10000}, {0x2, 0x80, 0x8, 0x6}, {0x8000, 0xa8, 0xf9, 0xcf9}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) r0 = syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x3, 0xc7, 0xff, 0x4}]}) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000001c0)={0x4503cfc8, 0xea, 0x2, 0x8000, 0x8, [{0xfa0, 0x7f, 0x20, '\x00', 0x900}, {0xfffffffffffffffb, 0x800, 0x7649, '\x00', 0xa}, {0x7, 0x6, 0x101, '\x00', 0x2000}, {0x7, 0x3, 0xfffffffffffffffe, '\x00', 0x100}, {0x7ff, 0x4, 0x81, '\x00', 0x3de7b02c71f58197}, {0x100000001, 0x3, 0x6, '\x00', 0x4}, {0x4, 0x1000, 0x8, '\x00', 0x1000}, {0x59, 0x80, 0x0, '\x00', 0xa81}]}) 16:03:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) (fail_nth: 25) 16:03:32 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 16:03:32 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) [ 697.766189][T12900] 9pnet: Insufficient options for proto=fd [ 697.788089][T12902] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:32 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x3}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:32 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) write(0xffffffffffffffff, &(0x7f0000000000)="69fe7383725238f5", 0x8) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000200)=0x8000001) read(r0, &(0x7f0000000000)=""/103, 0x57) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580)=@rc={0x1f, @none, 0xcf}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000140)="41afee76aca1d2f4f206bbc3a8707afe9d0aaed642f18f1eeabe628cf0f74af063cf0e5087b88b1213f081038a7f408327f4455f", 0x34}, {&(0x7f00000007c0)="21407801227d6027ef3a75a1dcd4f11e89a0a263158c8897ec5eb4db6495641c8b32f2e4908d54fd7c42dc55138fa84041954c2225e43d05797ed89c64e6064b51af944d5c27f30f9b2bf2e103e677286bf911e690aaeab6a4af011ce402662f6dd47e2e6cd8ed15ba9cbdd6828caaaf07932aaf2c8dd7fb52619db243b25967a550c5ab1bbf6a8e8957320dd5b57433644cada6698c14f9f7cef23ec84f7bace1f5773dd41ef36358bb221e542737286f8c54565d049ca7d7fe91a92d1c30be2e4550a64332cf", 0xc7}, {&(0x7f00000008c0)="15653befbb2c0607914f07e62c0eeb859559a6fbc44b5f1bc51f1e24733bf6dc309c2c1a4cf857e67d38dbbddf0e31f7b1c2f23db3267345c096ce", 0x3b}, {&(0x7f0000000900)="12155de81e6b", 0x6}, {&(0x7f0000000940)="1489ef4e1266cdca7c21233fde474f2d4639e2c9a953820188a3165a161cfa5bd152762750c1333f96", 0x29}], 0x5, &(0x7f0000000a00)=ANY=[@ANYBLOB="010000000000800000002488943e06000000"], 0x20}, 0x4000) r1 = syz_io_uring_setup(0x6914, &(0x7f0000000500), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@empty, 0x4e23, 0x0, 0xfffd, 0x5, 0xa, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0xfffffffffffffffb, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0xff}, 0x0, @in6=@mcast2}}, 0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)=ANY=[@ANYBLOB="04010000", @ANYRES16=0x0, @ANYBLOB="20002dbd7000fcdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="e800028009fd0100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003f9ffffffffffffff0f00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000385927c4c000600000004d218173c5d31567821e21eff00040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004002604000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000560ad0003000000080004004e0b0000"], 0x104}, 0x1, 0x0, 0x0, 0x4000040}, 0x24044801) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x14, 0xf7, 0x6, 0x1, 0x0, 0x100000001, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xf5a, 0x0, @perf_config_ext={0xc8, 0x45ea7344}, 0x0, 0x8000, 0x0, 0x6, 0x20, 0x10000, 0x3b7e, 0x0, 0x9, 0x0, 0xffffffffffffff7f}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000040)) syz_io_uring_setup(0x21c5, &(0x7f0000000380)={0x0, 0x3125, 0x2, 0x2, 0x6}, &(0x7f0000f0b000/0x4000)=nil, &(0x7f00007ef000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000400)) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000480)) r3 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r3, &(0x7f00000000c0), 0x1c) setsockopt$inet6_int(r3, 0x29, 0x13, &(0x7f0000000440)=0x1f, 0x4) [ 697.813897][T12902] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:32 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x87, &(0x7f0000000140), &(0x7f0000ee4000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0x15c9, &(0x7f0000000300)={0x0, 0xd5e6, 0x1, 0x0, 0x1a5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r6, r5, &(0x7f0000000580)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x4007, @fd_index=0x7, 0x8001, &(0x7f0000000540)=[{&(0x7f0000000400)=""/118, 0x76}, {&(0x7f0000000480)=""/68, 0x44}, {&(0x7f0000000500)}], 0x3, 0x8}, 0x7fff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r8 = syz_io_uring_setup(0x16ea, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee6000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ee6000/0x1000)=nil, 0x1000, 0x1000005, 0x10010, r8, 0x0) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r0, 0x10000000) r12 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r12, &(0x7f00000000c0), 0x1c) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000500)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r12, 0x7, 0x0, 0x81, 0x0, 0x1, {0x0, r13}}, 0x93) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:32 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 697.928203][T12915] FAULT_INJECTION: forcing a failure. [ 697.928203][T12915] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 697.941480][T12915] CPU: 0 PID: 12915 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 697.949941][T12915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 697.959987][T12915] Call Trace: [ 697.963322][T12915] [ 697.966264][T12915] dump_stack_lvl+0xd6/0x122 [ 697.970920][T12915] dump_stack+0x11/0x1b [ 697.975106][T12915] should_fail+0x23c/0x250 [ 697.977522][T12919] FAULT_INJECTION: forcing a failure. [ 697.977522][T12919] name failslab, interval 1, probability 0, space 0, times 0 [ 697.979524][T12915] __alloc_pages+0x102/0x330 [ 697.996704][T12915] alloc_pages+0x382/0x3d0 [ 698.001141][T12915] push_pipe+0x267/0x370 [ 698.005376][T12915] iov_iter_get_pages+0x617/0x810 [ 698.010392][T12915] bio_iov_iter_get_pages+0x468/0xe40 [ 698.015839][T12915] ? bio_alloc_bioset+0x4ec/0x560 [ 698.020915][T12915] iomap_dio_bio_iter+0x749/0xc70 [ 698.025927][T12915] ? ext4_alloc_da_blocks+0x100/0x100 [ 698.031293][T12915] __iomap_dio_rw+0x8b5/0x1070 [ 698.036049][T12915] iomap_dio_rw+0x38/0x80 [ 698.040414][T12915] ext4_file_read_iter+0x21d/0x290 [ 698.045558][T12915] generic_file_splice_read+0x24f/0x330 [ 698.051185][T12915] ? splice_shrink_spd+0x60/0x60 [ 698.056208][T12915] splice_direct_to_actor+0x2aa/0x650 [ 698.061641][T12915] ? do_splice_direct+0x190/0x190 [ 698.066664][T12915] do_splice_direct+0x106/0x190 [ 698.071572][T12915] do_sendfile+0x675/0xc40 [ 698.075979][T12915] __x64_sys_sendfile64+0x102/0x140 [ 698.081161][T12915] do_syscall_64+0x44/0xa0 [ 698.085567][T12915] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 698.091514][T12915] RIP: 0033:0x7f5f65a3dae9 [ 698.095938][T12915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 698.115541][T12915] RSP: 002b:00007f5f63793188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 698.124036][T12915] RAX: ffffffffffffffda RBX: 00007f5f65b51020 RCX: 00007f5f65a3dae9 [ 698.132056][T12915] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 698.140054][T12915] RBP: 00007f5f637931d0 R08: 0000000000000000 R09: 0000000000000000 [ 698.148008][T12915] R10: 0000000100002000 R11: 0000000000000246 R12: 0000000000000002 [ 698.156044][T12915] R13: 00007ffdd8b17f4f R14: 00007f5f63793300 R15: 0000000000022000 [ 698.164075][T12915] [ 698.167669][T12919] CPU: 1 PID: 12919 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 698.176086][T12919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 698.186354][T12919] Call Trace: [ 698.189677][T12919] [ 698.192631][T12919] dump_stack_lvl+0xd6/0x122 [ 698.197306][T12919] dump_stack+0x11/0x1b [ 698.201502][T12919] should_fail+0x23c/0x250 [ 698.205952][T12919] __should_failslab+0x81/0x90 [ 698.210705][T12919] should_failslab+0x5/0x20 [ 698.215262][T12919] kmem_cache_alloc_bulk+0x3e/0x390 [ 698.220442][T12919] __io_alloc_req_refill+0x1b1/0x32d [ 698.225718][T12919] io_submit_sqes+0x297/0x670 [ 698.230491][T12919] ? __rcu_read_unlock+0x5c/0x290 [ 698.235509][T12919] __se_sys_io_uring_enter+0x212/0xb00 [ 698.240960][T12919] ? __fget_light+0x219/0x260 [ 698.245673][T12919] __x64_sys_io_uring_enter+0x74/0x80 [ 698.251029][T12919] do_syscall_64+0x44/0xa0 [ 698.255447][T12919] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 698.261408][T12919] RIP: 0033:0x7ff6befacae9 [ 698.265854][T12919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 698.285498][T12919] RSP: 002b:00007ff6bcd23188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 698.293977][T12919] RAX: ffffffffffffffda RBX: 00007ff6bf0bff60 RCX: 00007ff6befacae9 [ 698.302058][T12919] RDX: 0000000000000000 RSI: 00000000000002ff RDI: 0000000000000006 [ 698.310045][T12919] RBP: 00007ff6bcd231d0 R08: 0000000000000000 R09: 0000000000000000 [ 698.317997][T12919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 16:03:33 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) [ 698.325986][T12919] R13: 00007ffd42af79ef R14: 00007ff6bcd23300 R15: 0000000000022000 [ 698.334123][T12919] 16:03:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) (fail_nth: 26) 16:03:33 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x4}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 698.383152][T12924] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:33 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x7fff, 0x8, '9P2000.L'}, 0x15) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x48, r7, 0x0, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2b}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffff8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x19}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:33 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) [ 698.591123][T12937] FAULT_INJECTION: forcing a failure. [ 698.591123][T12937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.604265][T12937] CPU: 1 PID: 12937 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 698.612750][T12937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 698.622787][T12937] Call Trace: [ 698.626058][T12937] [ 698.628980][T12937] dump_stack_lvl+0xd6/0x122 [ 698.633634][T12937] dump_stack+0x11/0x1b [ 698.637768][T12937] should_fail+0x23c/0x250 [ 698.642247][T12937] should_fail_usercopy+0x16/0x20 [ 698.647279][T12937] _copy_to_user+0x1c/0x90 [ 698.651764][T12937] simple_read_from_buffer+0xab/0x120 [ 698.657139][T12937] proc_fail_nth_read+0x10d/0x150 [ 698.662304][T12937] ? proc_fault_inject_write+0x230/0x230 [ 698.667934][T12937] vfs_read+0x1e6/0x750 [ 698.672081][T12937] ? __fget_light+0x219/0x260 [ 698.676838][T12937] ksys_read+0xd9/0x190 [ 698.680987][T12937] __x64_sys_read+0x3e/0x50 [ 698.685479][T12937] do_syscall_64+0x44/0xa0 [ 698.689902][T12937] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 698.695809][T12937] RIP: 0033:0x7ff6bef5f69c [ 698.700223][T12937] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 698.719944][T12937] RSP: 002b:00007ff6bcd23170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 698.728411][T12937] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007ff6bef5f69c 16:03:33 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100002000) 16:03:33 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x5}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 698.736615][T12937] RDX: 000000000000000f RSI: 00007ff6bcd231e0 RDI: 0000000000000007 [ 698.744631][T12937] RBP: 00007ff6bcd231d0 R08: 0000000000000000 R09: 0000000000000000 [ 698.752661][T12937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.760631][T12937] R13: 00007ffd42af79ef R14: 00007ff6bcd23300 R15: 0000000000022000 [ 698.768597][T12937] 16:03:33 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000100)={{}, {@val, @actul_num={@void, 0x9, 0x50}}}) syz_io_uring_setup(0x6914, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1da}, &(0x7f0000e88000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1580000065ffffff7f0000080039503230305f2e4c"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) mmap$IORING_OFF_SQES(&(0x7f00005d3000/0x2000)=nil, 0x2000, 0x2000002, 0x8013, r2, 0x10000000) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:33 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(r0, &(0x7f0000004640)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000300)=""/217, 0xd9}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000180)=""/150, 0x96}, {&(0x7f0000000400)=""/210, 0xd2}], 0x4, &(0x7f0000000540)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000600)=""/216, 0xd8}], 0x1, &(0x7f0000000740)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000002a80)=[{&(0x7f0000000800)=""/242, 0xf2}, {&(0x7f0000000900)=""/173, 0xad}, {&(0x7f00000009c0)=""/20, 0x14}, {&(0x7f0000000a00)=""/19, 0x13}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000001a40)=""/12, 0xc}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x7, &(0x7f0000002b00)=[@rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000002b80)=@abs, 0x6e, &(0x7f0000002c40)=[{&(0x7f0000002c00)=""/45, 0x2d}], 0x1, &(0x7f0000002c80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f0000002d80), 0x6e, &(0x7f0000002f00)=[{&(0x7f0000002e00)=""/161, 0xa1}, {&(0x7f0000002ec0)=""/29, 0x1d}], 0x2, &(0x7f0000002f40)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000003080)=@abs, 0x6e, &(0x7f0000004580)=[{&(0x7f0000003100)=""/244, 0xf4}, {&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000004200)=""/146, 0x92}, {&(0x7f00000042c0)=""/195, 0xc3}, {&(0x7f00000043c0)=""/203, 0xcb}, {&(0x7f00000044c0)=""/149, 0x95}], 0x6, &(0x7f0000004600)=[@cred={{0x1c}}], 0x20}}], 0x6, 0x2020, &(0x7f00000047c0)={0x0, 0x989680}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r4, 0x7, r1, &(0x7f0000004800)={r0, r1, 0x7fff}) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 699.006881][T12954] FAULT_INJECTION: forcing a failure. [ 699.006881][T12954] name failslab, interval 1, probability 0, space 0, times 0 [ 699.019524][T12954] CPU: 0 PID: 12954 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 699.027946][T12954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.037993][T12954] Call Trace: [ 699.041260][T12954] [ 699.044174][T12954] dump_stack_lvl+0xd6/0x122 [ 699.048770][T12954] dump_stack+0x11/0x1b [ 699.052908][T12954] should_fail+0x23c/0x250 [ 699.057329][T12954] __should_failslab+0x81/0x90 [ 699.062160][T12954] should_failslab+0x5/0x20 [ 699.066655][T12954] kmem_cache_alloc_bulk+0x3e/0x390 [ 699.071842][T12954] __io_alloc_req_refill+0x1b1/0x32d [ 699.077119][T12954] io_submit_sqes+0x297/0x670 [ 699.081783][T12954] ? __rcu_read_unlock+0x5c/0x290 [ 699.086814][T12954] __se_sys_io_uring_enter+0x212/0xb00 [ 699.092268][T12954] ? __fget_light+0x219/0x260 [ 699.097018][T12954] __x64_sys_io_uring_enter+0x74/0x80 [ 699.102411][T12954] do_syscall_64+0x44/0xa0 [ 699.106848][T12954] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 699.112732][T12954] RIP: 0033:0x7faae3e39ae9 [ 699.117129][T12954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 699.136734][T12954] RSP: 002b:00007faae1bb0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 699.145131][T12954] RAX: ffffffffffffffda RBX: 00007faae3f4cf60 RCX: 00007faae3e39ae9 16:03:34 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) [ 699.153092][T12954] RDX: 0000000000000000 RSI: 00000000000002ff RDI: 0000000000000006 [ 699.161046][T12954] RBP: 00007faae1bb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 699.169025][T12954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.176992][T12954] R13: 00007ffd6db36e4f R14: 00007faae1bb0300 R15: 0000000000022000 [ 699.184949][T12954] [ 699.193941][ C0] scsi_io_completion_action: 12 callbacks suppressed 16:03:34 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x4000, 0x0, 0x0, 0x0, 0x0) 16:03:34 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x4000, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000280)={0x7, &(0x7f0000000100)=[{0x996, 0x3, 0x7f, 0x5}, {0x7ff, 0x9, 0x3, 0x8}, {0x40, 0x4, 0x3f, 0x1000}, {0x7, 0x0, 0x3, 0x6}, {0x0, 0xc1, 0x8, 0x401}, {0xfffb, 0x0, 0x1}, {0x51d, 0x40, 0x7f, 0x4981}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000001c0)={0x0, &(0x7f0000000100)}) r1 = syz_io_uring_setup(0x6914, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000906000/0x1000)=nil, &(0x7f000079e000/0x3000)=nil, 0x0, 0x0) r2 = io_uring_setup(0x788f, &(0x7f0000000200)={0x0, 0x66a1, 0xa8ca7512f78567d8, 0x2, 0x269, 0x0, r1}) mmap$IORING_OFF_SQES(&(0x7f000079d000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x10000000) prctl$PR_SET_SECCOMP(0x16, 0x839fa4cf0ba90a6, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x4, 0x6, 0x4, 0xffffffff}, {0x3, 0x20, 0xde, 0x8}, {0x9d, 0x20, 0x20, 0x80000001}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) [ 699.193981][ C0] sd 0:0:1:0: tag#1356 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 699.210540][ C0] sd 0:0:1:0: tag#1356 CDB: opcode=0xe5 (vendor) [ 699.216896][ C0] sd 0:0:1:0: tag#1356 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 699.225944][ C0] sd 0:0:1:0: tag#1356 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 699.235004][ C0] sd 0:0:1:0: tag#1356 CDB[20]: ba 16:03:34 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r1 = syz_io_uring_setup(0x2003ede, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x86000) write$P9_RVERSION(r5, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x7fff, 0x8, '9P2000.L'}, 0x15) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r6, 0x0, &(0x7f0000000440)='./bus\x00', 0x56, 0x20a80, 0x23456}, 0x3377) ioctl$FIONCLEX(r0, 0x5450) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="00fe39264b5837c206fbf635f63bfdf9b92a"]) write$P9_RREADLINK(r7, &(0x7f0000000000)={0xe, 0x17, 0x1, {0x5, './bus'}}, 0xe) r8 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r8, &(0x7f00000000c0), 0x1c) accept(r8, &(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000380)=0x80) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:34 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 699.368910][T12972] FAULT_INJECTION: forcing a failure. [ 699.368910][T12972] name failslab, interval 1, probability 0, space 0, times 0 [ 699.381589][T12972] CPU: 1 PID: 12972 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 699.390202][T12972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.400240][T12972] Call Trace: [ 699.403502][T12972] [ 699.406412][T12972] dump_stack_lvl+0xd6/0x122 [ 699.410981][T12972] dump_stack+0x11/0x1b [ 699.415114][T12972] should_fail+0x23c/0x250 [ 699.419598][T12972] ? io_alloc_async_data+0x50/0xd0 [ 699.424694][T12972] __should_failslab+0x81/0x90 [ 699.429460][T12972] should_failslab+0x5/0x20 [ 699.433960][T12972] __kmalloc+0x6f/0x370 [ 699.438118][T12972] io_alloc_async_data+0x50/0xd0 [ 699.443042][T12972] io_issue_sqe+0x52f1/0x5680 [ 699.447744][T12972] ? debug_smp_processor_id+0x18/0x20 [ 699.453126][T12972] ? kick_process+0x41/0x60 [ 699.457619][T12972] ? task_work_add+0x11e/0x140 [ 699.462407][T12972] ? io_req_task_work_add+0x18d/0x2a0 [ 699.467886][T12972] ? io_submit_flush_completions+0xa5/0x2c0 [ 699.473772][T12972] ? io_submit_sqes+0x32a/0x670 [ 699.478616][T12972] ? io_submit_sqes+0x394/0x670 [ 699.483499][T12972] __io_queue_sqe+0x20/0x450 [ 699.488130][T12972] ? io_req_task_submit+0x83/0xd0 [ 699.493265][T12972] io_req_task_submit+0x8b/0xd0 [ 699.498179][T12972] tctx_task_work+0x25a/0x410 [ 699.502859][T12972] task_work_run+0x8e/0x110 [ 699.507368][T12972] exit_to_user_mode_prepare+0x102/0x190 [ 699.513070][T12972] syscall_exit_to_user_mode+0x20/0x40 [ 699.518515][T12972] do_syscall_64+0x50/0xa0 [ 699.522930][T12972] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 699.528833][T12972] RIP: 0033:0x7faae3e39ae9 [ 699.533223][T12972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 699.552959][T12972] RSP: 002b:00007faae1bb0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 699.561413][T12972] RAX: 0000000000000001 RBX: 00007faae3f4cf60 RCX: 00007faae3e39ae9 16:03:34 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 16:03:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x7ffff000) [ 699.569367][T12972] RDX: 0000000000000000 RSI: 00000000000002ff RDI: 0000000000000006 [ 699.577330][T12972] RBP: 00007faae1bb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 699.585277][T12972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.593223][T12972] R13: 00007ffd6db36e4f R14: 00007faae1bb0300 R15: 0000000000022000 [ 699.601172][T12972] 16:03:34 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x1, 0x1, 0x0, 0x3}, {0x57a, 0x3, 0x7, 0x8f}, {0x62f, 0x3f, 0x9}, {0x1, 0x1, 0x1, 0x261d}]}) r0 = syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) epoll_pwait(r1, &(0x7f0000000100)=[{}, {}, {}, {}], 0x4, 0x6, &(0x7f00000001c0)={[0x1]}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:34 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:34 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) fcntl$notify(r0, 0x402, 0x1e) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 699.715419][ C0] sd 0:0:1:0: tag#1402 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 699.725231][ C0] sd 0:0:1:0: tag#1402 CDB: opcode=0xe5 (vendor) [ 699.731578][ C0] sd 0:0:1:0: tag#1402 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 699.740599][ C0] sd 0:0:1:0: tag#1402 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 699.749674][ C0] sd 0:0:1:0: tag#1402 CDB[20]: ba 16:03:34 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x7}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 699.772526][ C0] sd 0:0:1:0: tag#1352 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 699.782351][ C0] sd 0:0:1:0: tag#1352 CDB: opcode=0xe5 (vendor) [ 699.788676][ C0] sd 0:0:1:0: tag#1352 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 699.797750][ C0] sd 0:0:1:0: tag#1352 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 699.806809][ C0] sd 0:0:1:0: tag#1352 CDB[20]: ba [ 699.867552][T12990] FAULT_INJECTION: forcing a failure. [ 699.867552][T12990] name failslab, interval 1, probability 0, space 0, times 0 [ 699.880168][T12990] CPU: 0 PID: 12990 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 699.888617][T12990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.898671][T12990] Call Trace: [ 699.901948][T12990] [ 699.904928][T12990] dump_stack_lvl+0xd6/0x122 [ 699.909521][T12990] dump_stack+0x11/0x1b [ 699.913682][T12990] should_fail+0x23c/0x250 [ 699.918163][T12990] ? io_arm_poll_handler+0x197/0x3d0 [ 699.923441][T12990] __should_failslab+0x81/0x90 [ 699.928284][T12990] should_failslab+0x5/0x20 [ 699.932789][T12990] kmem_cache_alloc_trace+0x52/0x350 [ 699.938109][T12990] io_arm_poll_handler+0x197/0x3d0 [ 699.943260][T12990] __io_queue_sqe+0x16b/0x450 [ 699.947991][T12990] ? io_req_task_submit+0x83/0xd0 [ 699.953058][T12990] io_req_task_submit+0x8b/0xd0 [ 699.958033][T12990] tctx_task_work+0x25a/0x410 [ 699.962719][T12990] task_work_run+0x8e/0x110 [ 699.967305][T12990] exit_to_user_mode_prepare+0x102/0x190 [ 699.973006][T12990] syscall_exit_to_user_mode+0x20/0x40 [ 699.978506][T12990] do_syscall_64+0x50/0xa0 [ 699.982912][T12990] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 699.988868][T12990] RIP: 0033:0x7faae3e39ae9 [ 699.993278][T12990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 700.012937][T12990] RSP: 002b:00007faae1bb0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 700.021335][T12990] RAX: 0000000000000001 RBX: 00007faae3f4cf60 RCX: 00007faae3e39ae9 [ 700.029424][T12990] RDX: 0000000000000000 RSI: 00000000000002ff RDI: 0000000000000006 [ 700.037441][T12990] RBP: 00007faae1bb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 700.045395][T12990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.053348][T12990] R13: 00007ffd6db36e4f R14: 00007faae1bb0300 R15: 0000000000022000 [ 700.061381][T12990] [ 700.066086][ T23] kauditd_printk_skb: 190 callbacks suppressed [ 700.066098][ T23] audit: type=1326 audit(1635955415.066:12472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 16:03:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100000002) 16:03:35 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) [ 700.096436][ T23] audit: type=1326 audit(1635955415.066:12473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 700.120497][ T23] audit: type=1326 audit(1635955415.076:12474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 700.144615][ T23] audit: type=1326 audit(1635955415.076:12475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 16:03:35 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0xf, 0x0, 0x0, 0x0) [ 700.168774][ T23] audit: type=1326 audit(1635955415.076:12476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 700.192980][ T23] audit: type=1326 audit(1635955415.076:12477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8058360b32 code=0x7ffc0000 16:03:35 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x73ef, &(0x7f0000000140)={0x0, 0xfffffffe, 0x1, 0xfffffffe, 0x1000000}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ae5000/0x2000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) [ 700.216960][ T23] audit: type=1326 audit(1635955415.076:12478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 700.241291][ T23] audit: type=1326 audit(1635955415.076:12479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 16:03:35 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendfile(r1, r0, 0x0, 0x7) r4 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r4, &(0x7f00000000c0), 0x1c) r5 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r5, &(0x7f00000000c0), 0x1c) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r4, 0x0, 0x0, 0x17, 0xd, 0x0, {0x0, 0x0, r5}}, 0x6) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 700.265357][ T23] audit: type=1326 audit(1635955415.076:12480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 700.289702][ T23] audit: type=1326 audit(1635955415.076:12481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12989 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f8058360ae9 code=0x7ffc0000 [ 700.316954][ C0] sd 0:0:1:0: tag#1346 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 700.326803][ C0] sd 0:0:1:0: tag#1346 CDB: opcode=0xe5 (vendor) [ 700.333188][ C0] sd 0:0:1:0: tag#1346 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 700.342224][ C0] sd 0:0:1:0: tag#1346 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 700.351242][ C0] sd 0:0:1:0: tag#1346 CDB[20]: ba 16:03:35 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x8}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:35 executing program 0: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0xb703, 0x80000001}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x66c, 0x5, 0x3, 0x5}, {0xb88c, 0x2, 0xd3, 0xffff0000}, {0x100, 0x9, 0xff, 0x5a1}, {0x9, 0x2, 0x0, 0x3}]}) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) [ 700.369928][T13004] validate_nla: 7 callbacks suppressed [ 700.370028][T13004] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 700.404038][T13004] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:35 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0xf00, 0x0, 0x0, 0x0) [ 700.446890][T13014] FAULT_INJECTION: forcing a failure. [ 700.446890][T13014] name failslab, interval 1, probability 0, space 0, times 0 [ 700.459582][T13014] CPU: 0 PID: 13014 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 700.468066][T13014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 700.478115][T13014] Call Trace: [ 700.481426][T13014] [ 700.484356][T13014] dump_stack_lvl+0xd6/0x122 [ 700.488949][T13014] dump_stack+0x11/0x1b [ 700.493103][T13014] should_fail+0x23c/0x250 [ 700.497562][T13014] __should_failslab+0x81/0x90 [ 700.502421][T13014] should_failslab+0x5/0x20 [ 700.506927][T13014] kmem_cache_alloc_node_trace+0x61/0x310 [ 700.512672][T13014] ? create_io_worker+0x66/0x2c0 [ 700.517756][T13014] create_io_worker+0x66/0x2c0 [ 700.522542][T13014] io_wqe_enqueue+0x604/0x740 [ 700.527222][T13014] io_wq_enqueue+0x31/0x40 [ 700.531746][T13014] io_queue_async_work+0x202/0x430 [ 700.536981][T13014] __io_queue_sqe+0x2f7/0x450 [ 700.541665][T13014] ? io_req_task_submit+0x83/0xd0 [ 700.546691][T13014] io_req_task_submit+0x8b/0xd0 [ 700.551547][T13014] tctx_task_work+0x25a/0x410 [ 700.556276][T13014] task_work_run+0x8e/0x110 [ 700.560808][T13014] exit_to_user_mode_prepare+0x102/0x190 [ 700.566449][T13014] syscall_exit_to_user_mode+0x20/0x40 [ 700.571934][T13014] do_syscall_64+0x50/0xa0 [ 700.576360][T13014] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 700.582319][T13014] RIP: 0033:0x7faae3e39ae9 [ 700.586736][T13014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 700.606425][T13014] RSP: 002b:00007faae1bb0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 700.614892][T13014] RAX: 0000000000000001 RBX: 00007faae3f4cf60 RCX: 00007faae3e39ae9 [ 700.623020][T13014] RDX: 0000000000000000 RSI: 00000000000002ff RDI: 0000000000000006 [ 700.631033][T13014] RBP: 00007faae1bb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 700.638985][T13014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 16:03:35 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x6000, @fd=r0, 0x30, 0x0, 0x0, 0x2, 0x0, {0x1}}, 0x7) 16:03:35 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) [ 700.647003][T13014] R13: 00007ffd6db36e4f R14: 00007faae1bb0300 R15: 0000000000022000 [ 700.655014][T13014] [ 700.677052][ C0] sd 0:0:1:0: tag#1381 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 700.686927][ C0] sd 0:0:1:0: tag#1381 CDB: opcode=0xe5 (vendor) [ 700.693305][ C0] sd 0:0:1:0: tag#1381 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 700.702352][ C0] sd 0:0:1:0: tag#1381 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 700.711393][ C0] sd 0:0:1:0: tag#1381 CDB[20]: ba [ 700.718759][T13022] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100000003) 16:03:35 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x2000, 0x0, 0x0, 0x0) 16:03:35 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x9}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 700.752785][ C0] sd 0:0:1:0: tag#1378 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 700.762636][ C0] sd 0:0:1:0: tag#1378 CDB: opcode=0xe5 (vendor) [ 700.768992][ C0] sd 0:0:1:0: tag#1378 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 700.778146][ C0] sd 0:0:1:0: tag#1378 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 700.787192][ C0] sd 0:0:1:0: tag#1378 CDB[20]: ba [ 700.793413][T13022] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:35 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x3b0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 700.872982][T13033] FAULT_INJECTION: forcing a failure. [ 700.872982][T13033] name failslab, interval 1, probability 0, space 0, times 0 [ 700.885637][T13033] CPU: 1 PID: 13033 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 700.894045][T13033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 700.904082][T13033] Call Trace: [ 700.907470][T13033] [ 700.910383][T13033] dump_stack_lvl+0xd6/0x122 [ 700.914992][T13033] dump_stack+0x11/0x1b [ 700.919174][T13033] should_fail+0x23c/0x250 [ 700.923620][T13033] __should_failslab+0x81/0x90 [ 700.928435][T13033] should_failslab+0x5/0x20 [ 700.932921][T13033] kmem_cache_alloc_node+0x61/0x2d0 [ 700.938115][T13033] ? dup_task_struct+0x63/0x680 [ 700.942976][T13033] dup_task_struct+0x63/0x680 [ 700.947629][T13033] copy_process+0x3f4/0x2f30 [ 700.952352][T13033] ? io_alloc_async_data+0x50/0xd0 [ 700.957510][T13033] ? iov_iter_restore+0xf2/0x130 [ 700.962494][T13033] ? io_issue_sqe+0x2f2a/0x5680 [ 700.967405][T13033] ? create_io_worker+0x2c0/0x2c0 [ 700.972406][T13033] create_io_thread+0x95/0xc0 [ 700.977320][T13033] ? create_io_worker+0x2c0/0x2c0 [ 700.982320][T13033] create_io_worker+0x18c/0x2c0 [ 700.987150][T13033] io_wqe_enqueue+0x604/0x740 [ 700.991808][T13033] io_wq_enqueue+0x31/0x40 [ 700.996266][T13033] io_queue_async_work+0x202/0x430 [ 701.001411][T13033] __io_queue_sqe+0x2f7/0x450 [ 701.006088][T13033] ? io_req_task_submit+0x83/0xd0 [ 701.011092][T13033] io_req_task_submit+0x8b/0xd0 [ 701.015920][T13033] tctx_task_work+0x25a/0x410 [ 701.020588][T13033] task_work_run+0x8e/0x110 [ 701.025127][T13033] exit_to_user_mode_prepare+0x102/0x190 [ 701.030953][T13033] syscall_exit_to_user_mode+0x20/0x40 [ 701.036425][T13033] do_syscall_64+0x50/0xa0 [ 701.040913][T13033] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 701.046807][T13033] RIP: 0033:0x7faae3e39ae9 [ 701.051198][T13033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 16:03:36 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) [ 701.070934][T13033] RSP: 002b:00007faae1bb0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 701.079324][T13033] RAX: 0000000000000001 RBX: 00007faae3f4cf60 RCX: 00007faae3e39ae9 [ 701.087283][T13033] RDX: 0000000000000000 RSI: 00000000000002ff RDI: 0000000000000006 [ 701.095231][T13033] RBP: 00007faae1bb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 701.103175][T13033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.111120][T13033] R13: 00007ffd6db36e4f R14: 00007faae1bb0300 R15: 0000000000022000 [ 701.119121][T13033] [ 701.270576][ C1] sd 0:0:1:0: tag#1372 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 701.280412][ C1] sd 0:0:1:0: tag#1372 CDB: opcode=0xe5 (vendor) [ 701.286734][ C1] sd 0:0:1:0: tag#1372 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 701.295742][ C1] sd 0:0:1:0: tag#1372 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 701.304781][ C1] sd 0:0:1:0: tag#1372 CDB[20]: ba [ 701.312541][T13040] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:36 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x4000, 0x0, 0x0, 0x0) 16:03:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100000012) 16:03:36 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0xa}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 701.333692][ C0] sd 0:0:1:0: tag#1401 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 701.343533][ C0] sd 0:0:1:0: tag#1401 CDB: opcode=0xe5 (vendor) [ 701.349965][ C0] sd 0:0:1:0: tag#1401 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 701.359027][ C0] sd 0:0:1:0: tag#1401 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 701.368086][ C0] sd 0:0:1:0: tag#1401 CDB[20]: ba [ 701.374727][T13040] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 701.446108][T13051] FAULT_INJECTION: forcing a failure. [ 701.446108][T13051] name failslab, interval 1, probability 0, space 0, times 0 [ 701.458846][T13051] CPU: 0 PID: 13051 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 701.467336][T13051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 701.477386][T13051] Call Trace: [ 701.480749][T13051] [ 701.483661][T13051] dump_stack_lvl+0xd6/0x122 [ 701.488254][T13051] dump_stack+0x11/0x1b [ 701.492411][T13051] should_fail+0x23c/0x250 [ 701.496812][T13051] ? alloc_pid+0x6c/0x6d0 [ 701.501131][T13051] __should_failslab+0x81/0x90 [ 701.506027][T13051] should_failslab+0x5/0x20 [ 701.510515][T13051] kmem_cache_alloc+0x4f/0x320 [ 701.515349][T13051] ? fpu_clone+0x1cf/0x700 [ 701.519812][T13051] alloc_pid+0x6c/0x6d0 [ 701.523957][T13051] ? copy_thread+0x13f/0x220 [ 701.528535][T13051] copy_process+0x1762/0x2f30 [ 701.533203][T13051] ? create_io_worker+0x2c0/0x2c0 [ 701.538280][T13051] create_io_thread+0x95/0xc0 [ 701.543026][T13051] ? create_io_worker+0x2c0/0x2c0 [ 701.548076][T13051] create_io_worker+0x18c/0x2c0 [ 701.552931][T13051] io_wqe_enqueue+0x604/0x740 [ 701.557663][T13051] io_wq_enqueue+0x31/0x40 [ 701.562142][T13051] io_queue_async_work+0x202/0x430 [ 701.567237][T13051] __io_queue_sqe+0x2f7/0x450 [ 701.571957][T13051] ? io_req_task_submit+0x83/0xd0 [ 701.576968][T13051] io_req_task_submit+0x8b/0xd0 [ 701.581939][T13051] tctx_task_work+0x25a/0x410 [ 701.586596][T13051] task_work_run+0x8e/0x110 [ 701.591134][T13051] exit_to_user_mode_prepare+0x102/0x190 [ 701.596902][T13051] syscall_exit_to_user_mode+0x20/0x40 [ 701.602343][T13051] do_syscall_64+0x50/0xa0 [ 701.606745][T13051] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 701.612628][T13051] RIP: 0033:0x7faae3e39ae9 [ 701.617023][T13051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 701.636608][T13051] RSP: 002b:00007faae1bb0188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 16:03:36 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) 16:03:36 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) open_tree(r0, &(0x7f0000000000)='./bus\x00', 0x0) 16:03:36 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) [ 701.645000][T13051] RAX: 0000000000000001 RBX: 00007faae3f4cf60 RCX: 00007faae3e39ae9 [ 701.652950][T13051] RDX: 0000000000000000 RSI: 00000000000002ff RDI: 0000000000000006 [ 701.660903][T13051] RBP: 00007faae1bb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 701.668887][T13051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.676838][T13051] R13: 00007ffd6db36e4f R14: 00007faae1bb0300 R15: 0000000000022000 [ 701.684794][T13051] 16:03:36 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x400000, 0x0, 0x0, 0x0) [ 701.755301][ C1] sd 0:0:1:0: tag#1379 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 701.765145][ C1] sd 0:0:1:0: tag#1379 CDB: opcode=0xe5 (vendor) [ 701.771493][ C1] sd 0:0:1:0: tag#1379 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 701.780599][ C1] sd 0:0:1:0: tag#1379 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 701.789631][ C1] sd 0:0:1:0: tag#1379 CDB[20]: ba [ 701.796069][T13058] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100000300) [ 701.831472][ C0] sd 0:0:1:0: tag#1388 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 701.841409][ C0] sd 0:0:1:0: tag#1388 CDB: opcode=0xe5 (vendor) [ 701.847753][ C0] sd 0:0:1:0: tag#1388 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 701.856800][ C0] sd 0:0:1:0: tag#1388 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 701.865832][ C0] sd 0:0:1:0: tag#1388 CDB[20]: ba [ 701.872327][T13058] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:36 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x26, 0x1, 0x400}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:36 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:36 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0xb}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 701.934301][T13071] FAULT_INJECTION: forcing a failure. [ 701.934301][T13071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 701.947387][T13071] CPU: 0 PID: 13071 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 701.955799][T13071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 701.965935][T13071] Call Trace: [ 701.969209][T13071] [ 701.972134][T13071] dump_stack_lvl+0xd6/0x122 [ 701.976726][T13071] dump_stack+0x11/0x1b 16:03:37 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x800000, 0x0, 0x0, 0x0) [ 701.980884][T13071] should_fail+0x23c/0x250 [ 701.985307][T13071] should_fail_usercopy+0x16/0x20 [ 701.990359][T13071] _copy_to_user+0x1c/0x90 [ 701.994905][T13071] simple_read_from_buffer+0xab/0x120 [ 702.000264][T13071] proc_fail_nth_read+0x10d/0x150 [ 702.005294][T13071] ? proc_fault_inject_write+0x230/0x230 [ 702.010928][T13071] vfs_read+0x1e6/0x750 [ 702.015082][T13071] ? io_submit_flush_completions+0xa5/0x2c0 [ 702.021045][T13071] ? __fget_light+0x219/0x260 [ 702.025764][T13071] ksys_read+0xd9/0x190 [ 702.029899][T13071] __x64_sys_read+0x3e/0x50 [ 702.034384][T13071] do_syscall_64+0x44/0xa0 [ 702.038802][T13071] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 702.044704][T13071] RIP: 0033:0x7faae3dec69c [ 702.049167][T13071] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 702.068797][T13071] RSP: 002b:00007faae1bb0170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 702.077195][T13071] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007faae3dec69c [ 702.085184][T13071] RDX: 000000000000000f RSI: 00007faae1bb01e0 RDI: 0000000000000007 [ 702.093232][T13071] RBP: 00007faae1bb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 702.101233][T13071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.109184][T13071] R13: 00007ffd6db36e4f R14: 00007faae1bb0300 R15: 0000000000022000 [ 702.117143][T13071] 16:03:37 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x10000054c) 16:03:37 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2c78, &(0x7f0000000000)={0x0, 0x95d0, 0x4, 0x0, 0x4c, 0x0, r0}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) 16:03:37 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0xc}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 702.129666][T13082] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 702.154894][T13082] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:37 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0xf000000, 0x0, 0x0, 0x0) 16:03:37 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x4000, 0x0, 0x0, 0x0, 0x0) 16:03:37 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:37 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0xd}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x10000055a) 16:03:37 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x20000000, 0x0, 0x0, 0x0) 16:03:37 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:37 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_io_uring_complete(0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x217}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) inotify_init1(0x0) syz_open_dev$usbmon(&(0x7f0000007a00), 0x4, 0x0) syz_open_dev$sg(&(0x7f0000008b40), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000007a00), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000007a00), 0x0, 0x2c2100) select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x3ff}, 0x0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:37 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x7fff, 0x8, '9P2000.L'}, 0x15) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0\x00'}) syz_io_uring_setup(0x6914, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x343, 0x0, r3}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:37 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0xe}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:37 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x2, 0x0, 0x0, 0x0) 16:03:37 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0xffffffff, 0x0, 0x0, 0x0) 16:03:37 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x87, &(0x7f0000000140), &(0x7f0000ee4000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x7fff, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) syz_io_uring_setup(0x1fd6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000ee5000/0x2000)=nil, &(0x7f0000ee6000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r8, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000200)=0x2) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:38 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0xf}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:38 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) r0 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) dup(r0) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x10000055b) 16:03:38 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x4, 0x0, 0x0, 0x0) 16:03:38 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r3, &(0x7f00000000c0), 0x1c) r4 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r4, &(0x7f00000000c0), 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x2f, 0x1, 0x1, 0x3, 0x1, @loopback, @remote, 0x8, 0x711, 0x5}}) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000000)) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:38 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xf, 0x0, 0x0) 16:03:38 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) r0 = syz_io_uring_setup(0x6910, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') dup2(r0, r1) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:38 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:38 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x6, 0x0, 0x0, 0x0) 16:03:38 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xf00, 0x0, 0x0) 16:03:38 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x200000}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xaca, 0x0}, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000040), &(0x7f0000000180)="7cf8bcc4ea762ec0d8fd9f3863b07fca699476c6de47302b3fad633e8e81c6bf657b7bb061ee40acb64d1306a491db13e0fa8c21297a4c7e971b703311ed755bad30d167dfdcba79ba476a40653f8c12ce788a1bf6ff45e03013fea18906940c886c10f1e1036ee084079aeae8e40bd77e9e484871d910f7c7fcd505885376fda1c51110723e18ac36ea2d", 0x8b, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:38 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x10000055c) 16:03:38 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x11}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:38 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x7, 0x0, 0x0, 0x0) 16:03:38 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x2000, 0x0, 0x0) 16:03:38 executing program 0: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x1, 0x0, 0x7, 0x5, 0x198, &(0x7f00000001c0)}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:38 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) close(r1) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xd83}}, './bus\x00'}) r3 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in=@rand_addr=0x64010102, @in=@loopback, 0x0, 0x0, 0xfffd, 0x6, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r3, &(0x7f00000000c0), 0x1c) splice(r2, &(0x7f0000000040)=0x10000, r3, &(0x7f0000000100)=0x2, 0x40, 0x9) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:38 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x12}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:38 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0xf, 0x0, 0x0, 0x0) 16:03:38 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x4000, 0x0, 0x0) 16:03:38 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x81, 0x1, 0xcf, 0x5ec}, {0x1c38, 0x2, 0x1, 0x3}, {0x100, 0x5, 0x88, 0x7}, {0x9, 0x9e, 0x4, 0x3f}, {0x1f, 0x9e, 0x2, 0x1ff}]}) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x4000, 0x0) syz_io_uring_setup(0x6914, &(0x7f0000000140), &(0x7f0000ee8000/0x1000)=nil, &(0x7f00003ff000/0xc00000)=nil, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 16:03:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x10000055d) 16:03:38 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1500000265ffffff7f000008003950323030302e4c"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB]) io_uring_enter(r5, 0x1833, 0xb86e, 0x0, &(0x7f0000000000)={[0x20]}, 0x8) 16:03:38 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x30, 0x0, 0x0, 0x0) 16:03:38 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x25}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x10000055b) 16:03:38 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x400000, 0x0, 0x0) 16:03:38 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x174f, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:38 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x60, 0x0, 0x0, 0x0) 16:03:38 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x3a}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:38 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x800000, 0x0, 0x0) 16:03:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x10000055f) 16:03:39 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1586a013479ded1d06000008003950323030302e4c"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) getpeername$unix(r5, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x87, &(0x7f0000000140), &(0x7f0000ee4000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_io_uring_setup(0x16ea, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee6000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000000/0x4000)=nil, 0x4000, 0xd, 0x1}, 0x18) r8 = syz_open_dev$vcsu(&(0x7f0000000200), 0x40, 0x201) bind$packet(r8, &(0x7f0000000300)={0x11, 0x8, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 16:03:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x10000055b) 16:03:39 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x600, 0x0, 0x0, 0x0) 16:03:39 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xf000000, 0x0, 0x0) 16:03:39 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x48}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:39 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x72ca, &(0x7f0000000240)={0x0, 0x0, 0x20}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x87, &(0x7f0000000140), &(0x7f0000ee4000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_setup(0x16ea, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee6000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x100, 0x1c4, 0x4}, &(0x7f0000000040)='./bus\x00', 0x18, 0x0, 0x12345}, 0x37) 16:03:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100000561) 16:03:39 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x700, 0x0, 0x0, 0x0) 16:03:39 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0xa}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:39 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x20000000, 0x0, 0x0) [ 704.298715][ C0] scsi_io_completion_action: 16 callbacks suppressed [ 704.298743][ C0] sd 0:0:1:0: tag#1349 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 704.315277][ C0] sd 0:0:1:0: tag#1349 CDB: opcode=0xe5 (vendor) [ 704.321623][ C0] sd 0:0:1:0: tag#1349 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 704.330644][ C0] sd 0:0:1:0: tag#1349 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 704.339679][ C0] sd 0:0:1:0: tag#1349 CDB[20]: ba 16:03:39 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) open(&(0x7f0000000000)='./bus\x00', 0x200080, 0x40) open(&(0x7f0000000040)='./bus\x00', 0x141000, 0x58) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:39 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x4c}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:39 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0xf00, 0x0, 0x0, 0x0) 16:03:39 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x40000000000000, 0x0, 0x0) [ 704.483072][ C0] sd 0:0:1:0: tag#1375 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 704.492924][ C0] sd 0:0:1:0: tag#1375 CDB: opcode=0xe5 (vendor) [ 704.499361][ C0] sd 0:0:1:0: tag#1375 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 704.508409][ C0] sd 0:0:1:0: tag#1375 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 704.517456][ C0] sd 0:0:1:0: tag#1375 CDB[20]: ba 16:03:39 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x64880, 0x71) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000180)=""/77, 0x4d) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './bus\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000300)={{0x0, 0x8000, 0x80, 0xfff, 0x0, 0x7f, 0xbe2, 0x3, 0x2, 0x5, 0x6, 0x6d1, 0x400, 0x9, 0x9}, 0x20, [0x0, 0x0, 0x0, 0x0]}) pwritev(r4, &(0x7f0000000200)=[{&(0x7f00000013c0)="c95f2bd12f236f2abf07f6ac91e1287c72748d8705f42dafe1b9f5ab60f37edc4f802db2f49b7b215b780232f2637d5cf92db3db5e351b98e820efe3c90609be7653ae5545824a103a96ec5a12ddcc9e3d103d2e8d4f3caee76feb87d3056f7a8c942d0dd855a56ddee723f8e139afda432bca6584b88c186a14d2146881411257ae0fd7629442f140b1ca4984c0e8a7fe0ad3c62e199576be25ed2ba93d8f0203650cb38809356184da451264436ec7844c550c86eeecb701e6053517d3", 0xbe}, {&(0x7f0000001480)="0f6d599b10efb1980c8d6e85fc73e7cc758e3463addcc1d9536279fa8dd55b8b48d0ed8b33347ac43262155ebc6be915166ce93c7070f59de6f44133ebf37f1863686cc9758c040a0f64ec86e4a9dfd269b6d364e4748b55794ccd253631af9d68067f33312ea8a522204d6ae0e159c85c1db4ae60bfda40c8eb74bff1f28f7e523eeb02ee9ded5ee4ff41391884bc3ffde6daf234fc6e2ed6357db9eba75ec41902282e0a92cabdbc01a7832018d628aad2f74be40a64fd9fecedc669168eeef5157751f18ce81910ec2b2067a6c761147812226dc5", 0xd6}, {&(0x7f00000000c0)="e6044c7274774c9d7fc9d531dc509cd08245dffea0836ad7cac7161082e452613231f4933f16fc3b1755807fe66de6e393630b97cc7d9f9ba610", 0x3a}], 0x3, 0x6c6b, 0xfffffffd) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f00000003c0)={0x0, r5, "562444bbeca93222c13413829e094c9019ff83f4061b1ef49aac5a07b1ffe7ccd6c4cfc1d1b971720ca832db1128d358918b47d701323bace88b8ca2284bf4368414de374ccc4112d56feaedbd948dbfdadc8523454f13c48ca2b69264b381a684936c9d2048fcf5f39a9b3b4a0dee62f7d273d1e0ae618511b9449f9706d1d3728e4def1c874f2f04f40dc8152e724071ab1cc43de5bef993fce4137fdd008fd4f2951eb1ae472dee390387c302e203a387fe31070e8fd80093b78b9f720583b2f2a943bb9fc42bee07bba92c893b84433b1a116404a913d4d96288b4b513f43b22ba0b0776108837345e073eaf20c985b6ecc3ffced5e5601f7b3e2d98e50e", "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"}) 16:03:39 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0xa}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 704.543277][ C1] sd 0:0:1:0: tag#1365 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 704.553182][ C1] sd 0:0:1:0: tag#1365 CDB: opcode=0xe5 (vendor) [ 704.559525][ C1] sd 0:0:1:0: tag#1365 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 704.568589][ C1] sd 0:0:1:0: tag#1365 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 704.577702][ C1] sd 0:0:1:0: tag#1365 CDB[20]: ba 16:03:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100000567) 16:03:39 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x60}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 704.603267][ C1] sd 0:0:1:0: tag#1402 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 704.613123][ C1] sd 0:0:1:0: tag#1402 CDB: opcode=0xe5 (vendor) [ 704.619511][ C1] sd 0:0:1:0: tag#1402 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 704.628618][ C1] sd 0:0:1:0: tag#1402 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 704.637665][ C1] sd 0:0:1:0: tag#1402 CDB[20]: ba 16:03:39 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x2000, 0x0, 0x0, 0x0) 16:03:39 executing program 3: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000180)={'vxcan1\x00', {0x2, 0x0, @local}}) open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 704.811149][ C1] sd 0:0:1:0: tag#1402 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 704.820986][ C1] sd 0:0:1:0: tag#1402 CDB: opcode=0xe5 (vendor) [ 704.827332][ C1] sd 0:0:1:0: tag#1402 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 704.836465][ C1] sd 0:0:1:0: tag#1402 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 704.845576][ C1] sd 0:0:1:0: tag#1402 CDB[20]: ba 16:03:39 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x8}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:39 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x80000000000000, 0x0, 0x0) [ 704.893776][ C1] sd 0:0:1:0: tag#1355 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 704.903643][ C1] sd 0:0:1:0: tag#1355 CDB: opcode=0xe5 (vendor) [ 704.909987][ C1] sd 0:0:1:0: tag#1355 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 704.919028][ C1] sd 0:0:1:0: tag#1355 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 704.928146][ C1] sd 0:0:1:0: tag#1355 CDB[20]: ba 16:03:40 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x68}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 704.953204][ C0] sd 0:0:1:0: tag#1368 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 704.963153][ C0] sd 0:0:1:0: tag#1368 CDB: opcode=0xe5 (vendor) [ 704.969658][ C0] sd 0:0:1:0: tag#1368 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 704.978693][ C0] sd 0:0:1:0: tag#1368 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 704.987708][ C0] sd 0:0:1:0: tag#1368 CDB[20]: ba 16:03:40 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x3000, 0x0, 0x0, 0x0) 16:03:40 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r1 = syz_io_uring_setup(0x7e85, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001980), 0x45c442, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001a80)={'erspan0\x00', &(0x7f00000019c0)={'syztnl1\x00', 0x0, 0x1, 0x8000, 0xce5a, 0x9, {{0x26, 0x4, 0x3, 0x3c, 0x98, 0x64, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@generic={0x88, 0x4, "83a9"}, @timestamp_addr={0x44, 0x44, 0xd2, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x20}, 0xbf2b}, {@broadcast, 0x56000}, {@rand_addr=0x64010101, 0x8}, {@multicast2, 0x100}, {@loopback, 0x7f}, {@multicast2}, {@rand_addr=0x64010102}, {@rand_addr=0x64010101, 0x2}]}, @lsrr={0x83, 0x2b, 0x22, [@empty, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x35}, @private=0xa010100, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2, @remote, @rand_addr=0x64010102]}, @generic={0x7, 0x11, "766324a1d7eb8f308827207c01b863"}]}}}}}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000001ac0)={{{@in=@multicast2, @in=@rand_addr=0x64010102, 0x4e21, 0x7, 0x4e24, 0x946a, 0x2, 0xa0, 0x80, 0xe5, r5, 0xffffffffffffffff}, {0x6, 0x3, 0x4, 0x8000, 0x1, 0xffffffff, 0x3ff, 0x81}, {0x10000, 0x5, 0x7, 0x4}, 0x1ff, 0x6e6bbb, 0x1, 0x0, 0x2}, {{@in6=@local, 0x4d3, 0xa1}, 0xa, @in6=@rand_addr=' \x01\x00', 0x3503, 0x2, 0x0, 0x1, 0x401, 0x6, 0x200}}, 0xe8) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100000569) 16:03:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100000567) 16:03:40 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xf00000000000000, 0x0, 0x0) [ 705.084054][ C1] sd 0:0:1:0: tag#1346 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 705.093912][ C1] sd 0:0:1:0: tag#1346 CDB: opcode=0xe5 (vendor) [ 705.100245][ C1] sd 0:0:1:0: tag#1346 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 705.109378][ C1] sd 0:0:1:0: tag#1346 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 705.118629][ C1] sd 0:0:1:0: tag#1346 CDB[20]: ba [ 705.197966][ C0] sd 0:0:1:0: tag#1383 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 705.207817][ C0] sd 0:0:1:0: tag#1383 CDB: opcode=0xe5 (vendor) [ 705.214365][ C0] sd 0:0:1:0: tag#1383 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 705.223477][ C0] sd 0:0:1:0: tag#1383 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 705.232505][ C0] sd 0:0:1:0: tag#1383 CDB[20]: ba 16:03:40 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x4000, 0x0, 0x0, 0x0) 16:03:40 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x6c}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:40 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r1 = syz_io_uring_setup(0x20bc, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x8000000) syz_io_uring_setup(0x87, &(0x7f0000000140), &(0x7f0000ee4000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_setup(0x16ea, &(0x7f0000000080), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ee6000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x2003, 0x0) io_uring_enter(r9, 0x7695, 0xb436, 0x2, &(0x7f0000000340)={[0x7fff00]}, 0x8) syz_io_uring_submit(r5, r8, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0}, 0x0) r10 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {0x0, 0x1000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r10, &(0x7f00000000c0), 0x1c) r11 = syz_io_uring_setup(0x495d, &(0x7f00000002c0), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r14}}, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r14}}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000000)=@llc={0x1a, 0x30e, 0x1, 0x9, 0x2, 0x7b, @broadcast}, 0x0, 0x0, 0x1}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:40 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x2000000000000000, 0x0, 0x0) [ 705.385535][T13380] ================================================================== [ 705.393635][T13380] BUG: KCSAN: data-race in blk_mq_request_bypass_insert / blk_mq_run_hw_queue [ 705.402484][T13380] [ 705.404800][T13380] write to 0xffff888101ddb210 of 8 bytes by task 224 on cpu 1: [ 705.412348][T13380] blk_mq_request_bypass_insert+0x6a/0x130 [ 705.418160][T13380] blk_mq_sched_insert_request+0xfd/0x220 [ 705.423884][T13380] blk_mq_requeue_work+0x217/0x3e0 [ 705.428979][T13380] process_one_work+0x3fc/0x980 16:03:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x10000056b) [ 705.433824][T13380] worker_thread+0x616/0xa70 [ 705.438408][T13380] kthread+0x2c7/0x2e0 [ 705.442479][T13380] ret_from_fork+0x1f/0x30 [ 705.446893][T13380] [ 705.449206][T13380] read to 0xffff888101ddb210 of 8 bytes by task 13380 on cpu 0: [ 705.456912][T13380] blk_mq_run_hw_queue+0x12e/0x260 [ 705.462021][T13380] blk_mq_sched_insert_requests+0x130/0x200 [ 705.467916][T13380] blk_mq_flush_plug_list+0x372/0x460 [ 705.473285][T13380] blk_flush_plug+0x252/0x2b0 [ 705.477960][T13380] blk_finish_plug+0x44/0x60 [ 705.482547][T13380] __iomap_dio_rw+0xcad/0x1070 [ 705.487359][T13380] iomap_dio_rw+0x38/0x80 [ 705.491711][T13380] ext4_file_read_iter+0x21d/0x290 [ 705.496823][T13380] generic_file_splice_read+0x24f/0x330 [ 705.502373][T13380] splice_direct_to_actor+0x2aa/0x650 [ 705.507747][T13380] do_splice_direct+0x106/0x190 [ 705.512593][T13380] do_sendfile+0x675/0xc40 [ 705.516995][T13380] __x64_sys_sendfile64+0x102/0x140 [ 705.522180][T13380] do_syscall_64+0x44/0xa0 [ 705.526582][T13380] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 705.532464][T13380] 16:03:40 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffffff7946d50b221da268723a3e768ce10d937625e1dc0e0db589723100"/50], 0x15) syz_io_uring_setup(0x87, &(0x7f0000000140), &(0x7f0000ee4000/0x3000)=nil, &(0x7f0000ee5000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_setup(0x80004799, &(0x7f0000000080)={0x0, 0x12e0, 0x10, 0x1, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000340)=0x0) syz_io_uring_submit(r6, r9, &(0x7f0000000280)=@IORING_OP_FALLOCATE, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r8, 0x0, 0x0}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r7, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, 0x1, 0x1, 0x1, {0x0, r10}}, 0x1) r11 = dup(r5) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r11}}) r12 = openat$incfs(r0, &(0x7f0000000380)='.pending_reads\x00', 0x581001, 0x20) getsockname(r12, &(0x7f00000003c0)=@nfc_llcp, &(0x7f0000000440)=0x80) io_uring_enter(r11, 0x2911, 0xaacf, 0x2, &(0x7f0000000000), 0x8) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 705.534766][T13380] value changed: 0xffff888101ddb208 -> 0xffff888102ab70c8 [ 705.541848][T13380] [ 705.544155][T13380] Reported by Kernel Concurrency Sanitizer on: [ 705.550279][T13380] CPU: 0 PID: 13380 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 705.558680][T13380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 705.568899][T13380] ================================================================== 16:03:40 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 16:03:40 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x6000, 0x0, 0x0, 0x0) [ 705.591774][ C0] sd 0:0:1:0: tag#1377 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 705.601661][ C0] sd 0:0:1:0: tag#1377 CDB: opcode=0xe5 (vendor) [ 705.607987][ C0] sd 0:0:1:0: tag#1377 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 705.617023][ C0] sd 0:0:1:0: tag#1377 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 705.626080][ C0] sd 0:0:1:0: tag#1377 CDB[20]: ba 16:03:40 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x5}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 705.647908][T13387] validate_nla: 29 callbacks suppressed [ 705.647935][T13387] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:40 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x74}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 705.692937][T13395] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:40 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000000400)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x1, 0x0, r1, 0x0}]) r2 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r2, &(0x7f00000000c0), 0x1c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x7fff, 0x8, '9P2000.L'}, 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0xfff, r2, &(0x7f0000000000)="b1923930", 0x4, 0xffff, 0x0, 0x5, r5}]) r6 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r6, 0x2520, 0x3, 0x0, 0x0, 0x0) 16:03:40 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xf) 16:03:40 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x7bfe, 0x0, 0x0, 0x0) 16:03:40 executing program 0: set_mempolicy(0x1, &(0x7f0000000140)=0xffffffffffff7fff, 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) (fail_nth: 1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) [ 705.868162][T13409] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 705.894389][T13414] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100000a00) 16:03:40 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x7a}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 705.923976][T13414] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:41 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xf00) 16:03:41 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x8fff, 0x0, 0x0, 0x0) [ 706.024219][T13427] FAULT_INJECTION: forcing a failure. [ 706.024219][T13427] name failslab, interval 1, probability 0, space 0, times 0 [ 706.037028][T13427] CPU: 0 PID: 13427 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 706.045626][T13427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 706.055680][T13427] Call Trace: [ 706.058953][T13427] [ 706.061882][T13427] dump_stack_lvl+0xd6/0x122 [ 706.066613][T13427] dump_stack+0x11/0x1b [ 706.070783][T13427] should_fail+0x23c/0x250 [ 706.075386][T13427] ? serport_ldisc_read+0x74/0x310 [ 706.080501][T13427] __should_failslab+0x81/0x90 [ 706.085288][T13427] should_failslab+0x5/0x20 [ 706.089795][T13427] kmem_cache_alloc_trace+0x52/0x350 [ 706.095144][T13427] serport_ldisc_read+0x74/0x310 [ 706.100119][T13427] tty_read+0x19c/0x430 [ 706.104273][T13427] vfs_read+0x66c/0x750 [ 706.108425][T13427] ksys_read+0xd9/0x190 [ 706.112569][T13427] __x64_sys_read+0x3e/0x50 [ 706.117057][T13427] do_syscall_64+0x44/0xa0 [ 706.121470][T13427] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 706.127358][T13427] RIP: 0033:0x7f8058360ae9 [ 706.131775][T13427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 706.151400][T13427] RSP: 002b:00007f80560d7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 706.159868][T13427] RAX: ffffffffffffffda RBX: 00007f8058473f60 RCX: 00007f8058360ae9 16:03:41 executing program 0: set_mempolicy(0x1, &(0x7f0000000140)=0xffffffffffff7fff, 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) (fail_nth: 2) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) [ 706.167884][T13427] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000004 [ 706.175838][T13427] RBP: 00007f80560d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 706.183883][T13427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.191834][T13427] R13: 00007ffcd85e760f R14: 00007f80560d7300 R15: 0000000000022000 [ 706.199789][T13427] [ 706.210736][T13433] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:41 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:41 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x1, 0x29}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:41 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2000) 16:03:41 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0xfe7b, 0x0, 0x0, 0x0) 16:03:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100000f00) [ 706.248794][T13433] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 706.355273][T13446] FAULT_INJECTION: forcing a failure. [ 706.355273][T13446] name failslab, interval 1, probability 0, space 0, times 0 [ 706.367916][T13446] CPU: 0 PID: 13446 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 706.376384][T13446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 706.386464][T13446] Call Trace: [ 706.389736][T13446] [ 706.392658][T13446] dump_stack_lvl+0xd6/0x122 [ 706.397272][T13446] dump_stack+0x11/0x1b [ 706.401423][T13446] should_fail+0x23c/0x250 [ 706.405843][T13446] ? kvasprintf_const+0x59/0x100 [ 706.410785][T13446] __should_failslab+0x81/0x90 [ 706.415562][T13446] should_failslab+0x5/0x20 [ 706.420137][T13446] __kmalloc_track_caller+0x6d/0x370 [ 706.425422][T13446] kvasprintf+0x83/0x100 [ 706.429652][T13446] ? string+0x1f9/0x210 [ 706.433867][T13446] kvasprintf_const+0x59/0x100 [ 706.438642][T13446] kobject_set_name_vargs+0x43/0xe0 [ 706.443892][T13446] dev_set_name+0x80/0xa0 [ 706.448207][T13446] ? hrtimer_init+0xfc/0x1d0 [ 706.452791][T13446] ? device_initialize+0x23f/0x260 [ 706.457904][T13446] __serio_register_port+0xf9/0x1c0 [ 706.463370][T13446] serport_ldisc_read+0x1d0/0x310 [ 706.468400][T13446] tty_read+0x19c/0x430 [ 706.472629][T13446] vfs_read+0x66c/0x750 [ 706.476779][T13446] ksys_read+0xd9/0x190 [ 706.480924][T13446] __x64_sys_read+0x3e/0x50 [ 706.485411][T13446] do_syscall_64+0x44/0xa0 [ 706.489878][T13446] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 706.495932][T13446] RIP: 0033:0x7f8058360ae9 [ 706.500327][T13446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 706.519916][T13446] RSP: 002b:00007f80560d7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 706.528311][T13446] RAX: ffffffffffffffda RBX: 00007f8058473f60 RCX: 00007f8058360ae9 [ 706.536275][T13446] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000004 [ 706.544319][T13446] RBP: 00007f80560d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 706.552357][T13446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.560827][T13446] R13: 00007ffcd85e760f R14: 00007f80560d7300 R15: 0000000000022000 [ 706.568832][T13446] [ 706.571952][T13446] serio: Serial port pts0 [ 706.579348][ T3398] serio (null): device_add() failed for pts0/serio0 (Serial port), error: -22 16:03:41 executing program 0: set_mempolicy(0x1, &(0x7f0000000140)=0xffffffffffff7fff, 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) (fail_nth: 3) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 16:03:41 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f0000000000)='./bus/file0\x00', 0x80680, 0x200) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000180)={{0x0, 0xffffffffffff85aa, 0x4, 0xfffffffffffffff9, 0x4, 0x9, 0x5, 0x7, 0x1, 0x7, 0x1, 0x7ff, 0x3f, 0x80000001, 0x99}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) 16:03:41 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:41 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x4000) 16:03:41 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0xff8f, 0x0, 0x0, 0x0) [ 706.601022][T13451] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 706.624739][T13451] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 706.824036][T13469] FAULT_INJECTION: forcing a failure. [ 706.824036][T13469] name failslab, interval 1, probability 0, space 0, times 0 [ 706.836753][T13469] CPU: 0 PID: 13469 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 706.845172][T13469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 706.855224][T13469] Call Trace: [ 706.858492][T13469] [ 706.861519][T13469] dump_stack_lvl+0xd6/0x122 [ 706.866111][T13469] dump_stack+0x11/0x1b [ 706.870300][T13469] should_fail+0x23c/0x250 [ 706.874701][T13469] ? serio_queue_event+0xd2/0x210 [ 706.879739][T13469] __should_failslab+0x81/0x90 [ 706.884489][T13469] should_failslab+0x5/0x20 [ 706.889028][T13469] kmem_cache_alloc_trace+0x52/0x350 [ 706.894374][T13469] ? dev_set_name+0x80/0xa0 [ 706.898860][T13469] ? preempt_count_add+0x4e/0x90 [ 706.903840][T13469] serio_queue_event+0xd2/0x210 [ 706.908677][T13469] __serio_register_port+0x1b5/0x1c0 [ 706.913981][T13469] serport_ldisc_read+0x1d0/0x310 [ 706.919012][T13469] tty_read+0x19c/0x430 [ 706.923150][T13469] vfs_read+0x66c/0x750 [ 706.927386][T13469] ksys_read+0xd9/0x190 [ 706.931610][T13469] __x64_sys_read+0x3e/0x50 [ 706.936227][T13469] do_syscall_64+0x44/0xa0 [ 706.940637][T13469] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 706.946575][T13469] RIP: 0033:0x7f8058360ae9 [ 706.950971][T13469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 706.970645][T13469] RSP: 002b:00007f80560d7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 706.979035][T13469] RAX: ffffffffffffffda RBX: 00007f8058473f60 RCX: 00007f8058360ae9 [ 706.987060][T13469] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000004 [ 706.995079][T13469] RBP: 00007f80560d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 707.003032][T13469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.010982][T13469] R13: 00007ffcd85e760f R14: 00007f80560d7300 R15: 0000000000022000 [ 707.019014][T13469] 16:03:42 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xf8}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 707.022041][T13469] serio: Not enough memory to queue event 3 [ 707.028035][T13469] serio: Serial port pts0 [ 707.041712][T13472] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 16:03:42 executing program 0: set_mempolicy(0x1, &(0x7f0000000140)=0xffffffffffff7fff, 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) (fail_nth: 4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 16:03:42 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x300000, 0x0, 0x0, 0x0) 16:03:42 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x400000) 16:03:42 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100001100) 16:03:42 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 707.201927][T13489] serio: Serial port pts0 16:03:42 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x400000, 0x0, 0x0, 0x0) 16:03:42 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x800000) 16:03:42 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:42 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) setxattr$incfs_id(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040), &(0x7f00000000c0)={'0000000000000000000000000000000', 0x30}, 0x20, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r3, &(0x7f00000000c0), 0x1c) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x100000000) 16:03:42 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x600000, 0x0, 0x0, 0x0) 16:03:42 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xf000000) [ 708.033168][T13489] FAULT_INJECTION: forcing a failure. [ 708.033168][T13489] name failslab, interval 1, probability 0, space 0, times 0 [ 708.045935][T13489] CPU: 1 PID: 13489 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 708.054336][T13489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 708.064429][T13489] Call Trace: [ 708.067689][T13489] [ 708.070600][T13489] dump_stack_lvl+0xd6/0x122 [ 708.075175][T13489] dump_stack+0x11/0x1b [ 708.079304][T13489] should_fail+0x23c/0x250 [ 708.083752][T13489] ? kobject_uevent_env+0x1a7/0xc40 [ 708.089206][T13489] __should_failslab+0x81/0x90 [ 708.093947][T13489] should_failslab+0x5/0x20 [ 708.098432][T13489] kmem_cache_alloc_trace+0x52/0x350 [ 708.103700][T13489] ? dev_uevent_filter+0x70/0x70 [ 708.108620][T13489] kobject_uevent_env+0x1a7/0xc40 [ 708.113832][T13489] ? preempt_count_add+0x4e/0x90 [ 708.118754][T13489] kobject_uevent+0x18/0x20 [ 708.123375][T13489] device_del+0x82e/0x8c0 [ 708.127691][T13489] ? preempt_count_add+0x4e/0x90 [ 708.132617][T13489] serio_destroy_port+0x279/0x330 [ 708.137640][T13489] serio_unregister_port+0x140/0x160 [ 708.142919][T13489] serport_ldisc_read+0x2e6/0x310 [ 708.147956][T13489] ? init_wait_entry+0x30/0x30 [ 708.152701][T13489] tty_read+0x19c/0x430 [ 708.156836][T13489] vfs_read+0x66c/0x750 [ 708.160970][T13489] ksys_read+0xd9/0x190 [ 708.165115][T13489] __x64_sys_read+0x3e/0x50 [ 708.169741][T13489] do_syscall_64+0x44/0xa0 [ 708.174196][T13489] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 708.180188][T13489] RIP: 0033:0x7f8058360ae9 [ 708.184575][T13489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 708.204203][T13489] RSP: 002b:00007f80560d7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 708.212588][T13489] RAX: ffffffffffffffda RBX: 00007f8058473f60 RCX: 00007f8058360ae9 [ 708.220535][T13489] RDX: 0000000000002000 RSI: 0000000000000000 RDI: 0000000000000004 16:03:43 executing program 0: set_mempolicy(0x1, &(0x7f0000000140)=0xffffffffffff7fff, 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 16:03:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100001200) 16:03:43 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:43 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x20000000) 16:03:43 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r3, &(0x7f00000000c0), 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000300)) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:43 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x80ffff, 0x0, 0x0, 0x0) [ 708.228480][T13489] RBP: 00007f80560d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 708.236498][T13489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.244465][T13489] R13: 00007ffcd85e760f R14: 00007f80560d7300 R15: 0000000000022000 [ 708.252413][T13489] 16:03:43 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0x100010, r0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2007, @fd_index=0x8, 0x0, 0x0, 0x0, 0x12, 0x1, {0x1, r5}}, 0x69addf22) io_uring_enter(r0, 0x1bbb, 0x1bcb, 0x2, &(0x7f0000000000)={[0x6]}, 0x8) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3d80, &(0x7f0000000180)={0x0, 0xcc6d, 0x8, 0x1, 0x33f, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) 16:03:43 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0xc0ffff, 0x0, 0x0, 0x0) 16:03:43 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x40000000000000) 16:03:43 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:43 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100001300) [ 708.412534][T13552] serio: Serial port pts0 16:03:43 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="15ff03000000000000000008003950323030302e4c"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = open(&(0x7f0000000200)='./bus\x00', 0x8900, 0x2) syz_io_uring_setup(0x4b44, &(0x7f0000000000)={0x0, 0x1eb9, 0x0, 0x2, 0x279, 0x0, r5}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) r7 = memfd_secret(0x80000) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r9) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) mount$9p_fd(0x0, &(0x7f0000000300)='./bus\x00', &(0x7f0000000340), 0x20, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, ':^'}}, {@fowner_lt={'fowner<', r9}}, {@euid_gt={'euid>', r10}}, {@euid_eq={'euid', 0x3d, 0xee01}}]}}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:44 executing program 0: set_mempolicy(0x1, &(0x7f0000000140)=0xffffffffffff7fff, 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0xa00) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 16:03:44 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0xf0ff7f, 0x0, 0x0, 0x0) 16:03:44 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x80000000000000) 16:03:44 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x19}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100001400) 16:03:44 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:44 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x1000000, 0x0, 0x0, 0x0) 16:03:44 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xf00000000000000) 16:03:44 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240)={0x0, 0x5249, 0x0, 0xfffffffc}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) fcntl$addseals(r1, 0x409, 0x8) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r4, &(0x7f00000000c0), 0x1c) write$binfmt_script(r4, &(0x7f0000000300)={'#! ', './bus', [{0x20, '*(+('}, {}, {}, {0x20, '\x00'}, {0x20, '\x00'}], 0xa, "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"}, 0x1014) [ 709.324190][ C1] scsi_io_completion_action: 16 callbacks suppressed [ 709.324221][ C1] sd 0:0:1:0: tag#1362 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 709.340754][ C1] sd 0:0:1:0: tag#1362 CDB: opcode=0xe5 (vendor) [ 709.347140][ C1] sd 0:0:1:0: tag#1362 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 709.356191][ C1] sd 0:0:1:0: tag#1362 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 709.365333][ C1] sd 0:0:1:0: tag#1362 CDB[20]: ba 16:03:44 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) 16:03:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100001500) [ 709.431196][T13596] serio: Serial port pts0 16:03:44 executing program 0: set_mempolicy(0x1, &(0x7f0000000140)=0xffffffffffff7fff, 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x1700) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 16:03:44 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2000000000000000) 16:03:44 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x2000000, 0x0, 0x0, 0x0) [ 709.534793][ C1] sd 0:0:1:0: tag#1352 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 709.544682][ C1] sd 0:0:1:0: tag#1352 CDB: opcode=0xe5 (vendor) [ 709.551004][ C1] sd 0:0:1:0: tag#1352 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 709.560052][ C1] sd 0:0:1:0: tag#1352 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 709.569157][ C1] sd 0:0:1:0: tag#1352 CDB[20]: ba 16:03:44 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0xc042, 0x28) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @l2={0x1f, 0x7fff, @none, 0xcd7}, @sco={0x1f, @none}, @xdp={0x2c, 0x0, 0x0, 0x1b}, 0x81, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x1000, 0x2}) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:44 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 709.721568][T13620] serio: Serial port pts0 16:03:44 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0xffffffffffffffff) 16:03:44 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x4000000, 0x0, 0x0, 0x0) 16:03:44 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './bus', [{0x20, '\xe8.'}, {}, {0x20, '\x00'}], 0xa, "c636010be289cac354580c40895f64c2f76dc24f356d997d98a0b4ceeb7dca80df255a439e4a764bcffaf767d7e454865349b8cdc39eb8af099e45609abfd414143bcb6d74a895da4f31a0047bfc"}, 0x5d) r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 709.760450][ C0] sd 0:0:1:0: tag#1369 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 709.770310][ C0] sd 0:0:1:0: tag#1369 CDB: opcode=0xe5 (vendor) [ 709.776662][ C0] sd 0:0:1:0: tag#1369 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 709.785701][ C0] sd 0:0:1:0: tag#1369 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 709.794747][ C0] sd 0:0:1:0: tag#1369 CDB[20]: ba 16:03:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100001600) 16:03:44 executing program 1: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x7fff, 0x8, '9P2000.L'}, 0x15) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) r8 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r8, &(0x7f00000000c0), 0x1c) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000040)=[r1, r2, r8, r0], 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:44 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}, @CTA_NAT_V4_MINIP={0x5, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}}, 0x0) [ 709.826656][ C0] sd 0:0:1:0: tag#1393 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 709.839044][ C0] sd 0:0:1:0: tag#1393 CDB: opcode=0xe5 (vendor) [ 709.845397][ C0] sd 0:0:1:0: tag#1393 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 709.854448][ C0] sd 0:0:1:0: tag#1393 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 709.863514][ C0] sd 0:0:1:0: tag#1393 CDB[20]: ba 16:03:44 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x2ff, 0x6000000, 0x0, 0x0, 0x0) [ 710.005666][ C0] sd 0:0:1:0: tag#1375 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 710.015536][ C0] sd 0:0:1:0: tag#1375 CDB: opcode=0xe5 (vendor) [ 710.021887][ C0] sd 0:0:1:0: tag#1375 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 710.031010][ C0] sd 0:0:1:0: tag#1375 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 710.040082][ C0] sd 0:0:1:0: tag#1375 CDB[20]: ba [ 710.065476][ C0] sd 0:0:1:0: tag#1395 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 710.075341][ C0] sd 0:0:1:0: tag#1395 CDB: opcode=0xe5 (vendor) [ 710.081708][ C0] sd 0:0:1:0: tag#1395 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 710.090745][ C0] sd 0:0:1:0: tag#1395 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 710.099805][ C0] sd 0:0:1:0: tag#1395 CDB[20]: ba 16:03:45 executing program 0: set_mempolicy(0x1, &(0x7f0000000140)=0xffffffffffff7fff, 0x8) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) read(r1, 0x0, 0x2002) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 16:03:45 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0xfffd, 0x5, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) sendfile(r1, r0, &(0x7f0000000040)=0x7, 0x970e) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x9}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:45 executing program 3: open(&(0x7f0000000080)='./bus\x00', 0x8042, 0x0) r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/psmouse', 0x1, 0x10a) io_uring_enter(r3, 0x68de, 0xcd28, 0x1, &(0x7f00000000c0)={[0x4]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x1, 0x2000, @fd=r0, 0x3, &(0x7f0000000180)="3cd34b3c90af3c95f0c68f7b9998cd0d6c3e975ef49a27cf384de7043abb43a447fd8489dbb4c495f0bf46601f6520d54211e1f18638d914fd6a8fe6a4c4cccce00710aa368ce8291628e9c09456b89380f4839ee3a5e5ea5d881fde3150023597b5cd0cfa97026ae86cf916a4ef81c0b77d56c84a28787173b2b639a28df6355df2f36165f165825647d197cb56a329afbc8ee25c577e81102249e5b2816e0eb9f6083072edc41746aae20768c7856f3172d1c34b6212a85b934636f13f", 0xbe, 0x14}, 0x1) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 16:03:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0xfffffff0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c010000190001ff0000000000deffff01"], 0x11c}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100001700) 16:03:45 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_secret(0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0xb, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x8}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008080) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x119000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {r5}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r4, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {r4}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {}, {}, {}, {}, {r5, r6}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r5}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {r4}, {0x0, r6}, {}, {}, {}, {}, {}, {r4, r6}, {}, {}, {r5}, {r4, r6}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}], 0x0, "2168ec031a03c7"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000059a80)={{0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x8, 0x6b, 0x0, 0x0, 0x5, 0x0, 0x4, 0x5}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0xb}, [@CTA_TUPLE_ORIG={0x2