0x0) ioctl$FIONREAD(r0, 0x5410, &(0x7f0000000000)) 21:09:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x7400000000000000}]}, 0x78) 21:09:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f0000000200)="65cf3c4d8b0dffa9df991e2c78db90d5794a68fb9457cab85a032336f949acd14a3c23fee173569ef86e6b3c9a8fe1bafa9faf5e7133cc00d067eb8cf905000000a9e6c9380d57f7a807379fa5b075f2c3d61e09120f498bf74a12bcc6474307955a65a1b31f248d3b582badabb5bff6e25d8433b6d714b1650b0d933a91aa92eb45853e0ccaae26033d1b6265b9a49398de3c4416253ecef6d73333dc7fe74b9a569870f72cae0c9942eabb9b815a20e2b7ef4d7faec5e72cb2ee012d8e55c6a99a5acc598983fdaad81f646e6e3a953ac7b6039c46ee1f211689603952eac4fa3f3e8ecd9b6808c5edefa5bbb3e0769f4d632033bc5aa9683820835acebc715291d17a8800ddc1376fe70125ba5a82bb3229b6737e91ce15a541dfcbe58e8e939573b5716ba14518233ed3baec95e776182252a58f4b85a6b00c79f8f3eecfdde4b0965da9e8f590c46152aa50bf5689ea1a8b3bd37859e5a1aee8a83ca851cabb2f53a39e179aa9", 0x169) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000100)) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000080)={0x3, 0x0, 0x8}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x9) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) 21:09:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x7a00000000000000}]}, 0x78) 21:09:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x7f00000000000000}]}, 0x78) 21:09:10 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x5, &(0x7f0000000040)={r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r2, 0x1, 0x5, &(0x7f0000000040)={r3}, 0x10) setsockopt$packet_int(r2, 0x107, 0x18, &(0x7f0000005bc0)=0x9, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, 0x0, 0x0) 21:09:10 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000206040000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:10 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5411, &(0x7f0000000000)) 21:09:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x8000000000000000}]}, 0x78) [ 1192.335056][ C1] sd 0:0:1:0: tag#6580 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1192.335078][ C1] sd 0:0:1:0: tag#6580 CDB: opcode=0xe5 (vendor) [ 1192.335111][ C1] sd 0:0:1:0: tag#6580 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1192.335127][ C1] sd 0:0:1:0: tag#6580 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1192.335160][ C1] sd 0:0:1:0: tag#6580 CDB[20]: ba [ 1192.338176][T20020] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x80ffffff00000000}]}, 0x78) 21:09:10 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5412, &(0x7f0000000000)) 21:09:10 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000306040000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x9bffffff00000000}]}, 0x78) [ 1192.628703][ C0] sd 0:0:1:0: tag#6581 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1192.628741][ C0] sd 0:0:1:0: tag#6581 CDB: opcode=0xe5 (vendor) [ 1192.628760][ C0] sd 0:0:1:0: tag#6581 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1192.628782][ C0] sd 0:0:1:0: tag#6581 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 21:09:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/32) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x8001) [ 1192.628803][ C0] sd 0:0:1:0: tag#6581 CDB[20]: ba [ 1192.640750][T20233] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xc000000000000000}]}, 0x78) 21:09:10 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5413, &(0x7f0000000000)) 21:09:10 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000406040000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:10 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x40000) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, 0x0, 0x0) 21:09:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = signalfd4(r0, &(0x7f0000000700)={[0x7]}, 0x8, 0x800) ioctl$TIOCNXCL(r2, 0x540d) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10) preadv2(r3, &(0x7f0000000640)=[{&(0x7f0000000140)=""/40, 0x28}, {&(0x7f0000000180)=""/225, 0xe1}, {&(0x7f0000000280)=""/100, 0x64}, {&(0x7f0000000300)=""/17, 0x11}, {&(0x7f0000000340)=""/5, 0x5}, {&(0x7f0000000380)=""/82, 0x52}, {&(0x7f0000000400)=""/128, 0x80}, {&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000500)=""/176, 0xb0}, {&(0x7f00000005c0)=""/111, 0x6f}], 0xa, 0x80, 0x714, 0x8) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x1, 0x8000, 0x1, 0xffff, 0x16, "5ac4e596ab4b2aab66c3bb44a865467acdb443"}) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000740)=0x3) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) 21:09:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xe000000000000000}]}, 0x78) [ 1192.866855][ C0] sd 0:0:1:0: tag#6582 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1192.866879][ C0] sd 0:0:1:0: tag#6582 CDB: opcode=0xe5 (vendor) [ 1192.866904][ C0] sd 0:0:1:0: tag#6582 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1192.866923][ C0] sd 0:0:1:0: tag#6582 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 21:09:11 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000506040000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) [ 1192.866941][ C0] sd 0:0:1:0: tag#6582 CDB[20]: ba [ 1192.883296][T20450] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1193.105051][ C0] sd 0:0:1:0: tag#6583 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 21:09:11 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000606040000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) [ 1193.105080][ C0] sd 0:0:1:0: tag#6583 CDB: opcode=0xe5 (vendor) [ 1193.105112][ C0] sd 0:0:1:0: tag#6583 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1193.105133][ C0] sd 0:0:1:0: tag#6583 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1193.105155][ C0] sd 0:0:1:0: tag#6583 CDB[20]: ba [ 1193.118854][T20562] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1193.201082][ C1] sd 0:0:1:0: tag#6584 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1193.201115][ C1] sd 0:0:1:0: tag#6584 CDB: opcode=0xe5 (vendor) [ 1193.201132][ C1] sd 0:0:1:0: tag#6584 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1193.201150][ C1] sd 0:0:1:0: tag#6584 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1193.201189][ C1] sd 0:0:1:0: tag#6584 CDB[20]: ba [ 1193.212634][T20664] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:11 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000706040000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000080)) write$binfmt_elf64(r0, 0x0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0xf7a1, 0x1, 0xffff, 0x1f, 0x10, "2b91be4dd70c3ede"}) write$binfmt_misc(r0, &(0x7f00000000c0)={'syz0', "902ff62121f29d00c07130e6ca761436eb90c780c33529e54992c5a385492c239dac31dd19575ef865"}, 0x2d) r1 = inotify_init() fcntl$getown(r1, 0x9) 21:09:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xf000000000000000}]}, 0x78) [ 1193.432463][ C0] sd 0:0:1:0: tag#6585 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1193.432500][ C0] sd 0:0:1:0: tag#6585 CDB: opcode=0xe5 (vendor) [ 1193.432536][ C0] sd 0:0:1:0: tag#6585 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1193.432571][ C0] sd 0:0:1:0: tag#6585 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1193.432589][ C0] sd 0:0:1:0: tag#6585 CDB[20]: ba [ 1193.442632][T20766] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xf800000000000000}]}, 0x78) 21:09:11 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5414, &(0x7f0000000000)) 21:09:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xfc00000000000000}]}, 0x78) 21:09:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r1, 0x1, 0x5, &(0x7f0000000040)={r2}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000300)={{}, 0x0, 0xc, @unused=[0x1, 0x0, 0x1, 0x7], @devid=r3}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000001c0)={0x2, 0x2, {0x6, @struct={0x21}, 0x0, 0x7, 0x400, 0x2, 0x5, 0x800, 0x2, @usage=0xf704, 0xffff, 0x2, [0x1000, 0x0, 0x3, 0x62b1949c, 0x100, 0xa72]}, {0x0, @usage=0x1000, r3, 0x1, 0x7, 0x1f, 0x0, 0x3, 0x403, @struct={0x40, 0x8}, 0x7fb4, 0xc1e, [0x5, 0x81, 0x3ff, 0x9, 0x40, 0x10000]}, {0x4, @struct={0x6, 0x4}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3ff, 0x11, @usage=0xb43d, 0x0, 0x0, [0x9f3, 0x3, 0x20, 0x1, 0x800, 0x3f]}, {0x1f, 0xffffffffffffffff, 0x100000001}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000200)={r3, 0x8, 0x1, [0x7f, 0x0, 0x10001, 0x1, 0x2], [0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x1, 0x4fc6, 0x7, 0x7ff, 0x1, 0x7, 0x7, 0x5, 0x6d5d202d, 0x9, 0x80000001, 0x4, 0x8, 0x5, 0x10100000, 0xfa, 0x20, 0x4, 0x81, 0x69ab, 0x401, 0x3, 0x7, 0x43, 0x0, 0xb14, 0x8, 0x1000000000, 0x4, 0x0, 0x0, 0x8, 0x5, 0x4, 0x8, 0xe2, 0x0, 0x9, 0x4, 0x9, 0x5, 0x8, 0x6, 0x6, 0xe3, 0x6, 0x163451fd, 0xe0, 0x2, 0x2, 0xfffffffffffffff8, 0x8, 0x10000, 0x0, 0x3, 0x2, 0x2, 0x40, 0x8, 0xfffffffffffff8f1, 0x5, 0xeda, 0x10000, 0x4, 0x10001, 0x9, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x6, 0x8, 0x5, 0x80, 0x0, 0x80000000, 0x1, 0x5, 0x6, 0x7, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x159, 0x1000, 0x1, 0x10000, 0x800, 0x0, 0x7ff, 0xdb, 0x0, 0x10000, 0xfffffffffffffffb, 0x8, 0x1000, 0x8, 0x7, 0x4, 0x3, 0x0, 0x0, 0x0, 0x8, 0x4, 0x2, 0x7, 0x5, 0xffffffff, 0x7, 0x0, 0x100000001, 0x1000000009]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000500)={{}, 0x0, 0x10, @unused=[0x8, 0x3, 0xce5f, 0x9], @devid=r3}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000480)={0x0, "bb2dec47904ff48abb8aeb56c67cec65"}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001480)={0xf, 0x0, {0x8, @usage=0xb05, 0x0, 0x9, 0x0, 0x8, 0x7, 0x7, 0x60, @struct={0x9, 0xfffffff8}, 0x1, 0x7fff, [0x80, 0x9, 0x1, 0xc6, 0x2, 0x5]}, {0x6, @struct={0x7}, r3, 0x3, 0x7ff, 0xffffffffffffffdb, 0x8, 0xd13f, 0x42, @usage=0x1, 0x6, 0x2f, [0xf, 0xbda, 0x2, 0x9, 0x3, 0xea7e]}, {0x4, @usage=0x4, r4, 0x8, 0x3, 0xb7, 0x10000, 0x101, 0x29, @struct={0x3, 0x1}, 0x7, 0x1, [0x1, 0x9, 0x80000001, 0x4, 0x9, 0x2]}, {0x7ff, 0x73f}}) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000440)={0x0, 0x1, 0x19, 0x1a, 0x163, &(0x7f0000000040)="d44a8e2a57d16f5ea448b3a030504463e996c5a187f5beda87639999b0c0d95eebb6a92bda505362394168c03ca94a0dc4fa746d2c6826ed3dac7f7d71df25abbdb715d64ac0b40296080525e1bf8e11c47d33e6eceb1a005e03e762509b731902c0016b8bf311b7e7d986f1f6944b8350a62e87979395b1e2f6b02d6fb1d3890646ccc32e5bbf80bf7af3cac6e24f3c52ea3473e8e0b934d6945630f1bb869f05ee750ef781e308d594fcf31448ce999bf2da4f55e7f97aaee72321c4273f48930407c820d51f8929e1cdfa9284d2520676ae25b782fc607d001c522f211a95750a32ec5516a903b0c50ffddf58737793d59985b4bd1a8bffa0a5c6dd57b235b3ab0dbac7d67a24f4e6a57dca077d170bc97a822df97a5cd4754127dd691484f6b6c78238db19a012f93ce8d4b4ef2ad2674abfe0546ac6799449ae8144a7240f1e5c6cb2218325d0dca5dc7f124c34e8583f7fa907a0ebf373ac764e79729bb76cb292b249d4a540646bc79a9a0cecc445de483a8aa39ecc4733063bb17222014ca8a341d94e583e3bac7f0a49f02e4eecdc780e590626437bbe9b2f0d5c1cf09692ab7e2778e5fd449bd7b4d864a4d4aa16f61d59b7ac926b04ba73d99100c7bb83795c7da03c5b0f66888d463966cd995f741b2b2fa09e3b3df75d4304f2c298a84d6ede9a81dc0bd2a7071f7c1fdb61f52fb2df088938b8859ffbf264bf9d89d61c2c1ad5d16742394ed95958ae1fff3630b6321234ea3c3605eefcea664fa041a5da253c9a87adcf71e2bd009877b53398c6d374f96bce557e787d7eaf4566ca044a0dd0554e4976f31fbd182371c3fa24d2e64ae7e92091f2ebd2f9217e7683975018654533a614ddc793dc5b317d0d3a8770235b08d9fd1b8874f9f8a36e71b8988decdcdf350870af86be361c76bad40c68c68b05beb91e5e2ff4ade663c32638c35b9d2e49a0a05bbe1f219a247d7f969828d7e8e4a6ec7327f16665d615a1e92e109e85195cfa4fbf5ce1a6f6431b0cf22f82320c3cd53a61d03fac9a5c8dcfdbabef1a910504d9ac7f56dcf60b902e27137116323cc3638ebf820d506fecb195e8dd1e34ab99e7ca8bffb278d92b04269483b88b63fe7618a1ebb327c85605d6bb3c16b836c98ac14ff0ddfdc6f827d686ba9aa400fe92fc5275a2a9a188ae6fd724be7bcc34d7ebf51185dfeb7ec26498d0f6f310534ad2f2ccce7f7ec2fb4d0a3fce8f9e5cfa69ea04ebf9f9b091ca743aba75cef146dc17d212f8ff4516a011365545c2d2cf779ecb5fee2d520d0353657028e389b457aace5579e26df68f8d9768ab9a3830ab63dd0625e26c2ed9ae4f11dac0ef19ce59d68d4db62fc86b3e683c53ab41877f14b6ac431e502c8cccdde6b91f98acc2e15d2d4e9985f45a4a6ebedf8b471f2a8f1e2b89126ae6d601ef6ad92c341136c96f"}) 21:09:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xffffffff00000000}]}, 0x78) 21:09:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0xffffffffffffffff}]}, 0x78) 21:09:11 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000806040000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:11 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5415, &(0x7f0000000000)) 21:09:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x2}]}, 0x78) [ 1193.826971][ C1] sd 0:0:1:0: tag#6586 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1193.826997][ C1] sd 0:0:1:0: tag#6586 CDB: opcode=0xe5 (vendor) [ 1193.827018][ C1] sd 0:0:1:0: tag#6586 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1193.827042][ C1] sd 0:0:1:0: tag#6586 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1193.827060][ C1] sd 0:0:1:0: tag#6586 CDB[20]: ba 21:09:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x3}]}, 0x78) 21:09:12 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000906040000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) [ 1194.054158][ C1] sd 0:0:1:0: tag#6587 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1194.054179][ C1] sd 0:0:1:0: tag#6587 CDB: opcode=0xe5 (vendor) [ 1194.054212][ C1] sd 0:0:1:0: tag#6587 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1194.054228][ C1] sd 0:0:1:0: tag#6587 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1194.054245][ C1] sd 0:0:1:0: tag#6587 CDB[20]: ba 21:09:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x4}]}, 0x78) 21:09:12 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5416, &(0x7f0000000000)) 21:09:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000080)={0x8, 0x0, 0x7fff, 0x1, 0x5, "ec5d0c14abe87b4944fcbf2d06cffe0430df0d", 0x8f0, 0x3}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) 21:09:12 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000a06040000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x5}]}, 0x78) 21:09:12 executing program 0: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000040)={r0}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) preadv2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000240)={"e71bf4d385dbee4122858eebcdf8b7ae", 0x0, r2, {0x8, 0x3}, {0x2, 0xe35}, 0x400, [0x33b, 0x0, 0x4, 0x7f, 0x1, 0x6, 0x6c, 0x9, 0x4, 0x0, 0xbce2, 0x3, 0xfb, 0x4, 0x2, 0x2]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001080)={0x0, 0x40, 0x2, 0x1}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001480)={{}, r2, 0x10, @inherit={0x70, &(0x7f0000001000)={0x1, 0x5, 0x33c, 0x6, {0x0, 0x49bc, 0x5, 0xffc00, 0x1}, [0x1, 0x1, 0x1, 0x8, 0xffff]}}, @devid=r3}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r4, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r5, 0x1, 0x5, &(0x7f0000000040)={r6}, 0x10) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000000000)={r8, 0x0, "d85d33162952d91ca4e1ba21bf2d8e046d3c70577939d8625057330067f2e2af4ddd2499c8ce927ec0b130b00643dfcbdd1d73b670f40501797055e9ef215ebff58764c5d28fd7cac24d2933261201c8867a5fd70b80fdb493cc972cb3263fb889298c17b4f310ce22bd0fca6d4de0fd85c7b1d7531dec37d08b766bb0600e2927053b56465a868c9465fb4c71a479742ca6ce07e02ecce7a38902977375cc31f787807cb703a9fdfbbdb49496105ae47508465b691fa364f9c33a189365cfa3ed05d90afdb81e633c81e1193fe23237617f68da76250bcab7965fffcbe70c15f22b847549f28458c3a396bd96f8478327577d949a35c497c5e582dbf312a80b", "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"}) [ 1194.301753][ C1] sd 0:0:1:0: tag#6588 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1194.311810][ C1] sd 0:0:1:0: tag#6588 CDB: opcode=0xe5 (vendor) [ 1194.311830][ C1] sd 0:0:1:0: tag#6588 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1194.311848][ C1] sd 0:0:1:0: tag#6588 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1194.311866][ C1] sd 0:0:1:0: tag#6588 CDB[20]: ba 21:09:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x6}]}, 0x78) 21:09:12 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000b06040000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:12 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5417, &(0x7f0000000000)) 21:09:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x7}]}, 0x78) 21:09:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/23) 21:09:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x8}]}, 0x78) 21:09:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) 21:09:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0xfffffff7}) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) 21:09:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x9}]}, 0x78) 21:09:12 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5418, &(0x7f0000000000)) 21:09:12 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x404000) write$binfmt_elf64(r0, 0x0, 0x0) 21:09:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xa}]}, 0x78) 21:09:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/sr_mod', 0x2, 0x195) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)=0x0) setfsgid(r3) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x42}, 0x4e22, 0x5d2, 0x4e21, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, r5}, {0x7fffffff, 0x62, 0x7, 0x6, 0xffffffffffffd465, 0x1000, 0x0, 0x40}, {0x20, 0x12e, 0x3, 0x440}, 0x5, 0x6e6bc0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0xa}, 0x0, 0x4, 0x1, 0x0, 0x5, 0x0, 0x3}}, 0xe8) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, r5, r2}, 0xc) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x7ff) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/67) 21:09:12 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000c06040000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:12 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$KDSKBLED(r1, 0x4b65, 0xffffffffffffffe1) clock_gettime(0x0, &(0x7f0000001800)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000000)=@nfc, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/56, 0x38}], 0x1, &(0x7f0000000100)=""/149, 0x95}, 0x8}, {{&(0x7f00000001c0)=@alg, 0x80, &(0x7f0000000380)=[{&(0x7f0000000240)=""/209, 0xd1}, {&(0x7f0000000340)=""/11, 0xb}], 0x2, &(0x7f00000003c0)=""/204, 0xcc}, 0x40}, {{&(0x7f00000004c0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/212, 0xd4}, {&(0x7f0000001640)}], 0x3, &(0x7f00000016c0)=""/124, 0x7c}, 0x4}], 0x3, 0x40, &(0x7f0000001840)={r2, r3+60000000}) clock_gettime(0x7, &(0x7f0000001640)) 21:09:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) 21:09:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xb}]}, 0x78) 21:09:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xc}]}, 0x78) 21:09:12 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541c, &(0x7f0000000000)) 21:09:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x7ff, 0x7, 0x0, 0x7, 0x3, "6ecda38847c5513f9cc0148cea477b51529429", 0x800, 0x1}) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) 21:09:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xd}]}, 0x78) 21:09:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x480a00, 0x4) ftruncate(r1, 0x8) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000000)={0x2, 0x9, 0x7}) 21:09:13 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000d06040000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:13 executing program 2: r0 = memfd_secret(0x80000) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1ff, 0x20, 0x8001, 0x2, 0x7, 0x8}, 0x1c) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1f}]}, 0x40}, 0x1, 0x0, 0x0, 0x20}, 0x40) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, &(0x7f00000004c0)={{0x1b, 0x4d, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}]}, 0x78) 21:09:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xe}]}, 0x78) 21:09:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) write$binfmt_elf64(r0, 0x0, 0x0) 21:09:13 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541d, &(0x7f0000000000)) 21:09:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf}]}, 0x78) 21:09:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="3002a9ffb249919c0a362296804a776c5241421aee6fce26d56e75c37294ad041dc9185b600fb7ad50dbb222e3e8cdaffed1b770341bfc09f7dbdc554a535bcab6df467d2a24f1cbf9886796af6de15227ad45783e5f5173fc49f4b59166232459fae9fa1fb4c2cf5584ae291b5df8995e92605ed15ff1f20ff4be5b94812f203d4701f8697562603b3e43e55263798afcd12cf7d3625b52b1cf4abc04e82c5e12e2338e46f6f7765ace475be51dcba000d5b18bf7757a7cf5ff2ea2f7535a5ab5da989ebe3d1e2599543a38589ee96cf27f2cf27b1fd1fc14f7d8cd0b71878f4b9135241d9f9f5fc4a74fcdc9021d71c25c37d66833bca19bfda94dd99f", 0xfe}, {&(0x7f0000000100)="1c838fe09dc5a0cac5320807", 0xc}, {&(0x7f0000000140)="ad65930f1f5b7e43cb5e5380ae61979f84a54ff502aee11776db916a070fd9393deff7a156a32b551871435708567a7c407b33ad9a1f5f4eb5fc91c7c81cf1496fd83d32d879a13ab92b0a726a858cf0dde0e3e15ea278c0543cdc9d0e7dfbd6621ff57bcaadcc26c1c07bc493e2fabb261d5b3dccaf1b6dc677b4db", 0x7c}], 0x3) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000240)={0x0, 0x2710}, 0x10) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000280), &(0x7f00000002c0)=0x10) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r1, 0x1, 0x5, &(0x7f0000000040)={r2}, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000200)={0x5, 0x9, 0xfffffffffffffff7, 0x7d, 0x0, 0x1ff}) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x4d, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}]}, 0x78) clock_gettime(0x0, &(0x7f0000000300)) 21:09:13 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) 21:09:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = pidfd_open(0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f00000000c0)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x19}}, './file0\x00'}) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="6792002e2f66696c653000"]) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x40000004, 0x210000, 0x3}, 0x1c) clock_gettime(0x2, &(0x7f0000000100)={0x0}) setsockopt$sock_timeval(r4, 0x1, 0x5, &(0x7f0000000040)={r5}, 0x10) write$binfmt_elf64(r4, 0x0, 0xfffffffffffffd36) 21:09:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x10}]}, 0x78) 21:09:13 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000e06040000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:13 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="6cfe14c80c6b36a07911c5790a717bc5f2b5c5862b46d2a0229f7ba585dfdda0ab08566f8eeac18cf33d35d57cece3b7571d4004748debc1699d2a04bad0e1192cd2079099e04589fa", 0x49}, {&(0x7f0000000100)="59e60c352a216b55a3bb6004a12a35cd98ab344e", 0x14}, {&(0x7f0000000140)="251d3cf3e28be8fe3dc91c2c6ea94ee58cbc95f984a28c1248e47b016315a4614a1ce3f61c8afad5f93dc766a5e07b9f54c28e2ee116eba0c0cf0eaa516bedc1e4465406b02e3be938bdccb2721f3d491e975177cc94753eca584eb11eceee67e17239b138e01040d864f534320914aa87b7405233dc3acd2ca4c7270921acf06dc5bbbe0824815d195ec2703e911dd52d4d8ad18993cf7158ae8715e1e4fb1467d440a8", 0xa4}, {&(0x7f0000000200)="c30525959055ce38b9d145bb34a69f6c90934517e08edfe260a279242e6f967c51bab00639ea2b24100ca098", 0x2c}], 0x4, 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) 21:09:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x11}]}, 0x78) 21:09:13 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541e, &(0x7f0000000000)) [ 1195.295478][ T23] audit: type=1400 audit(1636405753.366:3068): avc: denied { write } for pid=21703 comm="syz-executor.4" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 21:09:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000001e1630018000000", @ANYRES32=r0, @ANYBLOB="02000000000000002e2f66696c653000"]) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/44) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000000c0)={0x5, 0x6, 0xffff, 0x7ff, 0x18, "35c89f1472d6c2bae55ead25743a7539e65eda"}) 21:09:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x12}]}, 0x78) 21:09:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) 21:09:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x18}]}, 0x78) 21:09:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b4d00070000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000003f2e08b56d32e2e70000000000007e74c2edce7245dd647ede685d1e73b7b4e3cccbb483ec50f4b08fa3db73a1cf4efdd063ffd7ccd07071c10abb05"], 0x78) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)="44efc0c2ce0d42eedcc79083dcf81e5055e6f0c7d5a0100a40eede3d2c6d0818b9ca687de7becd81fc1c01e112a28c730d2bc96f15a38e40a2c42d63831c906dafa989db0dc4d3e52641ffc14ccc4c47539f7678224587296c07892f1801267ff821486f776cb21725d0a5da6697d7de563b39d5044f5345acb8", 0x7a}, {&(0x7f0000000100)="0e76725e96b4d86aeff062dbb2f6269bb311dba7ed8eaa41df6403796deae63e8e9b4e8e2110b9fc3253ee618bb757cae7410e068d5c9ad722e92f72d1e7f8a8bec1f4e63bb4df1db309de5c06120a69560bcff51c6c3abaae96e291d77fbdf03fbfe9400eade418ba7392779250543eeca79f1725fda2b4c0547818265c555a229c087bc7f405cd34a9e0f630135688180daf408d08a3ddbda9ec7a123f6a72d2e2", 0xa2}, {&(0x7f00000001c0)="b0cb0d14ac2e7f7238d4d0928890d215d9f3e8aa657f624e5f", 0x19}], 0x3, 0x0, 0x0, 0x40004}, 0x10) 21:09:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 21:09:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x0, 0x1, 0x4f, 0x800, 0xc, "7dadf5ddc20fdfd3"}) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x3) 21:09:13 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541e, &(0x7f0000000000)) 21:09:13 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000001006040000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1a}]}, 0x78) 21:09:13 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b4d000700000000000000000000000003000000000000000000ecffffffffff3f00000600000000000000000000000000000000000038f100000000000000000000000000000000000000000000000b0000000000000000000000000000000000000000000000000000000300"/120, @ANYRESDEC], 0x78) 21:09:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) 21:09:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1b}]}, 0x78) 21:09:13 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@acquire={0x130, 0x17, 0x101, 0x0, 0x0, {{@in6=@remote}, @in=@empty, {@in6=@mcast1, @in=@dev}, {{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@XFRMA_IF_ID={0x8}]}, 0x130}}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000017c0), 0x4000) r2 = fcntl$getown(0xffffffffffffffff, 0x9) getresuid(&(0x7f0000000340), &(0x7f0000000540)=0x0, &(0x7f0000000580)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001900)={{{@in6=@loopback, @in=@rand_addr=0x64010102, 0x4e21, 0x9, 0x4e23, 0x5, 0x0, 0x80, 0x20, 0x0, 0x0, r3}, {0x40, 0x0, 0x8, 0x4, 0xffffffffffffffff, 0x2, 0x1b13, 0xe9a9}, {0x9, 0x9, 0x1, 0x44a}, 0x3, 0x6e6bb3, 0x0, 0x1, 0x2, 0x1}, {{@in6=@mcast1, 0x4d5, 0xff}, 0xa, @in6=@remote, 0x3500, 0x0, 0x1, 0x3, 0x5, 0xffc00, 0x1000}}, 0xe8) stat(&(0x7f0000001ec0)='./file0\x00', &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000002080)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfe, 0x1}, 0xc, &(0x7f0000001e40)=[{&(0x7f0000000140)={0x88, 0x3f, 0x20, 0x70bd28, 0x25dfdbfc, "", [@generic="f8bf3c2c4d6d83c946a77abc7a8dce11083c129fbf0f272ea0e3767052841d9031344d627a7fa78cb03644e208f2f66a15b3f73fcc89737ccebcda80ea6bfab8f58a3a9cce3eaa0dc25a36246d8e47c641fca7761ff615b6608a4ef22beab3c4d0d9665e8f9e9cf09e00826a95a440d66bf2702cee1a22ea"]}, 0x88}, {&(0x7f0000000200)={0x1398, 0x1b, 0x20, 0x70bd2c, 0x25dfdbfd, "", [@nested={0x1a7, 0x15, 0x0, 0x1, [@typed={0x80, 0x68, 0x0, 0x0, @binary="537a5f539ee8e8cdfc1eaf2932cdee417f06927b18c7acf01e528bb4faf69a87e51a5cdbfd5c7315209a8a00228da8618e0d459ceec138afd0fda82d1880ca4d22334f145d9629dfbd084323420eac6162ea6a5baa20a437d21dae689d14ac5e402541e1887a979ec03efda95c7cf6dea5a5d81ebb360e7d4febe042"}, @generic="f8b2ba197b9d75f85d34a86257c60c3ab2ed6e03f745689125ea8602560ca4df81fd51c22ed5f2a94482f8eb25be2765935080243f175f43940cb21657441db22347f4f833f1986b746453b60b02bf31dc409842c7bbad80b697e922ccc75a97abdca8c362841cfb0fd47e3c2fe95ac4c060aff9cd3645559c0ef04cdee6ba4b3336c80af22fd4774d334ae9030ab951bd8e48213e26b29cfa4356a414c96f55292f99c24caa5c26e6c1b420b00724daa2884de5dc717e22d1e8fd42190aee058c915d2425d57b01e3b1b1c8e35ef80d", @generic="26c703906411e320a577ba73d7a966dac34b28d8e852778037314515dd4eb5e0d9f5a16155df5f72b9c06c03364a7b7a5688fa9dc9313d57791fc9575170f7d123865ebd3452479e478c92ea2fa586a0b4c3b4"]}, @nested={0x1d4, 0x5f, 0x0, 0x1, [@generic="816a024016c74b3e93a07ba1f36162886152b71f52bc3b53faceb46f3741d8262c805313eb1cf003ec50e5c823d3abaef5befa790a2914b7dfa7474503a6959d4e9c20ea3abae2419766", @generic="0726f1f574ad654cb2c551d72dd8e535e7fa99e4588e6316e924e8e985754ef5fe64b314ae52a1b71d2e1f20e02a2bcd7861873fe7e5a81c60333afb2c1cd3965695edc7a8878ff67b8cd5eec0bd8ad996baba", @typed={0x5c, 0x8c, 0x0, 0x0, @binary="61facf3bf3c3213f8e44b10fe6f6c00652c22d87b46a7b649d4c6e1bbe175f71b94c1254ef163cec5501ec1a1b4f7949d3383db30558f746f64abd21c641fca766ce8dfa034367005794554ba9ee7d558b4fa645eb96d290"}, @typed={0x7, 0x90, 0x0, 0x0, @str='/^\x00'}, @generic="ae987106b03e986138cd035d899eac22f15a54c3a279b148937e47c9f88a97b691d6a3f45d502064902c6ac38486c9435468c3734046646c32a508ffbecba119d32c660854b74271ffc91d95f5e0fb2d2adf2d8a7dc403c869a02feba9b7528f8e412c6fc12f0939a040fae67a78d508753cc40c5be2f57d9b9d622455f1dc33465062240cfe249ee6c86abba80cf1c0a2a1adeaa315865b614e4897fe8897e6a91c0d61a6601c83e4e9c6d8554cea36ec847a3110906125526c1f22e3f202", @typed={0x8, 0x2, 0x0, 0x0, @u32=0x649a625b}, @typed={0x8, 0x53, 0x0, 0x0, @u32=0x4}]}, @generic="3acc051cc526bc6513f26ec47e2407419c38ec44c7e49cff4d1bb04a97885f5c2c04ae206e90cf3a04206ba3796fd5b8b1eccdb4da0fa3f315e0b280d6cbf8e6db0adab4282f1d56469a58d5b617125f61d6da68c27275b99fe92e75815d2cb77039a97a60bf037b5b8db9c0730affac52c3eb4a64173c05500caede90af1fb96d8c80d071da253b3c36ea6a3b39334d581fa22ebf7b7b9e138a612d451caf60dc35c9321d44e45a3745d7d2724ad763389f98948d41d9bb3b850679072b707f4a37ce0d4d7e954b5d31bcb447183ab20309a6028119629774c46117b9acc2588c674b3fb788598ff3f9964dfc2f88602831c7e2942e9d95eb2d00c2a870403d3558d85817b1545df4e8181fd336bd958720c2c62318e9eaedc85ce9281c70755c5a504cb58030ae533c32ec36ed8a4b774754286a42c90cee0a7863ea70b993da772ec95c41dd31ee182419802e5f4e3284f9570ab37fc49b31302b66777c19068fbf704ee2e69bc8882cd7746ad070f98d71efce206d9bed613ef758d542ccb0af4c8af78708975913ae2790d8439d0137850a68276cfbdf30943a8a9fc960b71ca328f802d0e46186cba791b14f5568dbf394d4361710c140998e14e349a081ce947890ba6cb8e9c502cb7cd09410af35e1855fdc0cd777ccf2ebbe80b97aadea841ed8898f9f5c811f430c36475fbbb0bc3c1bebcea9f2180594719b1550cbe3dad3d455d03f42d6d0164903d18e86cd5661effe5b706b568e793c571aa75c60760eb159056d641ed8ec4b4e6edc947f3e424eaf87629d19a96bf90a40ce529c51a92f4473276e778bd23ee218cd355a377e22eafad185ecabcc9265a7991a38a0bf7ec71993b60af6af4f6db91852f3d38754eae233b778d3c35fd3c6fd75a8aee0809d5b72bb5905b8672e8ef3b87d6427999b7a1d770c9385f388bf1ea8dbecad39867eb29638064a529dff2a369285669b6dbc6fce90fb4c04be69c08e12565454d7b2739e7b000d9913909b636c18f98fcdc0bcc598a4937a9b89029d2f0652608418480d62372d24f1cd11994f19449a5428a22abdae6460bb96249484e3da81ff4606eec9ea78df48fe4ef063786714ad110bc4494fd841b9821bc655daa3e0854ab8a1270bd69176091eb10263f82814f17931c53692990da7fa44e0bef5cba83f7a5b3366a69a826b6800197ee6d7ccda5f546f3a33437e204e250eb34f2f7647efb99e0b7f034ffb2fbaddffc3d867b1065b12f31fcbc0e31572a23f890785993670ea6509b0ea1f3d45cad0182349a9497d34bcf02920c2686be747c06976cc68359c2514b453d7f2a3a233f761b94a1ae4c6636cc2ceb706baf503d348810985f8fa6770b7d52f634e00012575c272a0d5dc7258e2dbe0414bb0f60f8098641acf74c0346cbe398b3922396e7acc7ff779a29dc1cdee52852e3d7811466a398928f6654016b011ff008819b811981007468858fe5b28e97f1c85dc08228066fbd1c714cba8d6ca3151a7da3980ec5dc2859412c9564af0b60935213c82b7b34dfa510942c8e06c63ab011dd9e09a52319361c8d841b0d3364cdaec533ba70c1c3525858337150da61b7c6fa34e8ae7b346481748d71ef7579031ecb01dddd5162534ff3f6d399d7895b0e58e398ee7364f19555e14f1b872da9673005d967118c10807fbd242eef7c2a2656aaa63485254e168b8795bedf12a4462b1be7a4c0124da76b3da7be609f98e7c58be2ab5c1fdcbbdc7447ed2a50bfce081c2d0342ef9db95da8770cf98beafd890aafbb6dc2663f9b3bd2bdde26725d073f4f97f162f7fedef5fcd198818b3a3137f03da071a23436afe80709f1156dd6e8fc30bae834695f112ecc44cec357f6cd6e33d2b93755b8f6732d8676057fa3abd98356a24bcc237bb245b8a062379bc91aa59dd0aa8b66afe5f0401e78fdb9ed926a040fb7dd9a72140fec39ac54201004db3d06685fdc63cba30d3fbf51f4f28984389da511ea8bee13ca859f32a15c40e5707db5cc6984c1434e25953a6b0367909426ab5c0f0e17f5ab98c597d4acd37f5c587fc3c4b7af290130675f295e1f25302f060616c08748ba7cf29073a187081a71318f94174be9158ac381884dd576025ab62d56eb164bc176fdc1503cb6c1ab162b6cbbefa49d93a80067041077764ec784c77ae06941e80859a1c312c3f1363dc93ebafbd16d3d37e1c87ec948888d3018193fa3f2de3be9f137b52300264e18bf69f78cdf22d0ffde344ff053bfe0c9f53aac74da0be118a9ac575073d90af0dc27e90250daa8ac87e34c026ca3481d370e8cd1a0f5f05890147ec37ea2ee7c9547c34d00ac01b4977ce6582664884987a51a69d07eb827bd62fa03c865ac81ded1b75f2af9746de7b30accc775b5258e59f8f78b977dfe3762d864a88ab9ca3328d02a0b4b6a79379acb9f2d9542bea0c7f73608799ac8f7518401fc9a5994a08a9398affcb1bd9bcda2518ed86a7db1257677b1136260991c75113c58eb03f01c1e95f6ad696aee2dc739a3c84dcba6ab19d00e9419bdde6701aa54fc9b9cee104f109f38648c4e74bdbab7840383e5346c52ba320cd62fa7446174949869ebf49d87911d3efbb80943e2364305dbc20d027e99c8becbfd573effbbb172470990767f32a8325375a0dba6e8753c02efbb1dd5d3e95c33e6c91b4c301d14ea516dae74d8baf715b666fd7b04398b12d5f468f219556ac50c8e3a448bf92dbfaf309b8d9756f4cd97511ec3872f07f84e024d79a4e3a9d695737c157255566fa0e4f9def7dba5f6fbe1507acebc9a6197ddaaf429f78506cd67aac06a5aabab0e8d3bc2d915a95a2afc541d8625280eb69b0681ac7a7250f04d19e336ff46203a2aaa37caff48f7aaf42fdcb1c08f865fff1a268ba2362ef2b2da9ab8f010cd8f6b52b9091fc4711cf7b520df852ba1a304d0c66959b5572cc22634b2d2053503894ba83bcfccc057a7f529e786ff5e8732efb3c352842ccd18460ab3e16931387dfcb71c2d60cf22f177b6660a89071e7470dfc11ab08bf538c3af982eb305319aa6ff3311214dfc558263d4cd4d3cf3911191531494e84d7b99fd9142424a7cdd713814ea4549094c7e8df47cc322fa4bb57599787f9e79feb1829c921fe4102704ae444d9031c9e175e8b8ba729d6e3dc6aad4e824361b6ab4cf1dbd292fb96b1abb902bac1c73a3bfd134e2a4235028f70c31913d56bd14f02c7332b706d06dea318b20d85a13fb19d168fc14d47a231235cf38ed706a7368d8676b9ac2bf30191571e61b7db9be42082ffbbec18576a15b22a3d8bbd290f9a1bb3919dc2c369d70b32b075124df13a51d1d4fc66a89f10ccbae2065ecccc92182c28aef7aa5c8e6512ccd725a8451e9c2f1ad0fec525e0b4b35db4f2634abccb301a767175d95101825a6ff00b2e37b339bb29839adfd61213fe740f540b707086d2739319118b2ae82105cf1816dc040a72e04578f4c1af0d3a642a0484c3a4f76b3ccb360cae82ddbdbe54f4595aa07c8950f9f3e0cd897a08176fad52db5f5dd94c40b0cb29f55cbfdeaad18d5c908a8c00f24125d24010af0a89abdf84bca52a24363ebb68e63266ec4b7cbd8875b8b3b05092dd79f2525077ddd90008c36cf6bc5b974020a11753fe961caee378501cd32905a34431cf6fcd8e5648ebc52dba6bd5ec1498a70dbfe03b836be8fd6e347c06732b839fb358bf79e3eb25aa4533d89e114b1bbfc04a5cb6a0ca97af20248eaee84dc5488975bc025252f0ae9e3cf3c7b3f0b671b0fb6e846db558b41dea34a6bf823fe69cd8cc3b126f7a65d38d0c62185463920fe004ef8ea7aae8df7cbbe6c1144dc0532aedd75478c11b1b9e85682443658386192c93417feb244c87dd24134408bf2de57d11e02e52dc8bacdd6aa462d3ff9c8ee7ddc8d48f283430a98652cae05b3fab43b664706771b4ae34cdc954a721e564409f5193bfcb89d759c9f19614006d2c4d8b3695e75197b7f5b3c0ddc2bdcc566c15f5378c936b96cda03702ed6f245ab4b44268a0be4be31869dbb05c46eb913708ca535b39ef6fef6e655dd7b2bae32ab18a86331c29dea283e5174335ac39f9fe2a8102b56b927b7ad035a80f4e985104ec2d510d68cc4f82af7aa4e4a9415158e773d5f06a8b544b32c9a3e0af3cb8989408d10c46bbacf80f978e719611ea192d4dc04b39d0f3b40228211e75153ed0bb21bfd6108e7365434f7a608d2a4f951c7315f036eb9c4a8d04f719e13a0c90defd4a1b3ec2f953fd65458b199dd6884018e28b98b52f774a7a75e7fd109d3ce9384416fba7c3c297ddf5c97c457b5ccc417572e395f3acc28b04b45b498e44231438b637c5a390d5a018f2be2b8142e5903563dbe7b0e9938e663dc5e3c51a68d197e96db7d67e6b61f84a2f030585429ef92a4a4bd5598eaef16cf6f51ae2e84e10006314a52e29cd430a18a72fa66e12fbebd0d92f34605e0a96852417d2ff32446fab28ee13baf1d7bf634c2e6db3cfa6a12a3cf55525f4ab745477cfa7a0d23902aad660415fca70b19f8f773c047d063f40c2c22023933642c9568bcd0552f7067f116f05ff1de7e269d2cbde9b53d0dffb9f3c5cb2099804d54a2da2e80c21b32d29b3503b4476a81450bf794536b268057269b9d53d4ce163e6d8e8f8ba7eb519a41847ccad0d85c701ff2ce393212493b68d84d7e59e48f4691dcfd58d5c901069fe18f0280e8ace88ddd0c40e39843e14eab7d4de5f46d83b3d6271376dc110b851554c678d02ccadc08eeef8f9cc1a163d28484cbc37f673b969f6a90faed87f199fae35cfd6d136946b76a71a99d8bddd97c43dceb0376633653b566492a2c58cf012231cd6ecf2390c0a8bc6af0578c82615a860fb1a180070d6538df18442a5d106813a96058b8099fbfb0c29729944c59e377c2b94c94102c237992f1ee246a73767c9e37bc354b64f08076399fb8c3f3ba82d357abad7b80bec6039ab4b21ecd757ee414526a21516bdfd8c3e8275e51ade2426e5cce953821642f823b26a795063afe3f34e000636b906b7860d581a70edcc839a06d2bb4da26932b2071cd1d451452b7344ff3942ea7e927cadb38b1de741f0c5da18bbce0f2a77473868e71d196a79e3aec47d7a53c30576402f9bcfc14f8b136aeaaac6330ff573ddd9d5053d15387d72cf85aa6b1bf343cb2bdc2ab2ea2b1f607bb880ae5e525f7c4db337dd308ddbb8a918f671ba3f7953af207f7960e2bab20da2dea2753367dbf734880df390fe209d430fcf7dd83d5a9c347ff7ee318c206d68e80cfc703d17c86d93e24295d2c370af14bd226a094d17a60641fd4f07939654e89477b38b880e473012679082a9278a87b18e8b75a1a046e082cb42b915ce43e74fc0a7629fc3d5b08b8fc3b65c09edd0885683bbe5d28e0c87a679397e1c06582dbf85c9f512583757d0355566e46d0e1e8165d1ee63cfda6c551b76a1e7e746649eabbc2ffeefcf9390554084545ef2807730eab1f23d2569fbcd60bc96bc38f909ddaa8e88fc49dd47168c1396cd3de857a3ab0162b0baa4860aa29a41a51307fc2c5c41e31b05393cb8b3fc303fc7b9329d6749342292972408c8181a1a506432caf8caa8fb870d7c2c907b40fb9bd76e8f4aa5043f804545ea03b78a94ed1e7d565756f94a6a4ecdbf68218be30f03a5d52d1baf8dab629279fc0629ac06794fc530953e29ca2317ea41419fa0dfaf437d2b53af24f0910d82a88319fddd14a312cd1b72a6c81b19d1cd3aaf", @nested={0xc, 0x12, 0x0, 0x1, [@typed={0x8, 0x81, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}, 0x1398}, {&(0x7f00000015c0)={0x200, 0x2a, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0x45, 0x0, 0x0, @u32=0x5}, @nested={0x1e5, 0xe, 0x0, 0x1, [@typed={0x8, 0x83, 0x0, 0x0, @u32=0x101}, @generic="5ecee46fa71a0aaac7d23702ffd0f94ea1d48490919978da0fcd010346", @typed={0x6, 0x56, 0x0, 0x0, @str='{\x00'}, @typed={0x8, 0xc, 0x0, 0x0, @str='.!\x98\x00'}, @typed={0xc, 0x69, 0x0, 0x0, @u64=0x3}, @generic="12c121833323fc547a", @generic="da0c916e5505517bcee66adbef6e31a51e201dc0b9c919dfb6bda22a06d29c4ee47d4355e2ab5822873732e3210ca246c628cc5bede06d6a50f29db64ca6f13aa298d63b64b54a0913f8444ec389e7fda7748847d4c0c27da8944bf32471b5d3e21dff87131ce2909d656068f50ff317b7a6a2e8facdcf5139babef20b68b1105b9e4c65eb527cf106c5a35db770d22b17a85ecbb83580b5e337ca474e856d37681bfa35c47a85fd5ae050ba4bb64801ccdd02f10cebf80e96ada3571b469a35881ae82e3d55a8d8fe9d94939c6a86e72aaa7fc5221b2bc70d57ba36ca71c44d49ce8e", @generic="389424af5504ed24a32d4762ef874e78e3cfd435", @generic="205d9e78513cfc356e02059f385d390d2de95022a2c6c40bbd4f869d617e8ee3b8874cc06f84508bb194c1da3dca1f57964ddc4a7f55b2e42c515d62087c77ce24c42cdbb3474ab1443766b4ba416b76b4c77d1eb29b7c1192d1f996be5bd6c8bf8f11a9adedd80c045600a672b763de66b35574c2cc43043f6f91b48df76eeb9e930d1495bb45fbc8e942f802d6d7c3d8a260db9a92c5972cf8e15313f35a82"]}]}, 0x200}, {&(0x7f0000001800)={0x288, 0x1a, 0x2, 0x70bd2a, 0x25dfdbfc, "", [@generic, @nested={0xba, 0x3b, 0x0, 0x1, [@typed={0x8, 0x75, 0x0, 0x0, @fd=r1}, @generic="2c0725e5d3861abf0c3f07db16e18c0ec5b5e60a827211b7090a91f940b606d6357efdeec1312208e2d5750f7ed007a27f873ba0faa14e7094f73ee18d81d7d95d8f969a451de12e83eef996dafa39971462afee1072e47a2b22945150cc68df9efa3b2af70261dbbc5a0bd3c76b8ab10ebb589697a28aaf20f181630d9fe001994a45fa65ae31c76da6a225e30cbe499dbd357ab597d3b717afef5d62f7c9e670187a8de55936e1f1a826683239"]}, @typed={0x7, 0x74, 0x0, 0x0, @str='+[\x00'}, @nested={0x1ab, 0x35, 0x0, 0x1, [@typed={0x8, 0x6f, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x69, 0x0, 0x0, @u32=0x100}, @typed={0x8, 0x7d, 0x0, 0x0, @fd}, @generic="dbeaab071b6c972ee1bb548dd4f67a8d921d3ba115f5d1ba8cd871c2ddc8116c2e0c4e4f14a916f58a08d764aa2e50c498244a4c0b36202b1ee87d6e9b361cf1c187254cce36b6136aa99ad8910f27015ae78feb70a77503322affaa8f9c0187521c58d4d301799b7721240217e33f1a98c96f539dd8f2c80ed966a3e7ea1be941e6ba4450742bafd1e9ab015e8f7d03cc46251db517f85836e7be4a8869f5548257ff172969fbdc40bac400465e3f3d3fbac00d7e2ba2ec5ecfe7f376012f", @typed={0xce, 0x8, 0x0, 0x0, @binary="356e2a75727bedbc92588fec2d0342515a6eac985973d2b88ce502cd17038afa1619afda80066630c8da0a101131061a64df735a5d04495581442b752469afa076eead8f270de2e71a32acb564ef7a2e9a095f05a135c0b31da085168a4624cd08bbcd4c4f96fe759c6ec8d4d45d5295dbfd21ae23e95778abe4428bb3dbd84a00eb40db862045c52bc797bc84c0b3490599350dd4e1024ff8afae501a13b70d6f44820c09c42e10dedd9373dc2d28fb3896e02edccaeb7836734e0246dfe009236e25bce3e3352ad848"}]}, @typed={0x8, 0x4a, 0x0, 0x0, @uid=r3}]}, 0x288}, {&(0x7f0000001ac0)={0x35c, 0x1c, 0x20, 0x70bd27, 0x25dfdbfe, "", [@generic="c9f2350aa941680d15fac4823adfcfb709489dad3b81af56e0303c0dc976da43", @typed={0xe, 0x3f, 0x0, 0x0, @str=':{/-![)\xbb*\x00'}, @generic="e5e89b3d9dcd028462b52f9cd76b2995c7aab7c5abb229a60c67b475eaa087a41acac717e5282cd5d3bdd7405a760be6b2b6b60723b2b9ff450d801db1b4020a49c5d2b99f8ed67529c49ece058f1580f709dd8778ac2459c0130c335562464f64911be5e15aaca30aec8db96efa9f000021547a5f8debeeb0758d79d5ffa3cac09dc4bbf0e678e5e0cc8686ff6fa2668f1e3a7298264df56d88d93f42cba848f7457c4d3a94251eff5f1484b6cc9d684a5c7be0e2", @nested={0x191, 0x4b, 0x0, 0x1, [@typed={0x4, 0x8f}, @generic="7a370681e407e6dadab9222297d47a41b2df02b52be0b7d75ef9d9800548fc8893dcfb24ac71cd7aaf9ad89419dbcb6e866eccf06f7b5ab1b70ea3210d9bbd04a4b09c3d185d010b0b79003cffb26b3484e65cb47a6096abd1d52f1234c9312a117fb8c076f5c5a88aedcf7f2cda3f7ed0d2ac7ead16362a178e4ea24b1f18621f95a4f4304c4050693b487fddc000abc6444e395c75edc5670c4b74724f95ba983b237dfdbb3f834b2ecc96e15290ea70a86cb7ba", @typed={0x4}, @generic="7096dd09c6754be848e1e825ff4cba9332e6c8eb091feba2c75577294a41c120a9a042883a08e7ead2a2980f5203880009391229974faf564c373df8bad397b6316e451057aaa736f77c0622c54784e7f88753a3c1d598dc368f622969f8a2dfeaac72956eb33f97e9ddf88b78c927d57c668fef70852211fb9561bc787632d7896fac7c91de00dc52c74d425dd7bec7b4e23c4887cab2d9f6b4e99fc17829b0c7882445a5093daadfdf3475f1da2b94ab5a878c0bb85be45bde987e", @generic="a01d23071a64c86c010400fd5d3371f6b5aef57f"]}, @typed={0x8, 0x4e, 0x0, 0x0, @uid}, @typed={0x8, 0x59, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="47a178cc", @generic="a55b7ff60197ebf54f8e64abcb81ff67e53534ac0f558acce052bf6f9dac70135446f3fb416c663b0659715d0ba4ed642a962efbf735a8e8eaf4f7126edfef77b17ec78cfe97f27917eafcf8e8a04c7d96fef4cb10c74c0ec516b678baeb957955816192e58d7ee1d37c0baf63fe1dc1df49c0f64c3a51a8e14659d96ef646600d311fe12779d47bab6a7f3072c31a06beccc7eed9e57d4891ccfe53c342dea5a18e9b5f6a1f9e2c1ba893eb55ed59e0882681fec6ab52393373", @typed={0x4, 0x72}]}, 0x35c}], 0x5, &(0x7f0000002040)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}], 0x20, 0x40}, 0x40001) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) fstat(r6, &(0x7f0000000080)) ioctl$KDGKBDIACR(r6, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) 21:09:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x25}]}, 0x78) 21:09:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000000)={0x9, "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"}) write$binfmt_elf64(r0, 0x0, 0x0) 21:09:13 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfff, 0x401, 0x1, 0x3, 0x0, "df7b478c48153807f34f91de99af827991d8aa", 0x1ff}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)=0x800) 21:09:13 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5421, &(0x7f0000000000)) 21:09:13 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000080)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='cpuset\x00') perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x82, 0x0, 0x0, 0x8000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x3fc4, 0x3}, 0x80, 0x1, 0x3, 0x1, 0x4f, 0x40, 0x1e1, 0x0, 0x33, 0x0, 0x4}, 0xffffffffffffffff, 0x5, r2, 0x1) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000040)=""/39) 21:09:13 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x4e21, 0x7, @remote, 0x10000}, 0x1c) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000000)) write$binfmt_elf64(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) fsetxattr$security_evm(r1, &(0x7f0000000b40), &(0x7f0000000b80)=@sha1={0x1, "1581f57347036929ce43fab269e517d4e47c66f2"}, 0x15, 0x3) setsockopt$sock_timeval(r1, 0x1, 0x5, &(0x7f0000000040)={r2}, 0x10) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000740)=0x3ff, 0x4) clock_nanosleep(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) dup3(r1, 0xffffffffffffffff, 0x80000) sendmmsg$sock(r1, &(0x7f0000000a40)=[{{&(0x7f0000000140)=@llc={0x1a, 0x10a, 0x8, 0xc7, 0x8, 0x73, @remote}, 0x80, &(0x7f0000000540)=[{&(0x7f00000001c0)="4952d9003d198b76a8fe0595933e69431249dda556403b99e549c75f935161710834ff5af65e610385391a8e2d85e7dd304b8cdc6fa1e89ded7521f84e127c902ec84e6483c13f5cbf7157334fb821482fadc547aaf69afc1cfb1fa34f8f30ea01dbf539b332cbdb0275cba8b6db37b625c713219554e9ae11cd124888998f922cf031eb0d978af6c10a", 0x8a}, {&(0x7f0000000280)="f882a8f2b11fb172b127858dea9681d179b06776ac16617905793bb45ac8bb9f2b2cb6959c710437b8be88d6e5825edc76152cb075f407cc096b7bab089dc6e6bb13f90bf5437689ccf61fb8fa140c5db9ba61ef37246d0a5375680adb7682608735a2902a1d35ba81d26f5c64c693e8b0c993d640af84bf37ea7f0316958935", 0x80}, {&(0x7f0000000300)="2fea55c6cad840f3acaeb76cefb0abc25beb9fa9682f6a22fe7ea39cf0660675d863db041eb16ed40b08a7633a696caca6c44e1c4eeefa879a12ea845029c560cb55e239e52bf6641f244bfd0bbedb41b1848a268f4334b1aff59b89bfcefbfa709692a55ec1eb77d66f5c75aeffca5fb2bedfc581ce70a4513d9ad8d57bdbcc67da49250edf57d7b54f57a7dfbb1d9816434c8e9d5aff2bd2fb105683", 0x9d}, {&(0x7f00000003c0)="5e2ada5c2d108f622b39ff9ff8f0a202c6b92c1ad484ec3d3710767bd496869c398de947e25e35ad160e881f03d34184ffcd74b25f8b31da4173be7e19e0f20c460acd0add20336bfd06700ac9ad02121b87e665167e9dadba3aabff9f77303df6b2a09c97ab29b7ff8669fd9cc32a27da77429ef19fb2fac400521af57652be93f3f8817a970b1468b782fbf2d04d0d9de460ca4b73a1f585b906e9f424cf7bcc3917f6dc694a19da87e1328cd1b30eb3a455205270a29e6225bade3c7502ed8b8e29e167cadd1afb7655", 0xcb}, {&(0x7f00000004c0)}, {&(0x7f0000000500)="70f08803c0c571b1f1fe8afb95ddfaab3f9a4f66696c5d1a7236e8ea510b0a95b53ecce74e3c17490c82a75f01044c", 0x2f}], 0x6}}, {{&(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x3, @random="f105a753638d", 'vlan0\x00'}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000640)="e2b57b30a7c8c9dadbc16ebd33fe0a4959fe146429b28d6b78f7df6c54f7b8d49c0917857b34361f7ee7638611bfc4d7f490f7ca4869b85c6c460f565ce8c6c6c20f35f56498af8c8b1d1ed40674933c998775b5a4e1b2ebb96da50327d5c09d4c50b8afbd361c1deecc6be8be6af4d90cafd3b0d842f6b76003d5ef0015f0de39e2832872de37bb1a1b4b1de2fe594b4dee99beb7a5bb7bbed72ec6e94d2f6f1116100d6fe3f8086b1ff892634e4c1a91a98fe8375dd82b389210d1ecdb989e134596e19618660a740f3a7294d079595438f3674283bef95be83e61f0076f05f78611afb2d75f77ee23f8ddb25c3b940a8e663b43b5d1", 0xf7}], 0x1, &(0x7f0000000780)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x800}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xdf0}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000840)="440a46107c7bc4351e917882ae1b4163b2e3bbd52d7898fb96a79393b899579eb98822c566bb00d8f82b51dba760a20b113e8509b86d", 0x36}], 0x1, &(0x7f00000008c0)=[@txtime={{0x18, 0x1, 0x3d, 0x8605}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffe}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x1ff}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000940)="4cc3c13e24085afe1c60e90390863b8e661e21309ae9cb9d38044aed66ca", 0x1e}], 0x1, &(0x7f00000009c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x78}}], 0x4, 0x8000) 21:09:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x48}]}, 0x78) 21:09:13 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000001106040000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:13 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5422, &(0x7f0000000000)) 21:09:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfff, 0x401, 0x1, 0x3, 0x0, "df7b478c48153807f34f91de99af827991d8aa", 0x1ff}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)=0x800) 21:09:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x4c}]}, 0x78) 21:09:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) recvmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000040), 0x6e, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/177, 0xb1}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f0000000700)=""/63, 0x3f}, {&(0x7f0000000240)=""/148, 0x94}, {&(0x7f0000000300)=""/107, 0x6b}, {&(0x7f0000000380)=""/2, 0x2}, {&(0x7f0000000200)=""/46, 0x2e}, {&(0x7f0000000400)=""/150, 0x96}], 0x9, &(0x7f0000000580)}, 0x12022) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) 21:09:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x60}]}, 0x78) 21:09:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5423, &(0x7f0000000000)) 21:09:14 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x40000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="df9ffe7782aebcb731c13faf6475b3a2", 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) sendfile(r0, r1, &(0x7f0000000080)=0x8, 0x400) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xff) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000000)=""/23) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) 21:09:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x68}]}, 0x78) 21:09:14 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000001206040000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfff, 0x401, 0x1, 0x3, 0x0, "df7b478c48153807f34f91de99af827991d8aa", 0x1ff}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)=0x800) 21:09:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x6c}]}, 0x78) 21:09:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0xffff9634, 0x0, 0xe676, 0xff, 0xe6, "ddeedd8858d0a7305e3d28656bb354583ee8c4", 0x800, 0x9}) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) [ 1196.188146][T22098] validate_nla: 9 callbacks suppressed [ 1196.188186][T22098] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x74}]}, 0x78) 21:09:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5424, &(0x7f0000000000)) 21:09:14 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/suspend_stats', 0xd2e83, 0x2) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/msr', 0x525702, 0x2) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x0, "2156816c73038c"}) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000001c40)={0x5, 0x3, 0x7, 0x3, 0xf9a, 0xc2}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r12 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r12, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r8, 0xd000943d, &(0x7f0000000c40)={0x9, [{}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {0x0, r11}], 0x1, "e63835e8c53b1e"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000000c0)={r4, r5, "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", "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"}) write$binfmt_elf64(r0, 0x0, 0x0) 21:09:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) 21:09:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x7a}]}, 0x78) 21:09:14 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000002506040000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:14 executing program 0: setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000080)='%+^\x00', 0x4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) 21:09:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000200)={0x1b, 0x9, 0x1, 0x7ff, 0xd, "64ee411b129d0dbba5932b024d9be45cdff8ae"}) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r1, 0x1, 0x5, &(0x7f0000000040)={r2}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10) r5 = pidfd_open(0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x3160}, {r1, 0x8181}, {0xffffffffffffffff, 0x1000}, {r0, 0x8}, {r0, 0x5}, {r3, 0x1cf803ed3c94e1fe}, {r0, 0x2000}, {r0, 0x282}, {r4, 0x108}, {r5, 0x202}], 0xa, &(0x7f0000000180), &(0x7f00000001c0)={[0x9]}, 0x8) 21:09:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xc0}]}, 0x78) 21:09:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfff, 0x401, 0x1, 0x3, 0x0, "df7b478c48153807f34f91de99af827991d8aa", 0x1ff}) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)=0x800) 21:09:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5425, &(0x7f0000000000)) 21:09:14 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000000c0)=""/114) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000740)=[{&(0x7f0000000040)="5c2426e9f99ba926021e5d1fba796285917483f2ce1d52be582ce0baa739972280d0e343fcc29aa3911ede0745dd555b1625f4fc8503062f52f7d18a146f4035e64f4d4c508b0bac0e8721e6f2661c019436d9a6ba860befa62bcfa1b06046bf7b13a7a1a60d0ad8c3e49562cf29883dd83e69d1ccc652895cd7535c2f710971cd8eb1ef52413ffeafb5323a3b2e4eb6599ecf6d77e3ddc2a679c2a9fbef77a1dc992da20cac4d84a46695c8bfdffef3e9784f27bf35ee4d6a5c781e3e263c918aaa6f0feff5c6859947201a59cc89011b4ca5e615692154e3608fc497a660000000000000000000", 0xe8}, {&(0x7f0000000640)="66301349d9fce237efa4c92579981bf1cc2b7bdd0fd3a72961cd76e05f95c432078edd1759ed6abfb6b2c5f7ffd3e5cde4aaf40c83302da105c37ce93657822324d157bfac91ff00e0f049824ea3c8330bbec235a156c3275d0d8db2ee4c4a317c0418a80466bee9f63b5bbd85ef810491e7bfe96ff5ec77e98a5b5c7d7cd8c57ae9d470b893dd65d3e62e335e97adfb8d5717c3f607054a336849035ae907d79f33bf0f9323ff780aa7cc4ad1530a34f6fce73ea58cb6d8da856f556764daa337ca1ab891a6581b7f3fc3259c3004fe23dfe554e90ba2000000000000", 0xdd}, {&(0x7f0000000500)="1d2b289791a3461534aba4982f3c4e55c1f9cda3a87314317f00b1059c31250001d30210fb8b242deb720d", 0x2b}, {&(0x7f0000000240)="e92cecf091aa41893252bc3ed7315a98e9799171d8d79782", 0x18}, {&(0x7f0000000280)="89960d51b1dce0aa90598b122c4e6a7f7622fbd5215e3af3ccf295e9ecb273f6b13436beacaa31b7caf0de0809209d411501e241945485bfd4be9fea76734cb96515deed0b1df8a7544a46f9c7ca067ffac7b3b7cbb351923b3455bcb4a54d67624754a293e18edadbdc456dbd1caf495d1a78118a4e9201a93b2441d9afedf71e4c4ed613d93865ef5f8821a8ed44aee17b0d6ee84beec0bd2c66ec72247a01c24c469845993b0bcee2482076fc3d53b69f77b3e42ebbd14b7dc56db754d7a4", 0xc0}, {&(0x7f0000000a40)="18ca0703c9f7578c682f0f6833646943f70e0c80758e7a92d903a90fd45bc72b9000cbe19ff44c0cd8b68fbbb0bb839f7b2a952188e0dacce811a63a64f3aef1e9d71e52d78fbe1282f00a42792da7e2ba45faf6ed7a8802", 0x58}, {&(0x7f0000000380)="07035508", 0x4}, {&(0x7f0000000580)="9d2ca7f4151d643ab8f79c9f326278b37d2a62be23c1b4ea0dc84b7f911e8de4d8eb5938beb1779b5cbd37fa312036d03424e291c03ebf9c", 0x38}, {&(0x7f0000000400)="c361af3f3ccfcd0591662fb51bff467be03049481e4cf61fc4235016ec7cba1ab4b2df0e1654eca0510c3b00779776c2c229d6897180", 0x36}, {&(0x7f0000000800)="a22f6c90ebc0de40020a384ab3fc2a0733a086ca072a029b7b5c0a870bc27c599f4e90dd5d57a6be6f3b654078a18d5c3dccd95ed1ac1079e2ee32ee60fb876123d8099fd2204df0fd92d36ed75a287d59e21e951e42bd871246ef95584583cbf391f30262fa86438ce7697b387101fc82ad8e390b58d56e3d8f80cc1ee629be281604923dde186c3f0ec23a0135f880988250da3d0307e345524f64dc655fb2b2d75306917b46f7d5508da14b0ecda9d3586d59833c059ad453185a88815f6d03cf6fd286463232f79551b5d1e62a7ec3e63fc06f1442314e86dd2aaedd93d5a9505ba20c90f1bd69639c045d24277a5d0cc9a55e5592a937a731cea0ebfaf202e81c6b07d194f6769e9b6668af32b8f90169605cdd55c82db57d2efce833e8b3ded23e95f7090ba49bf94c9d0da4beedf4d44fb11cf69035e3881fa68e807b675bc481b21cf30940adf5b1e828ae3f2dd7299cdb06750aa5a3df3ad01eafca103a70f971fb882b452ff539f373be94554124f4ab9e1fc71d3bd5609985bfd80f5be6f3296ae1f6172ad32ead9af497a67405c54f694504de6389c4fc4e7b90c532be5ba91f4c275a4290a31a7cdc1396e16730e573db5b3650dac56ec9e3bb4bbe4eaaa26512dcef4814c0c50bfb3e608a2cad550ff19243c872694bff64bf7a5755d1a9f30e8b1399a930231fe116192fbfe24b3b12f7d66ea9d423c7c48b09baf923b8a3f98479293eeb33f425f27dee9f41f3f7b99d7c9192a0", 0x21c}], 0xa, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000003a40)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f00000001c0), 0x4) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x5, &(0x7f0000000040)={r6}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x800000000000000}}, './file0\x00'}) 21:09:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xe0}]}, 0x78) [ 1196.456449][T22224] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf0}]}, 0x78) 21:09:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf8}]}, 0x78) 21:09:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xfc}]}, 0x78) 21:09:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5427, &(0x7f0000000000)) 21:09:14 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000004806040000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfff, 0x401, 0x1, 0x3, 0x0, "df7b478c48153807f34f91de99af827991d8aa", 0x1ff}) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)=0x800) 21:09:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$KDENABIO(r1, 0x4b36) 21:09:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x180}]}, 0x78) 21:09:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x300}]}, 0x78) [ 1196.751915][T22359] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x500}]}, 0x78) 21:09:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0xfff, 0x401, 0x1, 0x3, 0x0, "df7b478c48153807f34f91de99af827991d8aa", 0x1ff}) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)=0x800) 21:09:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5428, &(0x7f0000000000)) 21:09:15 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000004c06040000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r1, 0x1, 0x5, &(0x7f0000000040)={r2}, 0x10) write$binfmt_elf64(r1, 0x0, 0xffffff6b) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x180800) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r4, 0x1, 0x5, &(0x7f0000000040)={r5}, 0x10) sendto$packet(r4, &(0x7f00000001c0)="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", 0x1000, 0x4, &(0x7f00000011c0)={0x11, 0x15, 0x0, 0x1, 0x6}, 0x14) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r6, 0x1, 0x5, &(0x7f0000000040)={r7}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000000c0)="07cfabea45760a5aae5ba3ffced9c716716fb1bb8c95d5ab6d80cafacfe0d4ed5122b178c1c07e44d23f923f2186da8469a10ba57e8e8473fe58bb4f3419aa80def8823eb17019f23280168feb51e077c44d198932", 0x55, r6}, 0x68) fallocate(r3, 0x2, 0x200, 0xffffffff) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 21:09:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x600}]}, 0x78) [ 1196.978510][ C0] scsi_io_completion_action: 11 callbacks suppressed [ 1196.978538][ C0] sd 0:0:1:0: tag#6547 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1196.978582][ C0] sd 0:0:1:0: tag#6547 CDB: opcode=0xe5 (vendor) [ 1196.978599][ C0] sd 0:0:1:0: tag#6547 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1196.978617][ C0] sd 0:0:1:0: tag#6547 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1196.978645][ C0] sd 0:0:1:0: tag#6547 CDB[20]: ba [ 1196.988669][T22469] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x700}]}, 0x78) 21:09:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)=0x800) 21:09:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5429, &(0x7f0000000000)) 21:09:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000480)={0x1, 0x1, 0x1, 0x1e, 0xa1, &(0x7f0000000080)}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) 21:09:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x900}]}, 0x78) 21:09:15 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000006806040000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xa00}]}, 0x78) [ 1197.213613][ C1] sd 0:0:1:0: tag#6548 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1197.213640][ C1] sd 0:0:1:0: tag#6548 CDB: opcode=0xe5 (vendor) [ 1197.213672][ C1] sd 0:0:1:0: tag#6548 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 21:09:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xb00}]}, 0x78) [ 1197.213690][ C1] sd 0:0:1:0: tag#6548 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1197.213709][ C1] sd 0:0:1:0: tag#6548 CDB[20]: ba [ 1197.226155][T22695] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:15 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000006c06040000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xc00}]}, 0x78) [ 1197.437963][ C1] sd 0:0:1:0: tag#6549 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1197.437986][ C1] sd 0:0:1:0: tag#6549 CDB: opcode=0xe5 (vendor) [ 1197.438005][ C1] sd 0:0:1:0: tag#6549 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1197.438025][ C1] sd 0:0:1:0: tag#6549 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1197.438045][ C1] sd 0:0:1:0: tag#6549 CDB[20]: ba [ 1197.450222][T22808] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:15 executing program 0: write$evdev(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0xea60}, 0x16, 0x8, 0x5}, {{0x0, 0x2710}, 0x2, 0xc21}], 0x30) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r1, 0x1, 0x5, &(0x7f0000000040)={r2}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000480)) write$binfmt_elf64(r0, 0x0, 0x0) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1000) ioctl$TIOCNOTTY(r3, 0x5422) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000000)={0x0, 0x7f, 0x1, [0x10001, 0x400, 0x7, 0x3, 0x4], [0x3, 0x3, 0xfffffffffffff800, 0x6, 0x1000, 0x100000000, 0x20, 0xc8, 0xc0000000000, 0x3f, 0x2, 0x4, 0x8, 0x100, 0x1, 0xfffffffeffffffff, 0x5, 0x39, 0x6, 0x8, 0x7, 0x6, 0x5, 0x1f, 0x8001, 0x6, 0xffffffffffff8001, 0x0, 0x4, 0x2e, 0x0, 0x3973, 0x4cf, 0xfc1d, 0x5, 0x6, 0x0, 0xe55, 0x5, 0xfffffffffffffff9, 0x9, 0x5, 0x6, 0x1f, 0xf0, 0x2, 0x6, 0x2, 0xc2fb08c, 0x85, 0x8, 0x8000, 0x8, 0x1000, 0x100000000, 0x0, 0x200, 0x3ff, 0x3, 0x8, 0xffffffffffff940d, 0x0, 0x0, 0xa6a5, 0x6, 0x3, 0x3, 0x1, 0x100000000, 0x40, 0x1c00000000000000, 0x85a7, 0x81, 0x0, 0x800, 0x3ff, 0x8, 0x81, 0x7, 0x8, 0x80000001, 0x4, 0x80, 0x9, 0x7, 0x20, 0x8e, 0x1f, 0x0, 0x3, 0x1, 0xffffffff, 0xffff, 0x8, 0xd55e, 0x6, 0xffffffff, 0x0, 0x5, 0x0, 0x1000, 0x7, 0x4, 0x5, 0x2, 0x4, 0x9, 0x2, 0x6, 0x0, 0x0, 0x7, 0x4, 0x100000001, 0xf419, 0x10001, 0x3f, 0x0, 0x8c88, 0x8, 0x7]}) 21:09:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xd00}]}, 0x78) 21:09:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5437, &(0x7f0000000000)) 21:09:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)=0x800) 21:09:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/102400) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x529c01f8) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000019080)={0x5, 0xff, 0x705, 0x2c2, 0xfffa}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000019240)=0x2) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f00000190c0)="e079d8ccce9b35e6b7703ac19806ad0ed2cb10be0ce349df7ecb038eb9618da97a4fdf7400693e2024449caea4090edc08e00ce60404b0b22e87c90b46c905aa12f3cc83142f17ca5b6e8f76483a7ed21e50c394cefecce3896453f6550fdf94fd666fbb451c73c12e34a5228e850b3aab72eb6253cd9708c658dccf7272a6bcb337073e6dad2253cecc320e270b686800b613a32caa316dc4fe2ecd6e1b") ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x5afa, 0xd18, 0x1, 0x1, 0x8, "4e085bcba428613d5e8867d7e150c994f831d5"}) read(r1, &(0x7f0000019180)=""/95, 0x5f) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000019280)) 21:09:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xe00}]}, 0x78) 21:09:15 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000007406040000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf00}]}, 0x78) 21:09:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5441, &(0x7f0000000000)) [ 1197.712491][ C1] sd 0:0:1:0: tag#6550 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1197.712514][ C1] sd 0:0:1:0: tag#6550 CDB: opcode=0xe5 (vendor) [ 1197.712549][ C1] sd 0:0:1:0: tag#6550 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1197.712568][ C1] sd 0:0:1:0: tag#6550 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1197.712599][ C1] sd 0:0:1:0: tag#6550 CDB[20]: ba 21:09:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1100}]}, 0x78) [ 1197.724800][T22929] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)=0x800) 21:09:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1200}]}, 0x78) 21:09:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) 21:09:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)=0x800) 21:09:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1800}]}, 0x78) 21:09:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r1, 0x1, 0x5, &(0x7f0000000040)={r2}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f00000000c0)=0x1, 0x4) open_by_handle_at(r1, &(0x7f0000000000)=@nfs={0x90, 0x24, {0x8000, 0x80000001, 0x6, 0x80, "11f7df639a5250323f08bfa15830cf3c6d76675b75b3ceff22dfe2f2ba7c80cc75243a04e92d63b2acd1130f98c8be08562845701cb0ac6ec9a8d1ed12efec4eacce675b65afda2b68d2076f2e7ad5aaaf6685ce470be4f65547e9e01acd42f98986bdc376de1fd31fcf69e51172f38de9d506dda2e3023d2c857cb69409416b"}}, 0x1) 21:09:16 executing program 4: r0 = dup(0xffffffffffffffff) r1 = signalfd(r0, &(0x7f0000000000)={[0x80000000]}, 0x8) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000040)=""/44) 21:09:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1a00}]}, 0x78) 21:09:16 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5450, &(0x7f0000000000)) 21:09:16 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000007706040000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)=0x800) 21:09:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$binfmt_elf64(r0, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) [ 1198.534999][ C1] sd 0:0:1:0: tag#6551 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1198.535023][ C1] sd 0:0:1:0: tag#6551 CDB: opcode=0xe5 (vendor) [ 1198.535052][ C1] sd 0:0:1:0: tag#6551 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1198.535074][ C1] sd 0:0:1:0: tag#6551 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1198.535094][ C1] sd 0:0:1:0: tag#6551 CDB[20]: ba [ 1198.541985][T23064] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1b00}]}, 0x78) 21:09:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)=0x800) 21:09:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cpuset\x00') ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f00000000c0)) 21:09:16 executing program 0: ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) 21:09:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x2000}]}, 0x78) 21:09:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xdc, 0x6, 0x9c5, 0x83e7, 0x1, "cd6b0deee5473856e344eecf443b646a086bb4", 0x2, 0x747f25dd}) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/49) 21:09:16 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x5, &(0x7f0000000040)={r1}, 0x10) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r2, 0x0, 0x0) 21:09:16 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5451, &(0x7f0000000000)) 21:09:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x2500}]}, 0x78) 21:09:16 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000007a06040000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) 21:09:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) write(0xffffffffffffffff, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)=0x800) 21:09:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x3f00}]}, 0x78) 21:09:16 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5452, &(0x7f0000000000)) 21:09:17 executing program 4: ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f0000000040)=""/43) 21:09:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x4000}]}, 0x78) [ 1198.893541][ C0] sd 0:0:1:0: tag#6552 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1198.903414][ C0] sd 0:0:1:0: tag#6552 CDB: opcode=0xe5 (vendor) [ 1198.909742][ C0] sd 0:0:1:0: tag#6552 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1198.918803][ C0] sd 0:0:1:0: tag#6552 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1198.927934][ C0] sd 0:0:1:0: tag#6552 CDB[20]: ba 21:09:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) write(0xffffffffffffffff, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)=0x800) 21:09:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3) [ 1198.945290][T23205] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) write(0xffffffffffffffff, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)=0x800) 21:09:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x4800}]}, 0x78) 21:09:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) 21:09:17 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000081040000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:17 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x545d, &(0x7f0000000000)) 21:09:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x187, &(0x7f0000000240), &(0x7f00006d0000/0x7000)=nil, &(0x7f0000729000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) mmap$IORING_OFF_SQES(&(0x7f00006d6000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd=r1, 0x10001}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0}}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f000013f000/0x11000)=nil, 0x11000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x2de1, &(0x7f0000000280), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1) r8 = syz_io_uring_setup(0x75cc, &(0x7f0000000200), &(0x7f0000fff000/0x1000)=nil, &(0x7f00006d6000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r11, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x100, 0x0, {0x0, r12}}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, &(0x7f0000000180)="72d08d8f1f1b10f350924785e9dde1eba5ba8cec00720875745fa1a85f7eb87d900c2298ccd111b2c542e616b632fd075171b5e2ff2aaebb2fd3262764d35a3e1c2b1a67", 0x44, 0x0, 0x0, {0x0, r12}}, 0x17) io_uring_enter(r1, 0x3a28, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) write$binfmt_elf64(r0, 0x0, 0x0) 21:09:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)=0x800) 21:09:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = creat(&(0x7f0000000580)='./file0/file0\x00', 0xad) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000600)={0x1, &(0x7f00000005c0)=[{0xfff, 0x209}]}) r2 = syz_open_pts(r0, 0x24201) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000500)={0x79, 0x1c, &(0x7f0000000100)="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"}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000540)={0x6, 0x5e5, 0x8001, 0x6a0, 0x1b, "215cbd1ea384e286a19cad334f752690575a21"}) r4 = dup(r0) ioctl$TIOCNXCL(r4, 0x540d) write(r3, &(0x7f00000000c0)="b4", 0xfdef) r5 = openat(r1, &(0x7f0000000640)='./file0\x00', 0x420000, 0xa1) syz_open_pts(r5, 0x400000) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x11) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r6, 0x8040942d, &(0x7f0000000680)) ioctl$TIOCSRS485(r3, 0x542f, &(0x7f0000000040)={0x6, 0x3ff}) 21:09:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x4c00}]}, 0x78) [ 1199.184593][ C0] sd 0:0:1:0: tag#6553 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1199.184621][ C0] sd 0:0:1:0: tag#6553 CDB: opcode=0xe5 (vendor) [ 1199.184641][ C0] sd 0:0:1:0: tag#6553 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1199.184662][ C0] sd 0:0:1:0: tag#6553 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1199.184681][ C0] sd 0:0:1:0: tag#6553 CDB[20]: ba [ 1199.207006][T23334] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x6000}]}, 0x78) 21:09:17 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/sit', 0x400800, 0x75) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x5, &(0x7f0000000040)={r1}, 0x10) write$binfmt_elf64(r0, 0x0, 0x60) 21:09:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x6800}]}, 0x78) 21:09:17 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5460, &(0x7f0000000000)) 21:09:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)=0x800) 21:09:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x6c00}]}, 0x78) 21:09:17 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006020000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x7400}]}, 0x78) 21:09:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/softnet_stat\x00') fstat(r1, &(0x7f0000000080)) [ 1199.575021][ C0] sd 0:0:1:0: tag#6554 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1199.575051][ C0] sd 0:0:1:0: tag#6554 CDB: opcode=0xe5 (vendor) [ 1199.575071][ C0] sd 0:0:1:0: tag#6554 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1199.575091][ C0] sd 0:0:1:0: tag#6554 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1199.575107][ C0] sd 0:0:1:0: tag#6554 CDB[20]: ba 21:09:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xd5) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3f) 21:09:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x7a00}]}, 0x78) 21:09:17 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5600, &(0x7f0000000000)) 21:09:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001180)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000002380)={0xa4, 0x9, 0x9, 0x9e7e, 0xf, "b7e97325883827da"}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000023c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$VT_ACTIVATE(r2, 0x5606, 0x1ff) write$binfmt_elf64(r0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0x1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000000c0)=0x13) write(r4, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f00000011c0)={0x100, 0x1, 0x4, 0x1, 0x7, "49f0557038c5a211d44552f31bcbacd652db6b"}) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000000)="499fabd087e4ac74148b88e8c1613408910a4afc7374f6ed3e6fa9b944690158f2b0809a08e874e4561dad5d0c5f44e111f5eda3ea2262873941d0b643d13ffd1200841c3f750720ed1d8f07246570bafab88cab2c07d586a3b11c68e3f9397e3f92d4c71f44bedcf86fac703a7b58756a4cc0") preadv(r0, &(0x7f0000002300)=[{&(0x7f0000000080)=""/143, 0x8f}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/57, 0x39}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/196, 0xc4}], 0x5, 0xc5, 0x994) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002400)='net/icmp\x00') 21:09:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)=0x800) 21:09:17 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006030000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x7f00}]}, 0x78) 21:09:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)=0x800) 21:09:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)=0x800) [ 1199.821708][ C1] sd 0:0:1:0: tag#6555 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1199.821732][ C1] sd 0:0:1:0: tag#6555 CDB: opcode=0xe5 (vendor) [ 1199.821770][ C1] sd 0:0:1:0: tag#6555 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1199.821788][ C1] sd 0:0:1:0: tag#6555 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1199.821808][ C1] sd 0:0:1:0: tag#6555 CDB[20]: ba 21:09:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xc000}]}, 0x78) 21:09:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5601, &(0x7f0000000000)) 21:09:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)=0x800) 21:09:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/40) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000003c0)=0x0) sched_rr_get_interval(r3, &(0x7f0000000400)) setsockopt$sock_timeval(r1, 0x1, 0x5, &(0x7f0000000040)={r2}, 0x10) signalfd(r1, &(0x7f0000000000)={[0xffffffffffffff46]}, 0x8) syz_open_dev$vcsa(&(0x7f00000000c0), 0x5, 0x400002) 21:09:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = memfd_secret(0x80000) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x5, 0xfffc, 0xeb, 0x8, 0x10}}) write$binfmt_elf64(r0, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, 0x0) 21:09:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xe000}]}, 0x78) 21:09:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)=0x800) 21:09:18 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006050000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5602, &(0x7f0000000000)) 21:09:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)=0x800) 21:09:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) write(0xffffffffffffffff, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000000)) ioctl$TCFLSH(r0, 0x540b, 0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x7) 21:09:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf000}]}, 0x78) [ 1200.600469][ C0] sd 0:0:1:0: tag#6556 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1200.600494][ C0] sd 0:0:1:0: tag#6556 CDB: opcode=0xe5 (vendor) 21:09:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0), 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)=0x800) [ 1200.600509][ C0] sd 0:0:1:0: tag#6556 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1200.600523][ C0] sd 0:0:1:0: tag#6556 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1200.600566][ C0] sd 0:0:1:0: tag#6556 CDB[20]: ba 21:09:18 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006060000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf800}]}, 0x78) 21:09:19 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x80) 21:09:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0), 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)=0x800) 21:09:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xfc00}]}, 0x78) 21:09:19 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5603, &(0x7f0000000000)) 21:09:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r1, 0x1, 0x5, &(0x7f0000000040)={r2}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x2) write$binfmt_elf64(r0, 0x0, 0x0) 21:09:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x400000}]}, 0x78) 21:09:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0), 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)=0x800) 21:09:19 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006070000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf00000}]}, 0x78) 21:09:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)=0x800) 21:09:19 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5605, &(0x7f0000000000)) 21:09:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1000000}]}, 0x78) 21:09:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000040)="4ed4f65cfd1a2dbb84ed77625e457d12ce310e373fba8d58fa3845b008f05b954d9ff1870688e082ab843906884f1ef77cca0f9a00a1767a3fdf6e324b1732db56ac2c8d5cab9ac5c1d254f088dda95865c935603c20f2a3e4d437df30f3b2fde5d27678e80ab6a54f6a5015d807d1fde75bdf4841a5882511faf9d08b1b994eba0136347404c8e557f1957421397415270166554e3aab70928800401088a8f5a4cd542077b13081383cac86f67529b9c2e30261992e7acba17f2abc1777175993a39fccfb03b21704a28821461bc851b8db8796d3703e9df071ed6947e248589fa81f8ffe54b6b8f73063c5aa0d38") 21:09:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1800000}]}, 0x78) 21:09:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)=0x800) 21:09:19 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006080000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) [ 1201.275391][T24176] validate_nla: 5 callbacks suppressed [ 1201.275470][T24176] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000040)={0x9, 0x0, 0xbab}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x200, 0x80, 0x8, 0xffa, 0x2}}) write$binfmt_elf64(r0, 0x0, 0x0) 21:09:19 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x4949, 0x2e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4cb300ddb05141ce}, 0x4000004) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0x5) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000080)) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000200)={0x1, 0x8, 0xd2, &(0x7f0000000100)=""/210}) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000040)) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000000300)={0x6, 0x1}) 21:09:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x2000000}]}, 0x78) 21:09:19 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5606, &(0x7f0000000000)) 21:09:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x3000000}]}, 0x78) 21:09:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)=0x800) 21:09:19 executing program 0: ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000000)={{}, "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"}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000001000), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r1, 0x1, 0x5, &(0x7f0000000040)={r2}, 0x10) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000009, 0x2010, r0, 0x46510000) 21:09:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x4000000}]}, 0x78) 21:09:19 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5607, &(0x7f0000000000)) 21:09:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x5000000}]}, 0x78) 21:09:19 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006090000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000100)=0x800) 21:09:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x6000000}]}, 0x78) [ 1201.593479][ T23] audit: type=1400 audit(1636405759.666:3069): avc: denied { map } for pid=24294 comm="syz-executor.0" path="/dev/tty1" dev="devtmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dhcpc_state_t:s0" [ 1201.602907][T24308] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000000)=""/39) 21:09:20 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5608, &(0x7f0000000000)) 21:09:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x7000000}]}, 0x78) 21:09:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 21:09:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000000)={0x800, 0x401, 0x1ff}) write$binfmt_elf64(r0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x6, 0x105001) pread64(r1, &(0x7f0000000100)=""/104, 0x68, 0xb3) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="ff030000002f9e026c65300000006600d27cc01246b8682a687c501c7c533529cbc28679e20200933c3054e7bc4768dbf4"]) 21:09:20 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad0002000000000000060a0000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xc7, 0xfff}, {0x4, 0x1ff}, {0x9, 0x693}]}) write$binfmt_elf64(r0, 0x0, 0x0) [ 1202.241249][ C0] scsi_io_completion_action: 4 callbacks suppressed [ 1202.241276][ C0] sd 0:0:1:0: tag#6567 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1202.241301][ C0] sd 0:0:1:0: tag#6567 CDB: opcode=0xe5 (vendor) [ 1202.241320][ C0] sd 0:0:1:0: tag#6567 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1202.241338][ C0] sd 0:0:1:0: tag#6567 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1202.241366][ C0] sd 0:0:1:0: tag#6567 CDB[20]: ba 21:09:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x8000000}]}, 0x78) [ 1202.242850][T24426] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:20 executing program 4: sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000f703040026bd7000fedbdf2507000000070000002e2f66696c65302e2f66696c65300000011724ab712916525af7735be3bdf0e00ca188763e93b11a0a4d5bd5d19232186ef8c848022f09c13e32c5e9f4f3bacc6fa21886212ea36d262d4ea321f963617f23f2612fca95c4ed11a7aa162194da46094b98e4163a7943b80a53c2c6cc4d1cba1bcdb8933183"], 0x28}, 0x1, 0x0, 0x0, 0x4004050}, 0xc0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) 21:09:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x9000000}]}, 0x78) 21:09:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000040)={0x0, 0x4, [0x2, 0x5, 0x56, 0x0, 0x7, 0x6]}) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) 21:09:20 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x5609, &(0x7f0000000000)) 21:09:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 21:09:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xa000000}]}, 0x78) 21:09:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xb000000}]}, 0x78) 21:09:20 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad0002000000000000060b0000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:20 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/64) [ 1202.554038][ C0] sd 0:0:1:0: tag#6568 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1202.554065][ C0] sd 0:0:1:0: tag#6568 CDB: opcode=0xe5 (vendor) [ 1202.554085][ C0] sd 0:0:1:0: tag#6568 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1202.554121][ C0] sd 0:0:1:0: tag#6568 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1202.554138][ C0] sd 0:0:1:0: tag#6568 CDB[20]: ba [ 1202.566088][T24558] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xc000000}]}, 0x78) 21:09:20 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x560a, &(0x7f0000000000)) 21:09:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 21:09:20 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad0002000000000000060c0000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xd000000}]}, 0x78) [ 1202.773089][ C0] sd 0:0:1:0: tag#6569 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1202.773115][ C0] sd 0:0:1:0: tag#6569 CDB: opcode=0xe5 (vendor) [ 1202.773142][ C0] sd 0:0:1:0: tag#6569 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1202.773160][ C0] sd 0:0:1:0: tag#6569 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1202.773177][ C0] sd 0:0:1:0: tag#6569 CDB[20]: ba [ 1202.774899][T24671] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xe000000}]}, 0x78) 21:09:20 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/26) 21:09:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf000000}]}, 0x78) 21:09:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x560b, &(0x7f0000000000)) 21:09:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)) 21:09:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x10000000}]}, 0x78) 21:09:21 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad0002000000000000060d0000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x11000000}]}, 0x78) 21:09:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x12000000}]}, 0x78) [ 1203.101705][ C1] sd 0:0:1:0: tag#6570 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1203.101734][ C1] sd 0:0:1:0: tag#6570 CDB: opcode=0xe5 (vendor) [ 1203.101753][ C1] sd 0:0:1:0: tag#6570 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1203.101771][ C1] sd 0:0:1:0: tag#6570 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1203.101793][ C1] sd 0:0:1:0: tag#6570 CDB[20]: ba [ 1203.104821][T24796] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x560c, &(0x7f0000000000)) 21:09:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x18000000}]}, 0x78) 21:09:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$KDSKBLED(r1, 0x4b65, 0x9) 21:09:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x0, 0x1, 0x4f, 0x800, 0xc, "7dadf5ddc20fdfd3"}) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x3) 21:09:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1a000000}]}, 0x78) 21:09:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x560d, &(0x7f0000000000)) 21:09:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1b000000}]}, 0x78) 21:09:21 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad0002000000000000060e0000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x20000000}]}, 0x78) 21:09:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x25000000}]}, 0x78) [ 1203.523302][ C0] sd 0:0:1:0: tag#6571 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1203.523327][ C0] sd 0:0:1:0: tag#6571 CDB: opcode=0xe5 (vendor) [ 1203.523348][ C0] sd 0:0:1:0: tag#6571 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1203.523374][ C0] sd 0:0:1:0: tag#6571 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1203.523392][ C0] sd 0:0:1:0: tag#6571 CDB[20]: ba [ 1203.525153][T24921] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x3f000000}]}, 0x78) 21:09:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000080)={0x5, 0x6, 0x1, 0xfffffff7, 0x1, "fea73108221581625f3b2124161010d33fb7b9", 0x10001, 0x56}) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TCXONC(r1, 0x540a, 0x1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x46000, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) 21:09:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x560e, &(0x7f0000000000)) 21:09:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x48000000}]}, 0x78) 21:09:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x0, 0x1, 0x4f, 0x800, 0xc, "7dadf5ddc20fdfd3"}) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x3) 21:09:21 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006100000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x4c000000}]}, 0x78) [ 1203.812620][ C0] sd 0:0:1:0: tag#6572 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1203.812646][ C0] sd 0:0:1:0: tag#6572 CDB: opcode=0xe5 (vendor) [ 1203.812663][ C0] sd 0:0:1:0: tag#6572 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1203.812696][ C0] sd 0:0:1:0: tag#6572 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1203.812711][ C0] sd 0:0:1:0: tag#6572 CDB[20]: ba [ 1203.827530][T25041] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x60000000}]}, 0x78) 21:09:22 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006110000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x68000000}]}, 0x78) [ 1204.055962][ C0] sd 0:0:1:0: tag#6573 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1204.056000][ C0] sd 0:0:1:0: tag#6573 CDB: opcode=0xe5 (vendor) [ 1204.056018][ C0] sd 0:0:1:0: tag#6573 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1204.056035][ C0] sd 0:0:1:0: tag#6573 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 21:09:22 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006120000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) [ 1204.056066][ C0] sd 0:0:1:0: tag#6573 CDB[20]: ba [ 1204.070202][T25150] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x6c000000}]}, 0x78) [ 1204.256237][ C0] sd 0:0:1:0: tag#6574 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1204.256293][ C0] sd 0:0:1:0: tag#6574 CDB: opcode=0xe5 (vendor) [ 1204.256331][ C0] sd 0:0:1:0: tag#6574 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1204.256382][ C0] sd 0:0:1:0: tag#6574 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1204.256399][ C0] sd 0:0:1:0: tag#6574 CDB[20]: ba [ 1204.259151][T25257] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x74000000}]}, 0x78) 21:09:22 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) 21:09:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x560f, &(0x7f0000000000)) 21:09:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x7a000000}]}, 0x78) 21:09:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x0, 0x1, 0x4f, 0x800, 0xc, "7dadf5ddc20fdfd3"}) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x3) 21:09:22 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/46) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000008c0)={0x20, "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"}) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x10001) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000880)={0xe8, 0x15, &(0x7f0000000480)}) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x17, 0x20, 0x1d9, &(0x7f0000000080)="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"}) 21:09:22 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006150000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x7f000000}]}, 0x78) [ 1204.616028][ C1] sd 0:0:1:0: tag#6575 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1204.616056][ C1] sd 0:0:1:0: tag#6575 CDB: opcode=0xe5 (vendor) [ 1204.616076][ C1] sd 0:0:1:0: tag#6575 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1204.616103][ C1] sd 0:0:1:0: tag#6575 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1204.616120][ C1] sd 0:0:1:0: tag#6575 CDB[20]: ba 21:09:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x80ffffff}]}, 0x78) 21:09:22 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006390000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x9bffffff}]}, 0x78) [ 1204.792173][ C1] sd 0:0:1:0: tag#6576 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1204.792200][ C1] sd 0:0:1:0: tag#6576 CDB: opcode=0xe5 (vendor) [ 1204.808464][ C1] sd 0:0:1:0: tag#6576 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1204.808503][ C1] sd 0:0:1:0: tag#6576 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1204.808523][ C1] sd 0:0:1:0: tag#6576 CDB[20]: ba 21:09:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xc0000000}]}, 0x78) 21:09:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xe0000000}]}, 0x78) 21:09:23 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040200000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x40049409, &(0x7f0000000000)) 21:09:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xa) ioctl$TIOCNXCL(r0, 0x540d) 21:09:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)) (fail_nth: 1) 21:09:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf0000000}]}, 0x78) 21:09:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x17) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0xdc, 0x101}, {0x5, 0xcd1}, {0x0, 0x5f9}, {0x81, 0x2}, {0x7, 0x80}, {0x0, 0x2}]}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x7fff, 0x9}}, './file0\x00'}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0x13) write(r4, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x11) ioctl$TCSETS(r4, 0x5402, &(0x7f00000001c0)={0x75f02a91, 0x6, 0x1017, 0x18, 0x2, "1b51a12350685a9eec1a6ed6040329e86f43ba"}) 21:09:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x40086602, &(0x7f0000000000)) 21:09:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf8000000}]}, 0x78) 21:09:23 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040300000000000000", 0x39}], 0x1) ptrace(0x4207, r0) [ 1205.263330][T25715] FAULT_INJECTION: forcing a failure. [ 1205.263330][T25715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1205.276531][T25715] CPU: 1 PID: 25715 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 1205.285036][T25715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1205.295108][T25715] Call Trace: [ 1205.298452][T25715] [ 1205.301465][T25715] dump_stack_lvl+0xd6/0x122 [ 1205.306097][T25715] dump_stack+0x11/0x1b [ 1205.310258][T25715] should_fail+0x23c/0x250 [ 1205.314843][T25715] should_fail_usercopy+0x16/0x20 [ 1205.319930][T25715] _copy_to_user+0x1c/0x90 [ 1205.324394][T25715] simple_read_from_buffer+0xab/0x120 [ 1205.329796][T25715] proc_fail_nth_read+0x10d/0x150 [ 1205.334834][T25715] ? proc_fault_inject_write+0x230/0x230 [ 1205.340501][T25715] vfs_read+0x1e6/0x750 [ 1205.344658][T25715] ? __fget_light+0x219/0x260 [ 1205.349512][T25715] ksys_read+0xd9/0x190 [ 1205.353666][T25715] __x64_sys_read+0x3e/0x50 [ 1205.358261][T25715] do_syscall_64+0x44/0xa0 [ 1205.362721][T25715] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1205.368630][T25715] RIP: 0033:0x7f3aabe1269c [ 1205.373039][T25715] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1205.392730][T25715] RSP: 002b:00007f3aa9bb5170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1205.401202][T25715] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3aabe1269c 21:09:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xfc000000}]}, 0x78) 21:09:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x40087602, &(0x7f0000000000)) [ 1205.409183][T25715] RDX: 000000000000000f RSI: 00007f3aa9bb51e0 RDI: 0000000000000004 [ 1205.417161][T25715] RBP: 00007f3aa9bb51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1205.425472][T25715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1205.433445][T25715] R13: 00007ffc7501495f R14: 00007f3aa9bb5300 R15: 0000000000022000 [ 1205.441473][T25715] 21:09:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000100)) 21:09:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xffffff80}]}, 0x78) 21:09:23 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040400000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xffffff9b}]}, 0x78) 21:09:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x401c5820, &(0x7f0000000000)) 21:09:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x10000000000}]}, 0x78) 21:09:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x17) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0xdc, 0x101}, {0x5, 0xcd1}, {0x0, 0x5f9}, {0x81, 0x2}, {0x7, 0x80}, {0x0, 0x2}]}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x7fff, 0x9}}, './file0\x00'}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0x13) write(r4, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x11) ioctl$TCSETS(r4, 0x5402, &(0x7f00000001c0)={0x75f02a91, 0x6, 0x1017, 0x18, 0x2, "1b51a12350685a9eec1a6ed6040329e86f43ba"}) 21:09:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x40000000000000}]}, 0x78) 21:09:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x2, &(0x7f0000000100)) 21:09:23 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040500000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf0000000000000}]}, 0x78) 21:09:24 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x4020940d, &(0x7f0000000000)) 21:09:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x100000000000000}]}, 0x78) 21:09:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b2f, &(0x7f0000000100)) 21:09:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x180000000000000}]}, 0x78) 21:09:24 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040600000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x200000000000000}]}, 0x78) 21:09:24 executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x5}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x11fb951f5c1caebb}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x80}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x48000}, 0xc0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r3, 0x0, 0x0) 21:09:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x17) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0xdc, 0x101}, {0x5, 0xcd1}, {0x0, 0x5f9}, {0x81, 0x2}, {0x7, 0x80}, {0x0, 0x2}]}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x7fff, 0x9}}, './file0\x00'}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0x13) write(r4, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x11) ioctl$TCSETS(r4, 0x5402, &(0x7f00000001c0)={0x75f02a91, 0x6, 0x1017, 0x18, 0x2, "1b51a12350685a9eec1a6ed6040329e86f43ba"}) 21:09:24 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x80045432, &(0x7f0000000000)) 21:09:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x300000000000000}]}, 0x78) 21:09:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/134}) write$binfmt_elf64(r0, 0x0, 0x0) 21:09:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b30, &(0x7f0000000100)) 21:09:24 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040700000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x400000000000000}]}, 0x78) [ 1206.451919][T26182] validate_nla: 7 callbacks suppressed [ 1206.451953][T26182] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x500000000000000}]}, 0x78) 21:09:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x600000000000000}]}, 0x78) 21:09:24 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x80045440, &(0x7f0000000000)) 21:09:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b31, &(0x7f0000000100)) 21:09:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x700000000000000}]}, 0x78) 21:09:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x17) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0xdc, 0x101}, {0x5, 0xcd1}, {0x0, 0x5f9}, {0x81, 0x2}, {0x7, 0x80}, {0x0, 0x2}]}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x7fff, 0x9}}, './file0\x00'}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0x13) write(r4, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x11) 21:09:25 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040800000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x800000000000000}]}, 0x78) 21:09:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) write$binfmt_elf64(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x3, &(0x7f00000000c0)={0x0}) setsockopt$sock_timeval(r1, 0x1, 0x5, &(0x7f0000000040)={r2}, 0x10) dup(r1) 21:09:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x80086601, &(0x7f0000000000)) 21:09:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b32, &(0x7f0000000100)) 21:09:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x900000000000000}]}, 0x78) [ 1206.954561][T26311] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xa00000000000000}]}, 0x78) 21:09:25 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040900000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b33, &(0x7f0000000100)) 21:09:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xb00000000000000}]}, 0x78) [ 1207.083865][T26430] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xc00000000000000}]}, 0x78) 21:09:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x17) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0xdc, 0x101}, {0x5, 0xcd1}, {0x0, 0x5f9}, {0x81, 0x2}, {0x7, 0x80}, {0x0, 0x2}]}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x7fff, 0x9}}, './file0\x00'}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0x13) write(r4, &(0x7f00000000c0)="b4", 0xfdef) 21:09:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x80087601, &(0x7f0000000000)) 21:09:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x95c8, 0x6, 0x6, 0x8, 0x10}}) write$binfmt_elf64(r0, 0x0, 0x0) 21:09:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xd00000000000000}]}, 0x78) 21:09:25 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040a00000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b34, &(0x7f0000000100)) [ 1207.371820][ C0] scsi_io_completion_action: 8 callbacks suppressed [ 1207.371846][ C0] sd 0:0:1:0: tag#6589 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1207.388289][ C0] sd 0:0:1:0: tag#6589 CDB: opcode=0xe5 (vendor) [ 1207.394659][ C0] sd 0:0:1:0: tag#6589 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1207.404229][ C0] sd 0:0:1:0: tag#6589 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1207.404245][ C0] sd 0:0:1:0: tag#6589 CDB[20]: ba 21:09:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) open$dir(&(0x7f0000000040)='./file0\x00', 0x400000, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r1, 0x1, 0x5, &(0x7f0000000040)={r2}, 0x10) write$binfmt_elf64(r1, 0x0, 0x3b) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000)) 21:09:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xe00000000000000}]}, 0x78) [ 1207.408155][T26547] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf00000000000000}]}, 0x78) 21:09:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b35, &(0x7f0000000100)) 21:09:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x801c581f, &(0x7f0000000000)) 21:09:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1000000000000000}]}, 0x78) 21:09:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x17) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0xdc, 0x101}, {0x5, 0xcd1}, {0x0, 0x5f9}, {0x81, 0x2}, {0x7, 0x80}, {0x0, 0x2}]}) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x7fff, 0x9}}, './file0\x00'}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0x13) 21:09:25 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040b00000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:25 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1100000000000000}]}, 0x78) 21:09:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x20, 0x1, 0x4, 0x100, 0x3, 0x6, 0x80000001, 0x85, 0x40, 0xec, 0x3f, 0x7fff, 0x38, 0x1, 0xb68, 0x1ff, 0x8}, [{0x7, 0x3, 0x2, 0x2, 0x800, 0xfffffffffffffe00, 0x3ff, 0x80000001}], "7824eb64ced35a0096eaac25a88b2dd236e32efe1d9761ba05ecd2ffe284bb783c3f69f4dbdc3ad8314009151904dde9ee89e3b87d7f35243e24740536c71ea3abd1c7c5085c796256a5c101dba129a31ea53d57480746c728bead97ed0fac5f35fbcaaa992d96cfc2c79f8c6085f036bcd01d4be6ba558614d9e402857b885878c98e7d40b561c5d915a50d25104a4de880ccaecc0a8af229edb31cfdbbaf4205cfb07ed01d6913936da39a2fd8e46bbafb1ad11da7ef9b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x930) r3 = syz_open_pts(r0, 0x80000) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000000)={0xffff, 0x1, 0x7, 0x8}) write$binfmt_elf64(r0, 0x0, 0x0) 21:09:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b36, &(0x7f0000000100)) 21:09:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0xc0045878, &(0x7f0000000000)) 21:09:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1200000000000000}]}, 0x78) [ 1207.871017][ C0] sd 0:0:1:0: tag#6590 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1207.880951][ C0] sd 0:0:1:0: tag#6590 CDB: opcode=0xe5 (vendor) [ 1207.887298][ C0] sd 0:0:1:0: tag#6590 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1207.887323][ C0] sd 0:0:1:0: tag#6590 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1207.887339][ C0] sd 0:0:1:0: tag#6590 CDB[20]: ba [ 1207.892687][T26778] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1800000000000000}]}, 0x78) 21:09:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1a00000000000000}]}, 0x78) 21:09:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x2) 21:09:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0xc0045878, &(0x7f0000000000)) 21:09:26 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040c00000000000000", 0x39}], 0x1) ptrace(0x4207, r0) [ 1208.126258][ C1] sd 0:0:1:0: tag#6591 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1208.126281][ C1] sd 0:0:1:0: tag#6591 CDB: opcode=0xe5 (vendor) [ 1208.126300][ C1] sd 0:0:1:0: tag#6591 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1208.126318][ C1] sd 0:0:1:0: tag#6591 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1208.126334][ C1] sd 0:0:1:0: tag#6591 CDB[20]: ba [ 1208.140465][T26905] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x17) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0xdc, 0x101}, {0x5, 0xcd1}, {0x0, 0x5f9}, {0x81, 0x2}, {0x7, 0x80}, {0x0, 0x2}]}) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x7fff, 0x9}}, './file0\x00'}) 21:09:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x1b00000000000000}]}, 0x78) 21:09:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b37, &(0x7f0000000100)) 21:09:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x9, 0x6, 0x4, 0x38, 0x1f, "5704eb70b4e04526127764dbbab46651466675", 0x9f1, 0x8}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000080)) write$binfmt_elf64(r0, 0x0, 0x0) 21:09:26 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040d00000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0xc0189436, &(0x7f0000000000)) 21:09:26 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$binfmt_elf64(r2, 0x0, 0x0) 21:09:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x2000000000000000}]}, 0x78) [ 1208.353081][ C0] sd 0:0:1:0: tag#6528 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1208.353108][ C0] sd 0:0:1:0: tag#6528 CDB: opcode=0xe5 (vendor) [ 1208.353128][ C0] sd 0:0:1:0: tag#6528 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1208.353157][ C0] sd 0:0:1:0: tag#6528 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1208.353174][ C0] sd 0:0:1:0: tag#6528 CDB[20]: ba [ 1208.361833][T27017] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x2500000000000000}]}, 0x78) 21:09:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000080)={0xc, 0x1, 0x800}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) 21:09:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x3f00000000000000}]}, 0x78) 21:09:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b3a, &(0x7f0000000100)) 21:09:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x17) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0xdc, 0x101}, {0x5, 0xcd1}, {0x0, 0x5f9}, {0x81, 0x2}, {0x7, 0x80}, {0x0, 0x2}]}) syz_open_dev$tty20(0xc, 0x4, 0x0) 21:09:26 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x406801) write$binfmt_elf64(r0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 21:09:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0xc020660b, &(0x7f0000000000)) 21:09:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x4800000000000000}]}, 0x78) 21:09:26 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040e00000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b3b, &(0x7f0000000100)) [ 1208.712634][ C1] sd 0:0:1:0: tag#6529 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1208.712656][ C1] sd 0:0:1:0: tag#6529 CDB: opcode=0xe5 (vendor) [ 1208.712678][ C1] sd 0:0:1:0: tag#6529 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1208.712698][ C1] sd 0:0:1:0: tag#6529 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1208.747181][ C1] sd 0:0:1:0: tag#6529 CDB[20]: ba [ 1208.755827][T27149] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:26 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x55) 21:09:26 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x4c00000000000000}]}, 0x78) 21:09:26 executing program 0: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400}}, './file0\x00'}) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040)=0x3, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r1, 0x0, 0x0) 21:09:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 21:09:26 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006041000000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b3c, &(0x7f0000000100)) [ 1208.941930][ C0] sd 0:0:1:0: tag#6530 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1208.941953][ C0] sd 0:0:1:0: tag#6530 CDB: opcode=0xe5 (vendor) [ 1208.941974][ C0] sd 0:0:1:0: tag#6530 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1208.942004][ C0] sd 0:0:1:0: tag#6530 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1208.942022][ C0] sd 0:0:1:0: tag#6530 CDB[20]: ba [ 1208.943616][T27371] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x17) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0xdc, 0x101}, {0x5, 0xcd1}, {0x0, 0x5f9}, {0x81, 0x2}, {0x7, 0x80}, {0x0, 0x2}]}) 21:09:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x6000000000000000}]}, 0x78) 21:09:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r2, 0x1, 0x5, &(0x7f0000000040)={r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000001140)={0x2}, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="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", 0x1000, 0x0, &(0x7f0000001100)={0x11, 0x1b, r6, 0x1, 0x4}, 0x14) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r1, 0x1, 0x5, &(0x7f0000000040)={r7}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) write$binfmt_elf64(r0, 0x0, 0x0) clock_getres(0x5, &(0x7f00000000c0)) 21:09:27 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000100)="5f8f2ab2d3537a3c0441822c92263aeb2ed4f58cf404b3007b70b7521006135cc5cdfc6e5342cec1fd9b5ab1fb782fb0ea0390dfa95fd8297f369da8a71efd0040fe5f9207b0f2bcde4addf7e7654ed57bc96abae06966d478e44c53fe2caf4c1be49d2d0b72613244ae8a754cb69ca25c3e8cb6978a1a6d3b851e4ddd2b6f0bc8eee925dd8abb359b596e10cb885cc3363c", 0x92, 0x7, &(0x7f00000001c0)={0x77359400}) setsockopt$sock_timeval(r1, 0x1, 0x5, &(0x7f0000000040)={r2}, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x40010, r1, 0x9f801000) 21:09:27 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006041100000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b3d, &(0x7f0000000100)) 21:09:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x6800000000000000}]}, 0x78) [ 1209.150607][ C0] sd 0:0:1:0: tag#6531 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1209.150630][ C0] sd 0:0:1:0: tag#6531 CDB: opcode=0xe5 (vendor) [ 1209.150647][ C0] sd 0:0:1:0: tag#6531 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1209.150667][ C0] sd 0:0:1:0: tag#6531 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1209.150695][ C0] sd 0:0:1:0: tag#6531 CDB[20]: ba [ 1209.152487][T27483] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x6c00000000000000}]}, 0x78) 21:09:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x7400000000000000}]}, 0x78) 21:09:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b40, &(0x7f0000000100)) 21:09:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x7a00000000000000}]}, 0x78) 21:09:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x7f00000000000000}]}, 0x78) 21:09:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x17) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0) 21:09:27 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006041200000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x3, 0x326}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x14280, 0x0) r2 = inotify_init() r3 = dup2(r2, r1) fallocate(r3, 0x10, 0x200, 0x80) 21:09:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x8000000000000000}]}, 0x78) 21:09:27 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x1, 0x3f, 0x5, 0x26, 0x17, "4616e142eed07fae56b7415311cdc54f64a7f7"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 21:09:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b41, &(0x7f0000000100)) 21:09:27 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) syz_io_uring_setup(0x495a, &(0x7f0000000400), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100010018000000", @ANYRES32=r1, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./file0\x00']) r2 = syz_io_uring_setup(0x495a, &(0x7f0000000400), &(0x7f0000142000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380), &(0x7f0000000100)) mmap$IORING_OFF_SQES(&(0x7f000013f000/0x11000)=nil, 0x11000, 0x3000006, 0x11, r2, 0x10000000) io_uring_enter(r2, 0x6374, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000143000/0x2000)=nil, 0x2000, 0x3000006, 0x10, r2, 0x10000000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r4, 0x1, 0x5, &(0x7f0000000040)={r5}, 0x10) setsockopt$sock_void(r4, 0x1, 0x36, 0x0, 0x0) syz_io_uring_setup(0x2de1, &(0x7f0000000280)={0x0, 0x84a1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r6, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x5, &(0x7f0000000040)={0x0, 0x989680}, 0x1, 0x1, 0x0, {0x0, r7}}, 0x8) [ 1209.597459][ C0] sd 0:0:1:0: tag#6532 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1209.607381][ C0] sd 0:0:1:0: tag#6532 CDB: opcode=0xe5 (vendor) [ 1209.607410][ C0] sd 0:0:1:0: tag#6532 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1209.622785][ C0] sd 0:0:1:0: tag#6532 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1209.622806][ C0] sd 0:0:1:0: tag#6532 CDB[20]: ba 21:09:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x80ffffff00000000}]}, 0x78) 21:09:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x9bffffff00000000}]}, 0x78) 21:09:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b44, &(0x7f0000000100)) 21:09:27 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006042500000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xc000000000000000}]}, 0x78) [ 1209.856394][ C1] sd 0:0:1:0: tag#6533 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1209.856417][ C1] sd 0:0:1:0: tag#6533 CDB: opcode=0xe5 (vendor) [ 1209.856443][ C1] sd 0:0:1:0: tag#6533 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1209.856470][ C1] sd 0:0:1:0: tag#6533 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1209.856502][ C1] sd 0:0:1:0: tag#6533 CDB[20]: ba 21:09:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x17) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) 21:09:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$getflags(r0, 0x408) ioctl$TIOCGPTPEER(r0, 0x5441, 0xca8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r1, 0x1, 0x5, &(0x7f0000000040)={r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r3, 0x1, 0x5, &(0x7f0000000040)={r4}, 0x10) write(r3, &(0x7f0000000040)="934ee7b8285d055cf7e91751f030461e7acd2035871f2004cd9cd0c9721adc4612c0ada573dec84bbaf5e0d29689be2e2f3e63846c9053ca048b3263d23f554bfb29eda4d3c408c4a0d9310024fac2b29ce170a2e47e651058a148ef713f65de0d3fff4b487638ca2e542181bd027b24063ccb80a6e759a1ff7bca44f26bae49d44009ab764b2a781cc3dcf02bd93200"/153, 0x99) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 21:09:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xe000000000000000}]}, 0x78) 21:09:28 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x5, &(0x7f0000000040)={r1}, 0x10) write$binfmt_elf64(r0, 0x0, 0xffffffac) 21:09:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b45, &(0x7f0000000100)) 21:09:28 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006044800000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf000000000000000}]}, 0x78) [ 1210.087067][ C0] sd 0:0:1:0: tag#6534 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1210.087110][ C0] sd 0:0:1:0: tag#6534 CDB: opcode=0xe5 (vendor) [ 1210.087129][ C0] sd 0:0:1:0: tag#6534 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1210.087143][ C0] sd 0:0:1:0: tag#6534 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 21:09:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xf800000000000000}]}, 0x78) [ 1210.087156][ C0] sd 0:0:1:0: tag#6534 CDB[20]: ba 21:09:28 executing program 0: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.sched_load_balance\x00', 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) 21:09:28 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006044c00000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xfc00000000000000}]}, 0x78) 21:09:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b46, &(0x7f0000000100)) 21:09:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x17) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) 21:09:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x8009, 0xfc}) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 21:09:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xfffffffffffffeff, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000080)="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", 0x1000, 0x1}, {&(0x7f0000001080)="1e6392581fd1b263bb6d7cd93b1a944cbebb389a0c84c9bbe9362f00026d5c196f614a229d8f9eb804e44f50d7", 0x2d, 0x1ff}, {&(0x7f00000010c0)="e880cc95ca145cb65dbfaf13a7a15a647352397e95634d0d909bceb4ea04805eb02d5de03a8b7407ebea3001a7f1d35f894b805a96dff69c09c5f9a06dc75eced2f7ee64c4886c08afd834724e67d19fc5b65448747e7ff1d4f0815f236bb029a9657240a1631fb5d193969aeba6246b723e3fb4b869f67b4c69accd854b60d9e46664aa9863c81f9145f0a04ddf1071d869c25ac17260c1213b02c3569d12e301b956b6808328991ab56fda312628decd255edcbaf205a1ae548ead1d7c175ffb80579958", 0xc5, 0x10000}], 0x80020, &(0x7f0000001240)={[{@iocharset={'iocharset', 0x3d, 'cp852'}}], [{@obj_role={'obj_role', 0x3d, ':'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@measure}, {@smackfsdef={'smackfsdef', 0x3d, '&-'}}]}) fallocate(r1, 0x9, 0x0, 0x8000) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000012c0), 0x800) fallocate(r2, 0x42, 0xfffffffffffffeff, 0xff) 21:09:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xffffffff00000000}]}, 0x78) 21:09:28 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006046800000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b47, &(0x7f0000000100)) 21:09:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x78) 21:09:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x0) flock(r0, 0x6) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000001080)={0x27e32915, 0x7}) write$binfmt_elf64(r0, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001100)=ANY=[@ANYRES64=0x0, @ANYBLOB="00000000000000040100000000000000000000000000040002000000000000000100000000000e000400df00000000000003000000070000000796a76dfa5585527000000000000000cd0700000000000002000000400000200000002a24c2fda4dd13ef0000000300"/121]) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000010c0)={0x4, 0x7fff}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000080)={0x0, r1, "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", "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"}) 21:09:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x78) [ 1210.629102][ T23] audit: type=1400 audit(1636405768.696:3070): avc: denied { lock } for pid=28243 comm="syz-executor.0" path="/dev/tty1" dev="devtmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dhcpc_state_t:s0" 21:09:28 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x1, 0xffff, 0x3, 0x40, 0x10, "8cd42865caf78850"}) 21:09:28 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006046c00000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:28 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x3}]}, 0x78) 21:09:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x17) 21:09:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x4}]}, 0x78) 21:09:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 21:09:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b48, &(0x7f0000000100)) 21:09:29 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006047400000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0xf9}) 21:09:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r2, 0x1, 0x5, &(0x7f0000000040)={r3}, 0x10) write(r2, &(0x7f0000000040)="7bbd06a96d3a88eb202f412c97ec7937343c61f1412c6606bb6b63081569d4f9444de702092a8e878758f28935d4ff89b2257128474ecacef626eac714bb09d32dd4d2db448f1fc7c193619bcaf14610a7d418fe011848b21832f0ca20671070cd3eea1dbef32d3fbb3bee91f41930c1eb8bfd", 0x73) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 21:09:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x5}]}, 0x78) 21:09:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f00000000c0)) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x2, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r2, 0x1, 0x5, &(0x7f0000000040)={r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r5, 0x1, 0x5, &(0x7f0000000040)={r6}, 0x10) r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r7, 0x8004f50c, &(0x7f0000000140)) write$binfmt_elf64(r0, 0x0, 0x0) 21:09:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b49, &(0x7f0000000100)) 21:09:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x6}]}, 0x78) 21:09:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x78) 21:09:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) 21:09:29 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006047700000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x78) 21:09:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b4a, &(0x7f0000000100)) 21:09:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x9}]}, 0x78) 21:09:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xa}]}, 0x78) 21:09:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 21:09:29 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006047a00000000000000", 0x39}], 0x1) ptrace(0x4207, r0) [ 1211.507805][T28666] validate_nla: 8 callbacks suppressed [ 1211.507872][T28666] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b4b, &(0x7f0000000100)) 21:09:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xb}]}, 0x78) 21:09:29 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000002280)=[{&(0x7f0000000000)="ae05e80bbe9408b6c0f84c8984eb526e82516551e3f739f5bb34799043d185ae14651a280e4bdc8e584aced8da5b860914", 0x31}, {&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="e8ece68c0fc4ed9b0bb2af96bc5501d857304f177f0636cde692a6eebf214658588612f822e29575f0c6ec3540c802288c2ae1c52c97bf8cba70e117b617aa2afbd6fc594ff2e128f0c707bd3408a7d621f9583eae6640e1824cbcd5e7a474c46de3582597946c8a5c893bb47de957834b0ff206c14345848451cb1463a7d078aaeae247839f3e7e98acb0c0f139ee1f7be70b111bea008c43dc3c76c001128e26c83dd246109c0629ce184253938554cce7ac5a9e52ba3dafca56dd8fe1de12bf07e1ac03b20e8eb2e3639d0909bfb48e2f44e35136f4e4eb195361515d527486ff75d9cce4", 0xe6}, {&(0x7f0000001140)="f2d2807fff606d56e2026b3ad5b33e45045cb65893e5fd70851b67e9cf241e41d830881d5866a845c2a81afd4befbad18ef909680655f2363ee36272d7e9f4bdaec950e8d7f36ca64f9a01aca14c7cf82b8b7aea84cf018c4105303014b28e91", 0x60}, {&(0x7f00000011c0)="eb52ce50bfc6881c56e2c4", 0xb}, {&(0x7f0000001200)="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", 0x1000}], 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r1, 0x1, 0x5, &(0x7f0000000040)={r2}, 0x10) sendfile(r0, r1, &(0x7f0000002200)=0x8, 0x5) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r3, 0x1, 0x5, &(0x7f0000000040)={r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r5, 0x1, 0x5, &(0x7f0000000040)={r6}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$binfmt_elf64(r0, 0x0, 0x0) 21:09:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xc}]}, 0x78) 21:09:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) 21:09:29 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040003000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:29 executing program 1: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000040)={0x4}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000004c2f666b6c652f008893cd3f6e9b21d327ac373c163f53f3ee82952384b0b9c40d396e792b2ae77c863faaeef50af6c106173861a758584019d186644855641fa75afa7d840cef36685b3c"]) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f0000000100)="915c174f7cb2386c9fed41bae38caac6888c4fd9f0ba61f0481a8aff77ffcc4ee088d29e784bec6d39ae39fd5a21c2c7be67d517f6a75a26841c8bc3f44989067b725e26629f0cbb2119a6a30780ea16764deecea23be9f1ca74ab89e6f800a23c66bf78cb031f60dabbd53b2497c3dcc01b5199fc3e8e57ee73f6d37879dac245a96f44a04eb61ecb14228bf96dbe49283cb4ff13b1a543bf7fd4caef42db3e23025e4e5456f6848cc1aa41e90552b6d7de56efce0f3315616c602990debde0b3494cc6bbfef6e22576982dec97d147301040d0a4c1be74fc8f92e7e69beb366e94b4ec48d09ca2d7b5cbb0b944151f4d3decbf83ba91db29196c0603f61f3dc6cf1bd810b7283da946d76b377dab63aea43a4fdbf992983e04788b77411f3ba06e504ef79395107779da9609", 0x12d) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f00000002c0)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) [ 1211.758537][T28783] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xd}]}, 0x78) 21:09:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b4c, &(0x7f0000000100)) 21:09:29 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xe}]}, 0x78) 21:09:29 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040005000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf}]}, 0x78) 21:09:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b4d, &(0x7f0000000100)) [ 1211.935220][T28900] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x10}]}, 0x78) 21:09:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) write$binfmt_elf64(r0, 0x0, 0x0) 21:09:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x11}]}, 0x78) 21:09:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) 21:09:30 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040006000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b4e, &(0x7f0000000100)) 21:09:30 executing program 1: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x1, 0x5, 0x6, 0x400, 0x7, "d6560747c48746df25793dbe8759eb0f0d1fa0"}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x6, 0x7fff, 0x1, 0x6, 0x2, "12fb756a9f5363e66840fdbf343e7f337d4a1e"}) 21:09:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x12}]}, 0x78) 21:09:30 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11006b0005000000", 0x29}], 0x1) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "17aaaf29b74bcc35c28854e7b6"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4b5fc5f9f69516021232766d71"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_mreqsrc(r2, 0x0, 0x1, &(0x7f0000000280)={@multicast1, @private=0xa010102, @rand_addr=0x64010102}, 0xc) [ 1212.644213][ C1] scsi_io_completion_action: 8 callbacks suppressed [ 1212.644251][ C1] sd 0:0:1:0: tag#6548 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1212.644271][ C1] sd 0:0:1:0: tag#6548 CDB: opcode=0xe5 (vendor) [ 1212.644290][ C1] sd 0:0:1:0: tag#6548 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1212.644311][ C1] sd 0:0:1:0: tag#6548 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1212.644330][ C1] sd 0:0:1:0: tag#6548 CDB[20]: ba 21:09:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x18}]}, 0x78) [ 1212.646355][T29027] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1212.707610][ T23] audit: type=1400 audit(1636405770.776:3071): avc: denied { create } for pid=29024 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1212.715304][T29031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29031 comm=syz-executor.0 21:09:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1a}]}, 0x78) [ 1212.745225][T29025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29025 comm=syz-executor.0 [ 1212.746395][T29036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29036 comm=syz-executor.0 [ 1212.758639][T29038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29038 comm=syz-executor.0 21:09:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1b}]}, 0x78) 21:09:30 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000000c0)={0x20, 0x8, 0x9, 0x75}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000040)={r0}, 0x10) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x5d) 21:09:30 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x6) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x4, 0xda, 0xffffffffffffff81, 0x2, 0x7c, 0x2, 0x2ae, 0x38, 0x3c0, 0x7, 0xb4, 0x20, 0x1, 0x9, 0x4, 0x72f3}, [{0x1, 0x7fffffff, 0x57e8, 0x6, 0x5, 0x7, 0xffffffe1, 0x5d6}, {0x70000000, 0x0, 0x7fff, 0x2, 0x0, 0x20, 0x9, 0x80}], "3c70d614443e5d2c8e2ebd71bd970f28f588b1443f96c2f19631d892ab53463ac99ad5f381b7b5be9cff011c063c2358852b7f297f8df36b09e294baac9d6c", ['\x00', '\x00']}, 0x2b7) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 21:09:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000040)={r1}, 0x10) dup2(0xffffffffffffffff, r0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000180)={&(0x7f00000000c0)=""/92, 0x5c, 0x1000, 0x101}) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x301040, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)=0x40000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r3, 0x1, 0x5, &(0x7f0000000040)={r4}, 0x10) write$binfmt_elf64(r3, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x12b0) openat(r2, &(0x7f0000000000)='./file0\x00', 0x20040, 0x41) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r5, 0x1, 0x5, &(0x7f0000000040)={r6}, 0x10) fallocate(r5, 0xd, 0x6, 0x100000000) 21:09:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) 21:09:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x25}]}, 0x78) 21:09:31 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040007000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b52, &(0x7f0000000100)) 21:09:31 executing program 1: r0 = pidfd_open(0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000140)) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000080)) r3 = pidfd_open(0x0, 0x0) r4 = timerfd_create(0x8, 0x80800) pidfd_getfd(r3, r4, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x3, 0x0, 0x3, 0xc7, 0x15, "20070d69431180c28be4d6352bd18c5dd0622a"}) 21:09:31 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x1, 0x5, 0x6, 0x400, 0x7, "d6560747c48746df25793dbe8759eb0f0d1fa0"}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x6, 0x7fff, 0x1, 0x6, 0x2, "12fb756a9f5363e66840fdbf343e7f337d4a1e"}) 21:09:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x48}]}, 0x78) [ 1213.512377][ C1] sd 0:0:1:0: tag#6549 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1213.512401][ C1] sd 0:0:1:0: tag#6549 CDB: opcode=0xe5 (vendor) [ 1213.512417][ C1] sd 0:0:1:0: tag#6549 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1213.512473][ C1] sd 0:0:1:0: tag#6549 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1213.512489][ C1] sd 0:0:1:0: tag#6549 CDB[20]: ba 21:09:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x4c}]}, 0x78) [ 1213.524534][T29165] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x60}]}, 0x78) 21:09:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b62, &(0x7f0000000100)) 21:09:31 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x68}]}, 0x78) 21:09:31 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r1, 0x1, 0x5, &(0x7f0000000040)={r2}, 0x10) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0x7, 0x5, 0xffffff1e, 0xffffffff, 0x3}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 21:09:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) 21:09:32 executing program 0: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00'}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x1, 0x5, 0x6, 0x400, 0x7, "d6560747c48746df25793dbe8759eb0f0d1fa0"}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x6, 0x7fff, 0x1, 0x6, 0x2, "12fb756a9f5363e66840fdbf343e7f337d4a1e"}) 21:09:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x6c}]}, 0x78) 21:09:32 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040009000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b63, &(0x7f0000000100)) 21:09:32 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x440000, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000100), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000180)=""/238, 0xee}, {&(0x7f0000000280)=""/114, 0x72}, {&(0x7f0000000300)=""/245, 0xf5}, {&(0x7f0000000400)=""/230, 0xe6}, {&(0x7f0000000500)=""/76, 0x4c}, {&(0x7f0000000080)=""/33, 0x21}], 0x6, &(0x7f0000000600)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x2160) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) [ 1214.358641][ C0] sd 0:0:1:0: tag#6550 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1214.368500][ C0] sd 0:0:1:0: tag#6550 CDB: opcode=0xe5 (vendor) [ 1214.368530][ C0] sd 0:0:1:0: tag#6550 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1214.368550][ C0] sd 0:0:1:0: tag#6550 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1214.368568][ C0] sd 0:0:1:0: tag#6550 CDB[20]: ba [ 1214.372065][T29292] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x74}]}, 0x78) 21:09:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x7a}]}, 0x78) 21:09:32 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604000a000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b64, &(0x7f0000000100)) [ 1214.534917][ C0] sd 0:0:1:0: tag#6551 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1214.534941][ C0] sd 0:0:1:0: tag#6551 CDB: opcode=0xe5 (vendor) [ 1214.534961][ C0] sd 0:0:1:0: tag#6551 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1214.534983][ C0] sd 0:0:1:0: tag#6551 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1214.535001][ C0] sd 0:0:1:0: tag#6551 CDB[20]: ba [ 1214.541129][T29409] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:32 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x17) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0xdc, 0x101}, {0x5, 0xcd1}, {0x0, 0x5f9}, {0x81, 0x2}, {0x7, 0x80}, {0x0, 0x2}]}) 21:09:32 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xc0}]}, 0x78) 21:09:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) 21:09:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xe0}]}, 0x78) 21:09:33 executing program 1: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x5}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x72}]}, 0x2c}}, 0x24000004) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r1, 0x1, 0x5, &(0x7f0000000040)={r2}, 0x10) write(r1, &(0x7f0000000200)="fb756d03ed700a1075881afa661e5b14e5ea0e4102b059cbf4c2f869755cdf01000000467ad24b4ef15bce6bb5f49dd16664058902d65e48aaed50e8deaec2b0da1cf1ababf656a70000000000", 0x4d) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000000c0)=0x13) write(r3, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x11) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 21:09:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b65, &(0x7f0000000100)) 21:09:33 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604000b000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:33 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x17) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0xdc, 0x101}, {0x5, 0xcd1}, {0x0, 0x5f9}, {0x81, 0x2}, {0x7, 0x80}, {0x0, 0x2}]}) 21:09:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf0}]}, 0x78) [ 1215.247436][ C1] sd 0:0:1:0: tag#6552 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1215.247473][ C1] sd 0:0:1:0: tag#6552 CDB: opcode=0xe5 (vendor) [ 1215.247492][ C1] sd 0:0:1:0: tag#6552 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1215.247531][ C1] sd 0:0:1:0: tag#6552 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1215.247548][ C1] sd 0:0:1:0: tag#6552 CDB[20]: ba [ 1215.267217][T29524] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf8}]}, 0x78) 21:09:33 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604000c000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xfc}]}, 0x78) 21:09:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b66, &(0x7f0000000100)) [ 1215.452042][ C0] sd 0:0:1:0: tag#6553 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1215.452066][ C0] sd 0:0:1:0: tag#6553 CDB: opcode=0xe5 (vendor) [ 1215.452083][ C0] sd 0:0:1:0: tag#6553 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 21:09:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x180}]}, 0x78) [ 1215.452101][ C0] sd 0:0:1:0: tag#6553 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1215.452118][ C0] sd 0:0:1:0: tag#6553 CDB[20]: ba [ 1215.467532][T29744] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) 21:09:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x300}]}, 0x78) 21:09:34 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604000d000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b67, &(0x7f0000000100)) 21:09:34 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x17) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0xdc, 0x101}, {0x5, 0xcd1}, {0x0, 0x5f9}, {0x81, 0x2}, {0x7, 0x80}, {0x0, 0x2}]}) 21:09:34 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x9, 0x40000) r2 = signalfd(r0, &(0x7f0000000100)={[0x6a9c]}, 0x8) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000180)={0xfffffffb, 0x6000, 0x773, 0xc51, 0x0, "fbbac3f313ba8a5340ab32b70a007662dc5361"}) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000140)={0x83, 0xfff, 0xf90b, 0x2, 0x80, "d1e8455aec8b671078604e234f7bc7571a6e51", 0x20, 0x1c8}) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000080)) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) [ 1216.126106][ C0] sd 0:0:1:0: tag#6554 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1216.126132][ C0] sd 0:0:1:0: tag#6554 CDB: opcode=0xe5 (vendor) [ 1216.126170][ C0] sd 0:0:1:0: tag#6554 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1216.126188][ C0] sd 0:0:1:0: tag#6554 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1216.126205][ C0] sd 0:0:1:0: tag#6554 CDB[20]: ba [ 1216.128097][T29865] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) 21:09:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x500}]}, 0x78) 21:09:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x600}]}, 0x78) 21:09:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) 21:09:34 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604000e000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x700}]}, 0x78) 21:09:34 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/239, 0xef, 0x10002, &(0x7f0000000040)={0xa, 0x4e22, 0x80000001, @mcast1, 0x100}, 0x1c) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSBRK(r1, 0x5427) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000080)=0x581) 21:09:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b68, &(0x7f0000000100)) [ 1216.344630][ C0] sd 0:0:1:0: tag#6558 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1216.344666][ C0] sd 0:0:1:0: tag#6558 CDB: opcode=0xe5 (vendor) [ 1216.344684][ C0] sd 0:0:1:0: tag#6558 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 21:09:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x900}]}, 0x78) 21:09:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) [ 1216.344701][ C0] sd 0:0:1:0: tag#6558 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1216.344718][ C0] sd 0:0:1:0: tag#6558 CDB[20]: ba 21:09:34 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x17) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0xdc, 0x101}, {0x5, 0xcd1}, {0x0, 0x5f9}, {0x81, 0x2}, {0x7, 0x80}, {0x0, 0x2}]}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x7fff, 0x9}}, './file0\x00'}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0x13) write(r4, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x11) 21:09:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) 21:09:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xa00}]}, 0x78) 21:09:34 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040011000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b69, &(0x7f0000000100)) [ 1216.643214][ C0] sd 0:0:1:0: tag#6563 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1216.643238][ C0] sd 0:0:1:0: tag#6563 CDB: opcode=0xe5 (vendor) [ 1216.643256][ C0] sd 0:0:1:0: tag#6563 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1216.643274][ C0] sd 0:0:1:0: tag#6563 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1216.643300][ C0] sd 0:0:1:0: tag#6563 CDB[20]: ba [ 1216.657668][T30102] validate_nla: 1 callbacks suppressed 21:09:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xb00}]}, 0x78) 21:09:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) [ 1216.657699][T30102] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) 21:09:34 executing program 1: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000140), 0x2, &(0x7f00000001c0)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r1, 0x1, 0x5, &(0x7f0000000040)={r2}, 0x10) clock_gettime(0x2, &(0x7f0000000100)) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000080)) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x2441, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 21:09:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xc00}]}, 0x78) 21:09:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) 21:09:34 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xd00}]}, 0x78) 21:09:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x17) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0xdc, 0x101}, {0x5, 0xcd1}, {0x0, 0x5f9}, {0x81, 0x2}, {0x7, 0x80}, {0x0, 0x2}]}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x7fff, 0x9}}, './file0\x00'}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0x13) write(r4, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x11) 21:09:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b6a, &(0x7f0000000100)) 21:09:35 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040012000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:35 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) 21:09:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xe00}]}, 0x78) 21:09:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req={0x9, 0x7, 0x5, 0x552ddb30}, 0x10) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r1, 0x1, 0x5, &(0x7f0000000040)={r2}, 0x10) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x6) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 21:09:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf00}]}, 0x78) [ 1217.117446][ C1] sd 0:0:1:0: tag#6564 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1217.117489][ C1] sd 0:0:1:0: tag#6564 CDB: opcode=0xe5 (vendor) [ 1217.117510][ C1] sd 0:0:1:0: tag#6564 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1217.117530][ C1] sd 0:0:1:0: tag#6564 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1217.117548][ C1] sd 0:0:1:0: tag#6564 CDB[20]: ba [ 1217.119304][T30234] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) 21:09:35 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) 21:09:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1100}]}, 0x78) 21:09:35 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006041a17000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:35 executing program 1: r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, r2, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3ff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x23d}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004080}, 0x1) getsockopt(r0, 0x4000000, 0xffffff72, &(0x7f0000000200)=""/253, &(0x7f0000000300)=0xfd) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r3, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0xc0, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4342}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2c}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xde}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1d}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x72}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}]}, 0xc0}}, 0x20000010) [ 1217.367251][T30356] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:35 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) 21:09:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000000)=""/39) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x17) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x4800, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0xdc, 0x101}, {0x5, 0xcd1}, {0x0, 0x5f9}, {0x81, 0x2}, {0x7, 0x80}, {0x0, 0x2}]}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x7fff, 0x9}}, './file0\x00'}) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000200)=0x13) write(r4, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x11) 21:09:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b70, &(0x7f0000000100)) 21:09:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1200}]}, 0x78) 21:09:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 21:09:35 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604171a000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1800}]}, 0x78) 21:09:35 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) 21:09:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1a00}]}, 0x78) [ 1217.608572][T30471] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1b00}]}, 0x78) 21:09:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) 21:09:35 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x2000}]}, 0x78) 21:09:36 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) (fail_nth: 1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) 21:09:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) 21:09:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0x101, 0x3ac1}) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x1ff, 0x6b, 0x80000001, 0x800, 0x11, "7406fb2e8e75d299becd91b440e0a9f042c0a2"}) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x145400, 0x0) dup2(r0, r1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)) 21:09:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x2500}]}, 0x78) 21:09:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b71, &(0x7f0000000100)) 21:09:36 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040025000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x3f00}]}, 0x78) [ 1217.935811][ C1] scsi_io_completion_action: 2 callbacks suppressed [ 1217.935839][ C1] sd 0:0:1:0: tag#6567 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1217.952359][ C1] sd 0:0:1:0: tag#6567 CDB: opcode=0xe5 (vendor) [ 1217.952384][ C1] sd 0:0:1:0: tag#6567 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1217.952408][ C1] sd 0:0:1:0: tag#6567 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 21:09:36 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) (fail_nth: 2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) [ 1217.952424][ C1] sd 0:0:1:0: tag#6567 CDB[20]: ba [ 1217.960965][T30602] FAULT_INJECTION: forcing a failure. [ 1217.960965][T30602] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.960989][T30602] CPU: 0 PID: 30602 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1217.961011][T30602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1217.961048][T30596] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1217.961094][T30602] Call Trace: [ 1217.961101][T30602] [ 1217.961108][T30602] dump_stack_lvl+0xd6/0x122 [ 1217.961144][T30602] dump_stack+0x11/0x1b [ 1217.961160][T30602] should_fail+0x23c/0x250 [ 1217.961219][T30602] ? kobject_uevent_env+0x1a7/0xc40 [ 1217.961239][T30602] __should_failslab+0x81/0x90 [ 1217.961265][T30602] should_failslab+0x5/0x20 [ 1217.961298][T30602] kmem_cache_alloc_trace+0x52/0x350 [ 1217.961320][T30602] ? __kernfs_remove+0x6a8/0x6d0 [ 1217.961340][T30602] ? dev_uevent_filter+0x70/0x70 [ 1217.961363][T30602] kobject_uevent_env+0x1a7/0xc40 [ 1217.961464][T30602] ? kernfs_put+0x39/0x300 [ 1217.961485][T30602] ? preempt_count_add+0x4e/0x90 [ 1217.961509][T30602] ? _raw_spin_unlock_irq+0x2f/0x50 [ 1217.961571][T30602] ? device_pm_check_callbacks+0x626/0x640 [ 1217.961590][T30602] kobject_uevent+0x18/0x20 [ 1217.961609][T30602] device_del+0x82e/0x8c0 [ 1217.961673][T30602] ? mntput+0x45/0x70 [ 1217.961690][T30602] device_unregister+0x11/0x30 [ 1217.961710][T30602] bdi_unregister+0x202/0x270 [ 1217.961735][T30602] del_gendisk+0x1e4/0x3c0 [ 1217.961783][T30602] loop_control_ioctl+0x3a8/0x410 [ 1217.961890][T30602] ? loop_remove+0x90/0x90 [ 1217.961908][T30602] __se_sys_ioctl+0xcb/0x140 [ 1217.961930][T30602] __x64_sys_ioctl+0x3f/0x50 [ 1217.961972][T30602] do_syscall_64+0x44/0xa0 [ 1217.961996][T30602] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1217.962021][T30602] RIP: 0033:0x7fd812ab3ae9 [ 1217.962034][T30602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1217.962124][T30602] RSP: 002b:00007fd81082a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1217.962162][T30602] RAX: ffffffffffffffda RBX: 00007fd812bc6f60 RCX: 00007fd812ab3ae9 [ 1217.962176][T30602] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 1217.962242][T30602] RBP: 00007fd81082a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1217.962254][T30602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1217.962343][T30602] R13: 00007ffcafd9a01f R14: 00007fd81082a300 R15: 0000000000022000 [ 1217.962357][T30602] [ 1218.081571][T30740] FAULT_INJECTION: forcing a failure. [ 1218.081571][T30740] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.224417][ C1] sd 0:0:1:0: tag#6568 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1218.232308][T30740] CPU: 0 PID: 30740 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1218.232331][T30740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 21:09:36 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040048000000000000", 0x39}], 0x1) ptrace(0x4207, r0) [ 1218.240751][ C1] sd 0:0:1:0: tag#6568 CDB: opcode=0xe5 (vendor) [ 1218.243728][T30740] Call Trace: [ 1218.256330][ C1] sd 0:0:1:0: tag#6568 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1218.266062][T30740] [ 1218.274488][ C1] sd 0:0:1:0: tag#6568 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1218.284493][T30740] dump_stack_lvl+0xd6/0x122 [ 1218.284518][T30740] dump_stack+0x11/0x1b [ 1218.290843][ C1] sd 0:0:1:0: tag#6568 CDB[20]: ba [ 1218.294112][T30740] should_fail+0x23c/0x250 [ 1218.333326][T30740] ? kzalloc+0x1d/0x30 [ 1218.333352][T30740] __should_failslab+0x81/0x90 [ 1218.333390][T30740] should_failslab+0x5/0x20 [ 1218.333414][T30740] __kmalloc+0x6f/0x370 [ 1218.333436][T30740] kzalloc+0x1d/0x30 [ 1218.333530][T30740] kobject_get_path+0x7c/0x110 [ 1218.333558][T30740] kobject_uevent_env+0x1be/0xc40 [ 1218.333577][T30740] ? kernfs_put+0x39/0x300 21:09:36 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) (fail_nth: 3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) [ 1218.333598][T30740] ? preempt_count_add+0x4e/0x90 [ 1218.333631][T30740] ? _raw_spin_unlock_irq+0x2f/0x50 [ 1218.333711][T30740] ? device_pm_check_callbacks+0x626/0x640 [ 1218.333734][T30740] kobject_uevent+0x18/0x20 [ 1218.333754][T30740] device_del+0x82e/0x8c0 [ 1218.333844][T30740] ? mntput+0x45/0x70 [ 1218.333865][T30740] device_unregister+0x11/0x30 [ 1218.333918][T30740] bdi_unregister+0x202/0x270 21:09:36 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604004c000000000000", 0x39}], 0x1) ptrace(0x4207, r0) [ 1218.333940][T30740] del_gendisk+0x1e4/0x3c0 [ 1218.334054][T30740] loop_control_ioctl+0x3a8/0x410 [ 1218.334079][T30740] ? loop_remove+0x90/0x90 [ 1218.334111][T30740] __se_sys_ioctl+0xcb/0x140 [ 1218.334135][T30740] __x64_sys_ioctl+0x3f/0x50 [ 1218.334158][T30740] do_syscall_64+0x44/0xa0 [ 1218.334181][T30740] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1218.334238][T30740] RIP: 0033:0x7fd812ab3ae9 21:09:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4b72, &(0x7f0000000100)) [ 1218.334253][T30740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1218.334339][T30740] RSP: 002b:00007fd81082a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1218.334359][T30740] RAX: ffffffffffffffda RBX: 00007fd812bc6f60 RCX: 00007fd812ab3ae9 [ 1218.334391][T30740] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 1218.334404][T30740] RBP: 00007fd81082a1d0 R08: 0000000000000000 R09: 0000000000000000 21:09:36 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) (fail_nth: 4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) 21:09:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) [ 1218.334417][T30740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1218.334430][T30740] R13: 00007ffcafd9a01f R14: 00007fd81082a300 R15: 0000000000022000 [ 1218.334446][T30740] [ 1218.445303][T30916] FAULT_INJECTION: forcing a failure. [ 1218.445303][T30916] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.445328][T30916] CPU: 1 PID: 30916 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1218.445415][T30916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1218.445426][T30916] Call Trace: [ 1218.445432][T30916] [ 1218.445438][T30916] dump_stack_lvl+0xd6/0x122 [ 1218.445458][T30916] dump_stack+0x11/0x1b [ 1218.445625][T30916] should_fail+0x23c/0x250 [ 1218.445651][T30916] __should_failslab+0x81/0x90 [ 1218.445733][T30916] should_failslab+0x5/0x20 [ 1218.445797][T30916] kmem_cache_alloc_node+0x61/0x2d0 [ 1218.445820][T30916] ? __alloc_skb+0xf0/0x450 [ 1218.445908][T30916] __alloc_skb+0xf0/0x450 [ 1218.445964][T30916] alloc_uevent_skb+0x5b/0x120 [ 1218.445985][T30916] kobject_uevent_env+0x863/0xc40 [ 1218.446069][T30916] ? preempt_count_add+0x4e/0x90 [ 1218.446157][T30916] ? _raw_spin_unlock_irq+0x2f/0x50 [ 1218.446182][T30916] ? device_pm_check_callbacks+0x626/0x640 [ 1218.446232][T30916] kobject_uevent+0x18/0x20 [ 1218.446250][T30916] device_del+0x82e/0x8c0 [ 1218.446328][T30916] ? mntput+0x45/0x70 [ 1218.446349][T30916] device_unregister+0x11/0x30 [ 1218.446369][T30916] bdi_unregister+0x202/0x270 [ 1218.446413][T30916] del_gendisk+0x1e4/0x3c0 [ 1218.446437][T30916] loop_control_ioctl+0x3a8/0x410 [ 1218.446459][T30916] ? loop_remove+0x90/0x90 [ 1218.446477][T30916] __se_sys_ioctl+0xcb/0x140 [ 1218.446574][T30916] __x64_sys_ioctl+0x3f/0x50 [ 1218.446595][T30916] do_syscall_64+0x44/0xa0 [ 1218.446618][T30916] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1218.446696][T30916] RIP: 0033:0x7fd812ab3ae9 [ 1218.446711][T30916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1218.446729][T30916] RSP: 002b:00007fd81082a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1218.446814][T30916] RAX: ffffffffffffffda RBX: 00007fd812bc6f60 RCX: 00007fd812ab3ae9 [ 1218.446827][T30916] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 1218.446840][T30916] RBP: 00007fd81082a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1218.446851][T30916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1218.446864][T30916] R13: 00007ffcafd9a01f R14: 00007fd81082a300 R15: 0000000000022000 [ 1218.446878][T30916] [ 1218.462906][ C0] sd 0:0:1:0: tag#6569 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1218.792684][ C0] sd 0:0:1:0: tag#6569 CDB: opcode=0xe5 (vendor) [ 1218.799022][ C0] sd 0:0:1:0: tag#6569 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1218.799052][ C0] sd 0:0:1:0: tag#6569 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1218.817085][ C0] sd 0:0:1:0: tag#6569 CDB[20]: ba [ 1218.817648][T31025] FAULT_INJECTION: forcing a failure. [ 1218.817648][T31025] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.817671][T31025] CPU: 1 PID: 31025 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1218.817690][T31025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1218.817701][T31025] Call Trace: [ 1218.817708][T31025] [ 1218.817714][T31025] dump_stack_lvl+0xd6/0x122 [ 1218.817736][T31025] dump_stack+0x11/0x1b [ 1218.817810][T31025] should_fail+0x23c/0x250 [ 1218.817849][T31025] __should_failslab+0x81/0x90 [ 1218.817873][T31025] should_failslab+0x5/0x20 [ 1218.817897][T31025] kmem_cache_alloc_node_trace+0x61/0x310 [ 1218.817957][T31025] ? __kmalloc_node_track_caller+0x30/0x40 [ 1218.818056][T31025] __kmalloc_node_track_caller+0x30/0x40 [ 1218.818134][T31025] ? alloc_uevent_skb+0x5b/0x120 [ 1218.818184][T31025] __alloc_skb+0x19d/0x450 [ 1218.818204][T31025] alloc_uevent_skb+0x5b/0x120 [ 1218.818223][T31025] kobject_uevent_env+0x863/0xc40 [ 1218.818279][T31025] ? preempt_count_add+0x4e/0x90 [ 1218.818301][T31025] ? _raw_spin_unlock_irq+0x2f/0x50 [ 1218.818349][T31025] ? device_pm_check_callbacks+0x626/0x640 [ 1218.818370][T31025] kobject_uevent+0x18/0x20 [ 1218.818405][T31025] device_del+0x82e/0x8c0 [ 1218.818445][T31025] ? mntput+0x45/0x70 [ 1218.818460][T31025] device_unregister+0x11/0x30 [ 1218.818480][T31025] bdi_unregister+0x202/0x270 [ 1218.818501][T31025] del_gendisk+0x1e4/0x3c0 [ 1218.818523][T31025] loop_control_ioctl+0x3a8/0x410 [ 1218.818619][T31025] ? loop_remove+0x90/0x90 [ 1218.818637][T31025] __se_sys_ioctl+0xcb/0x140 [ 1218.818659][T31025] __x64_sys_ioctl+0x3f/0x50 [ 1218.818679][T31025] do_syscall_64+0x44/0xa0 [ 1218.818773][T31025] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1218.818803][T31025] RIP: 0033:0x7fd812ab3ae9 [ 1218.818819][T31025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1218.818835][T31025] RSP: 002b:00007fd810809188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 21:09:37 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 21:09:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x4000}]}, 0x78) 21:09:37 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040068000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4bfa, &(0x7f0000000100)) [ 1218.818853][T31025] RAX: ffffffffffffffda RBX: 00007fd812bc7020 RCX: 00007fd812ab3ae9 [ 1218.818865][T31025] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 1218.818944][T31025] RBP: 00007fd8108091d0 R08: 0000000000000000 R09: 0000000000000000 [ 1218.818956][T31025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1218.818968][T31025] R13: 00007ffcafd9a01f R14: 00007fd810809300 R15: 0000000000022000 [ 1218.818982][T31025] 21:09:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) 21:09:37 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) (fail_nth: 5) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) [ 1219.144350][T31036] FAULT_INJECTION: forcing a failure. [ 1219.144350][T31036] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.144373][T31036] CPU: 0 PID: 31036 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1219.144391][T31036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1219.144410][T31036] Call Trace: [ 1219.144417][T31036] [ 1219.144424][T31036] dump_stack_lvl+0xd6/0x122 [ 1219.144445][T31036] dump_stack+0x11/0x1b 21:09:37 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) (fail_nth: 6) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) [ 1219.144461][T31036] should_fail+0x23c/0x250 [ 1219.144482][T31036] ? skb_clone+0x12c/0x1f0 [ 1219.144570][T31036] __should_failslab+0x81/0x90 [ 1219.144592][T31036] should_failslab+0x5/0x20 [ 1219.144616][T31036] kmem_cache_alloc+0x4f/0x320 [ 1219.144665][T31036] skb_clone+0x12c/0x1f0 [ 1219.144683][T31036] netlink_broadcast+0x4e9/0xad0 [ 1219.144704][T31036] kobject_uevent_env+0x8c9/0xc40 21:09:37 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) (fail_nth: 7) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) 21:09:37 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604006c000000000000", 0x39}], 0x1) ptrace(0x4207, r0) [ 1219.144725][T31036] ? preempt_count_add+0x4e/0x90 [ 1219.144792][T31036] ? _raw_spin_unlock_irq+0x2f/0x50 [ 1219.144814][T31036] ? device_pm_check_callbacks+0x626/0x640 [ 1219.144834][T31036] kobject_uevent+0x18/0x20 [ 1219.144960][T31036] device_del+0x82e/0x8c0 [ 1219.144982][T31036] ? mntput+0x45/0x70 [ 1219.144998][T31036] device_unregister+0x11/0x30 [ 1219.145019][T31036] bdi_unregister+0x202/0x270 [ 1219.145067][T31036] del_gendisk+0x1e4/0x3c0 [ 1219.145088][T31036] loop_control_ioctl+0x3a8/0x410 [ 1219.145109][T31036] ? loop_remove+0x90/0x90 [ 1219.145148][T31036] __se_sys_ioctl+0xcb/0x140 [ 1219.145170][T31036] __x64_sys_ioctl+0x3f/0x50 [ 1219.145193][T31036] do_syscall_64+0x44/0xa0 [ 1219.145257][T31036] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1219.145352][T31036] RIP: 0033:0x7fd812ab3ae9 [ 1219.145367][T31036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1219.145445][T31036] RSP: 002b:00007fd81082a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1219.145515][T31036] RAX: ffffffffffffffda RBX: 00007fd812bc6f60 RCX: 00007fd812ab3ae9 [ 1219.145527][T31036] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 1219.145539][T31036] RBP: 00007fd81082a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1219.145551][T31036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1219.145603][T31036] R13: 00007ffcafd9a01f R14: 00007fd81082a300 R15: 0000000000022000 [ 1219.145619][T31036] [ 1219.147728][ C0] sd 0:0:1:0: tag#6570 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1219.147754][ C0] sd 0:0:1:0: tag#6570 CDB: opcode=0xe5 (vendor) [ 1219.147774][ C0] sd 0:0:1:0: tag#6570 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 21:09:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x4800}]}, 0x78) 21:09:37 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040074000000000000", 0x39}], 0x1) ptrace(0x4207, r0) [ 1219.147795][ C0] sd 0:0:1:0: tag#6570 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1219.147825][ C0] sd 0:0:1:0: tag#6570 CDB[20]: ba [ 1219.149859][T31040] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1219.278042][T31248] FAULT_INJECTION: forcing a failure. [ 1219.278042][T31248] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.278067][T31248] CPU: 0 PID: 31248 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1219.278141][T31248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1219.278171][T31248] Call Trace: [ 1219.278178][T31248] [ 1219.278184][T31248] dump_stack_lvl+0xd6/0x122 [ 1219.278254][T31248] dump_stack+0x11/0x1b [ 1219.278269][T31248] should_fail+0x23c/0x250 [ 1219.278307][T31248] ? kobject_uevent_env+0x1a7/0xc40 [ 1219.278327][T31248] __should_failslab+0x81/0x90 [ 1219.278350][T31248] should_failslab+0x5/0x20 [ 1219.278374][T31248] kmem_cache_alloc_trace+0x52/0x350 [ 1219.278533][T31248] ? __kernfs_remove+0x6a8/0x6d0 [ 1219.278557][T31248] ? dev_uevent_filter+0x70/0x70 [ 1219.278655][T31248] kobject_uevent_env+0x1a7/0xc40 [ 1219.278677][T31248] ? kernfs_put+0x39/0x300 [ 1219.278698][T31248] ? preempt_count_add+0x4e/0x90 [ 1219.278723][T31248] ? _raw_spin_unlock_irq+0x2f/0x50 [ 1219.278784][T31248] ? device_pm_check_callbacks+0x626/0x640 [ 1219.278810][T31248] kobject_uevent+0x18/0x20 [ 1219.278830][T31248] device_del+0x82e/0x8c0 [ 1219.278987][T31248] del_gendisk+0x37a/0x3c0 [ 1219.279013][T31248] loop_control_ioctl+0x3a8/0x410 [ 1219.279037][T31248] ? loop_remove+0x90/0x90 [ 1219.279185][T31248] __se_sys_ioctl+0xcb/0x140 [ 1219.279211][T31248] __x64_sys_ioctl+0x3f/0x50 [ 1219.279234][T31248] do_syscall_64+0x44/0xa0 [ 1219.279329][T31248] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1219.279357][T31248] RIP: 0033:0x7fd812ab3ae9 [ 1219.279372][T31248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1219.279412][T31248] RSP: 002b:00007fd81082a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1219.279430][T31248] RAX: ffffffffffffffda RBX: 00007fd812bc6f60 RCX: 00007fd812ab3ae9 [ 1219.279443][T31248] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 1219.279456][T31248] RBP: 00007fd81082a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1219.279469][T31248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1219.279483][T31248] R13: 00007ffcafd9a01f R14: 00007fd81082a300 R15: 0000000000022000 [ 1219.279498][T31248] [ 1219.358165][ C0] sd 0:0:1:0: tag#6571 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1219.358194][ C0] sd 0:0:1:0: tag#6571 CDB: opcode=0xe5 (vendor) [ 1219.358211][ C0] sd 0:0:1:0: tag#6571 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1219.358245][ C0] sd 0:0:1:0: tag#6571 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1219.358262][ C0] sd 0:0:1:0: tag#6571 CDB[20]: ba [ 1219.359888][T31251] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1219.370908][T31252] FAULT_INJECTION: forcing a failure. 21:09:37 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x4c00}]}, 0x78) [ 1219.370908][T31252] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.816072][T31252] CPU: 1 PID: 31252 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1219.816096][T31252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1219.816106][T31252] Call Trace: [ 1219.816112][T31252] [ 1219.816119][T31252] dump_stack_lvl+0xd6/0x122 [ 1219.816166][T31252] dump_stack+0x11/0x1b [ 1219.816183][T31252] should_fail+0x23c/0x250 [ 1219.816207][T31252] ? kzalloc+0x1d/0x30 [ 1219.816225][T31252] __should_failslab+0x81/0x90 [ 1219.816261][T31252] should_failslab+0x5/0x20 [ 1219.816292][T31252] __kmalloc+0x6f/0x370 [ 1219.816314][T31252] kzalloc+0x1d/0x30 [ 1219.816329][T31252] kobject_get_path+0x7c/0x110 [ 1219.816347][T31252] kobject_uevent_env+0x1be/0xc40 [ 1219.816367][T31252] ? kernfs_put+0x39/0x300 [ 1219.816430][T31252] ? preempt_count_add+0x4e/0x90 [ 1219.816456][T31252] ? _raw_spin_unlock_irq+0x2f/0x50 [ 1219.816511][T31252] ? device_pm_check_callbacks+0x626/0x640 [ 1219.816530][T31252] kobject_uevent+0x18/0x20 [ 1219.816603][T31252] device_del+0x82e/0x8c0 [ 1219.816627][T31252] del_gendisk+0x37a/0x3c0 [ 1219.816650][T31252] loop_control_ioctl+0x3a8/0x410 [ 1219.816733][T31252] ? loop_remove+0x90/0x90 [ 1219.816754][T31252] __se_sys_ioctl+0xcb/0x140 [ 1219.816777][T31252] __x64_sys_ioctl+0x3f/0x50 [ 1219.816800][T31252] do_syscall_64+0x44/0xa0 [ 1219.816825][T31252] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1219.816848][T31252] RIP: 0033:0x7fd812ab3ae9 [ 1219.816862][T31252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1219.816918][T31252] RSP: 002b:00007fd81082a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1219.816938][T31252] RAX: ffffffffffffffda RBX: 00007fd812bc6f60 RCX: 00007fd812ab3ae9 [ 1219.816953][T31252] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 1219.816966][T31252] RBP: 00007fd81082a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1219.816978][T31252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1219.816989][T31252] R13: 00007ffcafd9a01f R14: 00007fd81082a300 R15: 0000000000022000 [ 1219.817003][T31252] 21:09:38 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x9, 0x3f, 0x76b, 0x10001, 0x14, "5b5bdab9d2034603ada11e2dc478c0ef80d4af"}) 21:09:38 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040077000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:38 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) (fail_nth: 8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) 21:09:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x6000}]}, 0x78) 21:09:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x4bfb, &(0x7f0000000100)) 21:09:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) [ 1220.170125][T31666] FAULT_INJECTION: forcing a failure. [ 1220.170125][T31666] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.170192][T31666] CPU: 0 PID: 31666 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1220.170211][T31666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1220.170221][T31666] Call Trace: [ 1220.170227][T31666] [ 1220.170233][T31666] dump_stack_lvl+0xd6/0x122 [ 1220.170256][T31666] dump_stack+0x11/0x1b [ 1220.170272][T31666] should_fail+0x23c/0x250 [ 1220.170305][T31666] __should_failslab+0x81/0x90 [ 1220.170327][T31666] should_failslab+0x5/0x20 [ 1220.170371][T31666] kmem_cache_alloc_node+0x61/0x2d0 [ 1220.170394][T31666] ? __alloc_skb+0xf0/0x450 [ 1220.170413][T31666] __alloc_skb+0xf0/0x450 [ 1220.170431][T31666] alloc_uevent_skb+0x5b/0x120 [ 1220.170474][T31666] kobject_uevent_env+0x863/0xc40 [ 1220.170493][T31666] ? preempt_count_add+0x4e/0x90 [ 1220.170516][T31666] ? _raw_spin_unlock_irq+0x2f/0x50 [ 1220.170587][T31666] ? device_pm_check_callbacks+0x626/0x640 [ 1220.170608][T31666] kobject_uevent+0x18/0x20 [ 1220.170626][T31666] device_del+0x82e/0x8c0 [ 1220.170647][T31666] del_gendisk+0x37a/0x3c0 [ 1220.170752][T31666] loop_control_ioctl+0x3a8/0x410 [ 1220.170774][T31666] ? loop_remove+0x90/0x90 [ 1220.170791][T31666] __se_sys_ioctl+0xcb/0x140 [ 1220.170812][T31666] __x64_sys_ioctl+0x3f/0x50 [ 1220.170877][T31666] do_syscall_64+0x44/0xa0 [ 1220.170975][T31666] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1220.171025][T31666] RIP: 0033:0x7fd812ab3ae9 [ 1220.171040][T31666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1220.171057][T31666] RSP: 002b:00007fd81082a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1220.171076][T31666] RAX: ffffffffffffffda RBX: 00007fd812bc6f60 RCX: 00007fd812ab3ae9 [ 1220.171144][T31666] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 1220.171157][T31666] RBP: 00007fd81082a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1220.171169][T31666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1220.171182][T31666] R13: 00007ffcafd9a01f R14: 00007fd81082a300 R15: 0000000000022000 [ 1220.171196][T31666] [ 1220.172443][ C1] sd 0:0:1:0: tag#6572 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1220.399541][ C1] sd 0:0:1:0: tag#6572 CDB: opcode=0xe5 (vendor) [ 1220.399561][ C1] sd 0:0:1:0: tag#6572 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 21:09:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13) 21:09:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x6800}]}, 0x78) [ 1220.399580][ C1] sd 0:0:1:0: tag#6572 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1220.399597][ C1] sd 0:0:1:0: tag#6572 CDB[20]: ba 21:09:38 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604007a000000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:38 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) (fail_nth: 9) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) 21:09:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, 0x0) 21:09:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5401, &(0x7f0000000100)) [ 1220.529192][ C0] sd 0:0:1:0: tag#6573 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1220.539060][ C0] sd 0:0:1:0: tag#6573 CDB: opcode=0xe5 (vendor) [ 1220.545515][ C0] sd 0:0:1:0: tag#6573 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1220.554587][ C0] sd 0:0:1:0: tag#6573 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1220.563744][ C0] sd 0:0:1:0: tag#6573 CDB[20]: ba 21:09:38 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 21:09:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x6c00}]}, 0x78) 21:09:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, 0x0) [ 1220.571750][T31788] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1220.590357][T31789] FAULT_INJECTION: forcing a failure. [ 1220.590357][T31789] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.602994][T31789] CPU: 0 PID: 31789 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1220.603047][T31789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1220.603058][T31789] Call Trace: [ 1220.603064][T31789] [ 1220.603090][T31789] dump_stack_lvl+0xd6/0x122 [ 1220.603112][T31789] dump_stack+0x11/0x1b [ 1220.603127][T31789] should_fail+0x23c/0x250 [ 1220.603149][T31789] __should_failslab+0x81/0x90 [ 1220.603172][T31789] should_failslab+0x5/0x20 [ 1220.603267][T31789] kmem_cache_alloc_node_trace+0x61/0x310 [ 1220.603322][T31789] ? __kmalloc_node_track_caller+0x30/0x40 [ 1220.603350][T31789] __kmalloc_node_track_caller+0x30/0x40 [ 1220.603372][T31789] ? alloc_uevent_skb+0x5b/0x120 [ 1220.603392][T31789] __alloc_skb+0x19d/0x450 21:09:38 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000100000000", 0x39}], 0x1) ptrace(0x4207, r0) [ 1220.603440][T31789] alloc_uevent_skb+0x5b/0x120 [ 1220.603494][T31789] kobject_uevent_env+0x863/0xc40 [ 1220.603515][T31789] ? preempt_count_add+0x4e/0x90 [ 1220.603539][T31789] ? _raw_spin_unlock_irq+0x2f/0x50 [ 1220.603618][T31789] ? device_pm_check_callbacks+0x626/0x640 [ 1220.603640][T31789] kobject_uevent+0x18/0x20 [ 1220.603659][T31789] device_del+0x82e/0x8c0 [ 1220.603684][T31789] del_gendisk+0x37a/0x3c0 [ 1220.603750][T31789] loop_control_ioctl+0x3a8/0x410 [ 1220.603790][T31789] ? loop_remove+0x90/0x90 [ 1220.603852][T31789] __se_sys_ioctl+0xcb/0x140 [ 1220.603875][T31789] __x64_sys_ioctl+0x3f/0x50 [ 1220.603977][T31789] do_syscall_64+0x44/0xa0 [ 1220.604020][T31789] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1220.604045][T31789] RIP: 0033:0x7fd812ab3ae9 [ 1220.604060][T31789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1220.737553][ C1] sd 0:0:1:0: tag#6574 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1220.739932][T31789] RSP: 002b:00007fd81082a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1220.739954][T31789] RAX: ffffffffffffffda RBX: 00007fd812bc6f60 RCX: 00007fd812ab3ae9 [ 1220.739966][T31789] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 1220.739978][T31789] RBP: 00007fd81082a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1220.745883][ C1] sd 0:0:1:0: tag#6574 CDB: opcode=0xe5 (vendor) [ 1220.750274][T31789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 21:09:38 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x7400}]}, 0x78) 21:09:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, 0x0) [ 1220.750288][T31789] R13: 00007ffcafd9a01f R14: 00007fd81082a300 R15: 0000000000022000 [ 1220.750303][T31789] [ 1220.837422][ C1] sd 0:0:1:0: tag#6574 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1220.837447][ C1] sd 0:0:1:0: tag#6574 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1220.837466][ C1] sd 0:0:1:0: tag#6574 CDB[20]: ba 21:09:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) (fail_nth: 1) 21:09:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x7a00}]}, 0x78) 21:09:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x7f00}]}, 0x78) [ 1220.970692][T32115] FAULT_INJECTION: forcing a failure. [ 1220.970692][T32115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1220.983959][T32115] CPU: 1 PID: 32115 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 [ 1220.992385][T32115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1221.002521][T32115] Call Trace: [ 1221.005795][T32115] [ 1221.008718][T32115] dump_stack_lvl+0xd6/0x122 [ 1221.013305][T32115] dump_stack+0x11/0x1b [ 1221.017454][T32115] should_fail+0x23c/0x250 [ 1221.021870][T32115] should_fail_usercopy+0x16/0x20 [ 1221.026962][T32115] _copy_to_user+0x1c/0x90 [ 1221.031376][T32115] simple_read_from_buffer+0xab/0x120 [ 1221.036776][T32115] proc_fail_nth_read+0x10d/0x150 [ 1221.041836][T32115] ? proc_fault_inject_write+0x230/0x230 [ 1221.047470][T32115] vfs_read+0x1e6/0x750 [ 1221.051633][T32115] ? __fget_light+0x219/0x260 [ 1221.056346][T32115] ksys_read+0xd9/0x190 [ 1221.060514][T32115] __x64_sys_read+0x3e/0x50 [ 1221.065030][T32115] do_syscall_64+0x44/0xa0 [ 1221.069453][T32115] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1221.075407][T32115] RIP: 0033:0x7f8bf300569c [ 1221.079862][T32115] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1221.099584][T32115] RSP: 002b:00007f8bf0dc9170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1221.107998][T32115] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8bf300569c 21:09:39 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) (fail_nth: 10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) 21:09:39 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) socket$inet6(0xa, 0x1, 0x7) write(r0, &(0x7f0000000040)="b4", 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) [ 1221.116035][T32115] RDX: 000000000000000f RSI: 00007f8bf0dc91e0 RDI: 0000000000000005 [ 1221.124001][T32115] RBP: 00007f8bf0dc91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1221.132062][T32115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1221.140092][T32115] R13: 00007ffd89f11fdf R14: 00007f8bf0dc9300 R15: 0000000000022000 [ 1221.148104][T32115] 21:09:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5402, &(0x7f0000000100)) 21:09:39 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xc000}]}, 0x78) 21:09:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) [ 1221.241200][T32123] FAULT_INJECTION: forcing a failure. [ 1221.241200][T32123] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.254010][T32123] CPU: 0 PID: 32123 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1221.262455][T32123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1221.272516][T32123] Call Trace: [ 1221.275846][T32123] [ 1221.278782][T32123] dump_stack_lvl+0xd6/0x122 21:09:39 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000200000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:39 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000000c0)=0x13) write(r3, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000240)=0x2) setsockopt$sock_timeval(r1, 0x1, 0x5, &(0x7f0000000040)={r2}, 0x10) r4 = mq_open(&(0x7f0000000100)='!\'\x00', 0x40, 0x14a, &(0x7f0000000140)={0x4, 0x3, 0xfffffffffffffffc, 0x3807}) r5 = dup2(r4, r0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_nanosleep(0x1, 0x0, &(0x7f00000001c0)={r6, r7+10000000}, &(0x7f0000000200)) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x4b) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) [ 1221.278807][T32123] dump_stack+0x11/0x1b 21:09:39 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) (fail_nth: 11) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) [ 1221.278838][T32123] should_fail+0x23c/0x250 [ 1221.278866][T32123] ? skb_clone+0x12c/0x1f0 [ 1221.278887][T32123] __should_failslab+0x81/0x90 [ 1221.278918][T32123] should_failslab+0x5/0x20 [ 1221.278942][T32123] kmem_cache_alloc+0x4f/0x320 [ 1221.278979][T32123] skb_clone+0x12c/0x1f0 [ 1221.278997][T32123] netlink_broadcast+0x4e9/0xad0 [ 1221.279018][T32123] kobject_uevent_env+0x8c9/0xc40 [ 1221.279040][T32123] ? preempt_count_add+0x4e/0x90 [ 1221.279145][T32123] ? _raw_spin_unlock_irq+0x2f/0x50 21:09:39 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) [ 1221.279176][T32123] ? device_pm_check_callbacks+0x626/0x640 [ 1221.279231][T32123] kobject_uevent+0x18/0x20 [ 1221.279249][T32123] device_del+0x82e/0x8c0 [ 1221.279271][T32123] del_gendisk+0x37a/0x3c0 21:09:39 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000300000000", 0x39}], 0x1) ptrace(0x4207, r0) [ 1221.279294][T32123] loop_control_ioctl+0x3a8/0x410 [ 1221.279358][T32123] ? loop_remove+0x90/0x90 [ 1221.279376][T32123] __se_sys_ioctl+0xcb/0x140 [ 1221.279398][T32123] __x64_sys_ioctl+0x3f/0x50 [ 1221.279435][T32123] do_syscall_64+0x44/0xa0 [ 1221.279458][T32123] entry_SYSCALL_64_after_hwframe+0x44/0xae 21:09:39 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) [ 1221.279535][T32123] RIP: 0033:0x7fd812ab3ae9 [ 1221.279607][T32123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1221.279623][T32123] RSP: 002b:00007fd81082a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1221.279641][T32123] RAX: ffffffffffffffda RBX: 00007fd812bc6f60 RCX: 00007fd812ab3ae9 [ 1221.279654][T32123] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000003 [ 1221.279666][T32123] RBP: 00007fd81082a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1221.279742][T32123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1221.279755][T32123] R13: 00007ffcafd9a01f R14: 00007fd81082a300 R15: 0000000000022000 [ 1221.279770][T32123] [ 1221.337706][ C0] sd 0:0:1:0: tag#6581 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1221.337730][ C0] sd 0:0:1:0: tag#6581 CDB: opcode=0xe5 (vendor) 21:09:39 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4b47, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) [ 1221.337751][ C0] sd 0:0:1:0: tag#6581 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1221.337768][ C0] sd 0:0:1:0: tag#6581 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1221.337785][ C0] sd 0:0:1:0: tag#6581 CDB[20]: ba [ 1221.345076][T32138] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1221.390634][T32168] FAULT_INJECTION: forcing a failure. [ 1221.390634][T32168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1221.390658][T32168] CPU: 0 PID: 32168 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1221.390678][T32168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1221.390689][T32168] Call Trace: [ 1221.390696][T32168] [ 1221.390703][T32168] dump_stack_lvl+0xd6/0x122 [ 1221.390726][T32168] dump_stack+0x11/0x1b [ 1221.390793][T32168] should_fail+0x23c/0x250 [ 1221.390816][T32168] should_fail_usercopy+0x16/0x20 21:09:39 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4b49, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) [ 1221.390851][T32168] _copy_to_user+0x1c/0x90 [ 1221.390869][T32168] simple_read_from_buffer+0xab/0x120 [ 1221.390893][T32168] proc_fail_nth_read+0x10d/0x150 [ 1221.390914][T32168] ? proc_fault_inject_write+0x230/0x230 [ 1221.390984][T32168] vfs_read+0x1e6/0x750 21:09:39 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c80, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) [ 1221.391078][T32168] ? __fget_light+0x219/0x260 [ 1221.391104][T32168] ksys_read+0xd9/0x190 [ 1221.391123][T32168] __x64_sys_read+0x3e/0x50 [ 1221.391143][T32168] do_syscall_64+0x44/0xa0 [ 1221.391241][T32168] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1221.391266][T32168] RIP: 0033:0x7fd812a6669c [ 1221.391336][T32168] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1221.391355][T32168] RSP: 002b:00007fd81082a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1221.391376][T32168] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd812a6669c [ 1221.391390][T32168] RDX: 000000000000000f RSI: 00007fd81082a1e0 RDI: 0000000000000004 [ 1221.391423][T32168] RBP: 00007fd81082a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1221.391436][T32168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1221.391449][T32168] R13: 00007ffcafd9a01f R14: 00007fd81082a300 R15: 0000000000022000 [ 1221.391465][T32168] [ 1221.533252][ C0] sd 0:0:1:0: tag#6586 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1221.533299][ C0] sd 0:0:1:0: tag#6586 CDB: opcode=0xe5 (vendor) [ 1221.533317][ C0] sd 0:0:1:0: tag#6586 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1221.533343][ C0] sd 0:0:1:0: tag#6586 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1221.533360][ C0] sd 0:0:1:0: tag#6586 CDB[20]: ba [ 1221.535092][T32349] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5403, &(0x7f0000000100)) 21:09:40 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000400000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:40 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c82, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) 21:09:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xe000}]}, 0x78) [ 1222.042744][T32468] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCXONC(r1, 0x540a, 0x3) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x85) 21:09:40 executing program 4: sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="74010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x20040080}, 0x80) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCSBRKP(r0, 0x5425, 0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3f) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) 21:09:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf000}]}, 0x78) 21:09:40 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x541b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) 21:09:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5404, &(0x7f0000000100)) 21:09:40 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000500000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf800}]}, 0x78) 21:09:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3f) syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x8, 0xfffff801, 0x9, 0x3, 0x2, "e89105d662b32f997435a2d95087ca5a2c7da7"}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r4, 0x1, 0x5, &(0x7f0000000040)={r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x8) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000180), &(0x7f00000001c0)=0x10) poll(&(0x7f0000000080)=[{r4, 0x10}], 0x1, 0x477f) 21:09:40 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x5421, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) [ 1222.307157][T32580] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xfc00}]}, 0x78) 21:09:40 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x5450, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) 21:09:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x400000}]}, 0x78) 21:09:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0x9, 0x1f, 0x1a8, &(0x7f0000000980)}) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x5, 0x3, 0xef, 0xffffffffffffff81, 0x2, 0x3, 0x2, 0x72, 0x40, 0x3bc, 0xe279, 0xad, 0x38, 0x1, 0x5dc, 0x6, 0xffff}, [{0x4, 0xffffff22, 0x6, 0x0, 0xfffffffffffffffb, 0xfff, 0x0, 0x8}, {0x2, 0x59c6, 0x2, 0x6, 0x8001, 0x200, 0x100000000, 0x5}], "5435599fe2c6a03da48c4c27647d4bffef0b8c316d420502c44554ea571bd30cc8e5136eb9b86a8cdcc0ef51e6de515403b005900a8d5b7bd30c3d2dd1822071190846bf6f363df119cd555d0b2b7bbcb65c888ad10959f6ecc07350d38d3f0d104c6da6855db93105641487e0d5f7a7f8bef2a41b7a2b1c75a077ce14f3fd36c55b8460acf6591b3442aca5e42a4acd3de401e023074fb383d126c83ab577557dec0860667dda5b5af88ae85bf9b750080f0f383a99bc1d9a9b7ae228827bb78267", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x872) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 21:09:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5405, &(0x7f0000000100)) 21:09:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf00000}]}, 0x78) 21:09:41 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x5451, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) 21:09:41 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000600000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:41 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x5452, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) [ 1223.263816][ C0] scsi_io_completion_action: 2 callbacks suppressed [ 1223.263847][ C0] sd 0:0:1:0: tag#6589 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1223.263872][ C0] sd 0:0:1:0: tag#6589 CDB: opcode=0xe5 (vendor) [ 1223.263904][ C0] sd 0:0:1:0: tag#6589 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1223.295672][ C0] sd 0:0:1:0: tag#6589 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1223.295692][ C0] sd 0:0:1:0: tag#6589 CDB[20]: ba [ 1223.301882][T32721] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1000000}]}, 0x78) 21:09:41 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) 21:09:41 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x5460, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) 21:09:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1800000}]}, 0x78) 21:09:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5406, &(0x7f0000000100)) 21:09:41 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) r1 = memfd_create(&(0x7f0000000040)='*>$+\x00', 0x6) write(r1, &(0x7f0000000100)="5f8c96900906ee918ccffcfe79408bd5bb5bd55078f109c675c03012e9e3ab468e8b9eb834b1c3d362f818b3f4cdade152a91ce95dd50c267a486d7a685e682762699b5fe16296fdbcc6374ffd44d773a981e3d2b70d4d1bfe61dfcffaae662311972e20aca872", 0x67) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 21:09:41 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000700000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x2000000}]}, 0x78) 21:09:41 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x40049409, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) 21:09:41 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x40086602, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) [ 1223.548895][ C0] sd 0:0:1:0: tag#6590 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1223.548930][ C0] sd 0:0:1:0: tag#6590 CDB: opcode=0xe5 (vendor) [ 1223.548958][ C0] sd 0:0:1:0: tag#6590 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1223.548976][ C0] sd 0:0:1:0: tag#6590 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1223.549013][ C0] sd 0:0:1:0: tag#6590 CDB[20]: ba 21:09:41 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x3000000}]}, 0x78) 21:09:41 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x40087602, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) [ 1223.552414][ T385] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1223.631113][ T23] audit: type=1400 audit(1636405781.706:3072): avc: denied { setattr } for pid=542 comm="syz-executor.0" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 21:09:41 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x401c5820, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) 21:09:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) 21:09:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x4000000}]}, 0x78) 21:09:42 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000800000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5407, &(0x7f0000000100)) 21:09:42 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4020940d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) 21:09:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 21:09:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x5000000}]}, 0x78) 21:09:42 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x80086601, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) [ 1224.411118][ C0] sd 0:0:1:0: tag#6591 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1224.411144][ C0] sd 0:0:1:0: tag#6591 CDB: opcode=0xe5 (vendor) [ 1224.411172][ C0] sd 0:0:1:0: tag#6591 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1224.411190][ C0] sd 0:0:1:0: tag#6591 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1224.411206][ C0] sd 0:0:1:0: tag#6591 CDB[20]: ba 21:09:42 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x80087601, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) 21:09:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x6000000}]}, 0x78) [ 1224.412995][ T642] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:42 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x801c581f, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) 21:09:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x7000000}]}, 0x78) 21:09:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) clock_gettime(0x6, &(0x7f0000000100)) setsockopt$sock_timeval(r2, 0x1, 0x5, &(0x7f0000000040)={r3}, 0x10) write(r2, &(0x7f0000000200)="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", 0x10f) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000040)) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x7fff, 0x5, 0x6, 0x9, 0x8, "ca6f36104bbb794e698edfb415ca849ae68b1e", 0xd4, 0xe6}) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000000c0)=0x13) 21:09:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x40000) write$P9_RATTACH(r1, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x80, 0x0, 0x2}}, 0x14) 21:09:42 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000900000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5408, &(0x7f0000000100)) 21:09:42 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0xc0045878, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) 21:09:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x8000000}]}, 0x78) 21:09:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x9000000}]}, 0x78) 21:09:42 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0xc0045878, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) [ 1224.692407][ C1] sd 0:0:1:0: tag#6528 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1224.692431][ C1] sd 0:0:1:0: tag#6528 CDB: opcode=0xe5 (vendor) [ 1224.692449][ C1] sd 0:0:1:0: tag#6528 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1224.692470][ C1] sd 0:0:1:0: tag#6528 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 21:09:42 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0xc0189436, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) [ 1224.692500][ C1] sd 0:0:1:0: tag#6528 CDB[20]: ba [ 1224.696949][ T782] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xa000000}]}, 0x78) 21:09:42 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0xc020660b, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) 21:09:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xb000000}]}, 0x78) 21:09:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) 21:09:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5409, &(0x7f0000000100)) 21:09:43 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000a00000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:43 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x40000) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x3f, 0xffffffffffffffff, &(0x7f00000000c0)="ad0a414dd2178da30781dd5b02d4d6457a167307b7", 0x15, 0x5, 0x0, 0x5, r1}]) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r11 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r10}], 0x3, "d5da11403c3f19"}) 21:09:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xc000000}]}, 0x78) [ 1224.972665][ C0] sd 0:0:1:0: tag#6530 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1224.972688][ C0] sd 0:0:1:0: tag#6530 CDB: opcode=0xe5 (vendor) [ 1224.972704][ C0] sd 0:0:1:0: tag#6530 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1224.972735][ C0] sd 0:0:1:0: tag#6530 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1224.972755][ C0] sd 0:0:1:0: tag#6530 CDB[20]: ba [ 1224.974297][ T1010] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xd000000}]}, 0x78) 21:09:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) 21:09:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xe000000}]}, 0x78) 21:09:43 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) r11 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000600)={0x0, 0xfffffffffffffffb, 0x24, 0x4, @scatter={0x7, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)=""/113, 0x71}, {&(0x7f00000000c0)=""/146, 0x92}, {&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000000240)=""/59, 0x3b}, {&(0x7f0000000280)=""/146, 0x92}, {&(0x7f0000000340)=""/61, 0x3d}]}, &(0x7f00000004c0)="37eee450d6d7d43af0113612a55cd76d3b31c834f8570bf5443c485cc3ff11e884cd7b4f", &(0x7f0000000500)=""/145, 0x5, 0x25, 0x0, &(0x7f00000005c0)}) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) 21:09:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) dup3(r0, r1, 0x80000) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000000)=0x13) 21:09:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x540a, &(0x7f0000000100)) 21:09:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf000000}]}, 0x78) [ 1225.140933][ C1] sd 0:0:1:0: tag#6531 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1225.150838][ C1] sd 0:0:1:0: tag#6531 CDB: opcode=0xe5 (vendor) [ 1225.157194][ C1] sd 0:0:1:0: tag#6531 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1225.166252][ C1] sd 0:0:1:0: tag#6531 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1225.175322][ C1] sd 0:0:1:0: tag#6531 CDB[20]: ba 21:09:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x1d) syz_open_dev$tty20(0xc, 0x4, 0x1) 21:09:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x10000000}]}, 0x78) [ 1225.262211][ C1] sd 0:0:1:0: tag#6532 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1225.262248][ C1] sd 0:0:1:0: tag#6532 CDB: opcode=0xe5 (vendor) 21:09:43 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000b00000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:43 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r12 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r12, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000040)={r13}, 0x10) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f0000000080)={0x6b32, 0x38, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$LOOP_CTL_ADD(r10, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r11}], 0x3, "d5da11403c3f19"}) [ 1225.262269][ C1] sd 0:0:1:0: tag#6532 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1225.262289][ C1] sd 0:0:1:0: tag#6532 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1225.262307][ C1] sd 0:0:1:0: tag#6532 CDB[20]: ba [ 1225.340178][ C1] sd 0:0:1:0: tag#6533 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1225.340228][ C1] sd 0:0:1:0: tag#6533 CDB: opcode=0xe5 (vendor) [ 1225.340245][ C1] sd 0:0:1:0: tag#6533 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1225.340263][ C1] sd 0:0:1:0: tag#6533 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1225.340283][ C1] sd 0:0:1:0: tag#6533 CDB[20]: ba 21:09:43 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000c00000000", 0x39}], 0x1) ptrace(0x4207, r0) [ 1225.341872][ T1145] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x11000000}]}, 0x78) [ 1225.541698][ C0] sd 0:0:1:0: tag#6534 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1225.541735][ C0] sd 0:0:1:0: tag#6534 CDB: opcode=0xe5 (vendor) [ 1225.557862][ C0] sd 0:0:1:0: tag#6534 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1225.557881][ C0] sd 0:0:1:0: tag#6534 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1225.557897][ C0] sd 0:0:1:0: tag#6534 CDB[20]: ba 21:09:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x1f) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) [ 1225.562505][ T1250] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x12000000}]}, 0x78) 21:09:43 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000d00000000", 0x39}], 0x1) ptrace(0x4207, r0) [ 1225.782004][ C1] sd 0:0:1:0: tag#6535 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1225.791873][ C1] sd 0:0:1:0: tag#6535 CDB: opcode=0xe5 (vendor) [ 1225.798213][ C1] sd 0:0:1:0: tag#6535 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1225.807262][ C1] sd 0:0:1:0: tag#6535 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1225.816309][ C1] sd 0:0:1:0: tag#6535 CDB[20]: ba 21:09:43 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x18000000}]}, 0x78) 21:09:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x540b, &(0x7f0000000100)) 21:09:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000040)) [ 1225.830649][ T1459] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1a000000}]}, 0x78) 21:09:44 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xf) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x5, 0x107ff, 0x2f, 0x0, 0x3, "479677b9c4b6fca91600", 0x5, 0x8000020}) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000080)={0x6f6, 0xf03, 0x1f, 0x0, 0x8}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x8) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000000)) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) 21:09:44 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000e00000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1b000000}]}, 0x78) 21:09:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x540c, &(0x7f0000000100)) 21:09:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x20000000}]}, 0x78) 21:09:44 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000001000000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x25000000}]}, 0x78) 21:09:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x3f000000}]}, 0x78) 21:09:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x540d, &(0x7f0000000100)) 21:09:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x48000000}]}, 0x78) 21:09:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) 21:09:44 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000001100000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x4c000000}]}, 0x78) 21:09:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0x1f, 0x4, 0x64, 0x401, 0x8, "c14e8854c28836849e8078d2694c643036f5fd", 0xfffffff7, 0x81}) 21:09:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x540e, &(0x7f0000000100)) 21:09:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) 21:09:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x60000000}]}, 0x78) 21:09:44 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000001200000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x68000000}]}, 0x78) 21:09:44 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_io_uring_complete(0x0) ioctl$TCXONC(r3, 0x540a, 0x3) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r2, 0x1, 0x5, &(0x7f0000000040)={r4}, 0x10) write(r2, &(0x7f0000000000)="695e59613362ef80626f8da58549b8f23733f7f71caa1e061973104ae213de", 0x1f) 21:09:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x6c000000}]}, 0x78) 21:09:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x540f, &(0x7f0000000100)) 21:09:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x74000000}]}, 0x78) 21:09:44 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000171a00000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x7a000000}]}, 0x78) 21:09:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x7f000000}]}, 0x78) 21:09:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5410, &(0x7f0000000100)) 21:09:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x80ffffff}]}, 0x78) 21:09:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x9bffffff}]}, 0x78) 21:09:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="01585501d0000080", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$TIOCSBRK(r3, 0x5427) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x5) r4 = memfd_secret(0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) fchmod(r0, 0x48) 21:09:45 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000002500000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5411, &(0x7f0000000100)) 21:09:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xc0000000}]}, 0x78) [ 1227.103484][ T2145] validate_nla: 5 callbacks suppressed 21:09:45 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002bf740d70af2049c990000c8241327930005002d000000000000000000000000000000001bd7ecbbfdf7b3c693c487298d89b83e111a66ae06d6f48c1ff70849a82730bc173a0ab7195a097a9b1152da2709cdb2e56cf7444bc4826506522cac61353be98c49dd3a0f2c031e6350775cda4aa8bafb498f8ca0616d98aac4055588d2596f7853ffb9b576c7bdc08f8be7f62a82a1d0be9985eeefd79eafaa"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="f2ff25bd7000fcdbdf2505000000080032000200000008003200ffffff7f081d429c840032000500000005002d000100000008002c000200000008003200478f000008000300", @ANYRES32=0x0, @ANYBLOB="05002f00010094ebd2b898f401439894ae030001ffffffffffffff000000000000000000", @ANYRES32=r1, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r12 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r12, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r10, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r11}], 0x3, "d5da11403c3f19"}) [ 1227.103504][ T2145] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xe0000000}]}, 0x78) 21:09:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5412, &(0x7f0000000100)) 21:09:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf0000000}]}, 0x78) 21:09:45 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000004800000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:45 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000004c00000000", 0x39}], 0x1) ptrace(0x4207, r0) [ 1227.397066][ T2264] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf8000000}]}, 0x78) 21:09:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5413, &(0x7f0000000100)) [ 1227.473945][ T2367] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5414, &(0x7f0000000100)) 21:09:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) syz_open_dev$tty20(0xc, 0x4, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x400, 0x8}}, './file0\x00'}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000100)=0x13) 21:09:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xfc000000}]}, 0x78) 21:09:46 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000006800000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x8, 0x2, 0x6, 0x7, 0x11, "839fb4c3146ca106bda7966c2f9c816fcd1844"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0xfffffff9, 0x0, 0x5f7, 0x5, 0x9, "30a2a83655fa7ab556be43fa5021fd50a03fe8"}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) 21:09:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xffffff80}]}, 0x78) [ 1228.046631][ T2481] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:46 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x908c2, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0x2, 0x7, 0x6, 0x7, 0x0, "68c9f5519e18c2b0fe051e11d01665a41efd5c", 0x6, 0x5}) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000000c0)=0x13) 21:09:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xffffff9b}]}, 0x78) 21:09:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5415, &(0x7f0000000100)) 21:09:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x8) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x2c0000, 0x25) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000040)) 21:09:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x10000000000}]}, 0x78) 21:09:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x40000000000000}]}, 0x78) 21:09:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) syz_open_dev$tty20(0xc, 0x4, 0x0) 21:09:46 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000006c00000000", 0x39}], 0x1) ptrace(0x4207, r0) [ 1228.329014][ C1] scsi_io_completion_action: 9 callbacks suppressed [ 1228.329047][ C1] sd 0:0:1:0: tag#6553 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1228.346285][ C1] sd 0:0:1:0: tag#6553 CDB: opcode=0xe5 (vendor) [ 1228.352673][ C1] sd 0:0:1:0: tag#6553 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1228.361729][ C1] sd 0:0:1:0: tag#6553 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1228.370857][ C1] sd 0:0:1:0: tag#6553 CDB[20]: ba 21:09:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5416, &(0x7f0000000100)) 21:09:46 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x21) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x40000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r1, 0x1, 0x5, &(0x7f0000000040)={r2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x2006}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000000c0)=0x13) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000000c0)=0x13) [ 1228.380230][ T2607] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf0000000000000}]}, 0x78) 21:09:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x100000000000000}]}, 0x78) 21:09:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x180000000000000}]}, 0x78) 21:09:46 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000007400000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5417, &(0x7f0000000100)) 21:09:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x200000000000000}]}, 0x78) [ 1228.613673][ C0] sd 0:0:1:0: tag#6554 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1228.613700][ C0] sd 0:0:1:0: tag#6554 CDB: opcode=0xe5 (vendor) [ 1228.613720][ C0] sd 0:0:1:0: tag#6554 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1228.613759][ C0] sd 0:0:1:0: tag#6554 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1228.613775][ C0] sd 0:0:1:0: tag#6554 CDB[20]: ba [ 1228.628042][ T2723] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:46 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000007700000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x300000000000000}]}, 0x78) [ 1228.844296][ C0] sd 0:0:1:0: tag#6555 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1228.844319][ C0] sd 0:0:1:0: tag#6555 CDB: opcode=0xe5 (vendor) [ 1228.844337][ C0] sd 0:0:1:0: tag#6555 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 21:09:47 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000007a00000000", 0x39}], 0x1) ptrace(0x4207, r0) [ 1228.844356][ C0] sd 0:0:1:0: tag#6555 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1228.844371][ C0] sd 0:0:1:0: tag#6555 CDB[20]: ba [ 1228.847327][ T2929] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1229.029807][ C0] sd 0:0:1:0: tag#6556 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1229.047210][ C0] sd 0:0:1:0: tag#6556 CDB: opcode=0xe5 (vendor) [ 1229.047229][ C0] sd 0:0:1:0: tag#6556 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1229.047249][ C0] sd 0:0:1:0: tag#6556 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1229.047269][ C0] sd 0:0:1:0: tag#6556 CDB[20]: ba 21:09:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x400000000000000}]}, 0x78) [ 1229.067057][ T3136] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) 21:09:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x500000000000000}]}, 0x78) 21:09:47 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604ffffff9e00000000", 0x39}], 0x1) ptrace(0x4207, r0) [ 1229.273754][ C0] sd 0:0:1:0: tag#6557 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1229.283611][ C0] sd 0:0:1:0: tag#6557 CDB: opcode=0xe5 (vendor) [ 1229.289963][ C0] sd 0:0:1:0: tag#6557 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1229.299007][ C0] sd 0:0:1:0: tag#6557 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1229.308058][ C0] sd 0:0:1:0: tag#6557 CDB[20]: ba 21:09:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x240000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r3, 0x1, 0x5, &(0x7f0000000040)={r4}, 0x10) write(r3, &(0x7f0000000080)="356f4de06d497ba3f7a86260df95a65ddd7b3e71e40fe2", 0x17) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x9) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000000c0)=0x13) write(r5, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x6) 21:09:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5418, &(0x7f0000000100)) [ 1229.317183][ T3247] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x600000000000000}]}, 0x78) 21:09:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x700000000000000}]}, 0x78) 21:09:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5419, &(0x7f0000000100)) 21:09:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x800000000000000}]}, 0x78) 21:09:47 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604ffffffea00000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x900000000000000}]}, 0x78) 21:09:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541b, &(0x7f0000000100)) [ 1229.629660][ C0] sd 0:0:1:0: tag#6558 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1229.639875][ C0] sd 0:0:1:0: tag#6558 CDB: opcode=0xe5 (vendor) [ 1229.646255][ C0] sd 0:0:1:0: tag#6558 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1229.655291][ C0] sd 0:0:1:0: tag#6558 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1229.664339][ C0] sd 0:0:1:0: tag#6558 CDB[20]: ba 21:09:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xa00000000000000}]}, 0x78) 21:09:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xb00000000000000}]}, 0x78) 21:09:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xc00000000000000}]}, 0x78) 21:09:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x442400, 0x4, 0x18}, 0x18) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000080)={{r2}, {@void, @max}}) 21:09:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541c, &(0x7f0000000100)) 21:09:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xd00000000000000}]}, 0x78) 21:09:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000100)={0x81, "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"}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x20) ioctl$TIOCSCTTY(r2, 0x540e, 0x80000001) 21:09:48 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604ffffffef00000000", 0x39}], 0x1) ptrace(0x4207, r0) [ 1229.973147][ C0] sd 0:0:1:0: tag#6559 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1229.973180][ C0] sd 0:0:1:0: tag#6559 CDB: opcode=0xe5 (vendor) [ 1229.973199][ C0] sd 0:0:1:0: tag#6559 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 21:09:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xe00000000000000}]}, 0x78) [ 1229.973217][ C0] sd 0:0:1:0: tag#6559 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1229.973235][ C0] sd 0:0:1:0: tag#6559 CDB[20]: ba [ 1229.974533][ T3492] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:48 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000052b80)) r11 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r11) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r11) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) 21:09:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541d, &(0x7f0000000100)) 21:09:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf00000000000000}]}, 0x78) 21:09:48 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604fffffff000000000", 0x39}], 0x1) ptrace(0x4207, r0) [ 1230.192819][ C0] sd 0:0:1:0: tag#6560 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1230.202689][ C0] sd 0:0:1:0: tag#6560 CDB: opcode=0xe5 (vendor) [ 1230.202711][ C0] sd 0:0:1:0: tag#6560 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1230.202741][ C0] sd 0:0:1:0: tag#6560 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1230.202768][ C0] sd 0:0:1:0: tag#6560 CDB[20]: ba 21:09:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1000000000000000}]}, 0x78) 21:09:48 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604fffffffc00000000", 0x39}], 0x1) ptrace(0x4207, r0) [ 1230.407062][ C0] sd 0:0:1:0: tag#6561 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 21:09:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1100000000000000}]}, 0x78) 21:09:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000080)={0x2, 0x2, 0x5, 0xa40, 0x10, "2d42f42b3d7b2e50879009b2a8751010afc1cf"}) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)=0x40000) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000000)={0x8, 0xd, 0x7}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000000c0)=0x13) [ 1230.407090][ C0] sd 0:0:1:0: tag#6561 CDB: opcode=0xe5 (vendor) [ 1230.407107][ C0] sd 0:0:1:0: tag#6561 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1230.407140][ C0] sd 0:0:1:0: tag#6561 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1230.407157][ C0] sd 0:0:1:0: tag#6561 CDB[20]: ba 21:09:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1200000000000000}]}, 0x78) 21:09:48 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604fffffffe00000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541e, &(0x7f0000000100)) 21:09:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1800000000000000}]}, 0x78) [ 1230.637750][ C1] sd 0:0:1:0: tag#6562 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1230.647652][ C1] sd 0:0:1:0: tag#6562 CDB: opcode=0xe5 (vendor) [ 1230.654028][ C1] sd 0:0:1:0: tag#6562 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1230.663097][ C1] sd 0:0:1:0: tag#6562 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1230.663132][ C1] sd 0:0:1:0: tag#6562 CDB[20]: ba 21:09:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1a00000000000000}]}, 0x78) 21:09:48 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006049effffff00000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x1b00000000000000}]}, 0x78) 21:09:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541e, &(0x7f0000000100)) 21:09:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x2000000000000000}]}, 0x78) 21:09:48 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x400, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r15 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r17 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r17, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r15, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r15, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r17, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0xfffbffffffffffff, 0x9, 0x0, 0x7fffffff}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000040)={{0x0, 0x4, 0x201d049b, 0x4, 0x9, 0x9, 0xc705, 0x7f, 0x8, 0x7ff, 0x8, 0x800, 0x3, 0x400, 0xd74}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000780)={{r5, 0x4ef6, 0x9, 0x100000001, 0x20, 0xfffffff7ffffffa6, 0x9, 0x2d1a, 0x6f0, 0x1f, 0x20, 0x8, 0xa842, 0x100, 0xfff}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x10019e, [{}, {r20}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r7}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {r19}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r16}], 0x3, "d5da11403c3f19"}) 21:09:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x2500000000000000}]}, 0x78) 21:09:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3f) 21:09:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5421, &(0x7f0000000100)) 21:09:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}]}, 0x78) 21:09:49 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604eaffffff00000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:49 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r14 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r16 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r16, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r14, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r14, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r16, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0}) r18 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r18, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r15}], 0x3, "d5da11403c3f19"}) 21:09:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x4800000000000000}]}, 0x78) 21:09:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100000003000000", @ANYRES32=r0, @ANYBLOB="04000000000000002e2f66696c653000"]) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$KIOCSOUND(r0, 0x4b2f, 0xaeb0) 21:09:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x4c00000000000000}]}, 0x78) 21:09:49 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000040)={r1}, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"96d9955a03a82840d5e490406c8a79ec", 0x0, 0x0, {0x32, 0x6}, {0x2, 0x7}, 0x99bb, [0x9, 0x3f, 0x80000000, 0xffffffff, 0x60, 0x9, 0x8, 0x2a, 0x4, 0x3f, 0x8, 0x40d332d8, 0x0, 0x10000, 0x1, 0x4]}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r11 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r10}], 0x3, "d5da11403c3f19"}) 21:09:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5422, &(0x7f0000000100)) 21:09:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000100)={0x8, "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"}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) 21:09:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x6000000000000000}]}, 0x78) 21:09:49 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604efffffff00000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000040)=0x13) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = syz_open_pts(r0, 0x480140) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x35) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000000c0)=0x13) 21:09:49 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000780)={0x0, 0x0, "8d5f759e5e3029fbd234d6b487d543eb548d44af32781f8ab474e91964ae4c5a47269023e9f6eaea478da7af673b74e1177a4ae3b10c9ce5010d8f49f57a473b2ac1d9fd24ea0c541bc69c19461f3ba5f7c06d6c0b7f3ec77fccef22a8b8406058b5dd8797c2b77fdd593cd74f1965199de8647371d80cbee0a79f2660289471c2b55b5b247dafe9a926f1806d298cf12c03551308a89990b3ba5984930f4a1cb94b1fe98e28aad01fff5fe9695b7eaf8fdc835150580462981c3c79e556fae5e916c57160b37e8b0b30f393fefe915ae3e3a19aba15f72e87bc1dc1e6dd69ecd9d5d5c925455e9944519265437c212f6a4469e032126546a4fd2630c0dc0a64", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r13 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r13, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000040), 0x10) sendfile(0xffffffffffffffff, r11, 0x0, 0x6) ioctl$LOOP_CTL_ADD(r11, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r13, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r12}], 0x3, "d5da11403c3f19"}) 21:09:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x6800000000000000}]}, 0x78) 21:09:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5423, &(0x7f0000000100)) 21:09:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x6c00000000000000}]}, 0x78) 21:09:49 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r11 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r12, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r10}], 0x3, "d5da11403c3f19"}) 21:09:49 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004a100)={0xffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x2, "4cfb29d533e477"}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004b100)={0xc32, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "a73e4640ab65e2"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000004c100)={0x0, 0x0, "b26ee1a97c1d1088092083a4276ae5df672cfd4c008112441d039e71a94f097b7f7bbd4bbf4784f420d7c611ff1045a6619a705e9c369f504b68b9336a285bc88af734a10ad6e578eb2624cdc9be04e6db290b37e784cdd02ae32a7648f8259940590876eac906f921aa1da09b69bd4e00b5891fe8df8caea093e6c94a88fddd0345e7780579f08b2fdd005e422ed97cf11ea0ebe3b6b5d68049293149cbb3bc1f7316ff3a8e7d517e567934cf529fc4ea5d1ad5fd6bae148be6f1aba3b8fb417ebe2ae0f9e2271b1267f9b9c7619695ee45a18b9b3c057c44210e31b3cbd995de34064372d19f1a32a71ba595641456ae117bbe2805bd935495fb42e50c8c9c", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000000c40)={0x9, [{}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {0x0, r12}], 0x1, "e63835e8c53b1e"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004d100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000004d300)={0x0, 0x0, "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", "1e9715bc9a3fa300a072a452dce0ee6af0eb2ccf144a10be12a7b72778e8c07551e65155e5d39c2d37c55daf4e907744801f78af9a39a5e08d6db7bf9b022d754574eebf4c089d39aae38260a541d524f3c763f8e746f39a980e0143824c977e2d300f164f06cd2507a997c63b862f41037df71e67f20a7316a71f6b756caafb0f53f9c23b6b54d68266e55ddd84e3c5f78eeded732276400640d27ccd105782ef4f1fa428311defe62ea27f59edc39c5431c8eb57d8953bd7d70e944aadd59ce63affd645a581dc8f71f27274b82d3e081f7926dfafc60056a34f4234705ee3cc81e2f986b443b9825179530afde021770c50f4530f652372feb9eb3a60dc92e64a44ef1752313efcfee94ba786b957814b07fb5924122293d7be8c1b4dd2d3e25e84ca4226db238c6ae0cb58bc5dd3d35c1f5344a42f84c03e1678f494e34404e9d984095dbd2322b38927f572e1d37d5fa9266242a0282512ca9faf776804da49209d07bf8ef923f19e0666a0b040d6b45bcdee9883768ce28117cb768be9c05245d1f44c2a309348d6d8a9f2af6098c5a95a0316452754fa206779b0e13d09ce2f5ee44c662bb53d4d8cede3bd41acd802863a2c4f5ee57bd474f886340c5abde7f84ade60db4be4cb9a3b8c6575c0b548a3f5d1fc37a17c05f40105cfceeffcad39aa66af5c9ee033d38377a8811aef8abaf23671e5ac2aca1cae71d14d7f1d059289081f5b2f8855d767c56541409acdeacc83d74c24abd5a3c0691c41fe8287d7f07d123232baf38bd1983c293bb4109b02a17dd0a30e612747e761cf465859bd60109633aa9e2071fd18181c84b4a8369d73cd6514c5235157dc9eff6b931c43650542419bc965a7809ee159f0061834e7187ea0a1db1917ee27150226270941a18ac6bb3be991cfa842bb0c093902df0a992db79e4b0772dad667f4d48684f662a050ef0ad65bc5a94fd5d5046cc716a4d8e7fe3ab680d0d88461ea72bbef518d075257087c4210fb27c8378951db4fea545276836b504106e58874c8b977840f4aa77e9e86d9e379e4cac75cdde9215b21a6b69c705c00e3dafa97d13993b3ec0f2558134eaa230a710d257e47095d6a1f44f6323d1c9f843c614b7b3f71128f4e6067bd161d495beea7246078a96686b67d69d582fd27fb307b08aa1ead9650465b00211c616c242809d8dc964caccdc634093164895bd2daabfe67c8a3c088ceb2c963fe10cad710331f4b728e75687727d6185a5680f45371c4b774d15b5ac33c0a0b81a771d44cfbe85e467b4de5d00f86f9526186648c87bff5e2bd0b3cc8bd4f6a2872fde4bcaae5547dace63803c97501d5760a3c1254b01f2509cfd633d20befd9bde77089c5389ecd89ddea117dde3989940d868711888acf23cf9b1585e5bf5944f933b545203a71147b9b5471fb79beee53935b22d3958b3cce6ec14c5cf4eafd49e4a01ca670d3bfcee03b6e0ad3e8c3a2aa3e7e67e36640533ccafb90dbfed8572ceab12201c4e367e38b8501e3c30b1f4e2bbc97200eb154cd36121c490955809fa3b195f735d89fccc22b072beb390fddf67588f6e228d6b5ec226491863bf020371bec9934b37043601bd67438a1d133f45132a2d24a7ff37ba95a900ce52718317dac78c810d4fcd893df186ca9ef59351c4140b704dc5e7b03ba251ac45f9f7ca80b739e185a7f0a2dd1158e7ac9da82bb167870c112ec7a44643f677cf7a81d6b44b73759f1e754d474e608f0ac0f868bec60a80e2a68b1ccb9c8cb583c5041931ac18caf2e69c9cc2331c7cb1fd09baa1aa7be67771ceb437cd2d48398a2693126405da2e1a755c0871274bad6ce458b8e6260254dd53392768716f8bfca727608b9bfb52ba78f417efb2c3fde3cb45f7adb7848f2b18a0a2387bda6840419f318750a2f0c7574edaf8da609395b993a82ce8be8c5aef21a3f56d50f4381eb1bf4d0ff3f93f6f9e355a1ae26c02d8283972b0a4642bea4c7d8ed9282fdbfdb19b2aa4b39d13671e57fdd8d33e058933928ca265e611a58d8b5fb79d8cd17630ef8d88d64d1a29285351eae7697394a7b0fd4175ea12931d391cf265851da0da2078907e6298a13515dbe95e7714a19e223b98892b4b5235fdff68e7ac5f90a6fea32dbf5f4fb7837c60b2951bdc9d70189fd7e97ebf62619374ca3c5afdb7b81ff9854a4a07ae561455149dfc0aaf719504b492c79147a61b060cf5c2b60947e2a5ceb3d105e5311ccff1b247f47dcfa00d7dc8f51402c7500d74025739482d599eceff4e446238684e276103ae027ed88a3b1d99ecec2d0e1998bf0eeda7740ab568e59c9001dfcee271a77b9810052ff5a10537b5df189be537a0652abdfa4855b0e7129ce43a5ab9bf8b2d0287b723ac05ba00608488d2e89320ed3830929315da3c52b23465f03a13589b6c48ceb05da016419bdc4f616bc5a9f96ce543614438887a202450748ca71f78b462b3f44d9d386d9a5346ee269a3bd00a2c8c65aebc95c8f8d4803784b9f7dd4fb154bafa236b7536fff325ce0d088f03a71e3752816d916f524f82ec6c66d9f329791f9705967911bbe49a0acce4087de163bd087a53a14cee8ee47b9517b6bb1eb80ded26b15a6c12a0cd997585774c0dbf7bc8c860bf81a0d50a6c7a35ff60e3f9c7d58536710cf89a05859660eb3a3114d2de5469281f38f49e3565461bf336606a20b7bdc2ffc9393840420d9422cf7080cbe103cfb0a9f7085ea935843070a5a80fda40123b4d9672d69427db6ea1b93e844f068157bf5f81bd5936c696dbe8bf8bd4668741d3e86b6d8b1780ba1e080bb051a945b12a01998c5e21bcd1952ec621e8aca4546ca1df4da4c6eb7675fddea9012a4bc4a8ab34b709d841594dcf090804a2a77e765fefff1246d9437090e233d06085ae6f434510b5667c23bb581b88c86b80347c9b6c7541e1847add49e1a015683f1a46c1b0835943f8ba1c039f4591a5aef382dc7e4d53317747520d6b2bac85f111ff8f11803e916214bc264f43a2472011e33459c498d533a718f3e34d2fdf3e1f530cff2a23826b9aabc61997611c0a6fb553faab3b37fc153b290628d498c3a820e5f939f289f211e26f8e0e94d627d27809f47c51006edc5dca44670f28847463a5d4aa47a7c5dddd7a437991e8e37d84bd791a6c58146e0ad69e287160f69911a2cadd0506bfa0bf4dfdbcc5895f24d9c5f6d12cb35c6adbed7477190b49989ec76b9ed8c1d9732da999e453019ac05d8b93c7e7e70071ebe0e4d3346754ebe4769a0347bda3120220ee824a21fc51fdd0bf1ababed361772c9c5401429ba484f1180394baa5e73ed1977ed87302825134f85abf295e253671a25beb5aae7383ba513835308128ac1d078e9721ccf105155d1e98cda50922e378d0b143a682617620b63b72c86d10289af8e398e0ea03fd17bc0e2bf04cfe68de93fb1258e8fe99df8fc2f1e31add39063cda3ef4d658fe7f7ebf79c60fc16e38466f4467d8a782667eb2506142c625afc99d70258d1e693b7b0b22d1f6e2b058a7e2c9f82c6212f2de60884b5ace64f755e63450bfc259e30ceaa9397f214009eec0953a091bd224a006b0e3cd0073ed5ec72b36872f119dffb6b4307b2c6c2de8eae4694a2fdf38ecfeae7ddc6aab6cb949cbb938c44fe4251ad867c11a1de1302b9fd31663976d1d3c678078803d4e8500a5a6f846644ebcca70311be51d7a98a92447ab3d85fbf222f0729be44f89b70e92d924d373b9738f0e73f1b98e50e7ef1cc03c445a36128504f150514e6c414c3178231dddfb62a7bffd95a6f1c8a05112a337bbb470610006e61c409dbe6049aa15ebc57ce732c13a4945283864a2c2db50e4656a8ebe10118e822610b1ea8d8f665b1d01570f43f5f77a46b962cf98db8f889a0d835efd76bd8dcd0c57c9c3ed29ad705cce2e165cad8673d49ddbeea9ec8195cb83d596dcbb2beeaf4eaec4f867b203105e75a0658d419754daec775b9f9a3d03cbd5978c921df57fe5bfc1de51ee0798f99545031c88b308c3ee1a4054dadb8f2cf92bca79270f17cab6c98ab4acec6a6899c088d25c5604b457804a3e35bfa1f3178ea3e35eb57f01ddaa33f4a526c15dd3d923726e7cc922ce2e537ebd9b6d76f13132207612a810ab19db7ece0d0364f0c16866688cfda26d83d7e5fd2435d1802d4d972c674e70a12353a4f46ca40f3f9a5e2c2c9df2e999cae82da99626b51c634252e5623fc70bc48fcc5609c289178bb51ab165aee1632e3411d7c13db782720c5307a2e1a2566879c59375a1c9918aedb3abf69b9052dc2cc628474fec811ff9777acf7a01681ae3803570154a435f6cec7c8a16f5ade32cc11f34798f00c601b85367371e785cace8be03787ec708797384ce4e17c879ca0ab400fa775a2d905ddafdaa5eba127af02724be9c079265499a6718f69b4bf393d08f010a7f4ab455e2c043637b82b6d16d575da1b9dbbf2f1fcae367fcb2038e24846fae5c82570fed19e9726c89d78c330d8f8281c9a9033a9403e83c3aecf1e2557a10a16841e0f695db72a3132ad03c5162f2abf05e697c49d1d719d57b0ee28a589632300cea106c17b9f82c940cf11d4faa442ad7341c73b317a62894bc10b04fd51e1c7d157bffd1f02da496672fa5bc905f326fa20a096b8203690ba18147e612c998610a0439a50bd9fcf2089ba52e72adcb594e9fb3342cd4336bd7e5a00ed35a54ddef128d3bf1733d4987de109b78d306cd8bff0cca06a753ec2572cb96c76c4db5f730812617eba5a3777b00cf188db6cb16d1af8b864d53fefc95f2b89432e45d812849a5b7bb83a3a5a6e0dd86bae4d7f5ed37ab3fead722510e71133339366dcd148fa09339cb03e185cd8e04f36f9eefb2e5edc79cacdea267c22a78be5c42c012425ecaa1c6ff99de5cce03d13a3aae46fb5a2302ed51609fde548a714fe3bd2efb4baf815dca2035a3e83c7f55b27b66e98ed5d84bab51a86e8440db764b5d56b4845e2171a762c9141530968682d59269924f74058a938b55773ccdacd99c09487a1cb5571e001e255725ad17c49d9807233ec6c22a9b9eb25a4ad5f01e4ea0df7a3ff1540fc1d1b839265f1f7f9f54b17e9f2fb74f11490bc81dfaef59d52ed0bf106f21197fab248528525a0161eddc1178f4087bdbbecafd5038873e45d65bb0f39120d4347cbb3cfbe39fc0da0b3f3f53aae844b2ea107fee5ccc9d2b5d2446139c87bfd05486efea4bb2b9e29b62a7691cf3c5b7e28034e82283cd69dd6d4497ea07ad05d7166e321b2395dd272b48fa06a56ac018ef574d5e85801d6e8a6ed5b5b9becec7ed801e56306ef3780253385184dbeea4955244bed6559f85506bfb5fafd7ee5f27f1160a747985e16aacc09"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004e300)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1, r3}, {0x0, r4}, {}, {0x0, r5}, {}, {r6, r13}, {}, {}, {0x0, r14}], 0x0, "7797b6dec3562a"}) 21:09:49 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604f0ffffff00000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x7400000000000000}]}, 0x78) 21:09:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5424, &(0x7f0000000100)) 21:09:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x7a00000000000000}]}, 0x78) 21:09:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x7f00000000000000}]}, 0x78) 21:09:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x40000, 0x1c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000500)={0x2, &(0x7f00000004c0)=[{}, {}]}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x1e}, @void, @val={0xc, 0x99, {0x1, 0x32}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r4, 0x1, 0x5, &(0x7f0000000040)={r5}, 0x10) write$binfmt_elf64(r4, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x20, 0x7, 0x23, 0x7f, 0x3, 0x6, 0x9, 0x1dd, 0x40, 0x191, 0x1, 0x7, 0x38, 0x1, 0x4, 0x9, 0x100}, [{0xc8e9caa2, 0x5, 0x80, 0x4, 0x1b88, 0xffffffff, 0xff}], "a639ab7867b3e03cb9ddb815d016de6841ad5418dfd3dccb816c747d90061f9b2e3d822b3d8e20ecee3d58252763204c157417692b130bb7192d25e5ed64aca0e95a9c17e88e3b71e922caa3ffa409", ['\x00', '\x00']}, 0x2c7) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000540)={0x4, 0x2000}, 0x4) 21:09:50 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000780)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r13 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r13, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r11, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r13, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r12}], 0x3, "d5da11403c3f19"}) 21:09:50 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604fcffffff00000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:50 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xa3}}, './file0\x00'}) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x15, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) fcntl$setown(r0, 0x8, 0xffffffffffffffff) 21:09:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x8000000000000000}]}, 0x78) 21:09:50 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5425, &(0x7f0000000100)) [ 1232.502499][ T4494] validate_nla: 7 callbacks suppressed [ 1232.502520][ T4494] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x80ffffff00000000}]}, 0x78) 21:09:50 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604feffffff00000000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x9bffffff00000000}]}, 0x78) 21:09:50 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5427, &(0x7f0000000100)) 21:09:50 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) [ 1232.691998][ T4609] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:50 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000980)={0x0, ""/256, 0x0, 0x0}) r11 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r12, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x17, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585b", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r10}], 0x3}) 21:09:50 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) 21:09:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xc000000000000000}]}, 0x78) 21:09:50 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)='\b', 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000100)) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x548140, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x3) 21:09:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xe000000000000000}]}, 0x78) 21:09:50 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5428, &(0x7f0000000100)) 21:09:50 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) 21:09:50 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) socketpair(0x22, 0x800, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r11 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r10}], 0x3, "d5da11403c3f19"}) 21:09:51 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000000010000", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf000000000000000}]}, 0x78) 21:09:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1ff) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3, 0xf800, 0x200, 0x9}}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002940)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000100)=""/81, 0x51}, {&(0x7f0000000180)=""/205, 0xcd}, {&(0x7f0000000280)=""/190, 0xbe}, {&(0x7f0000000340)=""/58, 0x3a}, {&(0x7f0000000380)=""/123, 0x7b}], 0x5, &(0x7f0000000480)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000580)=""/64, 0x40}, {&(0x7f00000005c0)=""/176, 0xb0}], 0x2}}, {{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000740)=""/201, 0xc9}, {&(0x7f0000000840)}, {&(0x7f0000000880)=""/226, 0xe2}, {&(0x7f0000000980)=""/137, 0x89}, {&(0x7f0000000a40)=""/13, 0xd}, {&(0x7f0000000a80)=""/140, 0x8c}, {&(0x7f0000000b40)=""/64, 0x40}, {&(0x7f0000000b80)=""/10, 0xa}, {&(0x7f0000000bc0)=""/221, 0xdd}, {&(0x7f0000000cc0)=""/61, 0x3d}], 0xa}}, {{&(0x7f0000000dc0)=@abs, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000e40)=""/19, 0x13}], 0x1, &(0x7f0000000ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000000f80), 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001000)=""/214, 0xd6}, {&(0x7f0000001100)=""/197, 0xc5}, {&(0x7f0000001200)=""/30, 0x1e}, {&(0x7f0000001240)=""/238, 0xee}, {&(0x7f0000001340)=""/114, 0x72}, {&(0x7f00000013c0)=""/205, 0xcd}, {&(0x7f00000014c0)=""/224, 0xe0}], 0x7, &(0x7f0000001640)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000001740)=@abs, 0x6e, &(0x7f0000001c00)=[{&(0x7f00000017c0)=""/172, 0xac}, {&(0x7f0000001880)=""/92, 0x5c}, {&(0x7f0000001900)=""/52, 0x34}, {&(0x7f0000001940)=""/47, 0x2f}, {&(0x7f0000001980)=""/135, 0x87}, {&(0x7f0000001a40)=""/2, 0x2}, {&(0x7f0000001a80)=""/191, 0xbf}, {&(0x7f0000001b40)=""/163, 0xa3}], 0x8}}, {{&(0x7f0000001c80)=@abs, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001d00)=""/108, 0x6c}, {&(0x7f0000001d80)=""/113, 0x71}], 0x2}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000002280)=[{&(0x7f0000001ec0)=""/138, 0x8a}, {&(0x7f0000001f80)=""/47, 0x2f}, {&(0x7f0000001fc0)=""/104, 0x68}, {&(0x7f0000002040)=""/171, 0xab}, {&(0x7f0000002100)=""/134, 0x86}, {&(0x7f00000021c0)=""/173, 0xad}], 0x6, &(0x7f0000002300)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002340), 0x6e, &(0x7f0000002600)=[{&(0x7f00000023c0)=""/147, 0x93}, {&(0x7f0000002480)=""/209, 0xd1}, {&(0x7f0000002580)=""/77, 0x4d}], 0x3, &(0x7f0000002640)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000002740), 0x6e, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/11, 0xb}, {&(0x7f0000002800)=""/141, 0x8d}], 0x2, &(0x7f0000002900)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0xa, 0x180, &(0x7f0000002bc0)={0x77359400}) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000002c00)) 21:09:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xf800000000000000}]}, 0x78) 21:09:51 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) write(r0, &(0x7f0000000100)="b4", 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000080)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x9) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) syz_open_dev$tty20(0xc, 0x4, 0x1) [ 1232.979291][ T4743] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5429, &(0x7f0000000100)) 21:09:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xfc00000000000000}]}, 0x78) 21:09:51 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x40000) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r2 = pidfd_getfd(r0, r1, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r3, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) recvmmsg$unix(r2, &(0x7f00000006c0)=[{{&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000280)=""/183, 0xb7}], 0x1, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/144, 0x90}, {&(0x7f0000000580)=""/222, 0xde}], 0x2}}], 0x2, 0x2, &(0x7f0000000740)={0x0, 0x989680}) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000140)=0x40000) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x3, 0x80, 0x4, 0x8, 0x0, 0x8, 0x2010, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x8088, 0x3, 0x81, 0x5, 0x6, 0x3, 0xb500, 0x0, 0xe5, 0x0, 0x7}, r4, 0x7, r5, 0xb) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) 21:09:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}]}, 0x78) 21:09:51 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000000000001", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5432, &(0x7f0000000100)) 21:09:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]}, 0x78) [ 1233.330628][ T4869] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}, 0x78) 21:09:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}, 0x78) 21:09:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5433, &(0x7f0000000100)) 21:09:51 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000000000002", 0x39}], 0x1) ptrace(0x4207, r0) [ 1233.531861][ C1] scsi_io_completion_action: 12 callbacks suppressed [ 1233.531892][ C1] sd 0:0:1:0: tag#6587 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1233.531916][ C1] sd 0:0:1:0: tag#6587 CDB: opcode=0xe5 (vendor) [ 1233.531955][ C1] sd 0:0:1:0: tag#6587 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1233.531974][ C1] sd 0:0:1:0: tag#6587 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1233.531993][ C1] sd 0:0:1:0: tag#6587 CDB[20]: ba [ 1233.537374][ T4986] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1233.912680][ T4859] ================================================================== [ 1233.912706][ T4859] BUG: KCSAN: data-race in do_con_write / stop_tty [ 1233.912732][ T4859] [ 1233.912737][ T4859] write to 0xffff888135f8f5bc of 1 bytes by task 5090 on cpu 1: [ 1233.912752][ T4859] stop_tty+0x54/0xb0 [ 1233.912767][ T4859] n_tty_receive_buf_common+0x110d/0x4e70 [ 1233.912789][ T4859] n_tty_receive_buf+0x2b/0x40 [ 1233.912807][ T4859] tty_ioctl+0x969/0x1130 [ 1233.912830][ T4859] __se_sys_ioctl+0xcb/0x140 [ 1233.912850][ T4859] __x64_sys_ioctl+0x3f/0x50 [ 1233.912870][ T4859] do_syscall_64+0x44/0xa0 [ 1233.912892][ T4859] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1233.912915][ T4859] [ 1233.912920][ T4859] read to 0xffff888135f8f5bc of 1 bytes by task 4859 on cpu 0: [ 1233.912933][ T4859] do_con_write+0x2055/0x5f40 [ 1233.912953][ T4859] con_write+0x20/0x40 [ 1233.912971][ T4859] n_tty_write+0x77b/0xaf0 [ 1233.912988][ T4859] file_tty_write+0x409/0x660 [ 1233.913003][ T4859] tty_write+0x24/0x30 [ 1233.913017][ T4859] vfs_write+0x7f5/0x950 [ 1233.913032][ T4859] ksys_write+0xd9/0x190 [ 1233.913047][ T4859] __x64_sys_write+0x3e/0x50 [ 1233.913063][ T4859] do_syscall_64+0x44/0xa0 [ 1233.913081][ T4859] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1233.913104][ T4859] [ 1233.913106][ T4859] value changed: 0x00 -> 0x01 [ 1233.913116][ T4859] [ 1233.913118][ T4859] Reported by Kernel Concurrency Sanitizer on: [ 1233.913125][ T4859] CPU: 0 PID: 4859 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0 21:09:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000011000000f6ae169a779660efe3eddfd27a3ffa279562a17021f82a7430891540ce366760206b7bb7ba2a0cf5a69edf3da9d37d72f0348750970e0bc87c5b638ebe188e8aba574ded0b72121913bc2df38dfda7bfbfa893bdbdd03b7981e61c4d48", @ANYRES32=r0, @ANYBLOB="4000000002000000000000006c653000"]) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000080)=0x13) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000000c0)=0x13) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) 21:09:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}, 0x78) [ 1233.913145][ T4859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1233.913155][ T4859] ================================================================== 21:09:52 executing program 1: sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x20, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x4000804) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) r1 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x100, 0x3, &(0x7f0000000400)=[{&(0x7f0000000100)="10772417a8d8540bb87b0996170f4410dba1e1de15cf1dd00f9dac87e010b55cec24c241d6c723200dbfa9338c8ad8156c5c56495758558546c6bf254f1c608da7b54def3e06f831f305739a9befa2d64cd6e917a99d15f9d67c6560841f604e3e582a4594d646413aa76ed4bb664ef40d319cbfd5fc2f25faa9747ea8e339eb16298253a6f6c820d7321336e2d85609f5ced9da65ed72710ef19ef9b59c073f75063e33276ad6f8a8fe3c8f4fbfc88d3fa7c2aa41bbe1918f18b83b6325fb28c0481f1c", 0xc4, 0x101}, {&(0x7f0000000200)="b4fdac9026690538a73d1595bf147bfdc4cbabf3c9ae8879b8c3a0e8b93537bc655cc3b19ef4636eca5253ac5ee03648d74bc06968c3e2165b8a8ab41470caa545c871681ad4f57b8ed8a694a52a4a431e2b35ef5adddc13fa7970bc77b7f33dd2ac4118be729cf0a443887dd5932d1c4492888ba3817c3e891a3670b69f00643f7f2f096c75ae131304f1b6a2828a8427307f25948bc616ffdfbbde1cdd4f1a3d6d8c872c476e1d6a53292d8943cdbad9d7ed81dbe38ff1479737903b0143f57a3d3c779f73ec7eae3946d41054b259", 0xd0, 0x1}, {&(0x7f0000000300)="41e63fe50a5c9f3b65b96105e06ffb55395fc0086af5a7eb6b00ae9541c775418460d92bf6e5c3b9beb96331274543de8f45c182f3898325e0e266af0e57eff056a00a5e84803a2ac9778359dd7b88ff480ef6d56e330afc1fd218be2d4079f77ffcadd89aba5a5301454113ad38895e7dd95b0db1c3045c86efa63900399b3e6f051343170713899b079ad32c95ad9b4de39dc5617ba2a06796597b13ec65921c2667cd001ff9910ea07eecfa883ab361c1825e9c5e2450c3360390a72d831d87681ebc6dbf399a9ac8370c200672a09533d0ef588aa4be60", 0xd9, 0xfe}], 0x10000, &(0x7f0000000740)=ANY=[@ANYBLOB='nonumtail=0,shortname=win95,rodir,dont_appraise,subj_type=\'[,hash,fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',pcr=00000000000000000053,obj_user=)/!#@+,fowner=', @ANYRESDEC, @ANYBLOB=',fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c00c8db7515594781526ad28f4d793355730011a8e4199f3f1f56a4523d856ff5955334df560ba27d4a0c37e12433f675449af605d93aee42edbb682caad3f4a12df0521271fe3c74aa7d72756bdb792bbe988528db8c180daa1cd6e834a554bda221aa573c9c4787b638b9ed35fe118d554b467ff90f0bb95483112c906dbc84b3f5028eddda65504c097481f94094db1aefe41d117eaacaf1e41a108ec4bdefed1db8440cb871399be10785e0386f55d6f9218fdb1c419f094c"]) write$binfmt_aout(r1, &(0x7f0000000540)={{0x107, 0x5, 0x4, 0x22b, 0xc6, 0x7, 0x3bc, 0x7fff}, "1bafaf6a1f079fd4aac259bbe85f5766f0eabbb3608d3df052f5bd79fc6e015bcc55383d5e57e870d594d510839c365f693ed3e5ac1aa9022c82104d66b28d9dda1d26541183867f97b25f06c35a0a190750d45c6f7a132ce05642685961e754"}, 0x80) 21:09:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5434, &(0x7f0000000100)) 21:09:52 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000000000003", 0x39}], 0x1) ptrace(0x4207, r0) [ 1234.296415][ C1] sd 0:0:1:0: tag#6588 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1234.296443][ C1] sd 0:0:1:0: tag#6588 CDB: opcode=0xe5 (vendor) [ 1234.296479][ C1] sd 0:0:1:0: tag#6588 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1234.296518][ C1] sd 0:0:1:0: tag#6588 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 21:09:52 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000000000004", 0x39}], 0x1) ptrace(0x4207, r0) [ 1234.296535][ C1] sd 0:0:1:0: tag#6588 CDB[20]: ba [ 1234.298434][ T5105] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x5}]}, 0x78) [ 1234.496855][ T5209] loop1: detected capacity change from 0 to 1 [ 1234.497534][ T5209] FAT-fs (loop1): Unrecognized mount option "dont_appraise" or missing value [ 1234.524135][ C1] sd 0:0:1:0: tag#6589 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1234.524161][ C1] sd 0:0:1:0: tag#6589 CDB: opcode=0xe5 (vendor) [ 1234.524178][ C1] sd 0:0:1:0: tag#6589 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1234.524196][ C1] sd 0:0:1:0: tag#6589 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 21:09:52 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000000000005", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x4, 0x8, "63b4e42d0498eb3c1e127b3a8ac1db20699bdc", 0x3, 0x868}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) [ 1234.524222][ C1] sd 0:0:1:0: tag#6589 CDB[20]: ba [ 1234.528469][ T5214] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x6}]}, 0x78) 21:09:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) 21:09:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}, 0x78) [ 1234.751726][ C0] sd 0:0:1:0: tag#6590 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1234.751755][ C0] sd 0:0:1:0: tag#6590 CDB: opcode=0xe5 (vendor) [ 1234.751773][ C0] sd 0:0:1:0: tag#6590 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1234.751790][ C0] sd 0:0:1:0: tag#6590 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1234.751807][ C0] sd 0:0:1:0: tag#6590 CDB[20]: ba [ 1234.763442][ T5325] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, 0x78) 21:09:53 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000000000006", 0x39}], 0x1) ptrace(0x4207, r0) [ 1234.973583][ T5209] loop1: detected capacity change from 0 to 1 [ 1234.980150][ T5209] FAT-fs (loop1): Unrecognized mount option "dont_appraise" or missing value [ 1235.020466][ C0] sd 0:0:1:0: tag#6591 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1235.030317][ C0] sd 0:0:1:0: tag#6591 CDB: opcode=0xe5 (vendor) [ 1235.036675][ C0] sd 0:0:1:0: tag#6591 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1235.045723][ C0] sd 0:0:1:0: tag#6591 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1235.054767][ C0] sd 0:0:1:0: tag#6591 CDB[20]: ba [ 1235.062195][ T5537] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:53 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) fcntl$notify(0xffffffffffffffff, 0x402, 0x2c) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 21:09:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000140)) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000100)={0x2d, 0x5, 0x4, 0x1, 0x7, "f64e51352aacc17b08bea745d928935048a310", 0x4, 0xfffffffa}) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:bin_t:s0\x00', 0x1b, 0x1) 21:09:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5435, &(0x7f0000000100)) 21:09:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x9}]}, 0x78) 21:09:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}, 0x78) 21:09:53 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000000000007", 0x39}], 0x1) ptrace(0x4207, r0) [ 1235.240229][ T5650] SELinux: Context system_u:object_r:bin_t:s0 is not valid (left unmapped). [ 1235.249377][ T23] audit: type=1400 audit(1636405793.316:3073): avc: denied { relabelto } for pid=5643 comm="syz-executor.4" name="tty28" dev="devtmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:bin_t:s0" [ 1235.249475][ T23] audit: type=1400 audit(1636405793.316:3074): avc: denied { associate } for pid=5643 comm="syz-executor.4" name="tty28" dev="devtmpfs" ino=46 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:bin_t:s0" 21:09:53 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000000000008", 0x39}], 0x1) ptrace(0x4207, r0) [ 1235.311630][ C0] sd 0:0:1:0: tag#6528 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1235.311663][ C0] sd 0:0:1:0: tag#6528 CDB: opcode=0xe5 (vendor) [ 1235.311680][ C0] sd 0:0:1:0: tag#6528 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1235.311709][ C0] sd 0:0:1:0: tag#6528 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1235.311728][ C0] sd 0:0:1:0: tag#6528 CDB[20]: ba [ 1235.313349][ T5654] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1235.506452][ C0] sd 0:0:1:0: tag#6529 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 21:09:53 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000000000009", 0x39}], 0x1) ptrace(0x4207, r0) [ 1235.506476][ C0] sd 0:0:1:0: tag#6529 CDB: opcode=0xe5 (vendor) [ 1235.506522][ C0] sd 0:0:1:0: tag#6529 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1235.506540][ C0] sd 0:0:1:0: tag#6529 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1235.506556][ C0] sd 0:0:1:0: tag#6529 CDB[20]: ba [ 1235.659503][ C0] sd 0:0:1:0: tag#6530 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1235.659528][ C0] sd 0:0:1:0: tag#6530 CDB: opcode=0xe5 (vendor) [ 1235.659547][ C0] sd 0:0:1:0: tag#6530 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1235.659583][ C0] sd 0:0:1:0: tag#6530 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1235.659599][ C0] sd 0:0:1:0: tag#6530 CDB[20]: ba 21:09:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xb}]}, 0x78) 21:09:53 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604000000000000000a", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xc}]}, 0x78) [ 1235.871754][ C1] sd 0:0:1:0: tag#6531 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1235.871781][ C1] sd 0:0:1:0: tag#6531 CDB: opcode=0xe5 (vendor) [ 1235.871820][ C1] sd 0:0:1:0: tag#6531 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 21:09:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xd}]}, 0x78) [ 1235.871858][ C1] sd 0:0:1:0: tag#6531 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1235.871875][ C1] sd 0:0:1:0: tag#6531 CDB[20]: ba 21:09:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0x1f, 0x12, 0x1d5, &(0x7f0000000100)}) 21:09:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) 21:09:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5437, &(0x7f0000000100)) 21:09:54 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604000000000000000b", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xe}]}, 0x78) [ 1236.100109][ C1] sd 0:0:1:0: tag#6532 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1236.100133][ C1] sd 0:0:1:0: tag#6532 CDB: opcode=0xe5 (vendor) [ 1236.100149][ C1] sd 0:0:1:0: tag#6532 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 21:09:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf}]}, 0x78) 21:09:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) [ 1236.100186][ C1] sd 0:0:1:0: tag#6532 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1236.100220][ C1] sd 0:0:1:0: tag#6532 CDB[20]: ba 21:09:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5441, &(0x7f0000000100)) 21:09:54 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604000000000000000c", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}]}, 0x78) 21:09:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 21:09:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000140)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000180)) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) write(r2, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x11) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000100)={0xffffffff, 0x9, 0x9, 0x6, 0x12, "23513cbe181a3951d6759274d4bbc1b1e1d691"}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x31b, 0x1, 0x5, 0x0, 0x4}}) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000240)=0x20) 21:09:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x11}]}, 0x78) 21:09:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x12}]}, 0x78) 21:09:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x42) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) 21:09:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}]}, 0x78) 21:09:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5450, &(0x7f0000000100)) 21:09:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) 21:09:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}]}, 0x78) 21:09:54 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604000000000000000d", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:54 executing program 4: ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) 21:09:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}]}, 0x78) 21:09:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5451, &(0x7f0000000100)) 21:09:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5452, &(0x7f0000000100)) 21:09:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x25}]}, 0x78) 21:09:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = fsmount(0xffffffffffffffff, 0x0, 0xf8) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0xfffb, 0x85, 0xf, "7461d832fd9df0fd"}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) 21:09:55 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604000000000000000e", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:55 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r2) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r1) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x0, 0x0, {0x7}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x4, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc8e0}, 0x4008800) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fcdb5523f90db7e9f71f0a000b8080080009006c7ecc2808800a00ec39000000000000000000000000000000000000001e8f909fd89e63ddc4bb98677218b5d94e79b6e63e3c15729d3eb274176f"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), 0xffffffffffffffff) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x38, r10, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4, 0x14}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x38}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x118, r10, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x94, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b380068}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5315c76a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6ccac8ec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63ccd736}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ea16a48}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f397ff5}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a74ae64}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x568c118a}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3aa421c3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e85479d}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb4}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x810}, 0x4048000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000000000)) 21:09:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x48}]}, 0x78) 21:09:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x0, 0xe11, 0x4}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) [ 1237.062403][ T6654] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 21:09:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}]}, 0x78) 21:09:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5456, &(0x7f0000000100)) 21:09:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x60}]}, 0x78) 21:09:55 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x9000) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f00000001c0)={0xfffb, 0xd28a, 0x200, 0xfffffffe, 0x2, "84916ec3c07de47cd4074232b3fdd92169710e", 0x20, 0x6}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000140)={0x8, 0x100, 0x2, 0x8, 0x3, "168b9a69acde531212e2115eee2a97be624591"}) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000280)={0x14ba, 0x9, 0x5, 0xfffffffb, 0x10, "d170e20b22a3cd19dbf1eb66c09370a851c5f0"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000080)=@req={0x4007, 0x2, 0xffffffff, 0x64afa58d}, 0x10) clock_gettime(0x0, &(0x7f0000000000)={0x0}) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000200)=0x10000) epoll_wait(r5, &(0x7f0000000180)=[{}], 0x1, 0xc5c9) setsockopt$sock_timeval(r3, 0x1, 0x5, &(0x7f0000000040)={r4}, 0x10) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000000040)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x81) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) unlink(&(0x7f0000000240)='./bus\x00') 21:09:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x80) write(r1, &(0x7f00000000c0)="b4", 0xfdef) r2 = syz_open_dev$vcsn(&(0x7f0000000180), 0x7, 0x600) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000080)=0x13) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000140)=0x40000) r5 = pidfd_getfd(r4, r1, 0x0) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000100)={0x1c, 0x6, 0x4, 0x2, 0x7f, "cd2ade78ecb87da8b6ca14b0c832e08a69a69f", 0xfff, 0x101}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) write(0xffffffffffffffff, &(0x7f00000000c0)='\x00', 0x1) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r0, 0x7a68c000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) 21:09:55 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000000000010", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x68}]}, 0x78) 21:09:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5457, &(0x7f0000000100)) 21:09:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x6c}]}, 0x78) 21:09:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x74}]}, 0x78) 21:09:55 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) write(r0, &(0x7f0000000100)="b45ec32e5fa79d9721b4a7d65087ece582c4d393c7aa365ee0e42670e3d2e97501056468cd01d5c8dfd7d60f8de07e759155138fcc337d78a1ae1fa838d88df1b14a6f12ffc0b02a6b65476bff3c56a0d8a0c39ba6d0f757652939e0180000", 0x5f) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req3={0x410000, 0x8, 0x210000, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0}) setsockopt$sock_timeval(r1, 0x1, 0x5, &(0x7f0000000040)={r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000390700000018001000", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000"]) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000180)={'wg2\x00'}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x240000, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@fscache}, {@nodevmap}, {@fscache}, {@mmap}, {@version_u}, {@posixacl}, {@fscache}, {@cache_fscache}], [{@smackfsfloor}, {@subj_type={'subj_type', 0x3d, '&.-'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000000c0)=0x13) write(r4, &(0x7f00000000c0)="b4", 0xfdef) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x4) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000200)) 21:09:55 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000000000011", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x545d, &(0x7f0000000100)) 21:09:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}]}, 0x78) [ 1237.512011][ T6793] validate_nla: 8 callbacks suppressed [ 1237.512033][ T6793] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}]}, 0x78) 21:09:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xe0}]}, 0x78) 21:09:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) 21:09:56 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5460, &(0x7f0000000100)) 21:09:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}]}, 0x78) 21:09:56 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000000000012", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:56 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {0x0}, {}, {}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {}, {}, {}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {}, {0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r190 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r192 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r192, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r190, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r190, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r192, 0x81f8943c, &(0x7f0000052b80)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r192, 0xd0009411, &(0x7f000004b940)={{r25, 0xfffffffffffffffd, 0x8, 0x2d8, 0xfff, 0x45, 0x7, 0x8, 0x1, 0x4, 0x7fffffff, 0xca, 0xad5, 0x5, 0x86}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000004c940)={r16, r82, "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", "8f0e68a5b9001dd86abd63c8604e00ebe0f9f878132b3904b244acf59b8712e376a87c3a6b8b3005c8e7d3fc05e9a2c40f197b7053d8fc75ff955fe2641f9f7847ed5b4980a7867dad7b70555dcb65bcbdcc6ee1b9cc070144c0f7af1984eec22c6436bbb53d3777715c5b46553defff7182b377cb951f95a6f20a613b6b7ba1cbf6d39785d6cc33a9336cda21510e146727da7626db58962e3e3a8ef8dd6fc80e37eceb1e63034f68629e2335c0c07f9d560d7311d42f66bb2bbd3cca8e74d972ba39880b1374866433ab219100b696726025e6d6625cc27c3ad8bec70b337ec34ba74cb8e18604967aa1ab3fc69d04505165fd75e1f661b477188256868d10f7ae7d0886413503ee4273bdfe605977bb1e0f016ba543a355c503d3b75487e1504f5efeaf309a480b7f334fb1d416a6358707559dad4df5aa99ec9340c9ded1da096b257f4f489e40688de825a1d18b36d47ca52418da711d8e97cd6633ccc9cae34bef981f1a530c12e8286aba93822681f24e6fcc6ab57051bef8e27758e7cb319de3779c37a03ba524c27df049125f1b3fa18441851d31d184eac95e8f79bcf9f336e271347124de8587d1de599c6d9a927bdc9348fcc8d37210a3f1b90054465ef1c88d6be2b76f1384f219917f943250a9706507eb6284c28409f8f4fe63d64a7bb877ff1988efc61d0118092c3d1f46bd17da4a87cb8d6a47a0411ebaf47deb3d2af42fb9b956c48d2aa12be1c8814a35c366e433a690c8b3618a1754f21b51d8675565abfb1f7d4d64cb0a78a49f0b0c440f13a241042868ea16419b2b058dc7d5f18e691bc298cdc689ef76d69da1584d6b9774bd52a61236b503619a9f7a36a541f1452e8057f81b661eacc3c25b5e1bd224cd98b80784b07c9d0a2aa2bb5ed9a0d1339d444ec3e2843c680047a1f1bc731236369b8788e11d6991ffba65bf480bbe3398a227e1b52e1b4c462bdaad02e97278321c8e9e0bbfa08600a35548b9140bba582319c84e93f02a8307be2a87e82212d4c1d04ef06eba5d7568c9d67f3d98b11fcf5ee3d5180c5c263e4c7056100d2d58c37ebffa71e01763290b65201b2ab3e96ab1a00760c0bc1002f0fc115a5aebe576938e1b9e7a9d9b010a554838ed496752b259b4172189b41701283ac317e2e5d3dd45599849cdc44cecc4eeca14a91de3b0682f871b91ed900202a9cb5342e13445ef535399e72453a62899836f85b7310fa5728f2cbe7faaa1e5dbe9e5460a32540f4ca3486ffb21c10a8fb51a2f4ccb08b958c623d39132f8580b27957ccc89d78e8dc15616716c6d20400512529fc483ad29b3a8a0657c608ad8227ddbc230708d1481f8e52f921a73cd1d3d7e8b1b45f9589f41c607f2f2c41424c97b0b171cfc3fa77abc5c21eb35c7be885eb7f9844e3f3a801978b4094e17055ac983a3b928416592c8551a742fe18a82320cdd4b4f9d540d4eb1f6a5e7f96918f2865c7b5592c16115026ff3b88a7d3c125af8fb85a7ad1e0fcfecab7bbb502450cd29d7bc52a9168560ff93baa03adda0d1acf1df5e62c487ed0b09039e3951e037882b50aa4e42100ed8cd2df6d8850c99a5c16f907f3561696e89698f7eb716167fe571308ae41fd9d182083a4194e165887fb9da571cec0e072e051aa2585c347534f2d099624ed81eface4a9991b03e65579d177d372cb413c5ba8cd779d0a546d6b9622d14423fdfb206ccc967ab5c1a288cf3332dbca88bf03645f1ead537939ff675f6a96b69c250cc65e65766bf59dafe817b0f7b04fd12a8a9d9f5bef93f81666ba9cb7fd4de73515ad539f36caa856f565cb1d8f330c777195403b44e9b7c570e3dda0ef2063e5efb04237115a024c9e882ece41dc09a7ba0ad8f11d32b47ecf3620a937799c22ab85302431f2c0cadd55e063dc3ac6fe9cbad6735644f6beb513f7928b1f870291fc9ec3b4ae92933b16a0a5312ffd5df8751c36a832c34dd0e0b1cd06273c4d2a27cc71e68c9d99a8951149937dbf9bdcc52237ab443cdd8512425e038fbcb1dd02e4c7640e4dd637aec2a4fdfda21a39a9edb72e58454abf1b0645c805a3b5f3dfb5d3002b5ec49498eeb94ece0c48eefb11072ddb129752f3ca229de699580eb602137a1404df8bc98c93a9d621b5cf3fb6224f097e868c0d89281e7711e52adbc2c94837decab19144931fc35684c74d7b1fb23dc379af04f42e16a0ea3949556d28ecf9394d5f65004e101e4cb5382c57f2e88319c6370633f480609f6613a290b460a587a8626747c824781e7da30131d85e7d9544d1267275b5837dc51744de07413af9f083f5f8d2a1f56e0699237bb7298c63ebbf413800dc206b75f5cc3631e627fb2db8a2c1bebbc0def8022c7cc944740852b43a0d67498ca9699f7a9f3f526a5232c3b16ac13eb41fe6a56210e83fe6b3588b2bcfc3927ac08187b1faa7418a6f4e52a2611cdcb09c4cbddf41173b0e8271cd32eadc5656fe9ffcf849276fa5d6a04cc4b28b1300c6fb02244bc55add5321d921fe7a159973065f585aca189473400e5f7044694ac2caa2a278dd2da59374ed82e578910ae3b3415dc820e154b682acd1e0beb6c5b44e885802c0a226f8a0acba0bb6ea352b0313ad92c3f8863301edf80de434518b29f3a2fe804858bbee630f2f45061bbd341b069068a2f6c48aaaac3401b8b1faff5a577012e0f8f07ad46196d7f315eb5dc6db5a8d112bc8f273ee0f79ecd5d81580cecd43749aa6ba63e94c092847f38a8d3240becc153ed5a8a49dd9a2107b361475fdf57459291746bb43f5d0c5b6b1e33435d596d289ee7f2bd0f0f38fd8c8f6a3f892da04c8303f046f674418fdb6747a5127a3c8a82b16ee8c7e5a15f2db552f3fe47bac836bc29f22b61acfc293fde6ebbfd398b39ad09bd6ec67c7a3aca04d0f89126ddf326b04a5485a1d00b69a687588f88c6a381ddc3c2446ad53c2ae6264f60bf3fc198667047e95402dc3049a6b7cd4a6f6746a295da59d0bfaea42c9cfe1cd670cbf1f67101c5b5636b5f5c67c36b817236d7fa7a23f086c907481861652a66660638faeda5ab2a2eb4444c7806d1c2a464fdfe4bfb6e64fdb138a2ede43103af20008a7d28fea7c3bebb821833df8fc431921aba1707146c5a69bbf1aaf2c515a1ffc2b2a536d1fd5928ae28d4f207e49ad0d4f9df5eb4ecc5fd55efb5f51fabe393fa73cad215f05ce953ce5eecad52280d300b32b3823110fe2e143a59bac2b6c651455d60af37f9245e45e825edddf471d2d50517a3ab668061edf2ba686f13eb6906f696738493b6eaae4510381ac21d4cc2181f8e659be95eb8fb0878afe376af8b8928b353d50cae799c49bd29448de38f2277f6c4b3fe7505fc64a37d8cfa658a3634f10124a329d93e87640a71b1e8fbb89672e10e9687ea399ec5b9c00e065103349ec1fe1d249b707b76cf91d45605d812076e173ac4788229404cae309db9b99fc0152eec11ce2c6c9434cd008168c16e165963f9ea6a1cb96a4eaa61850e0b78c3e8ae0ad2c27bd95f0ec04bc302cd315581f3fea0b057e3820e92e1ea417811bc69c932b2fec1c8b2afd22173f211972f964969d52705a79619f866a2f09eb633bbd9e3233900fbada81d41102fdf7e68629840843d9c2db77f526025113211730ec99ac3be475fe2065605a978152f93ff13fdf673dce55cbb1eb36443375aaf6acce38e70323893fa61515f77702a88e00827ffadc15612f3e56d7f0ff1ce742003926d300236efdc2a96b7d450b2af2ccb2974226b6465573021fb3d8059677d4bb51edf7ac265683a9dd2c9956d0adbebe54473fb2fba3767f8449eef2d15e39f60e17c46cd98a89351c578138a5e6eba5b8810ea02dd6025c471832e77d182b9c060aed69e2ba126a4dba9ff9141cb30c66c37ede23f6547ba3968aef75f0ac63f76a6811988e70c902ce6afdd0e6ea16b20972fc477d3b05d9f9cf0b95bed52cb810806956bc7ab1321b9f8b3238d2495d5cd2cc6114ea7dff3b565b17cc18a47685830a311524f26590570e7fd380b1f8a78b4660bc5995079734b2a20f0e867cb5460893885c94ebf96f6ba8bbf68fbf7c9caedfb49c0b297bcd71f618105676ce7d3af340665b8428426947adba0647f60ea6ba502c8949dae6ac43742e2b5d7b932a37f28757de4135c0fbe0266a96d19e8f27248dfea295bf249c1dfe89a5ee0bdb958fec54b876616e5f1c8e21566dde1e94b25a2f9dbfcad048b8312e435c7974f0d4e110dbf2919a058e01840aa9a4d9b57ebb02cf6dfdd9e5240e95562dcb263b1d13a9ebf117bb56677448ab8f9d0c2663618aa4ae68570f23d5ab3394c03c4f845d331c5600a0613bee73d369ec171e4152931212c31bb9bd198f65850a68bd4d19a6be2c1e6bb326fbf2af7c03cb3b1a4333a68d2162d50c76bbe1d4b416615dee70d428b0a7ac1695abd8fd1fcf7a331ec6b3e5d4d2a7565a38c34f7c57796188bd0e2763a3f82fac289a408158a2e86668bca749599a243766322c6bfcc72fb08710cb3defec34b40d929b49f8f5e9ddcd9c01c6d0b7a8be6f51aa0527becd39a3e6199857a2ac906e7481f37cfad3e6b455a78358a05f45a4f456913d1c576bc5ace2caf5c3056ac8606a02bfda63e700c4b4083801da4953620245db203918982f68b4de7793e252dc85e0b6d9b19c97e3cae3e909806d72507fec7686afa87dd225d70e3deac99e3c3244ee1241d0944b4f4d8db89cd7f48ec0c3cec120aba05da21be7386cb98042e4632e6f11b8bd3d490b946c5f8af36d179d9c49abd34602117af259cf2328b554d10b839c53b86a9324566681435dcc6956767bf4f440d24361070b799fb785961bdd6c63df87e864727b7010d422be2d5ab27dd7eadc0903a5c93d1ae6300dcd72dcb920c4c82e458defeefacb20b2d8a3ed81428eb9b70b7d6f9cbe386ddbfe58e4dc5ad8532fa39b8e7fb2f3072cf1bce6bd612f6adca800daf65a558d9b030d4b8d48e0a590838f0e69e130c83403843ab251cbb5520a7504183844d03500816cffbe27bb2dee8d50ec662d9830e8617646c606450e5529430587a1b3e02e9e8128d0df463d9cf62fb67f190ceaa5b735b2f362bc86ecd9431bca20e29e239a894d8c337b0e4b8bf10b36f20fae1e1a9e3b72bb94be44f451fbd0983672fa23b40fab3677e46a688a262f6a66cd7591109fe0cf701e7b33958254f526b7a88074b7de880663a56f2ab424f9053c800ec91a760a9da3f6d025a26c0383aeb1e885dcb11b81592a768ad5b3d6d804c1e3d43a97a198e0defd29f68496a41dd2981e10901932af9bde14b5e6e6fbbd4845d2466507e68a835783be2bdb9d57ae4a6fcf23d9dc0225f1aaff3db097ba06ffc46b4ddff170ce737b3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d940)={0x8000, [{0x0, r169}, {r79, r83}, {}, {}, {0x0, r133}, {0x0, r143}, {}, {}, {}, {}, {r174}, {}, {}, {r159}, {}, {r117}, {}, {r114, r40}, {}, {r55}, {r165, r2}, {0x0, r47}, {r51}, {}, {}, {0x0, r8}, {r100}, {r17, r146}, {0x0, r24}, {}, {}, {}, {r48, r38}, {r149, r60}, {r103}, {0x0, r84}, {r57}, {r59}, {r120}, {}, {}, {r158, r115}, {}, {0x0, r63}, {}, {r52}, {r43}, {r1}, {}, {0x0, r62}, {r7}, {r142}, {}, {r68, r42}, {r6, r44}, {0x0, r164}, {r166}, {r105, r126}, {r141, r66}, {}, {}, {}, {r130}, {}, {r109, r153}, {0x0, r44}, {}, {0x0, r106}, {r6, r29}, {}, {r26, r161}, {0x0, r104}, {0x0, r38}, {}, {r12, r145}, {}, {r139}, {r101}, {r45}, {r21, r18}, {r89}, {r186}, {0x0, r156}, {}, {}, {}, {r112, r95}, {0x0, r154}, {}, {}, {r97}, {r86}, {r98}, {}, {r28, r94}, {r10, r78}, {0x0, r94}, {r172, r13}, {}, {r109}, {r21, r16}, {}, {r178}, {r112, r49}, {r149}, {}, {r181}, {}, {}, {}, {0x0, r20}, {r67, r148}, {r193}, {r30}, {r177}, {0x0, r34}, {}, {r107}, {}, {r19}, {0x0, r163}, {}, {r89}, {0x0, r176}, {r33, r144}, {r86, r127}, {r114, r134}, {}, {}, {r125}, {r188, r39}, {}, {}, {}, {0x0, r115}, {r142}, {r53, r72}, {r159}, {r183, r75}, {r58, r11}, {r31, r50}, {}, {r96, r4}, {r71, r108}, {r149}, {r113, r152}, {}, {r150, r189}, {r69}, {}, {0x0, r160}, {}, {}, {0x0, r171}, {0x0, r85}, {0x0, r118}, {r17}, {}, {r35, r75}, {0x0, r75}, {r9, r14}, {r175, r90}, {r174, r23}, {0x0, r92}, {r46}, {}, {}, {0x0, r160}, {r93, r136}, {0x0, r65}, {0x0, r163}, {r88, r123}, {r180, r157}, {}, {}, {}, {}, {}, {r15}, {}, {r61}, {0x0, r138}, {r1}, {0x0, r11}, {}, {r76, r184}, {0x0, r39}, {0x0, r74}, {r151, r65}, {}, {r110, r173}, {r194}, {0x0, r102}, {r91, r29}, {r135, r179}, {}, {0x0, r37}, {r3}, {}, {r30}, {r81, r118}, {0x0, r128}, {r61, r74}, {0x0, r80}, {0x0, r152}, {0x0, r162}, {}, {0x0, r137}, {r52}, {}, {}, {r77, r187}, {r168, r32}, {r168}, {0x0, r29}, {0x0, r185}, {r55}, {0x0, r5}, {r73}, {0x0, r157}, {}, {0x0, r121}, {r64, r54}, {r166, r111}, {}, {r129}, {r99}, {r116, r179}, {r113}, {}, {r122, r70}, {0x0, r29}, {r147, r14}, {r48}, {0x0, r144}, {}, {r124}, {0x0, r27}, {}, {r125, r56}, {r87}, {r19}, {r132}, {r22, r167}, {0x0, r8}, {}, {}, {}, {0x0, r140}, {0x0, r62}, {r41, r170}, {0x0, r176}, {r155}, {r195, r196}, {r129}], 0x3, "03a29621dd4c63"}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r104}, {}, {}, {}, {}, {}, {}, {}, {r119}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r131}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r182}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r36}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r157}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r133}, {}, {0x0, r191}], 0x3, "d5da11403c3f19"}) 21:09:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf8}]}, 0x78) [ 1238.181965][ T6914] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:56 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000040)) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 21:09:56 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x40000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x3}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) 21:09:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}]}, 0x78) 21:09:56 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5600, &(0x7f0000000100)) 21:09:56 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x20}, 0x0, 0xff7fffffffffffff, r0, 0x0) syz_open_dev$loop(0x0, 0x75f, 0x103382) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000052d80)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x80, "0bc0a15a111742"}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) r10 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000140)=0x40000) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, 0x0) r11 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r11, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CTL_ADD(r8, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x81f8943c, &(0x7f0000052b80)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000596c0)={0x19e, [{}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r9}], 0x3, "d5da11403c3f19"}) 21:09:56 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604000000000000171a", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x180}]}, 0x78) [ 1238.453436][ T7036] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000100)={0x9a, "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"}) 21:09:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x300}]}, 0x78) 21:09:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x500}]}, 0x78) 21:09:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000000)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) 21:09:56 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5601, &(0x7f0000000100)) 21:09:56 executing program 1: write(0xffffffffffffffff, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 21:09:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x600}]}, 0x78) 21:09:56 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000000000025", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}]}, 0x78) 21:09:56 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000000000048", 0x39}], 0x1) ptrace(0x4207, r0) [ 1238.718180][ C1] scsi_io_completion_action: 7 callbacks suppressed [ 1238.718223][ C1] sd 0:0:1:0: tag#6557 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1238.718251][ C1] sd 0:0:1:0: tag#6557 CDB: opcode=0xe5 (vendor) [ 1238.718268][ C1] sd 0:0:1:0: tag#6557 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1238.718286][ C1] sd 0:0:1:0: tag#6557 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1238.718304][ C1] sd 0:0:1:0: tag#6557 CDB[20]: ba [ 1238.730289][ T7165] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1238.786949][ C1] sd 0:0:1:0: tag#6558 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1238.787008][ C1] sd 0:0:1:0: tag#6558 CDB: opcode=0xe5 (vendor) [ 1238.787029][ C1] sd 0:0:1:0: tag#6558 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1238.787048][ C1] sd 0:0:1:0: tag#6558 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 21:09:57 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604000000000000004c", 0x39}], 0x1) ptrace(0x4207, r0) [ 1238.787065][ C1] sd 0:0:1:0: tag#6558 CDB[20]: ba [ 1238.799778][ T7271] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 1238.959481][ C0] sd 0:0:1:0: tag#6559 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1238.959504][ C0] sd 0:0:1:0: tag#6559 CDB: opcode=0xe5 (vendor) [ 1238.959520][ C0] sd 0:0:1:0: tag#6559 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1238.959539][ C0] sd 0:0:1:0: tag#6559 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 21:09:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x900}]}, 0x78) [ 1238.959561][ C0] sd 0:0:1:0: tag#6559 CDB[20]: ba [ 1238.971949][ T7377] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:57 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000000000068", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:57 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5602, &(0x7f0000000100)) 21:09:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}]}, 0x78) [ 1239.159810][ C0] sd 0:0:1:0: tag#6560 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1239.159833][ C0] sd 0:0:1:0: tag#6560 CDB: opcode=0xe5 (vendor) [ 1239.159849][ C0] sd 0:0:1:0: tag#6560 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1239.159890][ C0] sd 0:0:1:0: tag#6560 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1239.159906][ C0] sd 0:0:1:0: tag#6560 CDB[20]: ba [ 1239.164160][ T7481] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000000)=0x13) 21:09:57 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad00020000000000000604000000000000006c", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}]}, 0x78) 21:09:57 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5603, &(0x7f0000000100)) 21:09:57 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x40c00, 0x82) 21:09:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x4, 0x1, 0x3f, 0x4, 0x15, "84b0972e5b53a8a96e3cda4519c3acce4f404b"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) [ 1239.581636][ C1] sd 0:0:1:0: tag#6561 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1239.581661][ C1] sd 0:0:1:0: tag#6561 CDB: opcode=0xe5 (vendor) [ 1239.581682][ C1] sd 0:0:1:0: tag#6561 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1239.581702][ C1] sd 0:0:1:0: tag#6561 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1239.581721][ C1] sd 0:0:1:0: tag#6561 CDB[20]: ba [ 1239.594105][ T7594] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}]}, 0x78) 21:09:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) 21:09:57 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc380002000000000000002ddbe11c302b4913dfc2a6c3193b6288880500000000000000bd293f0100000000000000f3e88ff7e41e28674e7e5ebfe67459ff08fc4a36f68f64399d4633f38a1474d68810490918380ed858c0c0ae74f37fd37b3e9c9c9db9ba4e5ab0520e5a9954353bdfecdf285fb91a7216a5526e7747ab5cbc9d26628e8edd1eb9164703e007e0fe383af12c1ebfd2def1dc1605a6b3bbdd8f10e7aa244cdf135c79c1e9089230ada4f72858870f78359e5f241cded5b37c4facd4a4027e759340e9e96782b213d136300b589d7c1dcfe14f91478a1aad118a58cf557d6a34b5ea084b547e3b3dd436401db5146784f736b55ee1bd53f5c85d7402a2dcc61784a51958e8658f12304de88976ddb6118b55a3d680d78ba5bec6a40e55ecf0ada081131639b06cbc87f0d236f86f524c6b68f532841ef38bf2c238b05669facbf406bce1ef3d328fb78cbfa734f4d46fa7dacc85557a295bab6ad5a858a77d4acf5ba74fca58b1ceb49d4bba4d1dcbb161e8b912a82953bffc4f1303488ff4049bdfed57c036157391cd", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x30}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000780)) sched_setattr(r0, &(0x7f0000000140)={0x38, 0x1, 0x21, 0xb7, 0x0, 0x0, 0x4, 0x0, 0x3e0000, 0x8}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06008603010000004500fc3825000000190004000400ad000200000000000006040000000000000074", 0x39}], 0x1) ptrace(0x4207, r0) 21:09:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}]}, 0x78) [ 1239.820396][ C1] sd 0:0:1:0: tag#6562 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 1239.820419][ C1] sd 0:0:1:0: tag#6562 CDB: opcode=0xe5 (vendor) [ 1239.820442][ C1] sd 0:0:1:0: tag#6562 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 1239.820461][ C1] sd 0:0:1:0: tag#6562 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 1239.820477][ C1] sd 0:0:1:0: tag#6562 CDB[20]: ba [ 1239.822170][ T7716] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 21:09:58 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) write(r0, &(0x7f0000000100)="b495c458ce1f0000000000000000014af20d45117480eb85a03565707a1c58767fe68f7df60000000000000028c0bc62558d95cd0a21cfe7537e099326068c0a6e2c8ea78c69e49816b505f30493f146f38f28d6077acfd1216dc3e79e111a2d1a3fb8bbbad9459d9977764f06a8fcaf014bea2f69e338476ecc3b8cd774a3639987fd77c4954ad8ea77e0a0f45a15ffb9b73d55fda5f8db61bf592f9c6d535c9207ae4cd155421846e0ccb6f4ef5e4eb7eb9255c7a32a0d597edc48073fb79b9d0b9a64f6066cf68ec2c1bc6d5b724058f07c254eb617763826f370693dfb4654c3c6d0cef8eda4f6fbbfd199290056a57aa2bef624ca4dc1585244401399b6c0961821e223d43dd2243b10e7cc56d489d02d4cd39133508837b248b679142ff1bac43a4aa143aef7ec50467fbe3e58287790fb5e699d041a20608a50679a689de45146d993fbbf6b5ddddcb9d58d9cba912db5b13787c3612ba7f2dc72d38dd02309b9155d4e367c3461820128de6102d2d9f883bca5ff8a", 0xffca) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x11) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000000c0)=0x13) 21:09:58 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x12) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) write(r1, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x11) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x1c, 0x16, 0x200, &(0x7f0000000100)="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"}) 21:09:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5605, &(0x7f0000000100)) 21:09:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}]}, 0x78) 21:09:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}]}, 0x78) 21:09:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f00000004c0)={{0x1b, 0x5f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}]}, 0x78) 21:09:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write(r0, &(0x7f00000000c0)="b4", 0xfdef) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5606, &(0x7f0000000100)) 21:09:58 executing program 5: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9, 0x0, 0x400000000, 0x0, 0x7fff}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x10000) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x100) r3 = socket$inet(0x2, 0x3, 0x1) r4 = dup(r3) sendmmsg$unix(r4, &(0x7f00000015c0)=[{{&(0x7f0000001280)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001300)='ru', 0x2}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="100000000000000001000000c30b00000000000000bc3800020