816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001044800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 290.857094][T22109] loop4: detected capacity change from 0 to 262160 14:53:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000110024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), 0x0, 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:09 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:09 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2ae000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001044c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="30082a0024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:09 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x1) dup2(r0, r1) r2 = socket(0x6, 0x80000, 0x4) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x200040, 0x0) fcntl$setpipe(r3, 0x407, 0x20) getsockname$unix(r2, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) accept4$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @private}, &(0x7f0000000200)=0x10, 0x80000) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$setpipe(r4, 0x407, 0x8000007000000) 14:53:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3088470024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:09 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:09 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001046000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3088480024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 291.258374][ T24] audit: type=1400 audit(1638024789.156:523): avc: denied { create } for pid=22137 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 291.271041][T22152] loop4: detected capacity change from 0 to 262160 [ 291.293377][ C1] sd 0:0:1:0: tag#3996 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 14:53:09 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2af000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 291.303222][ C1] sd 0:0:1:0: tag#3996 CDB: opcode=0xe5 (vendor) [ 291.309618][ C1] sd 0:0:1:0: tag#3996 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 291.318656][ C1] sd 0:0:1:0: tag#3996 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 291.327710][ C1] sd 0:0:1:0: tag#3996 CDB[20]: ba 14:53:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), 0x0, 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:09 executing program 0: socket(0x10, 0x3, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3065580024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001046800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000600024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 291.432328][T22270] loop4: detected capacity change from 0 to 262160 14:53:09 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:09 executing program 0: socket(0x10, 0x3, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:09 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2b0000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001046c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3058650024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), 0x0, 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000810024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:10 executing program 0: socket(0x10, 0x3, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 292.072806][T22284] loop4: detected capacity change from 0 to 262160 14:53:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001047400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3047880024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3048880024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, 0x0, 0x0) 14:53:10 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) splice(r1, &(0x7f0000000040)=0x7, r2, &(0x7f0000000080)=0x8, 0x0, 0x2) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000077004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001047a00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:10 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2b1000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, 0x0, 0x0) 14:53:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) [ 292.353058][T22309] selinux_netlink_send: 2 callbacks suppressed [ 292.353071][T22309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=119 sclass=netlink_route_socket pid=22309 comm=syz-executor.1 14:53:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, 0x0, 0x0) 14:53:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 14:53:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000c0004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 292.398700][T22317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=119 sclass=netlink_route_socket pid=22317 comm=syz-executor.1 14:53:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001049200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 292.451171][ C0] sd 0:0:1:0: tag#3995 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 292.461016][ C0] sd 0:0:1:0: tag#3995 CDB: opcode=0xe5 (vendor) [ 292.467346][ C0] sd 0:0:1:0: tag#3995 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 292.476389][ C0] sd 0:0:1:0: tag#3995 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 292.485450][ C0] sd 0:0:1:0: tag#3995 CDB[20]: ba 14:53:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 14:53:10 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2b2000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 292.513260][T22325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=192 sclass=netlink_route_socket pid=22325 comm=syz-executor.1 [ 292.535950][T22328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=192 sclass=netlink_route_socket pid=22328 comm=syz-executor.1 14:53:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104af00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000ec0004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 14:53:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) [ 292.637037][ C0] sd 0:0:1:0: tag#3987 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 292.646886][ C0] sd 0:0:1:0: tag#3987 CDB: opcode=0xe5 (vendor) [ 292.653271][ C0] sd 0:0:1:0: tag#3987 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 292.662325][ C0] sd 0:0:1:0: tag#3987 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 292.671358][ C0] sd 0:0:1:0: tag#3987 CDB[20]: ba 14:53:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000054300)) io_uring_enter(r0, 0x25d3, 0xb84, 0x1, &(0x7f0000000080)={[0x2036]}, 0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgrp(0x0) ioprio_set$pid(0x1, r3, 0x0) r4 = getpgrp(0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_elf64(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/1057], 0x41b) ioprio_set$pid(0x1, r4, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES64=r1, @ANYRES32=r3, @ANYRESDEC=r4, @ANYRESDEC=r4, @ANYRES32=r1], 0xfffffffffffffe25) dup2(r1, r2) fcntl$setpipe(r2, 0x407, 0x7000000) 14:53:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 14:53:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000020024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:10 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2b3000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 292.754872][ C0] sd 0:0:1:0: tag#3994 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 292.764783][ C0] sd 0:0:1:0: tag#3994 CDB: opcode=0xe5 (vendor) [ 292.771130][ C0] sd 0:0:1:0: tag#3994 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 292.780170][ C0] sd 0:0:1:0: tag#3994 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 292.789198][ C0] sd 0:0:1:0: tag#3994 CDB[20]: ba 14:53:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 14:53:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000030024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 292.811047][ C0] sd 0:0:1:0: tag#4025 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 292.820893][ C0] sd 0:0:1:0: tag#4025 CDB: opcode=0xe5 (vendor) [ 292.827227][ C0] sd 0:0:1:0: tag#4025 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 292.836306][ C0] sd 0:0:1:0: tag#4025 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 292.845437][ C0] sd 0:0:1:0: tag#4025 CDB[20]: ba 14:53:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000040024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104f700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:10 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0x200002e6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write$P9_RREADDIR(r0, &(0x7f00000000c0)={0xe4, 0x29, 0x1, {0xfff, [{{0x8, 0x4, 0x2}, 0x2, 0x68, 0x7, './file0'}, {{0x20, 0x1, 0x8}, 0x3, 0x80, 0x7, './file0'}, {{0x10, 0x2, 0x3}, 0x0, 0x20, 0x7, './file0'}, {{0x2, 0x2, 0x5}, 0x3, 0x1, 0x7, './file0'}, {{0x1, 0x3, 0x2}, 0x3, 0x5, 0x7, './file0'}, {{0x20, 0x4, 0x8}, 0x0, 0x4, 0x7, './file0'}, {{0x11, 0x2, 0x4}, 0x6c9a, 0x80, 0x7, './file0'}]}}, 0xe4) r3 = dup2(r2, r1) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000054300)) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f00000001c0)={0x1, 0x7fff, 0xfffffffa, 0x10001}) r5 = syz_open_dev$vcsa(&(0x7f0000000200), 0x8000, 0x24401) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r6, {r4}}, './file0\x00'}) fcntl$setpipe(r1, 0x407, 0x7000000) dup3(r7, r3, 0x80000) write$P9_RSETATTR(r1, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000054300)) bind$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @any, 0x1}, 0xe) 14:53:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000050024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:10 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2b4000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001042c0100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:10 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 293.013058][ T24] audit: type=1400 audit(1638024790.916:524): avc: denied { write } for pid=22369 comm="syz-executor.2" path="socket:[72182]" dev="sockfs" ino=72182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 14:53:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000060024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000070024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001044a0100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:11 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000080024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:11 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:11 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2b5000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001044f0100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x100) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpgrp(0x0) ioprio_set$pid(0x1, r6, 0x0) r7 = getpgrp(0x0) ioprio_set$pid(0x1, r7, 0x0) r8 = getpgrp(0x0) ioprio_set$pid(0x1, r8, 0x0) r9 = getpgrp(0x0) ioprio_set$pid(0x1, r9, 0x0) write$P9_RGETLOCK(r5, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYRESHEX=r9, @ANYRESOCT=r3, @ANYBLOB="11e7894287919cdb49db6f4300da95fe5582a6cab5db6956d9c878616952", @ANYRES64=r6, @ANYRESDEC=r2, @ANYRES64=r8, @ANYRESHEX=r1], 0x200002e6) syz_io_uring_complete(0x0) r10 = dup2(r4, r5) dup2(r10, r5) fcntl$setpipe(r5, 0x407, 0x7000000) 14:53:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000090024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:11 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104ce0100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 293.837921][T22408] FAT-fs (loop4): bogus number of reserved sectors [ 293.844617][T22408] FAT-fs (loop4): Can't find a valid FAT filesystem 14:53:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000a0024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:11 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:11 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2b6000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:11 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000b0024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001040a0200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000c0024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:12 executing program 2: ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000040)={0x2, 0xf2c4d95e25417dac, 0x8}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) fsetxattr$security_ima(r1, &(0x7f00000002c0), &(0x7f0000000300)=@v1={0x2, "7ecac37e454e8d75"}, 0x9, 0x3) r2 = accept4$x25(r1, &(0x7f0000000240)={0x9, @remote}, &(0x7f0000000280)=0x12, 0x0) r3 = dup2(r2, r1) r4 = syz_open_dev$vcsu(&(0x7f0000000200), 0xffffffffffffff07, 0x0) r5 = getpgrp(0x0) ioprio_set$pid(0x1, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000080)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r3]) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1) write$P9_RWRITE(0xffffffffffffffff, &(0x7f00000000c0)={0xb, 0x77, 0x1}, 0xb) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:12 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:12 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2b7000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000f0024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001041e0200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:12 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:53:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000100024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000110024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 294.218578][T22456] FAT-fs (loop4): bogus number of reserved sectors [ 294.225197][T22456] FAT-fs (loop4): Can't find a valid FAT filesystem 14:53:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104300200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:12 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:53:12 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2b8000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000600024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:12 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x0, 0xffff}}}, 0x24}}, 0x0) 14:53:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001044d0200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) ftruncate(r0, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x6358, 0x400}, &(0x7f0000000140)=0x8) write$P9_RGETLOCK(r2, &(0x7f0000000100)=ANY=[], 0x200002e6) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) close(r4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) dup2(r5, r2) fcntl$setpipe(r2, 0x407, 0x7000000) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x33, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e21, 0x4, 'lblcr\x00', 0x9, 0xb03, 0x67}, 0x2c) 14:53:12 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff}}}, 0x24}}, 0x0) 14:53:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000324004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 294.403098][T22581] FAT-fs (loop4): bogus number of reserved sectors [ 294.409755][T22581] FAT-fs (loop4): Can't find a valid FAT filesystem [ 294.416651][T22583] __nla_validate_parse: 17 callbacks suppressed [ 294.416664][T22583] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 294.437606][ C0] sd 0:0:1:0: tag#3979 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 14:53:12 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2b9000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000524004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:12 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff}}}, 0x24}}, 0x0) [ 294.447456][ C0] sd 0:0:1:0: tag#3979 CDB: opcode=0xe5 (vendor) [ 294.453806][ C0] sd 0:0:1:0: tag#3979 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 294.462849][ C0] sd 0:0:1:0: tag#3979 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 294.471977][ C0] sd 0:0:1:0: tag#3979 CDB[20]: ba 14:53:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000624004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:12 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff}}}, 0x24}}, 0x0) 14:53:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:12 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000724004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104520200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:12 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2ba000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 294.608238][T22708] FAT-fs (loop4): bogus number of reserved sectors [ 294.614837][T22708] FAT-fs (loop4): Can't find a valid FAT filesystem [ 294.618657][T22712] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:13 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) sendto$inet6(r1, &(0x7f0000000240)="bf42008675fda0f40716581e811cb30c064c25bc87f16b5803639645eea18dd5c421e3a930f325e5e452e333ff55751202cd6019ed608851c95aa11b08a3da15ad2b674e29073b04c1da741c8d011efa763a27ecc1dd0471b4cc5ddbed74468d1baee6fa2f9d48975cbc284926edd7cb96a83f6f299c79995fa5f21f4f1c849079243af1b93c7765be439c0de3", 0x8d, 0x8001, &(0x7f0000000300)={0xa, 0x4e23, 0x400, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x55c}, 0x1c) r2 = dup2(r0, r1) fcntl$setpipe(r2, 0x407, 0x1f) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0xffff}}, './file0\x00'}) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) write$P9_RXATTRWALK(r4, &(0x7f0000000080)={0xf, 0x1f, 0x2, 0x9}, 0xf) fcntl$setpipe(r1, 0x407, 0x7000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000140)="0917b58d8ab94ba12fe43690d9c1ec18604ec33938ebd70c7526d9b0b6014be92fa282b49364992cbcd55f480a62a95742d34154b36b79e006fa3d2e7c7a0427a8fdb3e5e4e7577593da30209aa40bbe17", 0x51, r4}, 0x68) 14:53:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="30002a0824004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104560200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:13 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2bb000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000924004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 295.283898][T22724] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 295.296525][T22723] FAT-fs (loop4): bogus number of reserved sectors [ 295.303083][T22723] FAT-fs (loop4): Can't find a valid FAT filesystem 14:53:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000a24004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:13 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2bc000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104580200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000b24004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000c24004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 295.427374][T22743] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:13 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) dup(r1) ioprio_set$pid(0x1, r2, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newnexthop={0x88, 0x68, 0x300, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x7, 0x0, 0x4}, [@NHA_GROUP={0x24, 0x2, [{0x2, 0x9a}, {0x1, 0x5}, {0x1, 0x7f}, {0x2, 0x91}]}, @NHA_BLACKHOLE={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}, @NHA_GROUP={0x34, 0x2, [{0x2, 0x1}, {0x2, 0x5}, {0x0, 0x80}, {0x2, 0x3}, {0x2, 0x6}, {0x0, 0x3f}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) ioprio_set$pid(0x1, 0x0, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYRESDEC], 0x200002e6) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:13 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r0, r1, 0x0, 0x80000001) 14:53:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000f24004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001046a0200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:13 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2bd000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) [ 295.656427][T22759] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 295.675202][T22762] FAT-fs (loop4): bogus number of reserved sectors [ 295.681764][T22762] FAT-fs (loop4): Can't find a valid FAT filesystem [ 295.693665][ C0] sd 0:0:1:0: tag#4007 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 14:53:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000001124004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:13 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2be000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:13 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000082a24004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 295.703690][ C0] sd 0:0:1:0: tag#4007 CDB: opcode=0xe5 (vendor) [ 295.710042][ C0] sd 0:0:1:0: tag#4007 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 295.719181][ C0] sd 0:0:1:0: tag#4007 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 295.728279][ C0] sd 0:0:1:0: tag#4007 CDB[20]: ba 14:53:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104c20200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) [ 295.809039][T22875] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104c80200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 295.863446][T22880] loop4: detected capacity change from 0 to 262160 14:53:13 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2bf000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 295.916963][T22882] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 295.936127][T22880] FAT-fs (loop4): bogus number of reserved sectors [ 295.942758][T22880] FAT-fs (loop4): Can't find a valid FAT filesystem 14:53:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r0, r1, 0x0, 0x80000001) 14:53:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000884724004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:14 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2c0000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 296.154441][T22893] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 296.175318][ C0] sd 0:0:1:0: tag#3989 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 296.185723][ C0] sd 0:0:1:0: tag#3989 CDB: opcode=0xe5 (vendor) [ 296.192079][ C0] sd 0:0:1:0: tag#3989 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 14:53:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000884824004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) [ 296.201125][ C0] sd 0:0:1:0: tag#3989 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 296.210180][ C0] sd 0:0:1:0: tag#3989 CDB[20]: ba [ 296.257658][T22901] loop4: detected capacity change from 0 to 262160 14:53:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000655824004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:14 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2c1000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 296.349457][T22901] FAT-fs (loop4): bogus number of reserved sectors [ 296.356060][T22901] FAT-fs (loop4): Can't find a valid FAT filesystem 14:53:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104500300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000006024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 296.472663][T23011] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000586524004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:14 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2c2000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './bus', [{}], 0xa, "acd22b3687af5722129583fcd65546f03882cd80eb141a53c1fce81fe5aeeb894b74f04ca879ef8d1647972af99de47795f66a8af694add43cc1b77dcdda6be38f8460b036cead0ae5a51ac8bd1341e1c8930c2cb82851b5a78cf67ac09f6d32130680ca63281bf369c832e84868ccd02af01f5325b3b5850a43f658ad0fd582a13961494fde9ec914a26a2331dd592d4c231da8fd89de9d0185986e7027cb132f6048fec589ef32f0d93384d085576b80c84dd91237c2852149cd4b6e583a76238d1a"}, 0xcd) sendfile(r0, r1, 0x0, 0x80000001) 14:53:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104520300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 296.642906][ C0] sd 0:0:1:0: tag#4022 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 296.652753][ C0] sd 0:0:1:0: tag#4022 CDB: opcode=0xe5 (vendor) [ 296.659084][ C0] sd 0:0:1:0: tag#4022 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 296.660801][T23024] loop4: detected capacity change from 0 to 262160 [ 296.668139][ C0] sd 0:0:1:0: tag#4022 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 296.684085][ C0] sd 0:0:1:0: tag#4022 CDB[20]: ba [ 296.685366][T23026] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000008124004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:14 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2c3000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000478824004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 296.771164][T23024] FAT-fs (loop4): bogus number of reserved sectors [ 296.777716][T23024] FAT-fs (loop4): Can't find a valid FAT filesystem 14:53:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104620300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000488824004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001047e0300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:14 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2c4000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 296.928103][T23141] loop4: detected capacity change from 0 to 262160 [ 296.942324][T23141] FAT-fs (loop4): bogus number of reserved sectors [ 296.948860][T23141] FAT-fs (loop4): Can't find a valid FAT filesystem 14:53:14 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000011004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:15 executing program 0: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_script(r3, &(0x7f0000000300)={'#! ', './bus', [{}], 0xa, "acd22b3687af5722129583fcd65546f03882cd80eb141a53c1fce81fe5aeeb894b74f04ca879ef8d1647972af99de47795f66a8af694add43cc1b77dcdda6be38f8460b036cead0ae5a51ac8bd1341e1c8930c2cb82851b5a78cf67ac09f6d32130680ca63281bf369c832e84868ccd02af01f5325b3b5850a43f658ad0fd582a13961494fde9ec914a26a2331dd592d4c231da8fd89de9d0185986e7027cb132f6048fec589ef32f0d93384d085576b80c84dd91237c2852149cd4b6e583a76238d1a"}, 0xcd) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)) sendfile(r0, r1, 0x0, 0x80000001) 14:53:15 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2c5000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104840300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000012004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 297.198969][ C0] sd 0:0:1:0: tag#4012 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 297.208868][ C0] sd 0:0:1:0: tag#4012 CDB: opcode=0xe5 (vendor) [ 297.215241][ C0] sd 0:0:1:0: tag#4012 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 297.224285][ C0] sd 0:0:1:0: tag#4012 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 297.233338][ C0] sd 0:0:1:0: tag#4012 CDB[20]: ba 14:53:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000013004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000014004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 297.318677][T23169] loop4: detected capacity change from 0 to 262160 14:53:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104e10300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 297.373214][T23169] FAT-fs (loop4): bogus number of reserved sectors [ 297.379933][T23169] FAT-fs (loop4): Can't find a valid FAT filesystem 14:53:15 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2c6000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000015004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104ea0300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:15 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2c7000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:15 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_script(r4, &(0x7f0000000300)={'#! ', './bus', [{}], 0xa, "acd22b3687af5722129583fcd65546f03882cd80eb141a53c1fce81fe5aeeb894b74f04ca879ef8d1647972af99de47795f66a8af694add43cc1b77dcdda6be38f8460b036cead0ae5a51ac8bd1341e1c8930c2cb82851b5a78cf67ac09f6d32130680ca63281bf369c832e84868ccd02af01f5325b3b5850a43f658ad0fd582a13961494fde9ec914a26a2331dd592d4c231da8fd89de9d0185986e7027cb132f6048fec589ef32f0d93384d085576b80c84dd91237c2852149cd4b6e583a76238d1a"}, 0xcd) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)) getdents64(r0, &(0x7f0000000400)=""/97, 0x61) sendfile(r1, r2, 0x0, 0x80000001) 14:53:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000016004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000018004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 297.619903][ C0] sd 0:0:1:0: tag#4005 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 297.629771][ C0] sd 0:0:1:0: tag#4005 CDB: opcode=0xe5 (vendor) [ 297.636113][ C0] sd 0:0:1:0: tag#4005 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 297.645180][ C0] sd 0:0:1:0: tag#4005 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 297.654225][ C0] sd 0:0:1:0: tag#4005 CDB[20]: ba 14:53:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104ec0300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:15 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2c8000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000019004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104ee0300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 297.801652][T23200] loop4: detected capacity change from 0 to 262160 [ 297.835522][T23200] FAT-fs (loop4): bogus number of reserved sectors [ 297.842111][T23200] FAT-fs (loop4): Can't find a valid FAT filesystem 14:53:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001a004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:15 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2c9000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104f20300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:15 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_script(r4, &(0x7f0000000300)={'#! ', './bus', [{}], 0xa, "acd22b3687af5722129583fcd65546f03882cd80eb141a53c1fce81fe5aeeb894b74f04ca879ef8d1647972af99de47795f66a8af694add43cc1b77dcdda6be38f8460b036cead0ae5a51ac8bd1341e1c8930c2cb82851b5a78cf67ac09f6d32130680ca63281bf369c832e84868ccd02af01f5325b3b5850a43f658ad0fd582a13961494fde9ec914a26a2331dd592d4c231da8fd89de9d0185986e7027cb132f6048fec589ef32f0d93384d085576b80c84dd91237c2852149cd4b6e583a76238d1a"}, 0xcd) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)) getdents64(r0, &(0x7f0000000400)=""/97, 0x61) sendfile(r1, r2, 0x0, 0x80000001) 14:53:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) [ 298.022029][T23320] loop4: detected capacity change from 0 to 262160 [ 298.068549][ C1] sd 0:0:1:0: tag#4000 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 298.078436][ C1] sd 0:0:1:0: tag#4000 CDB: opcode=0xe5 (vendor) [ 298.084373][T23320] FAT-fs (loop4): bogus number of reserved sectors [ 298.084794][ C1] sd 0:0:1:0: tag#4000 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 298.091282][T23320] FAT-fs (loop4): Can't find a valid FAT filesystem [ 298.100336][ C1] sd 0:0:1:0: tag#4000 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 14:53:15 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104f60300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 298.100356][ C1] sd 0:0:1:0: tag#4000 CDB[20]: ba 14:53:16 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2ca000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001e004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:16 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) r2 = dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {0x0, r5}, {r4}, {}, {0x0, r5}, {r4}, {}, {r4}, {}, {}, {}, {}, {}, {}, {r4}, {r3}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {r3}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r3}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4}, {}, {r3}, {}, {}, {}, {r3}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {r4}, {0x0, r5}, {}, {r3}, {}, {}, {}, {0x0, r5}, {r3, r5}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000005e0c0)={0x0}) r7 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x7f65, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, r7}, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000300)) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {r10}, {0x0, r11}, {}, {}, {r9}, {}, {}, {}, {r9, r11}, {}, {}, {0x0, r11}, {r10, r11}, {}, {r9, r11}, {}, {0x0, r11}, {r10}, {}, {0x0, r11}, {r10}, {}, {r10}, {}, {}, {}, {}, {}, {}, {r10}, {r9}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {r9}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {r10}, {0x0, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {r10}, {}, {r9}, {}, {}, {}, {r9}, {r9, r11}, {}, {0x0, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {0x0, r11}, {}, {}, {r10}, {0x0, r11}, {}, {r9}, {}, {}, {}, {0x0, r11}, {r9, r11}, {0x0, r11}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9, r11}, {}, {0x0, r11}, {}, {}, {0x0, r11}, {}, {r9}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {r10}, {0x0, r11}, {}, {}, {}, {}, {r9}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000054240)={{0x0, 0x9, 0x9, 0xfffffffffffffff8, 0x9, 0xb3d, 0x3, 0xfffffffb, 0x7fff, 0x7, 0x2, 0x1ff, 0x40, 0x10, 0x8}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {r14}, {0x0, r15}, {}, {}, {r13}, {}, {}, {}, {r13, r15}, {}, {}, {0x0, r15}, {r14, r15}, {}, {r13, r15}, {}, {0x0, r15}, {r14}, {}, {0x0, r15}, {r14}, {}, {r14}, {}, {}, {}, {}, {}, {}, {r14}, {r13}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {r13}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {0x0, r15}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {r14}, {0x0, r15}, {}, {}, {0x0, r15}, {0x0, r15}, {}, {}, {}, {}, {}, {0x0, r15}, {0x0, r15}, {0x0, r15}, {r13}, {0x0, r15}, {0x0, r15}, {r13, r15}, {r14}, {}, {r13}, {}, {}, {}, {r13}, {r13, r15}, {}, {0x0, r15}, {}, {}, {0x0, r15}, {0x0, r15}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {0x0, r15}, {}, {}, {r14}, {0x0, r15}, {}, {r13}, {}, {}, {}, {0x0, r15}, {r13, r15}, {0x0, r15}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13, r15}, {}, {0x0, r15}, {}, {}, {0x0, r15}, {}, {r13}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}, {}, {}, {}, {r14}, {0x0, r15}, {}, {}, {}, {}, {r13}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r15}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000054500)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {r12, r15}, {0x0, r16}], 0x1f, "92520449475167"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f000005e2c0)={{0x0, 0x0, 0x9, 0x0, 0x2, 0x5df, 0x9, 0x4, 0x3e067335, 0x6c, 0x80, 0x7, 0xefb2, 0x100, 0xfdf}, 0x8, [0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005e340)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {r6}, {0x0, r11}, {}, {r17}], 0x80, "b068573dba16e5"}) 14:53:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104fa0300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000020004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104fc0300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 298.269836][T23443] loop4: detected capacity change from 0 to 262160 [ 298.286605][T23443] FAT-fs (loop4): bogus number of reserved sectors [ 298.293251][T23443] FAT-fs (loop4): Can't find a valid FAT filesystem 14:53:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000021004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:16 executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_script(r4, &(0x7f0000000300)={'#! ', './bus', [{}], 0xa, "acd22b3687af5722129583fcd65546f03882cd80eb141a53c1fce81fe5aeeb894b74f04ca879ef8d1647972af99de47795f66a8af694add43cc1b77dcdda6be38f8460b036cead0ae5a51ac8bd1341e1c8930c2cb82851b5a78cf67ac09f6d32130680ca63281bf369c832e84868ccd02af01f5325b3b5850a43f658ad0fd582a13961494fde9ec914a26a2331dd592d4c231da8fd89de9d0185986e7027cb132f6048fec589ef32f0d93384d085576b80c84dd91237c2852149cd4b6e583a76238d1a"}, 0xcd) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)) getdents64(r0, &(0x7f0000000400)=""/97, 0x61) sendfile(r1, r2, 0x0, 0x80000001) 14:53:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104fe0300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:16 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2cb000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000022004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000224004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 298.471016][ C1] sd 0:0:1:0: tag#4023 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 298.480894][ C1] sd 0:0:1:0: tag#4023 CDB: opcode=0xe5 (vendor) [ 298.487235][ C1] sd 0:0:1:0: tag#4023 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 298.496281][ C1] sd 0:0:1:0: tag#4023 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 298.505840][ C1] sd 0:0:1:0: tag#4023 CDB[20]: ba 14:53:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:16 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) r2 = dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) write$P9_RWRITE(r2, &(0x7f0000000000)={0xb, 0x77, 0x1, 0x7}, 0xb) 14:53:16 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2cc000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000324004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000424004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001049f0500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 298.716014][T23487] loop4: detected capacity change from 0 to 262160 [ 298.752403][T23487] FAT-fs (loop4): bogus number of reserved sectors [ 298.758934][T23487] FAT-fs (loop4): Can't find a valid FAT filesystem 14:53:16 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (fail_nth: 1) 14:53:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000524004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:16 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2cd000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104c40500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000624004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 298.845244][T23495] FAULT_INJECTION: forcing a failure. [ 298.845244][T23495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.858349][T23495] CPU: 1 PID: 23495 Comm: syz-executor.0 Not tainted 5.16.0-rc2-syzkaller #0 [ 298.867164][T23495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.877214][T23495] Call Trace: [ 298.880487][T23495] [ 298.883436][T23495] dump_stack_lvl+0xd6/0x122 [ 298.888215][T23495] dump_stack+0x11/0x1b 14:53:16 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'ipvlan0\x00'}, 0x18) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x7f, 0x81, 0x0, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40, 0x7800, 0x8, 0x1f}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x20, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r10}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x6c, r5, 0x1, 0xffffffff, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}]}]}, 0x6c}}, 0x4) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) [ 298.892425][T23495] should_fail+0x23c/0x250 [ 298.896881][T23495] should_fail_usercopy+0x16/0x20 [ 298.901981][T23495] _copy_from_user+0x1c/0xd0 [ 298.906586][T23495] sendmsg_copy_msghdr+0x60/0x2a0 [ 298.911620][T23495] __sys_sendmsg+0x166/0x230 [ 298.916319][T23495] __x64_sys_sendmsg+0x42/0x50 [ 298.921121][T23495] do_syscall_64+0x44/0xd0 [ 298.925697][T23495] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 298.931673][T23495] RIP: 0033:0x7f4f20db4ae9 14:53:16 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2ce000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 298.936087][T23495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 298.955773][T23495] RSP: 002b:00007f4f1eb2b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.964186][T23495] RAX: ffffffffffffffda RBX: 00007f4f20ec7f60 RCX: 00007f4f20db4ae9 [ 298.972166][T23495] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 298.980131][T23495] RBP: 00007f4f1eb2b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 298.988086][T23495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 14:53:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000724004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:16 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (fail_nth: 2) [ 298.996114][T23495] R13: 00007ffe5d6665bf R14: 00007f4f1eb2b300 R15: 0000000000022000 [ 299.004087][T23495] [ 299.040897][T23510] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan0, syncid = 0, id = 0 [ 299.060485][T23513] FAULT_INJECTION: forcing a failure. [ 299.060485][T23513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.073570][T23513] CPU: 0 PID: 23513 Comm: syz-executor.0 Not tainted 5.16.0-rc2-syzkaller #0 [ 299.082358][T23513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.092414][T23513] Call Trace: [ 299.095693][T23513] [ 299.098673][T23513] dump_stack_lvl+0xd6/0x122 [ 299.103270][T23513] dump_stack+0x11/0x1b [ 299.107595][T23513] should_fail+0x23c/0x250 [ 299.112010][T23513] should_fail_usercopy+0x16/0x20 [ 299.117040][T23513] _copy_from_user+0x1c/0xd0 [ 299.121644][T23513] iovec_from_user+0xc4/0x2e0 [ 299.126325][T23513] __import_iovec+0x57/0x2d0 [ 299.130991][T23513] import_iovec+0xb8/0xd0 [ 299.135369][T23513] sendmsg_copy_msghdr+0x275/0x2a0 [ 299.140490][T23513] __sys_sendmsg+0x166/0x230 [ 299.145138][T23513] __x64_sys_sendmsg+0x42/0x50 [ 299.149950][T23513] do_syscall_64+0x44/0xd0 [ 299.154455][T23513] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 299.160369][T23513] RIP: 0033:0x7f4f20db4ae9 [ 299.164848][T23513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:53:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000824004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104c50500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 299.184457][T23513] RSP: 002b:00007f4f1eb2b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.192870][T23513] RAX: ffffffffffffffda RBX: 00007f4f20ec7f60 RCX: 00007f4f20db4ae9 [ 299.200845][T23513] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 299.208815][T23513] RBP: 00007f4f1eb2b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 299.216792][T23513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.224801][T23513] R13: 00007ffe5d6665bf R14: 00007f4f1eb2b300 R15: 0000000000022000 [ 299.232944][T23513] 14:53:17 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2cf000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:17 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (fail_nth: 3) 14:53:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000924004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 299.257304][T23521] loop4: detected capacity change from 0 to 262160 [ 299.318851][T23525] FAULT_INJECTION: forcing a failure. [ 299.318851][T23525] name failslab, interval 1, probability 0, space 0, times 0 [ 299.322547][T23521] FAT-fs (loop4): bogus number of reserved sectors [ 299.331715][T23525] CPU: 1 PID: 23525 Comm: syz-executor.0 Not tainted 5.16.0-rc2-syzkaller #0 [ 299.338196][T23521] FAT-fs (loop4): Can't find a valid FAT filesystem [ 299.346930][T23525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.346942][T23525] Call Trace: 14:53:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000600"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 299.346961][T23525] [ 299.346968][T23525] dump_stack_lvl+0xd6/0x122 [ 299.374416][T23525] dump_stack+0x11/0x1b [ 299.378573][T23525] should_fail+0x23c/0x250 [ 299.382988][T23525] __should_failslab+0x81/0x90 [ 299.387759][T23525] should_failslab+0x5/0x20 [ 299.392280][T23525] kmem_cache_alloc_node+0x61/0x2d0 [ 299.397485][T23525] ? __alloc_skb+0xf0/0x450 [ 299.402013][T23525] __alloc_skb+0xf0/0x450 [ 299.406344][T23525] netlink_sendmsg+0x4d5/0x7d0 [ 299.411145][T23525] ? netlink_getsockopt+0x720/0x720 14:53:17 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r3 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x7f65, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, r3}, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000300)) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000640)={0x8, 0x6, 0x4, 0x0, 0x5, [{0x40, 0xd6c, 0x9, '\x00', 0x500}, {0x6, 0x7, 0xc, '\x00', 0xd02}, {0x3, 0x1, 0x10000, '\x00', 0x2000}, {0x5, 0x9, 0x4, '\x00', 0x200}, {0x400000, 0x7, 0x0, '\x00', 0x80}]}) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {r6}, {0x0, r7}, {}, {}, {r5}, {}, {}, {}, {r5, r7}, {}, {}, {0x0, r7}, {r6, r7}, {}, {r5, r7}, {}, {0x0, r7}, {r6}, {}, {0x0, r7}, {r6}, {}, {r6}, {}, {}, {}, {}, {}, {}, {r6}, {r5}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {r5}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {0x0, r7}, {}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {r5}, {0x0, r7}, {0x0, r7}, {r5, r7}, {r6}, {}, {r5}, {}, {}, {}, {r5}, {r5, r7}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {0x0, r7}, {}, {}, {r6}, {0x0, r7}, {}, {r5}, {}, {}, {}, {0x0, r7}, {r5, r7}, {0x0, r7}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {r5}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {r6}, {0x0, r7}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000054240)={{0x0, 0x9, 0x9, 0xfffffffffffffff8, 0x9, 0xb3d, 0x3, 0xfffffffb, 0x7fff, 0x7, 0x2, 0x1ff, 0x40, 0x10, 0x8}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {r11}, {0x0, r12}, {}, {}, {r10}, {}, {}, {}, {r10, r12}, {}, {}, {0x0, r12}, {r11, r12}, {}, {r10, r12}, {}, {0x0, r12}, {r11}, {}, {0x0, r12}, {r11}, {}, {r11}, {}, {}, {}, {}, {}, {}, {r11}, {r10}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {r10}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {0x0, r12}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {r11}, {0x0, r12}, {}, {}, {0x0, r12}, {0x0, r12}, {}, {}, {}, {}, {}, {0x0, r12}, {0x0, r12}, {0x0, r12}, {r10}, {0x0, r12}, {0x0, r12}, {r10, r12}, {r11}, {}, {r10}, {}, {}, {}, {r10}, {r10, r12}, {}, {0x0, r12}, {}, {}, {0x0, r12}, {0x0, r12}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {0x0, r12}, {}, {}, {r11}, {0x0, r12}, {}, {r10}, {}, {}, {}, {0x0, r12}, {r10, r12}, {0x0, r12}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10, r12}, {}, {0x0, r12}, {}, {}, {0x0, r12}, {}, {r10}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {r11}, {0x0, r12}, {}, {}, {}, {}, {r10}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {r15}, {0x0, r16}, {}, {}, {r14}, {}, {}, {}, {r14, r16}, {}, {}, {0x0, r16}, {r15, r16}, {}, {r14, r16}, {}, {0x0, r16}, {r15}, {}, {0x0, r16}, {r15}, {}, {r15}, {}, {}, {}, {}, {}, {}, {r15}, {r14}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {r14}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {0x0, r16}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {r15}, {0x0, r16}, {}, {}, {0x0, r16}, {0x0, r16}, {}, {}, {}, {}, {}, {0x0, r16}, {0x0, r16}, {0x0, r16}, {r14}, {0x0, r16}, {0x0, r16}, {r14, r16}, {r15}, {}, {r14}, {}, {}, {}, {r14}, {r14, r16}, {}, {0x0, r16}, {}, {}, {0x0, r16}, {0x0, r16}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {0x0, r16}, {}, {}, {r15}, {0x0, r16}, {}, {r14}, {}, {}, {}, {0x0, r16}, {r14, r16}, {0x0, r16}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14, r16}, {}, {0x0, r16}, {}, {}, {0x0, r16}, {}, {r14}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {r15}, {0x0, r16}, {}, {}, {}, {}, {r14}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000054500)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {r9, r12}, {0x0, r13}], 0x1f, "92520449475167"}) io_uring_enter(r3, 0x2ff, 0x5, 0x0, 0x0, 0x0) close_range(r2, r3, 0x0) [ 299.416428][T23525] ____sys_sendmsg+0x39a/0x510 [ 299.421245][T23525] __sys_sendmsg+0x195/0x230 [ 299.425940][T23525] __x64_sys_sendmsg+0x42/0x50 [ 299.430868][T23525] do_syscall_64+0x44/0xd0 [ 299.435354][T23525] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 299.441361][T23525] RIP: 0033:0x7f4f20db4ae9 [ 299.445806][T23525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 299.465412][T23525] RSP: 002b:00007f4f1eb2b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.473892][T23525] RAX: ffffffffffffffda RBX: 00007f4f20ec7f60 RCX: 00007f4f20db4ae9 [ 299.481844][T23525] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 299.489945][T23525] RBP: 00007f4f1eb2b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 299.497972][T23525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.505973][T23525] R13: 00007ffe5d6665bf R14: 00007f4f1eb2b300 R15: 0000000000022000 [ 299.513966][T23525] 14:53:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000a24004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:17 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (fail_nth: 4) 14:53:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) [ 299.588243][T23637] FAULT_INJECTION: forcing a failure. [ 299.588243][T23637] name failslab, interval 1, probability 0, space 0, times 0 [ 299.600951][T23637] CPU: 1 PID: 23637 Comm: syz-executor.0 Not tainted 5.16.0-rc2-syzkaller #0 [ 299.609720][T23637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.619804][T23637] Call Trace: [ 299.620009][T23640] __nla_validate_parse: 25 callbacks suppressed [ 299.620020][T23640] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:17 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2d0000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 299.623102][T23637] [ 299.623111][T23637] dump_stack_lvl+0xd6/0x122 [ 299.635690][T23642] loop4: detected capacity change from 0 to 262160 [ 299.638529][T23637] dump_stack+0x11/0x1b [ 299.644461][T23642] FAT-fs (loop4): bogus number of reserved sectors [ 299.646023][T23637] should_fail+0x23c/0x250 [ 299.646046][T23637] __should_failslab+0x81/0x90 [ 299.652577][T23642] FAT-fs (loop4): Can't find a valid FAT filesystem [ 299.656673][T23637] should_failslab+0x5/0x20 [ 299.683552][T23637] kmem_cache_alloc_node_trace+0x61/0x310 [ 299.689312][T23637] ? __kmalloc_node_track_caller+0x30/0x40 [ 299.695125][T23637] __kmalloc_node_track_caller+0x30/0x40 [ 299.700803][T23637] ? netlink_sendmsg+0x4d5/0x7d0 [ 299.705800][T23637] __alloc_skb+0x19d/0x450 [ 299.710251][T23637] netlink_sendmsg+0x4d5/0x7d0 [ 299.715035][T23637] ? netlink_getsockopt+0x720/0x720 [ 299.720275][T23637] ____sys_sendmsg+0x39a/0x510 [ 299.725048][T23637] __sys_sendmsg+0x195/0x230 [ 299.729659][T23637] __x64_sys_sendmsg+0x42/0x50 [ 299.734424][T23637] do_syscall_64+0x44/0xd0 [ 299.738919][T23637] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 299.744821][T23637] RIP: 0033:0x7f4f20db4ae9 [ 299.749287][T23637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 299.768894][T23637] RSP: 002b:00007f4f1eb2b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.777305][T23637] RAX: ffffffffffffffda RBX: 00007f4f20ec7f60 RCX: 00007f4f20db4ae9 14:53:17 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) r2 = dup2(r0, r1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000040)='\x00', 0x0, r1) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000080)=@raw=[@exit, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x27b, 0x44, &(0x7f0000000100)=""/68, 0xe8598d0e78cc2f1c, 0x10, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000180)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xe, 0x5a, 0xc6}, 0x10, 0xffffffffffffffff}, 0x78) r4 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, @out_args}, './file0\x00'}) write$binfmt_misc(r5, &(0x7f0000000380)={'syz0', "8b6788917d1d3844e13a77767f1934dff92898f543a24ba705337ebc2b07a2d9f18c902cbebe8cf31cabf780dbe7f89cdc40ef24c2526308119054c350f91b6d65a8c1e7346e82ffb1ddc14c23a29abcb72f89ce411435647ea03e36fa004a3e8c86fa9e504ded59f8a081e8123567d445d21321d23461c4e9792a99931d99bd69d5d638ca2263369a41c3734466c51a7af813fe60924075bf9e33b300"}, 0xa1) syz_io_uring_setup(0x7f65, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, r4}, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000300)) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {r8}, {0x0, r9}, {}, {}, {r7}, {}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {r8, r9}, {}, {r7, r9}, {}, {0x0, r9}, {r8}, {}, {0x0, r9}, {r8}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r8}, {r7}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {r7}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {r8}, {0x0, r9}, {}, {}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r7}, {0x0, r9}, {0x0, r9}, {r7, r9}, {r8}, {}, {r7}, {}, {}, {}, {r7}, {r7, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {}, {r7}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {r7}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000054240)={{0x0, 0x9, 0x9, 0xfffffffffffffff8, 0x9, 0xb3d, 0x3, 0xfffffffb, 0x7fff, 0x7, 0x2, 0x1ff, 0x40, 0x10, 0x8}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {r12}, {0x0, r13}, {}, {}, {r11}, {}, {}, {}, {r11, r13}, {}, {}, {0x0, r13}, {r12, r13}, {}, {r11, r13}, {}, {0x0, r13}, {r12}, {}, {0x0, r13}, {r12}, {}, {r12}, {}, {}, {}, {}, {}, {}, {r12}, {r11}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {r11}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {r12}, {0x0, r13}, {}, {}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {r11}, {0x0, r13}, {0x0, r13}, {r11, r13}, {r12}, {}, {r11}, {}, {}, {}, {r11}, {r11, r13}, {}, {0x0, r13}, {}, {}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {0x0, r13}, {}, {}, {r12}, {0x0, r13}, {}, {r11}, {}, {}, {}, {0x0, r13}, {r11, r13}, {0x0, r13}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11, r13}, {}, {0x0, r13}, {}, {}, {0x0, r13}, {}, {r11}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {r12}, {0x0, r13}, {}, {}, {}, {}, {r11}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054500)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {r10, r13}, {0x0, r14}], 0x1f, "92520449475167"}) io_uring_enter(r4, 0x2ff, 0x5, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000280)='\x00', 0x0, r4) fcntl$setpipe(r3, 0x407, 0xc3) 14:53:17 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2d1000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000b24004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 299.785400][T23637] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 299.793426][T23637] RBP: 00007f4f1eb2b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 299.801500][T23637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.810137][T23637] R13: 00007ffe5d6665bf R14: 00007f4f1eb2b300 R15: 0000000000022000 [ 299.818112][T23637] 14:53:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400", 0xc}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000c24004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000900"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:17 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (fail_nth: 5) [ 299.916779][T23761] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 299.919655][T23763] loop4: detected capacity change from 0 to 262160 [ 299.940767][T23765] FAULT_INJECTION: forcing a failure. [ 299.940767][T23765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.954137][T23765] CPU: 0 PID: 23765 Comm: syz-executor.0 Not tainted 5.16.0-rc2-syzkaller #0 [ 299.962899][T23765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.972981][T23765] Call Trace: [ 299.976260][T23765] [ 299.979184][T23765] dump_stack_lvl+0xd6/0x122 [ 299.983770][T23765] dump_stack+0x11/0x1b [ 299.988045][T23765] should_fail+0x23c/0x250 [ 299.992519][T23765] should_fail_usercopy+0x16/0x20 [ 299.997564][T23765] _copy_from_iter+0x131/0x990 [ 300.002318][T23765] ? check_stack_object+0x61/0x70 [ 300.007337][T23765] ? __virt_addr_valid+0x15a/0x1a0 [ 300.012475][T23765] ? __check_object_size+0x253/0x310 [ 300.017782][T23765] netlink_sendmsg+0x58d/0x7d0 [ 300.022581][T23765] ? netlink_getsockopt+0x720/0x720 [ 300.027839][T23765] ____sys_sendmsg+0x39a/0x510 [ 300.032597][T23765] __sys_sendmsg+0x195/0x230 [ 300.037204][T23765] __x64_sys_sendmsg+0x42/0x50 [ 300.042013][T23765] do_syscall_64+0x44/0xd0 [ 300.046458][T23765] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 300.052341][T23765] RIP: 0033:0x7f4f20db4ae9 [ 300.056754][T23765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 300.076382][T23765] RSP: 002b:00007f4f1eb2b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.084791][T23765] RAX: ffffffffffffffda RBX: 00007f4f20ec7f60 RCX: 00007f4f20db4ae9 [ 300.092897][T23765] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 300.100871][T23765] RBP: 00007f4f1eb2b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 300.108826][T23765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 14:53:17 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000f24004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:18 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (fail_nth: 6) 14:53:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000001024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 300.116794][T23765] R13: 00007ffe5d6665bf R14: 00007f4f1eb2b300 R15: 0000000000022000 [ 300.124797][T23765] [ 300.135856][T23763] FAT-fs (loop4): bogus number of reserved sectors [ 300.142462][T23763] FAT-fs (loop4): Can't find a valid FAT filesystem 14:53:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000a00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:18 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2d2000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 300.183628][T23800] FAULT_INJECTION: forcing a failure. [ 300.183628][T23800] name failslab, interval 1, probability 0, space 0, times 0 [ 300.196298][T23800] CPU: 1 PID: 23800 Comm: syz-executor.0 Not tainted 5.16.0-rc2-syzkaller #0 [ 300.205058][T23800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.216474][T23800] Call Trace: [ 300.219750][T23800] [ 300.222737][T23800] dump_stack_lvl+0xd6/0x122 [ 300.227333][T23800] dump_stack+0x11/0x1b [ 300.231549][T23800] should_fail+0x23c/0x250 [ 300.235983][T23800] ? skb_clone+0x12c/0x1f0 [ 300.240451][T23800] __should_failslab+0x81/0x90 [ 300.245225][T23800] should_failslab+0x5/0x20 [ 300.249752][T23800] kmem_cache_alloc+0x4f/0x320 [ 300.254540][T23800] skb_clone+0x12c/0x1f0 [ 300.258794][T23800] netlink_deliver_tap+0x2da/0x510 [ 300.263982][T23800] netlink_unicast+0x5de/0x6c0 [ 300.266729][T23876] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 300.268763][T23800] netlink_sendmsg+0x6e1/0x7d0 [ 300.268792][T23800] ? netlink_getsockopt+0x720/0x720 [ 300.287962][T23800] ____sys_sendmsg+0x39a/0x510 [ 300.292724][T23800] __sys_sendmsg+0x195/0x230 [ 300.297317][T23800] __x64_sys_sendmsg+0x42/0x50 [ 300.302113][T23800] do_syscall_64+0x44/0xd0 [ 300.306510][T23800] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 300.312386][T23800] RIP: 0033:0x7f4f20db4ae9 [ 300.316871][T23800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 300.336470][T23800] RSP: 002b:00007f4f1eb2b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.344886][T23800] RAX: ffffffffffffffda RBX: 00007f4f20ec7f60 RCX: 00007f4f20db4ae9 [ 300.352887][T23800] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 300.360863][T23800] RBP: 00007f4f1eb2b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 300.368830][T23800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.376833][T23800] R13: 00007ffe5d6665bf R14: 00007f4f1eb2b300 R15: 0000000000022000 [ 300.384817][T23800] 14:53:18 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2d3000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240", 0x12}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000001124004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:18 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (fail_nth: 7) 14:53:18 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000100)=ANY=[], 0x200002e6) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r2) fcntl$setpipe(r0, 0x407, 0x7000000) 14:53:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104020a00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 300.685540][T23884] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 300.699352][T23890] loop4: detected capacity change from 0 to 262160 [ 300.708794][T23890] FAT-fs (loop4): invalid media value (0x00) [ 300.714829][T23890] FAT-fs (loop4): Can't find a valid FAT filesystem [ 300.725617][T23889] FAULT_INJECTION: forcing a failure. 14:53:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000006024004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 300.725617][T23889] name failslab, interval 1, probability 0, space 0, times 0 [ 300.738382][T23889] CPU: 1 PID: 23889 Comm: syz-executor.0 Not tainted 5.16.0-rc2-syzkaller #0 [ 300.747145][T23889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.757199][T23889] Call Trace: [ 300.760646][T23889] [ 300.763578][T23889] dump_stack_lvl+0xd6/0x122 [ 300.768259][T23889] dump_stack+0x11/0x1b [ 300.772421][T23889] should_fail+0x23c/0x250 [ 300.776844][T23889] __should_failslab+0x81/0x90 [ 300.781609][T23889] should_failslab+0x5/0x20 [ 300.786194][T23889] kmem_cache_alloc_node+0x61/0x2d0 [ 300.791441][T23889] ? __alloc_skb+0xf0/0x450 [ 300.792706][ C0] sd 0:0:1:0: tag#4015 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 300.796041][T23889] __alloc_skb+0xf0/0x450 [ 300.796071][T23889] qdisc_notify+0x5d/0x220 [ 300.805907][ C0] sd 0:0:1:0: tag#4015 CDB: opcode=0xe5 (vendor) [ 300.810163][T23889] tc_modify_qdisc+0x105c/0x10b0 [ 300.810190][T23889] ? qdisc_offload_graft_helper+0x190/0x190 14:53:18 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2d4000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 300.814582][ C0] sd 0:0:1:0: tag#4015 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 300.820888][T23889] rtnetlink_rcv_msg+0x745/0x7e0 [ 300.825823][ C0] sd 0:0:1:0: tag#4015 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 300.831682][T23889] ? ___cache_free+0x46/0x300 [ 300.840718][ C0] sd 0:0:1:0: tag#4015 CDB[20]: ba [ 300.855398][ C0] sd 0:0:1:0: tag#4016 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 300.859384][T23889] ? kmem_cache_free+0x65/0x110 [ 300.859410][T23889] ? __kfree_skb+0xfe/0x150 [ 300.864533][ C0] sd 0:0:1:0: tag#4016 CDB: opcode=0xe5 (vendor) [ 300.874309][T23889] ? consume_skb+0x48/0x160 [ 300.874334][T23889] ? nlmon_xmit+0x5f/0x70 [ 300.879192][ C0] sd 0:0:1:0: tag#4016 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 300.883683][T23889] ? __this_cpu_preempt_check+0x18/0x20 [ 300.883712][T23889] ? __local_bh_enable_ip+0x4d/0x70 [ 300.890048][ C0] sd 0:0:1:0: tag#4016 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 300.894492][T23889] ? local_bh_enable+0x1b/0x20 [ 300.894514][T23889] ? __dev_queue_xmit+0x597/0xf70 [ 300.898853][ C0] sd 0:0:1:0: tag#4016 CDB[20]: ba [ 300.908169][T23889] ? __skb_clone+0x2db/0x300 [ 300.947536][T23889] ? __rcu_read_unlock+0x5c/0x290 [ 300.952662][T23889] netlink_rcv_skb+0x14e/0x250 [ 300.957591][T23889] ? rtnetlink_bind+0x60/0x60 [ 300.962321][T23889] rtnetlink_rcv+0x18/0x20 [ 300.966778][T23889] netlink_unicast+0x5fc/0x6c0 [ 300.971596][T23889] netlink_sendmsg+0x6e1/0x7d0 [ 300.976376][T23889] ? netlink_getsockopt+0x720/0x720 [ 300.981593][T23889] ____sys_sendmsg+0x39a/0x510 [ 300.982433][ C0] sd 0:0:1:0: tag#4017 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 300.986390][T23889] __sys_sendmsg+0x195/0x230 [ 300.996230][ C0] sd 0:0:1:0: tag#4017 CDB: opcode=0xe5 (vendor) [ 301.000789][T23889] __x64_sys_sendmsg+0x42/0x50 [ 301.007112][ C0] sd 0:0:1:0: tag#4017 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 301.011840][T23889] do_syscall_64+0x44/0xd0 [ 301.011863][T23889] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 301.020891][ C0] sd 0:0:1:0: tag#4017 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 301.025275][T23889] RIP: 0033:0x7f4f20db4ae9 [ 301.031184][ C0] sd 0:0:1:0: tag#4017 CDB[20]: ba [ 301.040134][T23889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 301.040153][T23889] RSP: 002b:00007f4f1eb2b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.078192][T23889] RAX: ffffffffffffffda RBX: 00007f4f20ec7f60 RCX: 00007f4f20db4ae9 [ 301.086169][T23889] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 301.094167][T23889] RBP: 00007f4f1eb2b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 301.099591][ C0] sd 0:0:1:0: tag#4018 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 301.102224][T23889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.102239][T23889] R13: 00007ffe5d6665bf R14: 00007f4f1eb2b300 R15: 0000000000022000 [ 301.102256][T23889] [ 301.131117][ C0] sd 0:0:1:0: tag#4018 CDB: opcode=0xe5 (vendor) 14:53:19 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x1e9800, 0x0) write$P9_RWRITE(r2, &(0x7f0000000240)={0xb, 0x77, 0x1, 0x3ff}, 0xb) dup2(r0, r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000040)="d2ae732fc5c3fc3ecf5919c5efaf6733111f2d357b2261083b1fe1a1d64e83ba2590ba8b3059a41150c1c08b4571adb381c6737aa240906b38ce9c3c45cd4d42c9b4a3305567d6e8f33c6ca42a3edb298c4c2dc39e4cc8422eefb2462f6ec32af86a4473db48dc74cef7ec340b7152d4001a7412dce55bf9b4955eabad7aa394e2b8f9afc8786e6cd7b82a12c0a1020ca3bf041bc7d89cc99fc837faf2768473c4d6e305cf92b25745cd1df751daccdda7d909b231727eb8ec997d1f09fc76f87c5e5eaf760926a4f12efb40a3f7696785f11242cfdb15ff1b5cdc08d645c3f5b02761592d0d290f0c01d1d5", 0xec}, {&(0x7f0000000140)="189daac830d3ce922734853eea35149173d3f5e533a1716c990b5774811d0a207b4133fb91d85ec0af082d0f369cd2a0f618c874b0b124d0cf107e85afe2a6ddd3bfb7e6b7cf96448f4cfd5f786f074008ae3d126b94f776ce1bf67e96", 0x5d}], 0x2) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:19 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2d5000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 301.137453][ C0] sd 0:0:1:0: tag#4018 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 301.146528][ C0] sd 0:0:1:0: tag#4018 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 301.155583][ C0] sd 0:0:1:0: tag#4018 CDB[20]: ba 14:53:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240", 0x12}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:19 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (fail_nth: 8) 14:53:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000077004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 301.213356][T24009] FAULT_INJECTION: forcing a failure. [ 301.213356][T24009] name failslab, interval 1, probability 0, space 0, times 0 [ 301.226201][T24009] CPU: 0 PID: 24009 Comm: syz-executor.0 Not tainted 5.16.0-rc2-syzkaller #0 [ 301.233362][T24012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=119 sclass=netlink_route_socket pid=24012 comm=syz-executor.1 [ 301.235064][T24009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.235078][T24009] Call Trace: [ 301.235085][T24009] [ 301.235091][T24009] dump_stack_lvl+0xd6/0x122 [ 301.257376][T24013] loop4: detected capacity change from 0 to 262160 [ 301.258034][T24009] dump_stack+0x11/0x1b [ 301.279466][T24009] should_fail+0x23c/0x250 [ 301.283879][T24009] __should_failslab+0x81/0x90 [ 301.288776][T24009] should_failslab+0x5/0x20 [ 301.293273][T24009] kmem_cache_alloc_node_trace+0x61/0x310 [ 301.299025][T24009] ? __kmalloc_node_track_caller+0x30/0x40 [ 301.304842][T24009] __kmalloc_node_track_caller+0x30/0x40 [ 301.310515][T24009] ? qdisc_notify+0x5d/0x220 [ 301.315087][T24009] __alloc_skb+0x19d/0x450 [ 301.319496][T24009] qdisc_notify+0x5d/0x220 [ 301.323988][T24009] tc_modify_qdisc+0x105c/0x10b0 [ 301.329007][T24009] ? qdisc_offload_graft_helper+0x190/0x190 [ 301.334955][T24009] rtnetlink_rcv_msg+0x745/0x7e0 [ 301.339895][T24009] ? ___cache_free+0x46/0x300 [ 301.344622][T24009] ? kmem_cache_free+0x65/0x110 [ 301.349459][T24009] ? __kfree_skb+0xfe/0x150 [ 301.353952][T24009] ? consume_skb+0x48/0x160 [ 301.358463][T24009] ? nlmon_xmit+0x5f/0x70 [ 301.362789][T24009] ? __this_cpu_preempt_check+0x18/0x20 [ 301.368399][T24009] ? __local_bh_enable_ip+0x4d/0x70 [ 301.373639][T24009] ? local_bh_enable+0x1b/0x20 [ 301.378394][T24009] ? __dev_queue_xmit+0x597/0xf70 [ 301.383418][T24009] ? __skb_clone+0x2db/0x300 [ 301.387995][T24009] ? __rcu_read_unlock+0x5c/0x290 [ 301.393099][T24009] netlink_rcv_skb+0x14e/0x250 [ 301.397869][T24009] ? rtnetlink_bind+0x60/0x60 [ 301.402549][T24009] rtnetlink_rcv+0x18/0x20 [ 301.406994][T24009] netlink_unicast+0x5fc/0x6c0 [ 301.411807][T24009] netlink_sendmsg+0x6e1/0x7d0 [ 301.416678][T24009] ? netlink_getsockopt+0x720/0x720 [ 301.421937][T24009] ____sys_sendmsg+0x39a/0x510 [ 301.426709][T24009] __sys_sendmsg+0x195/0x230 [ 301.431295][T24009] __x64_sys_sendmsg+0x42/0x50 [ 301.436105][T24009] do_syscall_64+0x44/0xd0 [ 301.440682][T24009] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 301.446585][T24009] RIP: 0033:0x7f4f20db4ae9 [ 301.450998][T24009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 301.470682][T24009] RSP: 002b:00007f4f1eb2b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.479082][T24009] RAX: ffffffffffffffda RBX: 00007f4f20ec7f60 RCX: 00007f4f20db4ae9 [ 301.487037][T24009] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 301.495077][T24009] RBP: 00007f4f1eb2b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 301.503032][T24009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 14:53:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000b00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 301.511007][T24009] R13: 00007ffe5d6665bf R14: 00007f4f1eb2b300 R15: 0000000000022000 [ 301.519026][T24009] [ 301.531665][T24017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=119 sclass=netlink_route_socket pid=24017 comm=syz-executor.1 [ 301.544672][T24013] FAT-fs (loop4): invalid media value (0x00) [ 301.550679][T24049] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:19 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (fail_nth: 9) [ 301.559927][T24013] FAT-fs (loop4): Can't find a valid FAT filesystem [ 301.597829][T24099] FAULT_INJECTION: forcing a failure. [ 301.597829][T24099] name failslab, interval 1, probability 0, space 0, times 0 [ 301.610608][T24099] CPU: 0 PID: 24099 Comm: syz-executor.0 Not tainted 5.16.0-rc2-syzkaller #0 [ 301.619471][T24099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.629563][T24099] Call Trace: [ 301.632837][T24099] [ 301.635763][T24099] dump_stack_lvl+0xd6/0x122 [ 301.640365][T24099] dump_stack+0x11/0x1b [ 301.644563][T24099] should_fail+0x23c/0x250 [ 301.649041][T24099] ? gnet_stats_copy_app+0x3d/0x160 [ 301.654311][T24099] __should_failslab+0x81/0x90 [ 301.659094][T24099] should_failslab+0x5/0x20 [ 301.663665][T24099] __kmalloc_track_caller+0x6d/0x370 [ 301.668962][T24099] kmemdup+0x21/0x50 [ 301.672860][T24099] gnet_stats_copy_app+0x3d/0x160 [ 301.677890][T24099] fq_dump_stats+0x2ea/0x390 [ 301.682523][T24099] tc_fill_qdisc+0x69a/0x8d0 [ 301.687144][T24099] qdisc_notify+0x184/0x220 [ 301.691633][T24099] tc_modify_qdisc+0x105c/0x10b0 [ 301.696551][T24099] ? __perf_event_task_sched_in+0x898/0x8d0 [ 301.702430][T24099] ? _raw_spin_unlock+0x2e/0x50 [ 301.707271][T24099] ? qdisc_offload_graft_helper+0x190/0x190 [ 301.713162][T24099] rtnetlink_rcv_msg+0x745/0x7e0 [ 301.718088][T24099] ? ___cache_free+0x46/0x300 [ 301.722788][T24099] ? __rcu_read_unlock+0x5c/0x290 [ 301.727873][T24099] ? kmem_cache_free+0x65/0x110 [ 301.732709][T24099] ? __kfree_skb+0xfe/0x150 [ 301.737197][T24099] ? consume_skb+0x48/0x160 [ 301.741767][T24099] ? nlmon_xmit+0x5f/0x70 [ 301.746090][T24099] ? __this_cpu_preempt_check+0x18/0x20 [ 301.751629][T24099] ? __local_bh_enable_ip+0x4d/0x70 [ 301.756814][T24099] ? local_bh_enable+0x1b/0x20 [ 301.761598][T24099] ? __dev_queue_xmit+0x597/0xf70 [ 301.766606][T24099] ? __skb_clone+0x2db/0x300 [ 301.771199][T24099] ? __rcu_read_unlock+0x5c/0x290 [ 301.776217][T24099] netlink_rcv_skb+0x14e/0x250 [ 301.780969][T24099] ? rtnetlink_bind+0x60/0x60 [ 301.785679][T24099] rtnetlink_rcv+0x18/0x20 [ 301.790096][T24099] netlink_unicast+0x5fc/0x6c0 [ 301.794853][T24099] netlink_sendmsg+0x6e1/0x7d0 [ 301.799637][T24099] ? netlink_getsockopt+0x720/0x720 [ 301.804833][T24099] ____sys_sendmsg+0x39a/0x510 [ 301.809614][T24099] __sys_sendmsg+0x195/0x230 [ 301.814219][T24099] __x64_sys_sendmsg+0x42/0x50 [ 301.818973][T24099] do_syscall_64+0x44/0xd0 [ 301.823383][T24099] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 301.829265][T24099] RIP: 0033:0x7f4f20db4ae9 [ 301.833664][T24099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 301.853288][T24099] RSP: 002b:00007f4f1eb2b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.861763][T24099] RAX: ffffffffffffffda RBX: 00007f4f20ec7f60 RCX: 00007f4f20db4ae9 [ 301.869848][T24099] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 301.877882][T24099] RBP: 00007f4f1eb2b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 301.885837][T24099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 14:53:19 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2d6000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:19 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000c0004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240", 0x12}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:19 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newrule={0xb8, 0x20, 0x800, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x30, 0x7, 0x9, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x3ff}, @FRA_SRC={0x14, 0x2, @remote}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FRA_DST={0x14, 0x1, @loopback}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FRA_DST={0x14, 0x1, @mcast2}, @FRA_SRC={0x14, 0x2, @local}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x8001}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000040}, 0x890) write$P9_RGETLOCK(r1, &(0x7f0000000080)=ANY=[], 0x200002e6) dup2(r0, r1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:19 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (fail_nth: 10) [ 301.893925][T24099] R13: 00007ffe5d6665bf R14: 00007f4f1eb2b300 R15: 0000000000022000 [ 301.901916][T24099] [ 301.912660][T24049] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 301.928464][T24127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=192 sclass=netlink_route_socket pid=24127 comm=syz-executor.1 14:53:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 301.967069][T24129] loop4: detected capacity change from 0 to 262160 [ 301.981135][T24129] FAT-fs (loop4): invalid media value (0x00) [ 301.987179][T24129] FAT-fs (loop4): Can't find a valid FAT filesystem [ 301.990606][T24134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=192 sclass=netlink_route_socket pid=24134 comm=syz-executor.1 14:53:19 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2d7000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 302.019537][T24138] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 302.048638][T24136] FAULT_INJECTION: forcing a failure. [ 302.048638][T24136] name failslab, interval 1, probability 0, space 0, times 0 14:53:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000ec0004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 302.061363][T24136] CPU: 1 PID: 24136 Comm: syz-executor.0 Not tainted 5.16.0-rc2-syzkaller #0 [ 302.070215][T24136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.080267][T24136] Call Trace: [ 302.083539][T24136] [ 302.086489][T24136] dump_stack_lvl+0xd6/0x122 [ 302.091207][T24136] dump_stack+0x11/0x1b [ 302.095364][T24136] should_fail+0x23c/0x250 [ 302.099807][T24136] __should_failslab+0x81/0x90 [ 302.104588][T24136] should_failslab+0x5/0x20 [ 302.109177][T24136] kmem_cache_alloc_node_trace+0x61/0x310 [ 302.114972][T24136] ? __kmalloc_node_track_caller+0x30/0x40 [ 302.120803][T24136] __kmalloc_node_track_caller+0x30/0x40 [ 302.126535][T24136] ? netlink_trim+0x112/0x140 [ 302.131235][T24136] pskb_expand_head+0xca/0x8b0 [ 302.136002][T24136] ? ___cache_free+0x46/0x300 [ 302.140677][T24136] netlink_trim+0x112/0x140 [ 302.145227][T24136] netlink_broadcast+0x42/0xad0 [ 302.150177][T24136] nlmsg_notify+0xc7/0x170 [ 302.154586][T24136] rtnetlink_send+0x46/0x50 [ 302.159129][T24136] qdisc_notify+0x1ea/0x220 [ 302.163627][T24136] tc_modify_qdisc+0x105c/0x10b0 14:53:20 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r1, r2) fcntl$setpipe(r2, 0x407, 0x7000000) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000054300)) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @window={0x3, 0x0, 0x8}, @window={0x3, 0x81, 0x3}], 0x3) [ 302.168597][T24136] ? qdisc_offload_graft_helper+0x190/0x190 [ 302.174604][T24136] rtnetlink_rcv_msg+0x745/0x7e0 [ 302.179577][T24136] ? ___cache_free+0x46/0x300 [ 302.184398][T24136] ? kmem_cache_free+0x65/0x110 [ 302.189307][T24136] ? __kfree_skb+0xfe/0x150 [ 302.193813][T24136] ? consume_skb+0x48/0x160 [ 302.198334][T24136] ? nlmon_xmit+0x5f/0x70 [ 302.202727][T24136] ? __this_cpu_preempt_check+0x18/0x20 [ 302.208294][T24136] ? __local_bh_enable_ip+0x4d/0x70 [ 302.213492][T24136] ? local_bh_enable+0x1b/0x20 14:53:20 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2d8000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 302.218316][T24136] ? __dev_queue_xmit+0x597/0xf70 [ 302.223351][T24136] ? __skb_clone+0x2db/0x300 [ 302.228035][T24136] ? __rcu_read_unlock+0x5c/0x290 [ 302.233147][T24136] netlink_rcv_skb+0x14e/0x250 [ 302.237964][T24136] ? rtnetlink_bind+0x60/0x60 [ 302.242646][T24136] rtnetlink_rcv+0x18/0x20 [ 302.247147][T24136] netlink_unicast+0x5fc/0x6c0 [ 302.251957][T24136] netlink_sendmsg+0x6e1/0x7d0 [ 302.256808][T24136] ? netlink_getsockopt+0x720/0x720 [ 302.262093][T24136] ____sys_sendmsg+0x39a/0x510 [ 302.266888][T24136] __sys_sendmsg+0x195/0x230 [ 302.271485][T24136] __x64_sys_sendmsg+0x42/0x50 [ 302.276284][T24136] do_syscall_64+0x44/0xd0 [ 302.280699][T24136] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 302.286636][T24136] RIP: 0033:0x7f4f20db4ae9 [ 302.291045][T24136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 302.310675][T24136] RSP: 002b:00007f4f1eb2b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 14:53:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 302.319174][T24136] RAX: ffffffffffffffda RBX: 00007f4f20ec7f60 RCX: 00007f4f20db4ae9 [ 302.327141][T24136] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 302.335117][T24136] RBP: 00007f4f1eb2b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 302.343249][T24136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 302.351220][T24136] R13: 00007ffe5d6665bf R14: 00007f4f1eb2b300 R15: 0000000000022000 [ 302.359196][T24136] 14:53:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (fail_nth: 11) 14:53:20 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2d9000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 302.427945][T24156] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 302.438249][T24157] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 302.458333][T24159] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 302.491382][T24163] FAULT_INJECTION: forcing a failure. [ 302.491382][T24163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.504508][T24163] CPU: 0 PID: 24163 Comm: syz-executor.0 Not tainted 5.16.0-rc2-syzkaller #0 [ 302.513277][T24163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 302.523428][T24163] Call Trace: [ 302.526706][T24163] [ 302.529633][T24163] dump_stack_lvl+0xd6/0x122 [ 302.534362][T24163] dump_stack+0x11/0x1b [ 302.538524][T24163] should_fail+0x23c/0x250 [ 302.543067][T24163] should_fail_usercopy+0x16/0x20 [ 302.548091][T24163] _copy_to_user+0x1c/0x90 [ 302.552521][T24163] simple_read_from_buffer+0xab/0x120 [ 302.557898][T24163] proc_fail_nth_read+0x10d/0x150 [ 302.562924][T24163] ? proc_fault_inject_write+0x230/0x230 [ 302.568616][T24163] vfs_read+0x1e6/0x750 [ 302.572864][T24163] ? __fget_light+0x219/0x260 [ 302.577694][T24163] ksys_read+0xd9/0x190 [ 302.581970][T24163] __x64_sys_read+0x3e/0x50 [ 302.586543][T24163] do_syscall_64+0x44/0xd0 [ 302.590960][T24163] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 302.596857][T24163] RIP: 0033:0x7f4f20d6769c [ 302.601370][T24163] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 302.621237][T24163] RSP: 002b:00007f4f1eb2b170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 302.629649][T24163] RAX: ffffffffffffffda RBX: 0000000000000024 RCX: 00007f4f20d6769c 14:53:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:20 executing program 2: r0 = getpgrp(0x0) ioprio_set$pid(0x1, r0, 0x0) r1 = getpgrp(0x0) ioprio_set$pid(0x1, r1, 0x0) r2 = getpgrp(0x0) ioprio_set$pid(0x1, r2, 0x0) r3 = getpgrp(0x0) ioprio_set$pid(0x1, r3, 0x0) r4 = getpgrp(0x0) ioprio_set$pid(0x1, r4, 0x0) r5 = getpgrp(0x0) r6 = getpgrp(0x0) ioprio_set$pid(0x0, r6, 0x0) clone3(&(0x7f00000004c0)={0x200, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), {0x3}, &(0x7f0000000280)=""/245, 0xf5, &(0x7f0000000380)=""/196, &(0x7f0000000480)=[0x0, r6], 0x2}, 0x58) ioprio_set$pid(0x1, r5, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESDEC, @ANYBLOB="d04f03ee18b01833ba55f9054cd50b9d3498b5b49c491df5a3c056642f49b026aeffff7f0000b20a67bb05ccceb35ac5c5dfb6941e4ba5456d9b0e896acec1fc6f6db26c5c4256a6af517ab52c9adac2936a02305d72d51ec5b8445152349851dd03a554d9a2e88b39321b6d193a498458db4dbc7357e75506ed5269032d531f771217b9edc8c0a9490b7748d9794ae5ec2af3620159088db103579d8f942f6c743ddb24e4cb88ab6c5a3658aa77f6de37dc7967451c08e2fa8847e71db8f1f32d", @ANYRESDEC=r5, @ANYRES64, @ANYRES64=r3, @ANYRESDEC=r2], 0x200002e6) dup2(0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) 14:53:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000011004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:20 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2da000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 302.638054][T24163] RDX: 000000000000000f RSI: 00007f4f1eb2b1e0 RDI: 0000000000000005 [ 302.646029][T24163] RBP: 00007f4f1eb2b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 302.653996][T24163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 302.661999][T24163] R13: 00007ffe5d6665bf R14: 00007f4f1eb2b300 R15: 0000000000022000 [ 302.669972][T24163] 14:53:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000012004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000e00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 302.699861][T24174] loop4: detected capacity change from 0 to 262160 [ 302.719427][T24174] FAT-fs (loop4): invalid media value (0x00) [ 302.725554][T24174] FAT-fs (loop4): Can't find a valid FAT filesystem 14:53:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000013004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:20 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/suspend_stats', 0x40080, 0x12) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)={'syz1', "f8c5dbd593beec3308c007b8c67dcca2bd7e6159afe0909c65caa0d7f4974119c915182dd07cc6406920865f440c340c3ced9eb856983af84f152b6d58155e6e4f4e301dfa1c6e1bcce40e21d20edcd14172"}, 0x56) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:20 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2db000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000f00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000014004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000015004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 302.885064][T24302] loop4: detected capacity change from 0 to 262160 [ 302.915887][T24302] FAT-fs (loop4): invalid media value (0x00) [ 302.921958][T24302] FAT-fs (loop4): Can't find a valid FAT filesystem 14:53:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104001100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:20 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2dc000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:20 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000016004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000018004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104001200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080", 0x15}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:21 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2dd000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:21 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000040)="920a7f1349c86952d6766b32b655bbfc0159932fa0dea6ebd75168ba", 0x1c, r1}, 0x68) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffc, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f0000000800)}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x80, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000300)) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000054300)) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)={0x6c, 0xb, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x81}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000840}, 0x20008000) dup2(r0, r1) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000054300)) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f0000000100)="aa8b9fb0f8dcb845c0424c55a8a6e50cc48b3a6dcec1669d4df7adb1492398f2770338d67853748b3831656de01cabc62103a2e8dcc896cde561934326eef22d73ea0f4b5fb43399e587542efc236cbb66a49d864c092cf9a332f409f2ef31d0c734a2316912e82c6f487f", 0x6b, 0x0, 0x0, 0x1, r4}]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {r6}, {0x0, r7}, {}, {}, {r5}, {}, {}, {}, {r5, r7}, {}, {}, {0x0, r7}, {r6, r7}, {}, {r5, r7}, {}, {0x0, r7}, {r6}, {}, {0x0, r7}, {r6}, {}, {r6}, {}, {}, {}, {}, {}, {}, {r6}, {r5}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {r5}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {0x0, r7}, {}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {r5}, {0x0, r7}, {0x0, r7}, {r5, r7}, {r6}, {}, {r5}, {}, {}, {}, {r5}, {r5, r7}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {0x0, r7}, {}, {}, {r6}, {0x0, r7}, {}, {r5}, {}, {}, {}, {0x0, r7}, {r5, r7}, {0x0, r7}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {r5}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {r6}, {0x0, r7}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054500)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {0x0, r8}], 0x1f, "92520449475167"}) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x5, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000540)='mounts\x00', 0x0, 0xffffffffffffffff) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000019004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104021e00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 303.245314][ C0] sd 0:0:1:0: tag#3989 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 303.255216][ C0] sd 0:0:1:0: tag#3989 CDB: opcode=0xe5 (vendor) [ 303.259317][T24347] loop4: detected capacity change from 0 to 262160 [ 303.261601][ C0] sd 0:0:1:0: tag#3989 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 303.261621][ C0] sd 0:0:1:0: tag#3989 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 303.261649][ C0] sd 0:0:1:0: tag#3989 CDB[20]: ba 14:53:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x8, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:21 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2de000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001a004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 303.271579][T24347] FAT-fs (loop4): invalid media value (0x00) [ 303.297403][T24347] FAT-fs (loop4): Can't find a valid FAT filesystem 14:53:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104002000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x9, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 303.503611][T24475] loop4: detected capacity change from 0 to 262160 [ 303.512927][T24475] FAT-fs (loop4): bogus number of FAT sectors [ 303.518999][T24475] FAT-fs (loop4): Can't find a valid FAT filesystem [ 303.526890][ C1] sd 0:0:1:0: tag#3990 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 303.536741][ C1] sd 0:0:1:0: tag#3990 CDB: opcode=0xe5 (vendor) [ 303.543094][ C1] sd 0:0:1:0: tag#3990 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c 14:53:21 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2df000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104002100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:21 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x7f65, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, r2}, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000300)) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {r4}, {}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {r5, r6}, {}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {}, {r5}, {}, {}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0}, {}, {r5}, {}, {}, {r4}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r5}, {}, {r4}, {}, {}, {}, {r4}, {r4, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r4}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000054240)={{0x0, 0x9, 0x9, 0xfffffffffffffff8, 0x9, 0xb3d, 0x3, 0xfffffffb, 0x7fff, 0x7, 0x2, 0x1ff, 0x40, 0x10, 0x8}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {r10}, {0x0, r11}, {}, {}, {r9}, {}, {}, {}, {r9, r11}, {}, {}, {0x0, r11}, {r10, r11}, {}, {r9, r11}, {}, {0x0, r11}, {r10}, {}, {0x0, r11}, {r10}, {}, {r10}, {}, {}, {}, {}, {}, {}, {r10}, {r9}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {r9}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {r10}, {0x0, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {r10}, {}, {r9}, {}, {}, {}, {r9}, {r9, r11}, {}, {0x0, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {0x0, r11}, {}, {}, {r10}, {0x0, r11}, {}, {r9}, {}, {}, {}, {0x0, r11}, {r9, r11}, {0x0, r11}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9, r11}, {}, {0x0, r11}, {}, {}, {0x0, r11}, {}, {r9}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {r10}, {0x0, r11}, {}, {}, {}, {}, {r9}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000054500)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r8, r11}, {0x0, r12}], 0x1f, "92520449475167"}) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) fcntl$lock(r2, 0x24, &(0x7f0000000140)={0x2, 0x1, 0xabfd, 0x5, r13}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) pipe(&(0x7f0000000200)={0xffffffffffffffff}) write$P9_RGETLOCK(r14, &(0x7f0000000340)={0x25, 0x37, 0x1, {0x1, 0x9, 0x5, r13, 0x7, 'pipefs\x00'}}, 0x25) fcntl$setpipe(r1, 0x407, 0x7000000) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x20060c0, 0x0) [ 303.552352][ C1] sd 0:0:1:0: tag#3990 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 303.561413][ C1] sd 0:0:1:0: tag#3990 CDB[20]: ba 14:53:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001e004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000021004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 303.607475][ T24] audit: type=1400 audit(1638024801.506:525): avc: denied { lock } for pid=24487 comm="syz-executor.2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=74352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 14:53:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104002500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000022004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:21 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2e0000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000077004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104002c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x60, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 303.881969][T24512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=119 sclass=netlink_route_socket pid=24512 comm=syz-executor.1 [ 303.914659][T24519] loop4: detected capacity change from 0 to 262160 14:53:21 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x10001}}, './file0\x00'}) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000080)) 14:53:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104012c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 303.928632][T24522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=119 sclass=netlink_route_socket pid=24522 comm=syz-executor.1 [ 303.967337][T24519] FAT-fs (loop4): bogus number of FAT sectors [ 303.973450][T24519] FAT-fs (loop4): Can't find a valid FAT filesystem 14:53:21 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x500, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:21 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2e1000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:21 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000c0004fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f8", 0x16}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104002f00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 304.060488][T24638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=192 sclass=netlink_route_socket pid=24638 comm=syz-executor.1 [ 304.080816][T24640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=192 sclass=netlink_route_socket pid=24640 comm=syz-executor.1 14:53:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x5c4, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000c00e4fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 304.114102][T24645] loop4: detected capacity change from 0 to 262160 14:53:22 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2e2000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x600, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 304.160616][T24645] FAT-fs (loop4): bogus number of FAT sectors [ 304.166783][T24645] FAT-fs (loop4): Can't find a valid FAT filesystem [ 304.192902][T24652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3776 sclass=netlink_route_socket pid=24652 comm=syz-executor.1 [ 304.218312][T24668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3776 sclass=netlink_route_socket pid=24668 comm=syz-executor.1 14:53:22 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x26700, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0xfaf6, 0x1, 0x8001, 0x9}, 0x14) 14:53:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104023000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024024fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:22 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2e3000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x900, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024034fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xa00, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 304.348888][T24773] loop4: detected capacity change from 0 to 262160 14:53:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104003a00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024044fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024054fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:22 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104003f00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:22 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2e4000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xe75, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024064fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xf00, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024074fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 304.626460][T24803] loop4: detected capacity change from 0 to 262160 14:53:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104004000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x4788, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024084fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:22 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2e5000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 304.747544][T24821] __nla_validate_parse: 22 callbacks suppressed [ 304.747557][T24821] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x4888, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024094fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:22 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2e6000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104884700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:22 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) r2 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xa9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x0) r4 = syz_open_procfs$userns(0x0, &(0x7f0000000240)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000b80)={{r4}, r3, 0x0, @unused=[0xc986, 0x38], @devid=r5}) r6 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xa9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r6, 0x0) r8 = syz_open_procfs$userns(0x0, &(0x7f0000000240)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000b80)={{r8}, r7, 0x0, @unused=[0xc986, 0x38], @devid=r9}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000040)={0x8, 0x6, {0x8, @struct={0x5}, r5, 0x2, 0x9, 0x9, 0xfffffffffffffe00, 0x63eb, 0x39, @usage=0x1000, 0x3f, 0x5, [0x2, 0x2, 0x6, 0x3fc000000, 0x0, 0xef0b]}, {0x7f, @usage=0x2, r9, 0xffff, 0x5, 0x8000, 0x5, 0x0, 0x14, @usage=0x3, 0x3, 0x4, [0x6, 0xbb09, 0x1ff, 0x2, 0x0, 0x3f]}, {0xffff, @struct={0xfe4, 0xff}, 0x0, 0x9, 0xfffffffffffffff9, 0x0, 0x5, 0x81, 0x80, @struct={0x0, 0x8000}, 0x80000001, 0x4, [0x2, 0x0, 0x3f, 0x2, 0x7fff, 0x848]}, {0x7bc0, 0x5b8, 0x3}}) 14:53:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x5865, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:22 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000240a4fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 304.941468][T24841] loop4: detected capacity change from 0 to 262160 [ 304.953738][T24842] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x6000, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104004800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:22 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2e7000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000240b4fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x6558, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 305.066316][T24860] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x750e, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000240c4fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104884800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x8100, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:23 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2e8000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:23 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000100)=ANY=[], 0x200002e6) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="17bd47ab855b19f17360cdbb577c962c6e51b4023fd975213f3fd873cfbadb3d3868b35afe27df541c0099188da8d81990ea13dd80ea32607ddb217e50238358e1f7e1e01ce25f137b294c265c54c2866af77d7c21687c4587a21d002be7348cd7c72c9600848252cbcfd6e28d6371ea1b1ba2bfe5621a86ccf579785d", 0x7d}, {&(0x7f0000000140)="6ede1a2d8c8a51b94f674305a8550a5bbb3ca6112bde1529bc409f1117d7fa8a3452eaddddff06cfbb22725b9315fe5ecbd8b3b70c41fd0121e24d8537e5ef7ef060e0b0", 0x44}], 0x2, 0xc) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x1, 0x1}, 0x18) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_vs\x00') ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) dup2(r0, r2) fcntl$setpipe(r0, 0x407, 0x7000000) 14:53:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, 0x0) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000240f4fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x8847, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 305.250098][T24878] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 305.280856][T24888] loop4: detected capacity change from 0 to 262160 14:53:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024104fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104014a00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 305.322985][ C1] sd 0:0:1:0: tag#4010 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 305.333276][ C1] sd 0:0:1:0: tag#4010 CDB: opcode=0xe5 (vendor) [ 305.339624][ C1] sd 0:0:1:0: tag#4010 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 305.348650][ C1] sd 0:0:1:0: tag#4010 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 305.357726][ C1] sd 0:0:1:0: tag#4010 CDB[20]: ba 14:53:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024114fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x8848, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:23 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2e9000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024604fe841e100"/20, @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 305.411628][T24902] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xc405, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104004c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 305.506117][ C0] sd 0:0:1:0: tag#3996 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 305.515991][ C0] sd 0:0:1:0: tag#3996 CDB: opcode=0xe5 (vendor) [ 305.522354][ C0] sd 0:0:1:0: tag#3996 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 305.531398][ C0] sd 0:0:1:0: tag#3996 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 305.540481][ C0] sd 0:0:1:0: tag#3996 CDB[20]: ba [ 305.563163][T24920] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x1000000, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e102000000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:23 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) write(r2, &(0x7f0000000040)="b441644209e58f43edf33f41d15ad42cd9b6a8b9fc56741bd0f512e6b2cf529c37ec5309f10a9afdf614db4ccf0496d4f56a85178e290237fb4debc821f4e38fb61e314926a1e59e99842278a66a9d5e07f0d2ee13fd48e5fbd14a3d8ca034834b4b08c6030f0f4aec9a6cb5079d44492b8e", 0x72) r3 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x7f65, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, r3}, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000300)) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {r6}, {0x0, r7}, {}, {}, {r5}, {}, {}, {}, {r5, r7}, {}, {}, {0x0, r7}, {r6, r7}, {}, {r5, r7}, {}, {0x0, r7}, {r6}, {}, {0x0, r7}, {r6}, {}, {r6}, {}, {}, {}, {}, {}, {}, {r6}, {r5}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {r5}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {0x0, r7}, {}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {r5}, {0x0, r7}, {0x0, r7}, {r5, r7}, {r6}, {}, {r5}, {}, {}, {}, {r5}, {r5, r7}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {0x0, r7}, {}, {}, {r6}, {0x0, r7}, {}, {r5}, {}, {}, {}, {0x0, r7}, {r5, r7}, {0x0, r7}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {r5}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {r6}, {0x0, r7}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000054240)={{0x0, 0x9, 0x9, 0xfffffffffffffff8, 0x9, 0xb3d, 0x3, 0xfffffffb, 0x7fff, 0x7, 0x2, 0x1ff, 0x40, 0x10, 0x8}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {r10}, {0x0, r11}, {}, {}, {r9}, {}, {}, {}, {r9, r11}, {}, {}, {0x0, r11}, {r10, r11}, {}, {r9, r11}, {}, {0x0, r11}, {r10}, {}, {0x0, r11}, {r10}, {}, {r10}, {}, {}, {}, {}, {}, {}, {r10}, {r9}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {r9}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {r10}, {0x0, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {r10}, {}, {r9}, {}, {}, {}, {r9}, {r9, r11}, {}, {0x0, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {0x0, r11}, {}, {}, {r10}, {0x0, r11}, {}, {r9}, {}, {}, {}, {0x0, r11}, {r9, r11}, {0x0, r11}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9, r11}, {}, {0x0, r11}, {}, {}, {0x0, r11}, {}, {r9}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {r10}, {0x0, r11}, {}, {}, {}, {}, {r9}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000054500)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {r8, r11}, {0x0, r12}], 0x1f, "92520449475167"}) io_uring_enter(r3, 0x2ff, 0x5, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x4001033, r3, 0x9fdba000) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, 0x0) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:23 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2ea000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104024d00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e103000000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x2000000, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 305.728161][T24930] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e104000000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104014f00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 305.788512][ C0] sd 0:0:1:0: tag#3973 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 305.798427][ C0] sd 0:0:1:0: tag#3973 CDB: opcode=0xe5 (vendor) [ 305.804860][ C0] sd 0:0:1:0: tag#3973 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 305.813930][ C0] sd 0:0:1:0: tag#3973 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 305.822969][ C0] sd 0:0:1:0: tag#3973 CDB[20]: ba 14:53:23 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2eb000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e105000000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 305.846242][T24949] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x3000000, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, 0x0) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104035000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x4000000, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:23 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e106000000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:23 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2ec000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e107000000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 306.098721][T24966] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 306.115105][T24970] loop4: detected capacity change from 0 to 262160 14:53:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x5000000, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104025200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e108000000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:24 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2ed000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x6000000, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e109000000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 306.233129][T24982] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104035200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x8000000, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e10a000000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:24 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2ee000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e10b000000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 306.536418][T25007] loop4: detected capacity change from 0 to 262160 14:53:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104025600"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xa000000, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e10c000000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:24 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2ef000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xc000000, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104025800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e10f000000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xf000000, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:24 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2f0000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x10000000, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e110000000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104655800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 306.968459][T25046] loop4: detected capacity change from 0 to 262160 14:53:24 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x60000000, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:24 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2f1000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:24 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e111000000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104006000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x65580000, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e160000000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:25 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2f2000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104036200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x750e0000, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100030000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 307.365207][T25078] loop4: detected capacity change from 0 to 262160 14:53:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104586500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x81000000, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100050000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:25 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2f3000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100060000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104006800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x81ffffff, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:25 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2f4000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100070000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x88470000, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e12a080000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104026a00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 307.781764][T25113] loop4: detected capacity change from 0 to 262160 14:53:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100090000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:25 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2f5000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x88480000, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1000a0000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:25 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054500)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x1f, "92520449475167"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {0x0, r5}, {r4}, {}, {0x0, r5}, {r4}, {}, {r4}, {}, {}, {}, {}, {}, {}, {r4}, {r3}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {r3}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r3}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4}, {}, {r3}, {}, {}, {}, {r3}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {r4}, {0x0, r5}, {}, {r3}, {}, {}, {}, {0x0, r5}, {r3, r5}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {}, {r3}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x0, "2156816c73038c"}) r6 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x7f65, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, r6}, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000300)) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {r9}, {0x0, r10}, {}, {}, {r8}, {}, {}, {}, {r8, r10}, {}, {}, {0x0, r10}, {r9, r10}, {}, {r8, r10}, {}, {0x0, r10}, {r9}, {}, {0x0, r10}, {r9}, {}, {r9}, {}, {}, {}, {}, {}, {}, {r9}, {r8}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {r8}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {r9}, {0x0, r10}, {}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8}, {0x0, r10}, {0x0, r10}, {r8, r10}, {r9}, {}, {r8}, {}, {}, {}, {r8}, {r8, r10}, {}, {0x0, r10}, {}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {0x0, r10}, {}, {}, {r9}, {0x0, r10}, {}, {r8}, {}, {}, {}, {0x0, r10}, {r8, r10}, {0x0, r10}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8, r10}, {}, {0x0, r10}, {}, {}, {0x0, r10}, {}, {r8}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {r9}, {0x0, r10}, {}, {}, {}, {}, {r8}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000054240)=ANY=[@ANYRES64=0x0, @ANYBLOB="09007226703700000900000000000000f8ffffffffffffff09000000000000003d0b0000000000000300000000000000fbffffffff7f00000700000002000000ff010000000000004000000000000000100000000000000008000000000000003800"/160]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {r13}, {0x0, r14}, {}, {}, {r12}, {}, {}, {}, {r12, r14}, {}, {}, {0x0, r14}, {r13, r14}, {}, {r12, r14}, {}, {0x0, r14}, {r13}, {}, {0x0, r14}, {r13}, {}, {r13}, {}, {}, {}, {}, {}, {}, {r13}, {r12}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {r12}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {r13}, {0x0, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {}, {}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {r12}, {0x0, r14}, {0x0, r14}, {r12, r14}, {r13}, {}, {r12}, {}, {}, {}, {r12}, {r12, r14}, {}, {0x0, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {0x0, r14}, {}, {}, {r13}, {0x0, r14}, {}, {r12}, {}, {}, {}, {0x0, r14}, {r12, r14}, {0x0, r14}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12, r14}, {}, {0x0, r14}, {}, {}, {0x0, r14}, {}, {r12}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {r13}, {0x0, r14}, {}, {}, {}, {}, {r12}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000054500)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {r11, r14}, {0x0, r15}], 0x1f, "92520449475167"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004f340)={0xffffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {r4, r10}], 0x0, "a4c21f4fe759ea"}) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104006c00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x88a8ffff, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1000b0000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:25 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2f6000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:25 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1000c0000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:25 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x9effffff, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104007400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 308.068725][T25152] loop4: detected capacity change from 0 to 262160 14:53:26 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2f7000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1000f0000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xc4050000, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104007a00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100110000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xeaffffff, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:26 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2f8000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1082a0000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xefffffff, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 308.379175][T25185] loop4: detected capacity change from 0 to 262160 14:53:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104037e00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:26 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2f9000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e188470000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xfcffffff, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104008100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e188480000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xfeffffff, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:26 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2fa000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e165580000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xffffa888, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104038400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 308.676925][T25220] loop4: detected capacity change from 0 to 262160 14:53:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100600000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e158650000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:26 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2fb000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xffffff7f, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104478800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xffffff81, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100810000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xffffff9e, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:26 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2fc000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104488800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 308.924795][T25251] loop4: detected capacity change from 0 to 262160 14:53:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e147880000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e148880000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:26 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xffffffea, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104009200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:27 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2fd000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100400300000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xffffffef, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104059f00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:27 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2fe000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xfffffff0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010400af00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100034000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 309.263868][T25288] loop4: detected capacity change from 0 to 262160 14:53:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xfffffffc, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000001000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010402c200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:27 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x2ff000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000002000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xfffffffe, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010405c400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0xf, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000003000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:27 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x300000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010405c500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x10, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 309.591566][T25321] loop4: detected capacity change from 0 to 262160 14:53:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010402c800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000004000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x11, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:27 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x301000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000005000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010401ce00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x12, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000006000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x13, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 309.854312][T25346] __nla_validate_parse: 24 callbacks suppressed [ 309.854326][T25346] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 309.872692][T25355] loop4: detected capacity change from 0 to 262160 14:53:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010403e100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000007000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:27 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x14, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:27 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000008000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:27 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgrp(0x0) ioprio_set$pid(0x1, r1, 0x0) r2 = getpgrp(0x0) ioprio_set$pid(0x1, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) write$P9_RGETLOCK(r3, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYBLOB="d47d9d3b22494b825775f4dd0d0273cea13c7efa3ad7206ac82fe6306c96c27e5238da03fc1591f0adf35a58b09492056d69ab51c63514a17445d5261186cdf1625e37951993ce2fe1300cd353ed0a574181a7b94c426ac57793be862e0a5e44fada7092038bf0a791c7d42c96cf761ec921329f071988be801706ecb57a67f63c46c4fe990707f4a49d0119426eeeb934e2a17ad14052ae17eae4ce3962", @ANYBLOB="90ae540b5048c1c0ba614971e7736d11589a28172aaf571a81e2508c1875d00823e8ab7506e008ce86f3f4bc31981de5e0b2416c50a14f0c2041d229786204f5722fb174245daeb9423b70f66eda98e2a089b017f9d9d3479933cd8d6c84a6e27b708a29a4651462f48107b62560c201fc8b46cdf486488ec5775956d322ca56e707274d6ad57e1460197d2a12405bb749d5c9a6cf2c1f9b3d96caf4b7a6bf6951b2d4f9ace6314c535e00caac7590"], 0x200002e6) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) setsockopt$CAIFSO_REQ_PARAM(r8, 0x116, 0x80, &(0x7f0000000040)="4ee8a0ebf7b33b3e4a16aebaf2e9d32537b39dd26c948127587776fa05610ed989f17f0962dd16afd2b6151b5ea4c38333fd98aa2c5652c0f8ac4cbcb7", 0x3d) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {r13}, {0x0, r14}, {}, {}, {r12}, {}, {}, {}, {r12, r14}, {}, {}, {0x0, r14}, {r13, r14}, {}, {r12, r14}, {}, {0x0, r14}, {r13}, {}, {0x0, r14}, {r13}, {}, {r13}, {}, {}, {}, {}, {}, {}, {r13}, {r12}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {r12}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {r13}, {0x0, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {}, {}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {r12}, {0x0, r14}, {0x0, r14}, {r12, r14}, {r13}, {}, {r12}, {}, {}, {}, {r12}, {r12, r14}, {}, {0x0, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {0x0, r14}, {}, {}, {r13}, {0x0, r14}, {}, {r12}, {}, {}, {}, {0x0, r14}, {r12, r14}, {0x0, r14}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12, r14}, {}, {0x0, r14}, {}, {}, {0x0, r14}, {}, {r12}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {r13}, {0x0, r14}, {}, {}, {}, {}, {r12}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054500)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {0x0, r15}], 0x1f, "92520449475167"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004be80)={0x5, [{0x0, r11}, {0x0, r11}, {r6, r7}, {r5, r11}, {0x0, r11}, {0x0, r11}, {r10, r7}, {r9, r7}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {r10}, {r6, r11}, {0x0, r7}, {r9, r11}, {r9}, {}, {}, {}, {r9, r7}, {}, {r10, r7}, {r10, r7}, {r9}, {}, {r10}, {r9}, {0x0, r11}, {r5, r11}, {r6}, {r9}, {r9}, {r10}, {r5}, {r10, r11}, {r6, r7}, {r9, r7}, {r6, r7}, {}, {}, {0x0, r7}, {r10}, {}, {0x0, r7}, {0x0, r11}, {}, {r9}, {}, {r9, r11}, {0x0, r11}, {}, {r9}, {r10}, {}, {}, {0x0, r11}, {}, {r6}, {}, {r6, r7}, {0x0, r11}, {}, {r6, r11}, {0x0, r7}, {r9}, {}, {0x0, r11}, {r5}, {r10}, {r6, r7}, {r9}, {0x0, r11}, {r9, r7}, {}, {0x0, r7}, {r10, r11}, {0x0, r7}, {}, {r10, r11}, {}, {r6}, {r5, r11}, {r9, r7}, {r6}, {0x0, r11}, {r5}, {r10}, {}, {r9, r7}, {r5, r7}, {r10}, {0x0, r7}, {0x0, r11}, {}, {0x0, r7}, {}, {}, {r6}, {0x0, r11}, {r10}, {}, {0x0, r7}, {r6}, {r5, r7}, {r10, r7}, {r6}, {r6}, {0x0, r7}, {r10, r11}, {r10, r7}, {0x0, r11}, {0x0, r11}, {r6}, {0x0, r11}, {r9}, {}, {}, {0x0, r11}, {}, {r10}, {0x0, r11}, {0x0, r11}, {0x0, r7}, {r9}, {r6}, {0x0, r7}, {0x0, r7}, {}, {}, {r9, r11}, {r9}, {0x0, r11}, {}, {r10}, {r6}, {r5, r7}, {r5, r7}, {0x0, r11}, {0x0, r11}, {}, {}, {r10, r11}, {}, {0x0, r7}, {0x0, r11}, {}, {0x0, r7}, {}, {}, {r10, r7}, {}, {0x0, r11}, {}, {r10}, {0x0, r7}, {}, {r6}, {r5}, {r6}, {}, {r6}, {r10, r11}, {r9}, {}, {r10}, {0x0, r11}, {0x0, r11}, {0x0, r7}, {0x0, r7}, {r9, r11}, {}, {}, {}, {r9}, {}, {r10}, {r10, r7}, {}, {}, {}, {r5, r7}, {0x0, r7}, {0x0, r7}, {}, {r6, r11}, {0x0, r7}, {r9}, {r9}, {}, {}, {}, {0x0, r11}, {}, {0x0, r7}, {r5}, {0x0, r7}, {}, {r10}, {r10, r7}, {r10, r11}, {0x0, r7}, {r10}, {r9}, {}, {0x0, r7}, {r10, r11}, {r9}, {0x0, r11}, {r9, r11}, {0x0, r11}, {r5, r11}, {}, {r9}, {r10}, {}, {0x0, r11}, {}, {r9}, {r5}, {r5}, {}, {0x0, r7}, {}, {r5, r11}, {0x0, r7}, {r9}, {0x0, r7}, {0x0, r11}, {0x0, r11}, {}, {}, {r5}, {0x0, r7}, {r9, r7}, {r6, r7}, {r10}, {}, {r9}, {}, {r10}, {r5, r7}, {r5}, {}, {0x0, r7}, {r6, r11}, {}, {r5}, {r9}, {}, {r9}, {}, {r5}, {0x0, r15}], 0x5, "02c3d7b6ee01b7"}) dup2(0xffffffffffffffff, r0) fcntl$setpipe(r0, 0x407, 0x6ffffff) [ 309.996827][T25368] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:28 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x302000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x15, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010403ea00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000009000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x16, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e10000000a000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 310.154813][T25387] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 310.166323][T25389] loop4: detected capacity change from 0 to 262160 14:53:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e10000000b000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010403ec00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x18, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:28 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x303000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 310.287262][T25400] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x19, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e10000000c000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010403ee00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x1a, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:28 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x304000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 310.442167][T25412] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 310.469854][T25415] loop4: detected capacity change from 0 to 262160 14:53:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010403f200"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x1c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e10000000f000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 310.589440][T25427] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:28 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x305000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000010000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x1d, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010403f600"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 310.761815][T25445] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:28 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000011000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:28 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x1e, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:28 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x306000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010400f700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x21, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e10000082a000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 311.076481][T25456] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 311.105675][T25458] loop4: detected capacity change from 0 to 262160 14:53:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x22, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000060000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010403fa00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:29 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x307000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x77, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 311.255402][T25474] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100005865000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0xc0, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:29 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x308000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010403fc00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0xec0, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000081000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 311.583329][T25487] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x33fe0, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 311.650462][T25497] loop4: detected capacity change from 0 to 262160 14:53:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010403fe00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x20000124, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:29 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x309000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1ffffff81000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100004788000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x7ffff000, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104fffe00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:29 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x30a000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:29 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) ioprio_set$pid(0x1, r2, 0x0) r3 = getpgrp(0x0) ioprio_set$pid(0x1, r3, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES64=r0, @ANYBLOB="120c64f4886a77c7ab7334f2e7f844377f08e9842adc8558173e92fceeb5c120c78585f57cb6bee06c26a20ee477bca77468ebdbb7e92363fd6f5f34b2931c5f734df7570d8b102741bf182d3924ca60ba4d4fae5addba0e00b319fd9fa52aef4ec8adf10d0b8f49586edd5e19eb442806c9d15a7a199181ba86676382edad11b7c95dac20c710e92fa073fb19a91f75fc9d415e36f7280bd762f51403dafe34ac6917d134a642225d493c8990369ef8b4ef688a8799ffae70032ee8fa4e69bd5874b50d77d89a942669d6cfe39a90feee59e46c203f9e7a87", @ANYRESDEC=r0, @ANYRESDEC=r2, @ANYRESOCT=r3, @ANYBLOB="4ae763fa46f56952591346560149cb8a55de2d1125308fe0", @ANYRES64=r3], 0x200002e6) r4 = dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"}) r5 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x7f65, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, r5}, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000300)) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {r8}, {0x0, r9}, {}, {}, {r7}, {}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {r8, r9}, {}, {r7, r9}, {}, {0x0, r9}, {r8}, {}, {0x0, r9}, {r8}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r8}, {r7}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {r7}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {r8}, {0x0, r9}, {}, {}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r7}, {0x0, r9}, {0x0, r9}, {r7, r9}, {r8}, {}, {r7}, {}, {}, {}, {r7}, {r7, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {}, {r7}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {r7}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000054240)=ANY=[@ANYRES64=0x0, @ANYBLOB="090000000000000009000000000000000c0000000000000009000000000000003d0b0000000000000300000000000000fbffffffff7f00000700000002000000ff010000000000004000000000000000100000000000000008000000000000003800"/160]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {r12}, {0x0, r13}, {}, {}, {r11}, {}, {}, {}, {r11, r13}, {}, {}, {0x0, r13}, {r12, r13}, {}, {r11, r13}, {}, {0x0, r13}, {r12}, {}, {0x0, r13}, {r12}, {}, {r12}, {}, {}, {}, {}, {}, {}, {r12}, {r11}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {r11}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {r12}, {0x0, r13}, {}, {}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {r11}, {0x0, r13}, {0x0, r13}, {r11, r13}, {r12}, {}, {r11}, {}, {}, {}, {r11}, {r11, r13}, {}, {0x0, r13}, {}, {}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {0x0, r13}, {}, {}, {r12}, {0x0, r13}, {}, {r11}, {}, {}, {}, {0x0, r13}, {r11, r13}, {0x0, r13}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11, r13}, {}, {0x0, r13}, {}, {}, {0x0, r13}, {}, {r11}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {r12}, {0x0, r13}, {}, {}, {}, {}, {r11}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000054500)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {r10, r13}, {0x0, r14}], 0x1f, "92520449475167"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000057380)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}], 0x2, "f4ac5b892ded29"}) 14:53:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100004888000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0xfffffdef, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1ffffa888000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0xf, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010403ff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1ffffff9e000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 312.086644][T25541] loop4: detected capacity change from 0 to 262160 [ 312.098236][T25543] selinux_netlink_send: 30 callbacks suppressed [ 312.098250][T25543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=25543 comm=syz-executor.0 [ 312.173320][T25549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=25549 comm=syz-executor.0 14:53:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1ffffffea000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:30 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) r2 = dup2(r0, r1) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000054300)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0x90000001}) r4 = signalfd(r3, &(0x7f0000000040)={[0x1ff]}, 0x8) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000054300)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0x2000}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$setpipe(r1, 0x407, 0x7000000) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000054300)) ioctl$BTRFS_IOC_SYNC(r7, 0x9408, 0x0) 14:53:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001040fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:30 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x30b000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 312.362953][T25561] loop4: detected capacity change from 0 to 262160 [ 312.375108][ C0] sd 0:0:1:0: tag#3997 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 312.384958][ C0] sd 0:0:1:0: tag#3997 CDB: opcode=0xe5 (vendor) [ 312.391303][ C0] sd 0:0:1:0: tag#3997 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 312.400361][ C0] sd 0:0:1:0: tag#3997 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 14:53:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1ffffffef000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 312.409428][ C0] sd 0:0:1:0: tag#3997 CDB[20]: ba 14:53:30 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x30c000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001047fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1fffffff0000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x12, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 312.516935][ C0] sd 0:0:1:0: tag#3998 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 312.526808][ C0] sd 0:0:1:0: tag#3998 CDB: opcode=0xe5 (vendor) [ 312.533186][ C0] sd 0:0:1:0: tag#3998 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 312.542233][ C0] sd 0:0:1:0: tag#3998 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 312.551277][ C0] sd 0:0:1:0: tag#3998 CDB[20]: ba 14:53:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1fffffffc000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:30 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x30d000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:30 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) syz_io_uring_setup(0x7f65, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2}, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000300)) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {r6}, {0x0, r7}, {}, {}, {r5}, {}, {}, {}, {r5, r7}, {}, {}, {0x0, r7}, {r6, r7}, {}, {r5, r7}, {}, {0x0, r7}, {r6}, {}, {0x0, r7}, {r6}, {}, {r6}, {}, {}, {}, {}, {}, {}, {r6}, {r5}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {r5}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {0x0, r7}, {}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {r5}, {0x0, r7}, {0x0, r7}, {r5, r7}, {r6}, {}, {r5}, {}, {}, {}, {r5}, {r5, r7}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {0x0, r7}, {}, {}, {r6}, {0x0, r7}, {}, {r5}, {}, {}, {}, {0x0, r7}, {r5, r7}, {0x0, r7}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {r5}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {r6}, {0x0, r7}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000054240)={{0x0, 0x9, 0x9, 0xfffffffffffffff8, 0x9, 0xb3d, 0x3, 0xfffffffb, 0x7fff, 0x7, 0x2, 0x1ff, 0x40, 0x10, 0x8}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {r10}, {0x0, r11}, {}, {}, {r9}, {}, {}, {}, {r9, r11}, {}, {}, {0x0, r11}, {r10, r11}, {}, {r9, r11}, {}, {0x0, r11}, {r10}, {}, {0x0, r11}, {r10}, {}, {r10}, {}, {}, {}, {}, {}, {}, {r10}, {r9}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {r9}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {r10}, {0x0, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {r10}, {}, {r9}, {}, {}, {}, {r9}, {r9, r11}, {}, {0x0, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {0x0, r11}, {}, {}, {r10}, {0x0, r11}, {}, {r9}, {}, {}, {}, {0x0, r11}, {r9, r11}, {0x0, r11}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9, r11}, {}, {0x0, r11}, {}, {}, {0x0, r11}, {}, {r9}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {r10}, {0x0, r11}, {}, {}, {}, {}, {r9}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054500)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {r8, r11}, {0x0, r12}], 0x1f, "92520449475167"}) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x5, 0x0, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) r13 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r13, 0x81f8943c, &(0x7f0000000300)) write$P9_RGETLOCK(r13, &(0x7f0000000040)=ANY=[@ANYRES16], 0x200002e6) dup2(r0, r1) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/16, 0x10}, {&(0x7f00000000c0)=""/233, 0xe9}], 0x2) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1fffffffe000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104feff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x14, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 312.731468][T25605] loop4: detected capacity change from 0 to 262160 14:53:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e188a8ffff000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104004003000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:30 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) r2 = dup2(r0, r1) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r1, &(0x7f00000000c0)='./file0\x00', 0x6000, 0x200, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x121000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_user}, {@cache_mmap}, {@version_9p2000}, {@dfltuid={'dfltuid', 0x3d, r4}}, {@cache_mmap}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@appraise}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@subj_user={'subj_user', 0x3d, '&/:+'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@uid_lt}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@uid_lt={'uid<', r6}}, {@obj_role={'obj_role', 0x3d, '#'}}]}}) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="573077bb", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf25040000000500050000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:30 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x30e000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x15, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 312.885540][ C1] sd 0:0:1:0: tag#4005 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 312.895496][ C1] sd 0:0:1:0: tag#4005 CDB: opcode=0xe5 (vendor) [ 312.902043][ C1] sd 0:0:1:0: tag#4005 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 312.911081][ C1] sd 0:0:1:0: tag#4005 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 312.920132][ C1] sd 0:0:1:0: tag#4005 CDB[20]: ba 14:53:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e17fffffff000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x16, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:30 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x30f000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e181ffffff000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x18, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:30 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e19effffff000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x19, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 313.062043][T25644] loop4: detected capacity change from 0 to 262160 14:53:31 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x310000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000008000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1eaffffff000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x1a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:31 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000054300)) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000040)) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1efffffff000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000010000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 313.700614][T25659] loop4: detected capacity change from 0 to 262160 14:53:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x1d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1f0ffffff000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:31 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x311000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x1e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000340000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 313.812478][T25673] loop4: detected capacity change from 0 to 262160 14:53:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1fcffffff000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 313.913468][T25684] loop4: detected capacity change from 0 to 262160 14:53:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000010000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:31 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x21, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:31 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1feffffff000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:31 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x312000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:31 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) r2 = dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054500)={0x80000001, [], 0x1f, "92520449475167"}) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x5, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x7f65, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, r4}, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000300)) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {r7}, {0x0, r8}, {}, {}, {r6}, {}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {r7, r8}, {}, {r6, r8}, {}, {0x0, r8}, {r7}, {}, {0x0, r8}, {r7}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r7}, {r6}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {r6}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {r7}, {0x0, r8}, {}, {}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r6}, {0x0, r8}, {0x0, r8}, {r6, r8}, {r7}, {}, {r6}, {}, {}, {}, {r6}, {r6, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {}, {r6}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {r6}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000054240)={{0x0, 0x9, 0x9, 0xfffffffffffffff8, 0x9, 0xb3d, 0x3, 0xfffffffb, 0x7fff, 0x7, 0x2, 0x1ff, 0x40, 0x10, 0x8}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {r11}, {0x0, r12}, {}, {}, {r10}, {}, {}, {}, {r10, r12}, {}, {}, {0x0, r12}, {r11, r12}, {}, {r10, r12}, {}, {0x0, r12}, {r11}, {}, {0x0, r12}, {r11}, {}, {r11}, {}, {}, {}, {}, {}, {}, {r11}, {r10}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {r10}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {0x0, r12}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {r11}, {0x0, r12}, {}, {}, {0x0, r12}, {0x0, r12}, {}, {}, {}, {}, {}, {0x0, r12}, {0x0, r12}, {0x0, r12}, {r10}, {0x0, r12}, {0x0, r12}, {r10, r12}, {r11}, {}, {r10}, {}, {}, {}, {r10}, {r10, r12}, {}, {0x0, r12}, {}, {}, {0x0, r12}, {0x0, r12}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {0x0, r12}, {}, {}, {r11}, {0x0, r12}, {}, {r10}, {}, {}, {}, {0x0, r12}, {r10, r12}, {0x0, r12}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10, r12}, {}, {0x0, r12}, {}, {}, {0x0, r12}, {}, {r10}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {r11}, {0x0, r12}, {}, {}, {}, {}, {r10}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054500)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {r9, r12}, {0x0, r13}], 0x1f, "92520449475167"}) io_uring_enter(r4, 0x2ff, 0x5, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004900)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004840)=[{&(0x7f0000000080)={0x12c, 0x15, 0x10, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x110, 0x25, 0x0, 0x1, [@generic="9345b6f8add8324a95ecfc0dbb0159abd754c85e1cae7ae4de673635932cbb745436307f4f0c9b9c950338d6f19dcb627b165669635e1119e18818054976f8686dac3230fca39c3b091294c920b7a754769d5c1b4c761547134508483a4075a0ce4f1854cbb09352cfa1ea67d727d3408508ba261193c93b3945590b6e8b2169371c092bc32dfefff166ee9bdf6eaf5b929c632339780c5089cc467d9d79159e4d62cec80220610786673c3f2722dd6ba8923dc0aa2fad50d5026a3c", @typed={0x50, 0xa, 0x0, 0x0, @binary="205876d7a77c18a25edda2ac10b1314eeee10f7497b0dfd508b3771c644f545c418da068420d30f6720aae783b17c247f8d49d2aad7f3d1921daba267b6e3ae3487a228a7792f4a25b69a2f2"}]}, @nested={0x4, 0x72}, @typed={0x8, 0x41, 0x0, 0x0, @uid=0xee01}]}, 0x12c}, {&(0x7f0000000280)={0x3fc, 0x1c, 0x800, 0x70bd27, 0x25dfdbfc, "", [@typed={0x8, 0x1, 0x0, 0x0, @pid}, @nested={0x17a, 0x25, 0x0, 0x1, [@typed={0x37, 0x63, 0x0, 0x0, @binary="52baa675b866068446687f275f392f6e57571e9f13b24b3dc87565214a288487f7a3e0cfdf9e28423b65622a000e5ca0c1a569"}, @typed={0x8, 0x41, 0x0, 0x0, @ipv4=@loopback}, @generic="27d13e36d8d02ae3c00aaf5d709c00b9c59fc045615971ede963edfe84b2024d7d2aea96c151dcf72cf1ee39b3f2b9993002c48bf57d6f9a9f2bb01e8415267132e2c78a1b1525a674501c239f75378c95aaa11665de0e80a4e7fd85acaf58d7b31be14b4f25c47b210056e92436bd38e88deb58b74f0a08aea9845d4f021f2e7e65c7d19515cd5b6de188e77c39eaa97286023241", @generic="f0073aa727fcc33cbba2d184f52ca500a4909334c7d82fe7c3c89b3a9ead0bccb9d946462c93f4a571726fd30e6e95d577bc9b2403c20d99157797831082d7e1a18e6016ffd49c9cd3afab08937a72b515c9d1f12b4d20a5e7feda0922ba5ad67b79b8e23cbe11e09dbee5bb56fece01a2880b59994d88a69eca985095973e23ab5729f36c049d269917d35aa7e119c7bd09f76baebf4a8b57f35259f0279b6acd"]}, @typed={0x4, 0x48}, @typed={0xd, 0x53, 0x0, 0x0, @str='^}+^[(@}\x00'}, @typed={0x8, 0x4d, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x19d, 0x50, 0x0, 0x1, [@typed={0x8, 0x54, 0x0, 0x0, @fd=r1}, @generic="01e105dc035af9ddfcac214a3e027aef72296ea1ff5719184cfdcdf38dc05b6e7b5c1a92606a2e9884852ec92dfbe2b50629438f764007f388cb676af8a9ecd5f33f0f78b28e1118c07c93b16265eb1c5117466bb6f02d253d3fe3cefe58fb1307f74346d18cd0b7c4027d1bd89206394d31218c8b057cceb2d5dac6ff0f06eead231001cfbdf7775219af81120b185072d7df49c0c82c424c44009a4b7d9fe8b49a2eb7bc1a27aac76d7bd082c2bc6fc37c6a385c6a789a43001d28b7e6", @generic="442d4aca84d10bd384c934b45e9befb86cc2fde95cb1c7c0d533436a53b47f79be1381281cc205527aa085b56723a9f61de547b6356105265445a550f3840f20e9734a94451c26e6badec1cb26a03269a2f86abb11da9dc5f932cef996d92e0b5475bec7c3d33a19a2e6f12a4af843fb66b4d2e16a73dc4209e27ecb4d29611bcdfad9a5449b75d410b2e3a3e2535f5cf671511a25300120fb24baae26a2a6bf239b3b985cf1d2b5d174aba62e3fbedba231e2f3dd5889910b48a9afcc3777acbd052ffa21dbf38a4dfade", @typed={0x8, 0x83, 0x0, 0x0, @fd=r1}]}, @typed={0x8, 0x95, 0x0, 0x0, @uid}, @generic="237f50b78f93a35a2da938c0362a6b1b224e59b7763f8d59066394c3e208a87c62fd783538528535068cc76adf03236ed1b740e103b5df0c72cb1804a8c4878fbf7c93dcb095c935b5cf1308e57f5ec6d9ef0a13cb65ec890692e3ce38df0ff292aad23ba3f5404cae0532e22e986ec2d284b28235fbe5adaccb2bb589a1235ea1eb65947ba43f519d4d9f7a99476518036344ae91a98b4b4a4a4c194f57da3a30f766"]}, 0x3fc}, {&(0x7f0000000680)={0x5e4, 0x18, 0x200, 0x70bd28, 0x25dfdbff, "", [@nested={0x3cb, 0x1e, 0x0, 0x1, [@generic="4d2176dd0ebfd476a592823da1f04d7b70021464bef2b7f28876e39c5b75be59b095c060169865931441cbfa0346899664f258bc81efeb3584e37f2a7e2ad575dd42ceb6a6a09b284a95cdf18c4f35c3c6b3f81ef1fd1559c67c2e3b7c17656381d97ffb95127e8b4151a3f70de6d587320b456fb3d2528b5fa29d93a6a183d41ed06e4efc3b4d169f6c048db21f0770725e", @generic="f718c1fa86a0b7ce34ddad520aeae3775cde879a3fe4f8b970021b3edf602f9706c71dd6ea7a5e6cbf4d54d14ba775d941701bfc9e4d366f829455b0fa4d8b6d480994a116b9ab35be95e05f6b7dc1f40eb932c998720af739cb8e8686b1c827e0113ff99656216a44ec8d5e65ec8edfb673ef4d64469921cfc816fdc0fdb8e7f03ea0c4cff49e0b9bc9f2bf0c78e97571d65bd5dbd53f92ccc7d97ee096e05b3a5313bab7e78a1e9f8222f256c40d8df69a9263c4a25bcdb00cc85236cc5fc1ef4a4af5810d7a", @generic="30e5a2a6836bebdb9e676f9794812338e90b207385aec5c1d43aea3da315ec5a9abab14d528ce9fe3bf7822984224af2f6eb107491cd4cf3dca942c73236eae03e9bdd793df021ae8e0188dfa71b62f8bfb6fb864de0ef9217da1f75eb8480dae11e624d31e7d7e8cbd2b5f6ed2984c3f51859da66f26d1e20b0c5d4020583", @typed={0x8, 0x83, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0xfe, 0x9, 0x0, 0x0, @binary="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"}, @generic="d8aa51d46c494ee49c0c029e9112455bd98724df8a14f63931b63cb0c239eacbc1d5f79eceea60478de2c225667b16fa5cabee464a26bf41e503fb50fd7e391485c75c3bb7990ddd670d8027506cf4c8f99e49352434e196a792f137fba470987ac0f6734a0442456adb999f8d1a19411ae881fbcb5d372abed117ca4a34eeccfbaae37bd74c7fb33fea899ec0d018fcc914acddc47227128cfd9002df6dc176155120fbc4dc0a8247c1d27a58bbbf12060519870a7bb36bbe7ff1e2e5019c93489718675616a4e1e3a3c44580f769d19a0dbba4e12033b5bea6212d6f2cf5", @typed={0x8, 0x4f, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @typed={0x8, 0x22, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x87, 0x0, 0x0, @uid}, @nested={0x1f7, 0x44, 0x0, 0x1, [@generic="871f6cf464bd27b90bb773dfc8ee27a36635862f03249b3cea0bed0b100c61e4c8a8f2f5eb091dd26abda6fbb9d085c439698a4df983e2d7c70201f635e74d2d90516c661bbe4122960f887b1d74ec95ddcdf51a9e1a3f4d6fb896f3d6d221bf8060d77c77a4f3e99e276b2d8179d9110023ff4d39674253c357ec1b1a2970012a040243057dd858cf7f618363e359b449e6198295dda8e5b04ebde29f83c57f247c9b15aada1ae0381e706b91e37d2e5bdef2f1cf8c4ffd8e8b347ab82bef96cd85fee0e89c1b96dab93af649bca3e70cccf3ec81d62d09f8d6098693d3773ea262a651dcfeb9554ade98d28ea434a969f51ea83c23d7", @generic="24402d6ba39700e2966675b2d07b57913fd3caa61b95cae1287ae1c88e28bd441aba4d3837c332138f69f68acc72de298eaa99c55fe807d59cefcedbb9a6effdf6fd565416f4b955306a25a4d5b7441151e59341e9ecbfa397c840a2e220acab05c1acd3b09d5817b7c1db7411dd1c5a19dd80b8954626fb77d2d823933a33c5e7ad1385742a0f7f5c14d300c37d0a5d65c98327aa975196f8cb3ca3c70d7d0360f72bf6d490", @generic="b2fc55d41c30b590024d7a1c650c3f96dc2f925c16ac96559a2a62fa487890cdbfed7a70cbd5db0ae7baa2b58d569e9efaa9fc48f85a4ce04d82464ca6c6798e6901d2f629ced4e18ccd55a5f1965d22b857e118415f"]}]}, 0x5e4}, {&(0x7f0000003200)={0x1e0, 0x29, 0x20, 0x70bd27, 0x25dfdbff, "", [@typed={0x8, 0x30, 0x0, 0x0, @pid}, @typed={0x8, 0x87, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x101, 0x1b, 0x0, 0x1, [@typed={0x8, 0x5, 0x0, 0x0, @pid}, @generic="f5fdf7d9c0a07d9849ae939acc5698b5d88b7f0b539ab1d0553be9befd13897dc55e1d057f7e6b178cb15da608f5cc3ca344d4c6a866d56e3a9dc6e4bb0e81237bfb3d17c3d7140374fb6b78de06262fce3323c1f725112aa3df9258e2a37882551877bccf4430dcfb958ce0fb2347aab7a7778bb7800f93d4ca6e3272cc9372c1515fd03222e70e3df1f5805b623f41d1c9ca47f903321366fd6e16d834031c19482f976e0eb13557d515f7e258c1682577c31c454d49fc22ce04500493d21587ee1f2e46d45fdf9816de77b25c4ea2dc70ff75fb4d9d8029965b5a0ca75f1600f399bb163c21053a035233a679c414901832f3da"]}, @generic="62483d46b2ea902577b400f049caa4328c07bf3e949ce5faeed716f4948d0204c304f2fa6d6d1c9dd1f1e7", @typed={0x76, 0x19, 0x0, 0x0, @binary="0923c72b511cb5e4c91568e46ade19c09eeea3281f6ab560983db69331145dafc024c5d65c882e837ac88db107eaacd891888b7a4cbbc2f5768b231e474090d21cd8b3fb3a056cac83e392f8791bc6e85c088e04fb2cf9e109050fa25eef886de7b56a5c85e256b682c23f48dcaf0ca6a4d5"}, @typed={0x18, 0x84, 0x0, 0x0, @binary="749410e5f155fedc1e4ea360e42ab892f34ca4a8"}]}, 0x1e0}, {&(0x7f0000003400)={0x1280, 0x2b, 0x2, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x14, 0x52, 0x0, 0x0, @ipv6=@empty}, @generic="4e3ffa291fe1954301a3d8ec695fbc3389425de236a56ee9f480046c335fef9d3223ae52b7d2df47eeeca01a20b4a88b0d51a936704a779675e95f104cdc8c150bc841767b0ba61159779294f177ffc93388c410d14e5b1cda03ca05188e0bbcc8a5788aa091892711558880c5426fa637c21d461e2567df752ce4e4223c4aa2f7acb3749ead9c0d9eadd89b561f13c7b7ca528cd95f341d5f9bae056f637335c9bfc5c41390c6daebc585aa8c7e60fadec22e60c96578abe32f679cfa40de4ac733157eb0890386658c31645416cd519468fe4ac6a78ee2600a7f0325b8a777b95cec9ef29cce363cb6", @nested={0x10, 0x39, 0x0, 0x1, [@typed={0xc, 0x4f, 0x0, 0x0, @u64=0xfffffffffffff000}]}, @generic="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", @generic="65b3cd6c70e257166ad70b23836c12b10a4ae65150f42ee4cc9845061f18e9836ae47cb92cf4f81f25df4e2b6f456ea65f5a38b50289b47a78900e1f57775d27fa7e18a2e91261af3e6aef552ef67da65db8503f69070d6069b1f10865b1", @nested={0x38, 0x56, 0x0, 0x1, [@typed={0xc, 0x68, 0x0, 0x0, @u64=0xff}, @typed={0x14, 0x7a, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0xc, 0x9, 0x0, 0x0, @u64=0x101}, @typed={0x8, 0x80, 0x0, 0x0, @fd}]}, @nested={0xcb, 0x60, 0x0, 0x1, [@generic="ead2c77e0c98a822eb17da24bd34ef2bb26ac46ff66261927a9f222f59601e402ca38d87862b6feef296bd3fad1d8bc2b244e15c62e27366956bd61f341261a3827397475ad7feb48645bbfefbc501a7bb2a64e4cfa2dc0a00edbe86337eb8ef2aab7b6717c9704eac07af289025cd45c05f09673410f24123280d3ee0b231b5f9596635ee", @generic="ad3987d501085489f2c3c904d99af49a443a4c7d0779d14053ede1516a3a6d0ef4d7723602b3e9e80a5c518c351b0124e9e287ee31e9", @typed={0xc, 0x5d, 0x0, 0x0, @u64=0x2}]}]}, 0x1280}, {&(0x7f0000004680)={0x1b0, 0x37, 0x800, 0x70bd29, 0x25dfdbff, "", [@generic="1ec38f536674e8c7b29d49f3940fe9dc20f0599f2adaae38fb6e28df495f00653a19ede1dee51c834602eb089d8a2fcc585d87154785ee25d987ecf3415f2c18eb997030d08d7096c8f69b75363ed23fbbe9319f31a9ab9f1fe61211613af47f2abcfe2abe16da44b90a419391c1be80df27ca4ffc2ac127fdfb0d9ac19fe1e00a4c2cb868cb6d137e2a7a00b3e77f334ca21358260cbc551b4a04175cfe", @generic="35315796aede0b7f19356a9d140a151c4a2f505d3300f1e7aa1977ddc7f96a358f94ed3e94eeb7d213f94664ebfeb3ec3085643e8bbad7fcf0b7660f565b05840a0a170815d3381346475945b862e7aadec5864c2cf329bbc46972d93ae4455d6a1e83013789ed12e51a05e61caf665c40cd260ab65a11e3813e7ce09386a696848444f89d166380bfa89cd695eb4c092a3fd9cfbbf18e2bbdda79f575230ebc9a086359a0ea3f9a0c90c3874686dcc633c8964ee1aee8f9ce66627633348430be2c99a11eed08ad23", @generic="e724c647a8c897d2e001f21eddc77682bd7428454e1d2db18fa4604a2c546db902cb856e92d2572757be03d0bdd7988b769ac314a904"]}, 0x1b0}], 0x6, &(0x7f00000048c0)=[@rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, r0, r3, r4, r2, r0]}}], 0x30, 0x80}, 0x0) 14:53:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000340000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x22, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 314.051328][T25705] loop4: detected capacity change from 0 to 262160 14:53:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000010000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:32 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x313000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000020000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) [ 314.140450][ C1] sd 0:0:1:0: tag#4006 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 314.150332][ C1] sd 0:0:1:0: tag#4006 CDB: opcode=0xe5 (vendor) [ 314.156677][ C1] sd 0:0:1:0: tag#4006 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 314.165745][ C1] sd 0:0:1:0: tag#4006 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 314.174783][ C1] sd 0:0:1:0: tag#4006 CDB[20]: ba 14:53:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x77, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000030000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 314.234706][T25732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=119 sclass=netlink_route_socket pid=25732 comm=syz-executor.0 [ 314.267868][T25734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=119 sclass=netlink_route_socket pid=25734 comm=syz-executor.0 14:53:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000030000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 314.285463][T25738] loop4: detected capacity change from 0 to 262160 14:53:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0xc0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 314.389007][T25745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=192 sclass=netlink_route_socket pid=25745 comm=syz-executor.0 [ 314.390628][ C0] sd 0:0:1:0: tag#4007 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 314.411787][ C0] sd 0:0:1:0: tag#4007 CDB: opcode=0xe5 (vendor) [ 314.418112][ C0] sd 0:0:1:0: tag#4007 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 314.427178][ C0] sd 0:0:1:0: tag#4007 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 14:53:32 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x3) 14:53:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000040000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:32 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x314000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 314.436228][ C0] sd 0:0:1:0: tag#4007 CDB[20]: ba [ 314.443123][T25748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=192 sclass=netlink_route_socket pid=25748 comm=syz-executor.0 14:53:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0xec0, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 314.479988][T25755] loop4: detected capacity change from 0 to 262160 14:53:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000050000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000050000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) [ 314.521597][T25761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3776 sclass=netlink_route_socket pid=25761 comm=syz-executor.0 14:53:32 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x315000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:32 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000060000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 314.572374][T25770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3776 sclass=netlink_route_socket pid=25770 comm=syz-executor.0 14:53:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 314.613875][T25777] loop4: detected capacity change from 0 to 262160 14:53:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000060000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000070000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 14:53:33 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x316000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000080000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 315.364749][T25791] loop4: detected capacity change from 0 to 262160 [ 315.380113][T25789] __nla_validate_parse: 27 callbacks suppressed [ 315.380128][T25789] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:33 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000100)=ANY=[], 0x200002e6) r1 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x7f65, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, r1}, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000300)) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000640)={0x5, [{r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, 0x0}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, 0x0}, {r3, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, 0x0}, {r4, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {0x0}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, 0x0}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {0x0, 0x0}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r4}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, 0x0}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, 0x0}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, 0x0}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3}, {r3, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {0x0}, {r3, 0x0}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4}, {r4, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, 0x0}, {r4, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}], 0x3f, "a54417e636935e"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0}, {}, {}, {}, {0x0, 0x0}, {r195}, {}, {}, {}, {0x0}, {}, {r195}, {0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, r196}, {0x0, 0x0}, {r195, 0x0}, {0x0, r196}, {0x0}, {0x0, 0x0}, {r194, 0x0}, {}, {0x0, 0x0}, {}, {r194, r196}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r196}, {r195, r196}, {}, {r194, r196}, {0x0}, {0x0, r196}, {r195, 0x0}, {0x0}, {0x0, r196}, {r195}, {0x0, 0x0}, {r195, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0, 0x0}, {r195}, {r194, 0x0}, {}, {}, {}, {0x0, 0x0}, {0x0, r196}, {0x0}, {}, {}, {0x0, 0x0}, {}, {}, {r195}, {0x0, 0x0}, {}, {r194}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {r195}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, r196}, {0x0}, {0x0, r196}, {0x0, r196}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {r195, 0x0}, {0x0, r196}, {0x0, 0x0}, {0x0}, {0x0, r196}, {0x0, r196}, {0x0, 0x0}, {}, {}, {0x0}, {0x0}, {0x0, r196}, {0x0, r196}, {0x0, r196}, {r194}, {0x0, r196}, {0x0, r196}, {r194, r196}, {r195, 0x0}, {0x0}, {r194, 0x0}, {0x0}, {0x0, 0x0}, {0x0}, {r194}, {r194, r196}, {0x0}, {0x0, r196}, {0x0, 0x0}, {}, {0x0, r196}, {0x0, r196}, {}, {0x0, 0x0}, {0x0}, {}, {0x0, 0x0}, {0x0, r196}, {}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, 0x0}, {}, {0x0}, {0x0, 0x0}, {0x0, r196}, {0x0, 0x0}, {0x0, r196}, {}, {}, {r195, 0x0}, {0x0, r196}, {0x0, 0x0}, {r194}, {0x0, 0x0}, {0x0}, {0x0}, {0x0, r196}, {r194, r196}, {0x0, r196}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, r196}, {0x0, 0x0}, {0x0, 0x0}, {}, {r194, 0x0}, {0x0, 0x0}, {}, {}, {0x0}, {}, {0x0}, {0x0, 0x0}, {}, {}, {0x0}, {r194, r196}, {0x0, 0x0}, {0x0, r196}, {0x0}, {0x0, 0x0}, {0x0, r196}, {0x0}, {r194}, {}, {r194}, {}, {}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, r196}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {}, {0x0}, {}, {0x0, r196}, {0x0, 0x0}, {}, {0x0}, {0x0}, {0x0}, {0x0, 0x0}, {}, {r195, 0x0}, {0x0, 0x0}, {}, {0x0}, {}, {0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {0x0}, {0x0, r196}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {r195, 0x0}, {0x0, r196}, {}, {}, {0x0, 0x0}, {0x0}, {r194}, {}, {}, {0x0}, {r195}, {0x0, 0x0}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, r196}, {0x0, 0x0}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000001640)={0xffffffffffffff3c, [{r48, r243}, {r335, r369}, {r287, r19}, {r284, r168}, {r194, r207}, {}, {0x0, r323}, {r319, r344}, {r177, r307}, {r298, r86}, {r116, r8}, {r136, r38}, {r330, r21}, {r242, r210}, {r171, r214}, {r327, r246}, {r268, r161}, {r239, r163}, {r330}, {r133, r143}, {r255, r69}, {r213, r98}, {0x0, r79}, {r256, r137}, {r360, r43}, {r286, r29}, {r3, r378}, {r155, r66}, {r99, r372}, {r121, r317}, {r39, r212}, {}, {r266, r47}, {r92, r304}, {r58, r189}, {r354, r170}, {r95, r79}, {r54, r231}, {r221, r270}, {r368, r15}, {r162, r344}, {r226, r279}, {r285, r277}, {0x0, r141}, {r84, r337}, {0x0, r318}, {r201, r182}, {r248, r377}, {r310, r75}, {r224}, {r105, r289}, {r357, r219}, {r65, r51}, {r258, r10}, {r310, r166}, {r370, r176}, {r145, r324}, {r94, r160}, {r60, r260}, {r124, r168}, {r296, r24}, {r334, r118}, {r85, r205}, {r325}, {r81, r102}, {r34, r122}, {r7, r276}, {r303, r31}, {r14, r363}, {r281, r216}, {r73, r106}, {r165, r12}, {r6, r63}, {r30, r376}, {0x0, r104}, {r134, r218}, {r329, r216}, {r342, r339}, {r184, r302}, {0x0, r306}, {0x0, r297}, {r361, r336}, {r100, r250}, {r193, r358}, {r175, r351}, {r105, r202}, {r82, r178}, {r20, r59}, {r314, r344}, {r50, r293}, {r295, r56}, {r283, r130}, {r285, r172}, {r199, r153}, {r16, r378}, {r244, r308}, {r23, r71}, {r88, r37}, {r366, r356}, {r110, r219}, {r53, r340}, {r114, r331}, {r18, r64}, {}, {0x0, r113}, {r61, r22}, {r364, r159}, {r261, r45}, {r313, r174}, {r371, r282}, {r379, r152}, {r253, r240}, {r329, r323}, {r58}, {r211, r126}, {r149, r32}, {0x0, r217}, {r352, r307}, {r78, r77}, {r30, r118}, {r373, r185}, {r272, r198}, {r25}, {r280, r151}, {r138, r288}, {r206, r339}, {r353, r236}, {r46, r8}, {r167}, {r28, r72}, {r76, r74}, {r273}, {r291, r292}, {r371, r344}, {r70, r59}, {r61}, {r278, r250}, {r332, r115}, {r247, r164}, {r169, r384}, {r119, r146}, {r203, r17}, {r366, r251}, {r300, r254}, {r142, r376}, {r111, r32}, {0x0, r299}, {r136}, {r108, r52}, {r140, r343}, {r360, r264}, {r215, r42}, {r39, r49}, {r129, r161}, {r125, r249}, {r101, r311}, {r271, r120}, {r128, r333}, {r208, r259}, {r110, r293}, {r58, r209}, {}, {r301, r290}, {r227, r222}, {r247, r187}, {r67, r294}, {r355, r341}, {r41, r381}, {0x0, r170}, {r36, r293}, {r375, r359}, {r125, r191}, {r186, r238}, {r90, r241}, {r23, r192}, {r347, r374}, {r150, r262}, {r132, r154}, {r131, r157}, {r338, r220}, {0x0, r257}, {r263, r159}, {r173, r322}, {r134, r350}, {r342, r178}, {r267, r367}, {r281, r151}, {r373, r214}, {r383}, {r144, r74}, {r354, r308}, {0x0, r91}, {r67, r87}, {r50, r382}, {r148, r180}, {r9, r83}, {r13}, {r272, r200}, {r11, r229}, {r95}, {r223, r308}, {r70}, {r373, r337}, {r349, r336}, {r97, r386}, {0x0, r293}, {r93, r309}, {r280, r299}, {r348, r139}, {r40, r294}, {r62, r80}, {r228, r274}, {r320, r236}, {r338, r219}, {r312, r27}, {r197, r31}, {0x0, r274}, {r135, r107}, {r380, r120}, {r223}, {r252, r237}, {r70, r26}, {r348, r49}, {r327, r251}, {r147, r112}, {r234}, {r275, r250}, {r96, r358}, {r35, r55}, {r204}, {r68, r181}, {r190, r365}, {r89, r316}, {r346, r139}, {r233}, {r44, r341}, {r195, r183}, {0x0, r328}, {r156, r387}, {r57, r225}, {r117, r158}, {r230, r251}, {r345, r269}, {r280, r141}, {r123, r245}, {r188, r362}, {r95, r235}, {r127, r160}, {r179, r107}, {r326, r232}, {0x0, r265}, {r314, r109}, {r315}, {r82, r321}, {r385, r305}], 0xc3, "a048476920733b"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r4}, {0x0, r5}, {}, {}, {r3}, {}, {}, {}, {r3, r5}, {}, {}, {0x0, r5}, {r4, r5}, {}, {r3, r5}, {}, {0x0, r5}, {r4}, {}, {0x0, r5}, {r4}, {}, {r4}, {}, {}, {}, {}, {}, {}, {r4}, {r3}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {r195}, {}, {}, {}, {r4}, {}, {}, {r33}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r3}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4}, {}, {r3, r5}, {}, {}, {}, {r3}, {r3, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {0x0, r5}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {0x0, r5}, {}, {}, {r4}, {0x0, r5}, {}, {r3}, {}, {}, {}, {0x0, r5}, {r3, r5}, {0x0, r5}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r388}, {}, {r3, r5}, {}, {0x0, r5}, {}, {r4}, {0x0, r5}, {}, {r3}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {r4}, {0x0, r5}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {0x0, r103}, {}, {}, {0x0, r5}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYBLOB="09000000000000000900000000000000f8ffffffffffffff09000000000000003d0b00000000110003007e4300000000fbffffffff7f00000700000002000000ff010000000000004000000000000000100000000000000008000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000463dc49e00"/164]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r393}, {}, {}, {}, {}, {}, {r393}, {}, {}, {}, {}, {}, {}, {0x0, r394}, {}, {r393}, {0x0, r394}, {0x0, r196}, {}, {r392}, {}, {}, {}, {r392, r394}, {}, {}, {0x0, r394}, {r393, r394}, {}, {r392, r394}, {}, {0x0, r394}, {r393}, {}, {0x0, r394}, {r393}, {}, {r393}, {}, {}, {}, {}, {}, {}, {r393}, {r392}, {}, {}, {}, {}, {0x0, r394}, {}, {}, {}, {}, {}, {}, {r393}, {}, {}, {r392}, {}, {}, {}, {}, {r393}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r394}, {}, {0x0, r394}, {0x0, r394}, {}, {}, {}, {}, {}, {}, {}, {r393, r390}, {0x0, r394}, {}, {}, {0x0, r394}, {0x0, r394}, {}, {}, {}, {}, {}, {0x0, r394}, {0x0, r394}, {0x0, r394}, {r392}, {0x0, r394}, {0x0, r394}, {r392, r394}, {r393}, {}, {r392}, {}, {}, {}, {r392}, {r392, r394}, {}, {0x0, r394}, {}, {}, {0x0, r394}, {0x0, r394}, {}, {}, {}, {}, {}, {0x0, r394}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r394}, {}, {0x0, r394}, {}, {}, {r393}, {0x0, r394}, {}, {r392}, {}, {}, {r395}, {0x0, r394}, {r392, r394}, {0x0, r394}, {}, {}, {}, {}, {0x0, r394}, {}, {}, {}, {r392}, {}, {}, {}, {r389}, {}, {}, {}, {}, {}, {}, {r392, r394}, {}, {0x0, r394}, {}, {}, {0x0, r394}, {}, {r392}, {}, {r392}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r394}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r394}, {}, {}, {}, {}, {}, {}, {}, {r393}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r394}, {}, {}, {}, {r393}, {0x0, r394}, {}, {}, {}, {}, {r392}, {}, {}, {}, {r393}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r394}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000054500)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r396}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {r391, r394}, {0x0, r397}], 0x1f, "92520449475167"}) io_uring_enter(r1, 0x2ff, 0x5, 0x0, 0x0, 0x0) dup2(r1, r0) fcntl$setpipe(r0, 0x407, 0x7000000) 14:53:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000001) 14:53:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000090000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:33 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x317000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000070000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000001) [ 315.509138][T25812] loop4: detected capacity change from 0 to 262160 14:53:33 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1000000000000000a0000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x3, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000001) [ 315.580277][T25822] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x4, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 315.650005][T25832] loop4: detected capacity change from 0 to 262160 14:53:34 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) vmsplice(r0, &(0x7f0000001180)=[{&(0x7f0000000040)="ae96fd1820f58a269de8c62509c8ef6a8ad7d160158f35add4abc0bb13a4a6ff3314f6e78a64e4abf2e99201f4ab1bcc9f97bfc689f680d186b5f51e1a7d62", 0x3f}, {&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="58faa8bae8237989412617d84c199d7de744b2174586dccd43efaed40cf549438d80687165a46cfa74387b1aae13753a9ec5cdb819", 0x35}, {&(0x7f00000010c0)="ebe2edc2dc0b2d390b176a2865301a0617e676a020e157", 0x17}, {&(0x7f0000001100)="2556e20cab8d53505200d3e2cc652630b6a296324513cf86e0eb4e40ea5ef414dde0811d667b72c54423bbae6e71d7955e07167565084abe3909955693aa74f592d6764faeb09d9786610fc5c1", 0x4d}], 0x5, 0x4) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:34 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x318000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1000000000000000b0000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000080000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x5, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000001) 14:53:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x6, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1000000000000000c0000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 316.326737][T25844] loop4: detected capacity change from 0 to 262160 [ 316.333666][T25840] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000001) 14:53:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000090000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:34 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x319000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1000000000000000f0000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 316.455781][T25863] loop4: detected capacity change from 0 to 262160 [ 316.474722][T25865] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000001) 14:53:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x8, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000100000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:34 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x31a000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001040000000a0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:34 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001b80)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {r4}, {}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {r5, r6}, {}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {}, {r5}, {}, {}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r5}, {}, {r4}, {}, {}, {}, {r4}, {r4, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r2}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054500)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r6}, {0x0, r7}], 0x1f, "92520449475167"}) io_uring_enter(0xffffffffffffffff, 0x2ff, 0x5, 0x0, 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xa9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r9, 0x0) r11 = syz_open_procfs$userns(0x0, &(0x7f0000000240)) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000b80)={{r11}, r10, 0x0, @unused=[0xc986, 0x38], @devid}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000040)={{r8}, r10, 0xc, @unused=[0x9, 0xe3, 0x81, 0x6], @name="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"}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) [ 316.605568][T25878] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 316.616986][T25880] loop4: detected capacity change from 0 to 262160 [ 316.645487][ C0] sd 0:0:1:0: tag#4008 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s 14:53:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x9, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000110000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 14:53:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1000000000000082a0000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0xa, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:34 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x31b000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 316.655338][ C0] sd 0:0:1:0: tag#4008 CDB: opcode=0xe5 (vendor) [ 316.661702][ C0] sd 0:0:1:0: tag#4008 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 316.670760][ C0] sd 0:0:1:0: tag#4008 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 316.679791][ C0] sd 0:0:1:0: tag#4008 CDB[20]: ba 14:53:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000600000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001040000020a0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000058650000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 316.773429][T25900] loop4: detected capacity change from 0 to 262160 [ 316.812008][T25908] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 14:53:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0xc, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 316.869326][ C1] sd 0:0:1:0: tag#4009 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 316.879198][ C1] sd 0:0:1:0: tag#4009 CDB: opcode=0xe5 (vendor) [ 316.885566][ C1] sd 0:0:1:0: tag#4009 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 316.894617][ C1] sd 0:0:1:0: tag#4009 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 316.903669][ C1] sd 0:0:1:0: tag#4009 CDB[20]: ba 14:53:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001040000000b0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:34 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x31c000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000800000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0xf, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 316.934194][T25919] loop4: detected capacity change from 0 to 262160 14:53:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x0) 14:53:34 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000054300)) write$sndseq(r2, &(0x7f0000000100)=[{0x40, 0x3, 0x0, 0x0, @tick=0x1, {0x8, 0x20}, {0x7, 0x9}, @queue={0x8, {0x4c9b1dd0, 0xd7bb}}}, {0x3f, 0x5, 0x1, 0x8, @time={0xffff, 0x6d7}, {0x0, 0x4}, {0x0, 0x4}, @quote={{0x59, 0x40}, 0xc000, &(0x7f0000000040)={0xfb, 0xff, 0x7f, 0x25, @tick=0x1f, {0x8, 0x81}, {0x0, 0x20}, @result={0x9}}}}, {0x7, 0x2, 0x4, 0x1, @time={0x6}, {0x40, 0x9}, {0x81, 0x5}, @raw8={"0f545d8ebbb3989969ccd6f6"}}, {0x6, 0x1, 0x9, 0xe9, @tick=0x2, {0x3, 0x8}, {0xba, 0x8}, @quote={{0x0, 0x8}, 0xbb57, &(0x7f0000000080)={0x0, 0x6, 0xaa, 0x75, @time={0x4, 0xfff}, {0x5, 0x4}, {0x0, 0x9}, @time=@tick=0x5}}}, {0x81, 0x6, 0x1, 0x9, @time={0x9, 0x8001}, {0x76, 0x5}, {0x40, 0x92}, @queue={0x1, {0x7ff}}}, {0x6, 0x7, 0x3, 0x0, @tick=0xffffffff, {0x0, 0x7}, {0x8, 0x20}, @quote={{0x1, 0x81}, 0x6, &(0x7f00000000c0)={0x9, 0x1, 0x1, 0x1f, @tick=0xfffffffc, {0x4, 0x1}, {0x7, 0x1}, @result={0x3, 0x5}}}}, {0x0, 0x2, 0x6, 0x40, @time={0x6e1b0a1c, 0x3}, {0x81, 0x7}, {0x7f, 0x8}, @raw8={"afbf348c0e48fa50105fb220"}}, {0x9, 0x1, 0x1f, 0x1, @time={0x1f, 0x6}, {0x8, 0x8}, {0x22, 0x4}, @raw8={"4a32888c203071e715dec7f4"}}, {0x80, 0x3, 0x9, 0x4, @tick=0x100, {0x2, 0x2}, {0x7, 0x42}, @time=@tick=0x4}, {0x4b, 0x0, 0xcc, 0x9, @time={0x32d, 0x5}, {0x3}, {0x2, 0x8}, @queue={0x7, {0x7, 0x3}}}], 0x118) 14:53:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000810000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:34 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x10, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000ffffff810000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 317.005048][T25929] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 317.043173][T25934] loop4: detected capacity change from 0 to 262160 14:53:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x60, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:35 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) vmsplice(r0, &(0x7f0000001180)=[{&(0x7f0000000040)="ae96fd1820f58a269de8c62509c8ef6a8ad7d160158f35add4abc0bb13a4a6ff3314f6e78a64e4abf2e99201f4ab1bcc9f97bfc689f680d186b5f51e1a7d62", 0x3f}, {&(0x7f0000000080)="72a6765b365fc4b974aa0160ca45cc7bf0cb826f203be7637c002dc3f1469fda71a66cfd9d3a43290bf37bfdc1d5a68fe9338c023d640be461b9780d1b0daf1b31abacf03056d6ecc36acf8847238ee3325a88ded9a8c3a51d33226bac542ef181d33e3174db9d26ec0400b7aed212d1ce4d616c0a074024e6a69713489f6ed6079d1f1ca55054c37992d93a3d7e91a6f5c248564c8193a846849963190096c7e0efd6f159f76e9db33402b46710d54b91440edcc680928ab3094e68a114c8431e6faf69388269b2d7511ba2763d74cd1508db6e0c1412b8052b158c239a263a5edb364c6a865cfb6e88b99138e7fdbe73ea78c826bde4a06de325f37d75d5752497d42a4f49eb8339a9fd02aed010dbbf364b7cb9851b270a297fe503d8fb0f10c5db44eb638293b0a15eda7e160e44167df4a8c50d1f732d7bbd33018e6352fc3fbe76c290e03a8df7611a3a1208bbf6f3c236c7b5552cda7c06aa788cde67d98af0460cde6c132c70dfe5d7e94b7e31acba9ce7902fff842d0e33676f75c41558b3b04ff09b12c8a12bfa323bc62c64c9e4f851ee32f266ab12458e16149a5f474686dbf5459c22a3e1bf7f3b107a2e3105e361cdefd08accb20e9177dc4f666a85d73c35a79e273665f12e40203f24e191b6013950854b621a31c7310c0cea846b51e58d61006174a77594a2f3d2768e7881e0884bf01178fb02d775ab9b9181d9cee763f6bf314bccffe254e3f5fcc9f179605e4b431fafc340425d660ef4e02bd6a3566de24c13f26f4f8dafcd6f265411f1bf0f434ec44604d9b12b052ba1e2d954b7f7b1752127d8ffa125221885363e484945d658a874c3f13cd17a626d4ef8968b6ec9d6dcdcd0f04407ce335cfa1181f342e9145933d02b77c3bd259eaa58d62ab93af2ff2bcf090efe5ef7a25bf0155ad4fdcb40af4708e156f8d811b9154e27dbf55d35345a691df946f4e8251f2f9f9a62cf450e8e13ae2c924e6c6379befff3dbd48b8360e1a449aa9dc7d690df7d5a8d44bf4aad919d1627dc43fd360656fcc918259c57b059d701cf32dbb7d37836a785fad7c1752a6ad4c14c80d1794e25fe25142c6313adc13de09f5d9f4e79eeaac980b36d13ab970165ab3229fbc91022943b51397eb62a7b16cf4e38ebb50f720d62a0160a76c80ea9a673be984dbb7ecc07567fecd7709fefa3690896395865949a15a54dd4174abaecaf868833cc7e8056ab2293021891b0ade9077eb1b378f356c1e0a9ec5318940fa0e5750487f38b7234b2e73abbd93b1a476f66f69ee7b6b0332c5e6c60fb9eb5181d81f69462f42c5bea59109d4ceb9b4881caa454b57263e0ade64884d3d1e52e32fe9bb2c7d3ae2ae6775f2c5e3f09094b09edfe7808e2beeacf57685f03507826807b8f222f70ba7de957c97bf1c03c4e24384863752a6a2b6ec4f3374915b9b7ad1814594a67ba57fc86a59806c72fe19e681fafcbd723bedbf0fd27a7667799d5f61715e12e71e2ad33ebbbe3f66233634b4e5c84af6d196b8bc31500822133c64cb670e7b5d734b9fd493e9d21285346e33ecdf7c70a2df497720120c972516c8df989b16099f8f930ca1313ab650fe4d476ec2d4496ed80fa100c71dc848c5eec94ff8ce5c5116e59b9c33ee82092a58547d6b8d1770e64133fe67a1df39c275ea71308de8832ce838f7881d4f46066c6cced0a69ef4d262b8bffb93994de0c396d2a924f34d1f1ed16b82fccf6b0264185c620067f565d3b1d51fde962e076c328f17734b2c8f8ceb560015e418d8155785a63dfb7c25e3f50a18caad68b76ff2ea598aa84d448680be81f6f35e856487be49e58f6ce052918f4056941ede19244f43b4e380463249a9aef7ef757162f845cd42cdc037fc45bc7ffe02c68896015678121071d73438d9247dc39f4acfcf33b6bbf764d5f23d20b8b1df2a1a26ce263e1232b1ddbb6d453a17d68c0ca5a37c20965ceaca4903230bf46d561d9f5f60b277f7d15a4aa7627dcc0156f426d5ea1622cfbcf8736676269b2a7b9e0600313de0e5063e5d4b22f8ae4258ad57fc43bae1d83d507e6ce4965315b7d9432454d43b58b824f3fbd3cada2411290c0b26080532fddbd4505aac8cfb26cb5ad35103955b867901915586b4458c8d614aadfa2aa61103459ca54161a7bc28315b76d86bec911d2fc8b3b3cd42ba02fcab5a00979586a1ccd3bddcd4ea13484080f4e93c83f6d2e328857fd0fb44bdbe00a4dd7fa39085bcc839eeb67a478d2a652b4cc8ea9c55b493f4c883b2f51a1d2c38b91ec4c75e2667ad6a80193e70dc1553ea3261773d304bcd8d3bbff900ac11cad3b04e2060dd8de7cba19173eb7e26f19f17b477be08f4c1526217938ac28517bba9499e9a168bf76a9fdf4dbbbf8de46573961b5cdd17504839205ee9c1e2dfadbe93c45fb58d5d2f8fc359117ce09759c47167c06d2f9e1f4cb413f510a1e7391daa20b7d5f4c2e19312fa0fe24c03e4645649d3777084493e96257f1fc84ede2b1631c7ad0008f765fe080277d28b3bd2add2f94c3d14c290b7be1895003c1d6760bf03d5efb4575d0b338d99cf547ef3d4a4a5833856aa9c4ffc87609cf3055121f9da94b8485415fef2b0f03d281818ac232d7112c85fc2df425cd4b00b59383510705abebcbf75ec6a650cf785c3615c194dded4e9a46dee9e93088a5f49799f41d9decf8c14214a9e0224eb657fc7309452aa873cdfbb1702e6d3c3e4445ce7fc7403b564bf6538a0398c28fd39dc1b10c2c2efb0753e3f2a0d8af344a06cd86c0d89fdc01227634a75a7f820f1e070718fcd0ab775061bd00eb4f9113da6af4ba0d3802b927ca2c1a34481545f30ff047b6f38628ef2ea0710e5dc6226b4215ecd49eda72f63aa242b7f41062fc331548f12dff8b749be9b600ebb9d6d14100e515620c377d84880f14cf9d477662f95a2ffa9aa8e8b7e243f88bfd769b1f1b088f5ede4e3a5b30b476ab1909850e7aafb6bea4f0ca9a28c53fbae2742ce29af68ba166429f78f0783b85b887735d95240491e727a022fef571057081d58e80dd6218ca1ce8e8126ef23fd738bdd607224f2544f6d0f76084c02c9c8d51367b6511ae475f349f2943d4bff00bd3ee93da107f87de8626a42cd65c4d20c0e9369373a605a308e6caff622dedd7701d415ac59478afbc21063e69772cbd14000d15f1da4d6590689f75e35b69828f22e6d4495a4d29dba102d94286c4cfda8df891af766a3026e30a5b69eca31d5cccf7e2bd4aa35e05fc293e60e5efec4b397810a0c600f888aa2d01840961561de7bd06b70f440102bec4da1933422e21196e76ba7b29b3d91757e168b9ca43bcffbc537f98a371379cb221b1fa99fbbae92bf480b74e1a4fab1a5043676da09e0a122fba5dee8f4e1b5a7ac93f478ffe7f4dd282ffd65df8535bd892664d5fbf20d8d810e88374e1e7b08878c1702c4bdc73b06ed3aa8555c0226f8892ae1d18146853773d34438d29c5f78ed575848e24f69986fb4b7e3c4dccf4fb4eb98435817e1481c1404b81f2d0fa8708228570643ade46bd56bac46601298d1fcf29301d4538be64a7481701960db1219fae500ee9260f9fa5447c65a59b9cd25a61908b9924c0ab7dbd131884e20b9e36aaebe28dcf82994bc5d439a384bee3f40df3525275e14c3e515945aa1950161d3bc011a1cb3fbac86bcb2fd9f9222f79363d1161256940a418e27a88653e2edb3685d1ec91f2590b9aacd9de6a16c25c962ecf311c227f42c3b539611a3cfc3d3fe19ff02891c7956b14d72a6e496686bdf1f7d97dcc1da8bf14db9754638fdce87edb286836ee36bdcf119b263491caf63bc58b2a6e12c4741f7e8661296b06db00b20af4f4dd80d4bc7ea2017d475ce8e12449fa2a6d23eca13b433efa6bd08e12b55ee02c4cdd29339460c23a5f41df5b77878a038bb427b124eac25629ad215fac8257e605c4dce841446bcda22c739de4e8faa6977e2c6a20917bf8eaf21a4bc71f0ccac54e86a3de17e710f976a6c82c3d5263fb4908e7db770dfbeaa0080e0167434f2eb1cfb9f9bb8d75b999ac5ea7e6eb258de3a30dce091c7fe7fe53c335a3119bd370cafcecd6f252e24c37027cb4aadb95b71096d5183f4f05aea8d0a7e0d2e32278ca6de33ae6249d535b269fa5a737d5c8982ad8b144a28c95a8d75f6e93f9f6d082d66cbcff0d2ed298e83b2fa700d9606d5982334c20cd8d85df66ba0be1bd2c13203acec9c9970ba5e612e1c552e36dceef16f86b40c4d65b682ff6cbfa00cb1c3ffd13d5a448cb90afeb8e6fc8afc0be10e41dd884aa8c8cbbce28f55eae100ae7d49373550546c635c8fff9941b495105ad38d3404226bb98937d6ff5f116bb7937158dc9b16e289bcadba0ce0b11d07873d89fef327ee60b020b8410bab50d6ee904052dca13d126543925a8f776c9d050076caf1568eaba47cdf58bcbd15f09b269a5eeda488fdf5c5a63bc199084e381cee191898c371a904c3744265b8b493a59d6224413a2fa221dc11e2173d11017fd8bfc41d9136dc86be462004194c704d1d4731bc2d3ba3884d7d49e0fb2fc5fd2fb2ee964586ad4cc21010b730c4737ec4a0e7d64bc541182dd8b2480e24d81550bc607d6ed44d63a738ce74f81a51a8542d2c682c85241adc3e9a3c0dff8d751776581304a6cd753c45eff6d8fd0ac0a516a4fa1c75247f89708222330886d36bdde5be047783fbdf4d715ef05cfa7aeb61b9d2b08e0e18ea7dd19ddb7f6bd7510f99a4081defaab08edac344565d93613ff3011d95e938d0e0fc4e1673159ab5b2edbeb737ea9ab202b6cd35e0a15bbd40fdc8805cea342748d09f73b809b2d628fe0f49456fe6925290ba03462fa68dfdb0730546457e2b0328d2f4266c14755c1c24d21a362656df0d0f02dcbcba5724595ed37ba53b3907245a44e62d12051bb726f85095d4920ab45680b9fd35224dd7a2067d41e7ea7b7b81b09e25f773c50bd25346435e3660003efedc5876879a81962fd8dea7e7249557f795a575e27ce686e5928c0d5a7b9b925974cb4d75fa5381a19869b7e539dbe6cc61104f92a1ff8d4802e0d52da543436436b5737ff54ea01c6595a050fd744e4de1cc813ef7af1f89338d6ad88a8a8351db409921a58c52aef6c6c6a74b8ad6b452983b1babe8bbccca88689ebbd20cec93bc5cc006075a1203b7da23f3b74bed90c43e8fc17359820994c123765a3c471729528f713fe09905f329f38303adc18a73b9a571159ee3b576fdbf26ae89b9e2b6bc6751fd5947375dd880e646799c17dd3385587ad7fa77f88483f5c43a5ae00cc770e2b04014ee263c0053a3bc94c8d6eb4e3ae69b23af72156c2ce124465443c3699816360205782f6028774d5ff05c21364ba822dcfc5f8cfe0738ae9477d2c2bd243913b2992ad98aa45c86c22f61eb005480a9085ed52bc805f11cbb3fefe4e07a884b52991b1ebdefed51683c5c062fe072bd8469c94ce91f726c689f8a10ae5b6fcba4bd5e599962c69872df50681f89c890f97c6c031c873253c3bf133d41c095f530f13a11e910ee05056377183ab5c40bc1a60f8727a552a798e80bbf9039a433e780127f4ef51435abb2ee8a62291537fe88b0a3a8de4657f41f2de4e998723334ccfe47eebb64c4fcdf7d7c6f5500b48121d20fdb37b38c6a3d638a747310fb34e4bc1fcd648537f25492e2e07ef2099584d4c89e911da702b46f54d8feadebe1692dad18850fe55ab268b91f75cce850482bdefe7d278a1a1", 0x1000}, {&(0x7f0000001080)="58faa8bae8237989412617d84c199d7de744b2174586dccd43efaed40cf549438d80687165a46cfa74387b1aae13753a9ec5cdb819", 0x35}, {&(0x7f00000010c0)="ebe2edc2dc0b2d390b176a2865301a0617e676a020e157", 0x17}, {&(0x7f0000001100)="2556e20cab8d53505200d3e2cc652630b6a296324513cf86e0eb4e40ea5ef414dde0811d667b72c54423bbae6e71d7955e07167565084abe3909955693aa74f592d6764faeb09d9786610fc5c1", 0x4d}], 0x5, 0x4) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001040000000c0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000047880000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:35 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x31d000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x300, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 317.146170][T25948] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000048880000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x500, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001040000000d0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x5c4, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:35 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) vmsplice(r0, &(0x7f0000001180)=[{&(0x7f0000000040)="ae96fd1820f58a269de8c62509c8ef6a8ad7d160158f35add4abc0bb13a4a6ff3314f6e78a64e4abf2e99201f4ab1bcc9f97bfc689f680d186b5f51e1a7d62", 0x3f}, {&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="58faa8bae8237989412617d84c199d7de744b2174586dccd43efaed40cf549438d80687165a46cfa74387b1aae13753a9ec5cdb819", 0x35}, {&(0x7f00000010c0)="ebe2edc2dc0b2d390b176a2865301a0617e676a020e157", 0x17}, {&(0x7f0000001100)="2556e20cab8d53505200d3e2cc652630b6a296324513cf86e0eb4e40ea5ef414dde0811d667b72c54423bbae6e71d7955e07167565084abe3909955693aa74f592d6764faeb09d9786610fc5c1", 0x4d}], 0x5, 0x4) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000ffffa8880000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:35 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000100)=ANY=[], 0x200002e6) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') r1 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = syz_io_uring_setup(0x7f65, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, r1}, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000300)) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {r4}, {}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {r5, r6}, {}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {}, {r5}, {}, {}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r5}, {}, {r4}, {}, {}, {}, {r4}, {r4, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r4}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000054240)={{0x0, 0x9, 0x9, 0xfffffffffffffff8, 0x9, 0xb3d, 0x3, 0xfffffffb, 0x7fff, 0x7, 0x2, 0x1ff, 0x40, 0x10, 0x8}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {r9}, {0x0, r10}, {}, {}, {r8}, {}, {}, {}, {r8, r10}, {}, {}, {0x0, r10}, {r9, r10}, {}, {r8, r10}, {}, {0x0, r10}, {r9}, {}, {0x0, r10}, {r9}, {}, {r9}, {}, {}, {}, {}, {}, {}, {r9}, {r8}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {r8}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {r9}, {0x0, r10}, {}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8}, {0x0, r10}, {0x0, r10}, {r8, r10}, {r9}, {}, {r8}, {}, {}, {}, {r8}, {r8, r10}, {}, {0x0, r10}, {}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {0x0, r10}, {}, {}, {r9}, {0x0, r10}, {}, {r8}, {}, {}, {}, {0x0, r10}, {r8, r10}, {0x0, r10}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8, r10}, {}, {0x0, r10}, {}, {}, {0x0, r10}, {}, {r8}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {r9}, {0x0, r10}, {}, {}, {}, {}, {r8}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000054500)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r7, r10}, {0x0, r11}], 0x1f, "92520449475167"}) io_uring_enter(r1, 0x2ff, 0x5, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000400)) r12 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r12, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) dup2(r12, r0) fcntl$setpipe(r0, 0x407, 0x7000000) 14:53:35 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x31e000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x600, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000ffffff9e0000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 317.315149][T26070] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x900, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:35 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) vmsplice(r0, &(0x7f0000001180)=[{&(0x7f0000000040)="ae96fd1820f58a269de8c62509c8ef6a8ad7d160158f35add4abc0bb13a4a6ff3314f6e78a64e4abf2e99201f4ab1bcc9f97bfc689f680d186b5f51e1a7d62", 0x3f}, {&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="58faa8bae8237989412617d84c199d7de744b2174586dccd43efaed40cf549438d80687165a46cfa74387b1aae13753a9ec5cdb819", 0x35}, {&(0x7f00000010c0)="ebe2edc2dc0b2d390b176a2865301a0617e676a020e157", 0x17}, {&(0x7f0000001100)="2556e20cab8d53505200d3e2cc652630b6a296324513cf86e0eb4e40ea5ef414dde0811d667b72c54423bbae6e71d7955e07167565084abe3909955693aa74f592d6764faeb09d9786610fc5c1", 0x4d}], 0x5, 0x4) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000ffffffea0000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001040000000e0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 317.397992][ C1] sd 0:0:1:0: tag#4010 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 317.407858][ C1] sd 0:0:1:0: tag#4010 CDB: opcode=0xe5 (vendor) [ 317.414210][ C1] sd 0:0:1:0: tag#4010 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 317.423260][ C1] sd 0:0:1:0: tag#4010 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 317.432312][ C1] sd 0:0:1:0: tag#4010 CDB[20]: ba 14:53:35 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0xa00, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000ffffffef0000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:35 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x31f000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:35 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000fffffff00000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 317.469890][T26200] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001040000000f0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0xc00, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:36 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x7f65, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, r2}, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000300)) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {r4}, {}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {r5, r6}, {}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {}, {r5}, {}, {}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {0x0}, {}, {r5}, {}, {}, {r4}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r5}, {}, {r4}, {}, {}, {}, {r4}, {r4, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r4}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000054240)={{0x0, 0x9, 0x9, 0xfffffffffffffff8, 0x9, 0xb3d, 0x3, 0xfffffffb, 0x7fff, 0x7, 0x2, 0x1ff, 0x40, 0x10, 0x8}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {r10}, {0x0, r11}, {}, {}, {r9}, {}, {}, {}, {r9, r11}, {}, {}, {0x0, r11}, {r10, r11}, {}, {r9, r11}, {}, {0x0, r11}, {r10}, {}, {0x0, r11}, {r10}, {}, {r10}, {}, {}, {}, {}, {}, {}, {r10}, {r9}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {r9}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {r10}, {0x0, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {r10}, {}, {r9}, {}, {}, {}, {r9}, {r9, r11}, {}, {0x0, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {0x0, r11}, {}, {}, {r10}, {0x0, r11}, {}, {r9}, {}, {}, {}, {0x0, r11}, {r9, r11}, {0x0, r11}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9, r11}, {}, {0x0, r11}, {}, {}, {0x0, r11}, {}, {r9}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {r10}, {0x0, r11}, {}, {}, {}, {}, {r9}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000054500)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r8, r11}, {0x0, r12}], 0x1f, "92520449475167"}) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) fcntl$lock(r2, 0x24, &(0x7f0000000140)={0x2, 0x1, 0xabfd, 0x5, r13}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) pipe(&(0x7f0000000200)={0xffffffffffffffff}) write$P9_RGETLOCK(r14, &(0x7f0000000340)={0x25, 0x37, 0x1, {0x1, 0x9, 0x5, r13, 0x7, 'pipefs\x00'}}, 0x25) fcntl$setpipe(r1, 0x407, 0x7000000) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x20060c0, 0x0) 14:53:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000fffffffc0000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:36 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x320000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:36 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) r2 = socket$caif_stream(0x25, 0x1, 0x2) write$binfmt_elf64(r2, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0x3, 0x2, 0x0, 0x101, 0x3, 0x3e, 0x5, 0x280, 0x40, 0x39, 0x779, 0x7, 0x38, 0x1, 0x7, 0x0, 0x21ff}, [{0x1, 0x6, 0xff, 0x100000000, 0xffffffffffffff76, 0x100000001, 0x5, 0x7}], "a43f99e6ffb8201c298c2246ad9d835fd939b28d02c94acf432f30234585af2b80cef637fd601a26ca8fef2120e19dc10d8d510afaf6e6844e20057397efcec7e5accde0a7b3830f6ec2ee7c4e7dd892a5dbdcabc56cc1689d8391c3e27d62e36e6479e2c4dfce0b0ea3439ac1115c154d15b776e743bac56be2500c48775e5b61a130a7d538d17b51868e5bc7719ba622110930cafa4e3c9e33ebe54c54480ddaaafadeda46cbfcfa9d1528fe50abcd294b66a9c0ac152fd6622dc1869a8d34fc8f999bc9527134c51165cac1ed53a24550ddbd7b217016ba33a557", ['\x00', '\x00']}, 0x354) r3 = dup2(r0, r1) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x501b, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000780)={0x0, 0x1, 0x9}) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0xffffffffffffffff, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2000, @fd_index, 0x0, 0x4222, 0x3, 0x6}, 0x7f) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x3, 0x0, 0x0, 0x2, 0x4, 0x1, {0x0, r7, r4}}, 0xffffffff) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000054300)) writev(r8, &(0x7f0000000240)=[{&(0x7f0000000040)="ec420b24cb2f14fa6b88afd31f66d794f7dad753cdfc759813975f507c42c3fe0a44", 0x22}, {&(0x7f0000000080)="1a35fb60890bbe131b56b92d0e719199f9009d76dcf6ba40d5448ad1825a1f8ec8a9abe22571ee5d135fc10af7617044e0814617b8910a40d73a0f6f950fc08d4c78a059a58657dbfffe761a275a296a00e896479f9b8c81df80e9df2fbaf9eb1c6b8398a0d0df8fdff634208fccbdef0664396b0dba9c56a18e2746402b201132079314f7b260ec5ca8ae71c0cb3ac0abbf4f7420bcb5d8c42eca55a65b122b396775892c8b5b67bf351ed55b588b3b2dbc02ff73dc65ea781cf6705688509484fbab1f915fa460ff2ff8fd29cbc8ebdfe4cbdae16a0430c6ee6626c2280194d90570da6673c061675eea69d2803c3b9507", 0xf2}, {&(0x7f0000000180)="9ed5e857f9c355686860c709b1890d1e40a1cde757a295be1ab0ea4113a07f417d2d4a45b2a602c8bf9ec8b4407fd4db84921fe771e5354e9e518cc461cb3b905998df032f06d93c0b442f04618d", 0x4e}], 0x3) fcntl$setpipe(r4, 0x407, 0x7000000) 14:53:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0xe75, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000fffffffe0000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1000000007fffffff0000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000100000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0xf00, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:36 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000040)="702ea685b9410c8b3ce0c434ce3b4c2289b6f30f82f86a0ec5eef8a1f6bbe1702a7bd768c4a424b2f6851badf72d08d2563e3ac85fb0eff0eb08177ccea1c7c0", 0x40) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 1) 14:53:36 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x321000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 318.283790][ T24] audit: type=1400 audit(1638024816.186:526): avc: denied { write } for pid=26326 comm="syz-executor.2" path="socket:[79074]" dev="sockfs" ino=79074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 14:53:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x4788, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000ffffffff0000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000110000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 318.375355][T26451] loop4: detected capacity change from 0 to 262160 [ 318.411405][T26451] FAULT_INJECTION: forcing a failure. [ 318.411405][T26451] name failslab, interval 1, probability 0, space 0, times 0 [ 318.424055][T26451] CPU: 1 PID: 26451 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 318.432887][T26451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.442985][T26451] Call Trace: [ 318.446263][T26451] [ 318.449185][T26451] dump_stack_lvl+0xd6/0x122 [ 318.453775][T26451] dump_stack+0x11/0x1b [ 318.457935][T26451] should_fail+0x23c/0x250 [ 318.462350][T26451] ? alloc_pipe_info+0xac/0x350 [ 318.467251][T26451] __should_failslab+0x81/0x90 [ 318.472088][T26451] should_failslab+0x5/0x20 [ 318.476771][T26451] kmem_cache_alloc_trace+0x52/0x350 [ 318.482159][T26451] alloc_pipe_info+0xac/0x350 [ 318.486959][T26451] splice_direct_to_actor+0x5f7/0x650 [ 318.492510][T26451] ? security_file_permission+0x7c/0xa0 [ 318.498059][T26451] ? do_splice_direct+0x190/0x190 [ 318.503069][T26451] ? security_file_permission+0x87/0xa0 [ 318.508599][T26451] do_splice_direct+0x106/0x190 [ 318.513462][T26451] do_sendfile+0x675/0xc40 [ 318.517865][T26451] __x64_sys_sendfile64+0x102/0x140 [ 318.523053][T26451] do_syscall_64+0x44/0xd0 [ 318.527469][T26451] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 318.533351][T26451] RIP: 0033:0x7f48b3ecaae9 [ 318.537983][T26451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 318.557574][T26451] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 318.565977][T26451] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 14:53:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x4888, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:36 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x322000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100020000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 318.573936][T26451] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 318.581889][T26451] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 318.589841][T26451] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001 [ 318.597797][T26451] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 318.605763][T26451] 14:53:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 2) 14:53:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x5865, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000120000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 318.725741][T26476] loop4: detected capacity change from 0 to 262160 [ 318.755467][T26476] FAULT_INJECTION: forcing a failure. [ 318.755467][T26476] name failslab, interval 1, probability 0, space 0, times 0 14:53:36 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100030000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x6000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001040000021e0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:36 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x323000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 318.768275][T26476] CPU: 1 PID: 26476 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 318.777037][T26476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.787102][T26476] Call Trace: [ 318.790384][T26476] [ 318.793308][T26476] dump_stack_lvl+0xd6/0x122 [ 318.797922][T26476] dump_stack+0x11/0x1b [ 318.802118][T26476] should_fail+0x23c/0x250 [ 318.806532][T26476] ? kcalloc+0x32/0x40 [ 318.810687][T26476] __should_failslab+0x81/0x90 [ 318.815528][T26476] should_failslab+0x5/0x20 [ 318.820031][T26476] __kmalloc+0x6f/0x370 [ 318.824251][T26476] ? security_capable+0x91/0xa0 [ 318.829413][T26476] kcalloc+0x32/0x40 [ 318.833345][T26476] alloc_pipe_info+0x1be/0x350 [ 318.838115][T26476] splice_direct_to_actor+0x5f7/0x650 [ 318.843527][T26476] ? security_file_permission+0x7c/0xa0 [ 318.849162][T26476] ? do_splice_direct+0x190/0x190 [ 318.854190][T26476] ? security_file_permission+0x87/0xa0 [ 318.859863][T26476] do_splice_direct+0x106/0x190 [ 318.864881][T26476] do_sendfile+0x675/0xc40 [ 318.869293][T26476] __x64_sys_sendfile64+0x102/0x140 [ 318.874572][T26476] do_syscall_64+0x44/0xd0 [ 318.879003][T26476] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 318.884970][T26476] RIP: 0033:0x7f48b3ecaae9 [ 318.889381][T26476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 318.909421][T26476] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 318.917836][T26476] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 14:53:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 3) 14:53:36 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x324000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x6558, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 318.925808][T26476] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 318.933823][T26476] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 318.941791][T26476] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001 [ 318.949756][T26476] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 318.957872][T26476] 14:53:36 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) write$P9_RWRITE(r1, &(0x7f0000000000)={0xb, 0x77, 0x1, 0x1}, 0xb) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) dup(r2) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100040000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000200000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:36 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x750e, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:36 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100050000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x8100, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 319.075890][T26510] loop4: detected capacity change from 0 to 262160 14:53:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000210000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100060000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 319.152596][T26510] FAULT_INJECTION: forcing a failure. [ 319.152596][T26510] name failslab, interval 1, probability 0, space 0, times 0 [ 319.165491][T26510] CPU: 0 PID: 26510 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 319.174322][T26510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.184371][T26510] Call Trace: [ 319.187722][T26510] [ 319.190725][T26510] dump_stack_lvl+0xd6/0x122 [ 319.195400][T26510] dump_stack+0x11/0x1b [ 319.199553][T26510] should_fail+0x23c/0x250 [ 319.204030][T26510] ? kmalloc_array+0x2d/0x40 [ 319.208700][T26510] __should_failslab+0x81/0x90 [ 319.213466][T26510] should_failslab+0x5/0x20 [ 319.217972][T26510] __kmalloc+0x6f/0x370 [ 319.222128][T26510] kmalloc_array+0x2d/0x40 [ 319.226603][T26510] iter_file_splice_write+0xd5/0x790 [ 319.231907][T26510] ? atime_needs_update+0x2ba/0x390 [ 319.237101][T26510] ? touch_atime+0x11f/0x2e0 [ 319.241741][T26510] ? generic_file_splice_read+0x2a9/0x330 [ 319.247461][T26510] ? splice_from_pipe+0xd0/0xd0 14:53:37 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) socket$inet6_udp(0xa, 0x2, 0x0) [ 319.252333][T26510] direct_splice_actor+0x80/0xa0 [ 319.257313][T26510] splice_direct_to_actor+0x345/0x650 [ 319.262726][T26510] ? do_splice_direct+0x190/0x190 [ 319.267753][T26510] do_splice_direct+0x106/0x190 [ 319.272676][T26510] do_sendfile+0x675/0xc40 [ 319.277091][T26510] __x64_sys_sendfile64+0x102/0x140 [ 319.282273][T26510] do_syscall_64+0x44/0xd0 [ 319.286748][T26510] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 319.292744][T26510] RIP: 0033:0x7f48b3ecaae9 [ 319.297152][T26510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 319.317889][T26510] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 319.326301][T26510] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 319.334271][T26510] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 319.342335][T26510] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 14:53:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 4) 14:53:37 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x325000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x8847, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100070000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 319.350346][T26510] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001 [ 319.358748][T26510] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 319.366839][T26510] 14:53:37 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000100)=ANY=[], 0x200002e6) r1 = open(&(0x7f0000000040)='./file0\x00', 0x509000, 0xa) dup2(r1, r0) fcntl$setpipe(r0, 0x407, 0x7000000) 14:53:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x8848, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100080000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 319.449158][T26540] loop4: detected capacity change from 0 to 262160 [ 319.486248][T26540] FAULT_INJECTION: forcing a failure. [ 319.486248][T26540] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 319.499521][T26540] CPU: 1 PID: 26540 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 319.508326][T26540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.518545][T26540] Call Trace: [ 319.521848][T26540] [ 319.524770][T26540] dump_stack_lvl+0xd6/0x122 [ 319.529382][T26540] dump_stack+0x11/0x1b [ 319.533668][T26540] should_fail+0x23c/0x250 [ 319.538080][T26540] __alloc_pages+0x102/0x330 [ 319.542713][T26540] alloc_pages+0x382/0x3d0 [ 319.547123][T26540] folio_alloc+0x1a/0x20 [ 319.551390][T26540] filemap_alloc_folio+0x53/0xf0 [ 319.556405][T26540] __filemap_get_folio+0x443/0x690 [ 319.563026][T26540] pagecache_get_page+0x26/0xe0 [ 319.567898][T26540] grab_cache_page_write_begin+0x3f/0x50 [ 319.573748][T26540] cont_write_begin+0x4ab/0x7b0 [ 319.578604][T26540] fat_write_begin+0x61/0xf0 [ 319.583199][T26540] ? fat_block_truncate_page+0x30/0x30 [ 319.589880][T26540] generic_perform_write+0x1c8/0x400 [ 319.595173][T26540] __generic_file_write_iter+0x195/0x2b0 [ 319.600836][T26540] ? generic_write_checks+0x250/0x290 [ 319.606340][T26540] generic_file_write_iter+0x75/0x130 [ 319.611725][T26540] do_iter_readv_writev+0x2de/0x380 [ 319.616992][T26540] do_iter_write+0x192/0x5c0 [ 319.621594][T26540] vfs_iter_write+0x4c/0x70 [ 319.626101][T26540] iter_file_splice_write+0x43a/0x790 [ 319.631483][T26540] ? splice_from_pipe+0xd0/0xd0 [ 319.636349][T26540] direct_splice_actor+0x80/0xa0 [ 319.641442][T26540] splice_direct_to_actor+0x345/0x650 14:53:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000250000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:37 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x326000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:37 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f00000001c0)={&(0x7f00000000c0)=""/251, 0xfb, 0x400, 0x1}) fcntl$setpipe(r1, 0x407, 0x7000000) [ 319.646867][T26540] ? do_splice_direct+0x190/0x190 [ 319.651959][T26540] do_splice_direct+0x106/0x190 [ 319.656807][T26540] do_sendfile+0x675/0xc40 [ 319.661402][T26540] __x64_sys_sendfile64+0x102/0x140 [ 319.666597][T26540] do_syscall_64+0x44/0xd0 [ 319.671114][T26540] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 319.677030][T26540] RIP: 0033:0x7f48b3ecaae9 14:53:37 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x327000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 319.681441][T26540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 319.701082][T26540] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 319.709496][T26540] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 319.717466][T26540] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 319.725462][T26540] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 319.733433][T26540] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001 [ 319.741399][T26540] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 14:53:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100090000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 5) 14:53:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0xc405, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 319.749355][T26540] 14:53:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x1000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:37 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:37 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1000a0000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001040000002c0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 319.828790][T26570] loop4: detected capacity change from 0 to 262160 [ 319.886613][T26570] FAULT_INJECTION: forcing a failure. [ 319.886613][T26570] name failslab, interval 1, probability 0, space 0, times 0 [ 319.899594][T26570] CPU: 0 PID: 26570 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 319.908408][T26570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.918459][T26570] Call Trace: [ 319.921734][T26570] [ 319.924663][T26570] dump_stack_lvl+0xd6/0x122 [ 319.929353][T26570] dump_stack+0x11/0x1b 14:53:37 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) r2 = accept$phonet_pipe(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10) fcntl$setpipe(r2, 0x407, 0x57a) 14:53:37 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x328000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 319.933553][T26570] should_fail+0x23c/0x250 [ 319.937979][T26570] ? mempool_alloc_slab+0x16/0x20 [ 319.943088][T26570] __should_failslab+0x81/0x90 [ 319.947853][T26570] should_failslab+0x5/0x20 [ 319.952535][T26570] kmem_cache_alloc+0x4f/0x320 [ 319.957350][T26570] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 319.963515][T26570] mempool_alloc_slab+0x16/0x20 [ 319.968390][T26570] ? mempool_free+0x130/0x130 [ 319.973123][T26570] mempool_alloc+0x9d/0x310 [ 319.977635][T26570] bio_alloc_bioset+0xcc/0x560 [ 319.982417][T26570] ? __getblk_gfp+0x3f/0x530 [ 319.987068][T26570] submit_bh_wbc+0x133/0x320 [ 319.991651][T26570] __bread_gfp+0x110/0x220 [ 319.996205][T26570] fat_ent_bread+0xc5/0x160 [ 320.000853][T26570] ? fat32_ent_set_ptr+0x70/0x70 [ 320.005785][T26570] fat_alloc_clusters+0x411/0xab0 [ 320.010853][T26570] ? debug_smp_processor_id+0x18/0x20 [ 320.016266][T26570] fat_get_block+0x267/0x610 [ 320.020860][T26570] __block_write_begin_int+0x4c5/0x1010 [ 320.026409][T26570] ? fat_block_truncate_page+0x30/0x30 [ 320.031918][T26570] cont_write_begin+0x4cf/0x7b0 14:53:37 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x329000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 320.036815][T26570] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 320.042970][T26570] fat_write_begin+0x61/0xf0 [ 320.047626][T26570] ? fat_block_truncate_page+0x30/0x30 [ 320.053166][T26570] generic_perform_write+0x1c8/0x400 [ 320.058459][T26570] __generic_file_write_iter+0x195/0x2b0 [ 320.064101][T26570] ? generic_write_checks+0x250/0x290 [ 320.069476][T26570] generic_file_write_iter+0x75/0x130 [ 320.074844][T26570] do_iter_readv_writev+0x2de/0x380 [ 320.080024][T26570] do_iter_write+0x192/0x5c0 [ 320.084749][T26570] ? splice_from_pipe_next+0x34f/0x3b0 [ 320.090257][T26570] ? kmalloc_array+0x2d/0x40 [ 320.094862][T26570] vfs_iter_write+0x4c/0x70 [ 320.099385][T26570] iter_file_splice_write+0x43a/0x790 [ 320.104819][T26570] ? splice_from_pipe+0xd0/0xd0 [ 320.109704][T26570] direct_splice_actor+0x80/0xa0 [ 320.114641][T26570] splice_direct_to_actor+0x345/0x650 [ 320.120017][T26570] ? do_splice_direct+0x190/0x190 [ 320.125050][T26570] do_splice_direct+0x106/0x190 [ 320.129952][T26570] do_sendfile+0x675/0xc40 14:53:38 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x32a000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 320.134469][T26570] __x64_sys_sendfile64+0x102/0x140 [ 320.139730][T26570] do_syscall_64+0x44/0xd0 [ 320.144153][T26570] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 320.150108][T26570] RIP: 0033:0x7f48b3ecaae9 [ 320.154562][T26570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 320.174185][T26570] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 14:53:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1000b0000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 320.182594][T26570] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 320.190609][T26570] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 320.198566][T26570] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 320.206627][T26570] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001 [ 320.214741][T26570] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 320.222809][T26570] 14:53:38 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x32b000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 6) 14:53:38 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x3000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1000c0000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001040000012c0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:38 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x32c000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1000f0000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 320.399973][T26610] __nla_validate_parse: 11 callbacks suppressed [ 320.399990][T26610] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 320.456848][T26619] loop4: detected capacity change from 0 to 262160 [ 320.477268][T26619] FAULT_INJECTION: forcing a failure. [ 320.477268][T26619] name failslab, interval 1, probability 0, space 0, times 0 [ 320.489925][T26619] CPU: 1 PID: 26619 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 320.498696][T26619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.508799][T26619] Call Trace: [ 320.512078][T26619] [ 320.515005][T26619] dump_stack_lvl+0xd6/0x122 [ 320.519649][T26619] dump_stack+0x11/0x1b [ 320.523807][T26619] should_fail+0x23c/0x250 [ 320.528223][T26619] ? mempool_alloc_slab+0x16/0x20 [ 320.533367][T26619] __should_failslab+0x81/0x90 [ 320.538137][T26619] should_failslab+0x5/0x20 [ 320.542692][T26619] kmem_cache_alloc+0x4f/0x320 [ 320.547461][T26619] ? folio_mark_accessed+0x12f/0x380 [ 320.552828][T26619] mempool_alloc_slab+0x16/0x20 [ 320.557690][T26619] ? mempool_free+0x130/0x130 [ 320.562507][T26619] mempool_alloc+0x9d/0x310 [ 320.566991][T26619] bio_alloc_bioset+0xcc/0x560 [ 320.571857][T26619] submit_bh_wbc+0x133/0x320 [ 320.576466][T26619] ? __list_del_entry_valid+0x54/0xc0 [ 320.581826][T26619] __sync_dirty_buffer+0x136/0x1e0 [ 320.586971][T26619] sync_dirty_buffer+0x16/0x20 [ 320.591758][T26619] fat_mirror_bhs+0x24b/0x330 [ 320.596454][T26619] fat_alloc_clusters+0x9ad/0xab0 [ 320.601542][T26619] fat_get_block+0x267/0x610 [ 320.606157][T26619] __block_write_begin_int+0x4c5/0x1010 [ 320.611771][T26619] ? fat_block_truncate_page+0x30/0x30 [ 320.617209][T26619] cont_write_begin+0x4cf/0x7b0 [ 320.622045][T26619] fat_write_begin+0x61/0xf0 [ 320.626655][T26619] ? fat_block_truncate_page+0x30/0x30 [ 320.632114][T26619] generic_perform_write+0x1c8/0x400 [ 320.637401][T26619] __generic_file_write_iter+0x195/0x2b0 [ 320.643077][T26619] ? generic_write_checks+0x250/0x290 [ 320.648519][T26619] generic_file_write_iter+0x75/0x130 [ 320.653880][T26619] do_iter_readv_writev+0x2de/0x380 [ 320.659120][T26619] do_iter_write+0x192/0x5c0 [ 320.663781][T26619] ? splice_from_pipe_next+0x34f/0x3b0 [ 320.669306][T26619] ? kmalloc_array+0x2d/0x40 [ 320.673897][T26619] vfs_iter_write+0x4c/0x70 [ 320.678530][T26619] iter_file_splice_write+0x43a/0x790 [ 320.683914][T26619] ? splice_from_pipe+0xd0/0xd0 [ 320.688833][T26619] direct_splice_actor+0x80/0xa0 [ 320.693830][T26619] splice_direct_to_actor+0x345/0x650 [ 320.699183][T26619] ? do_splice_direct+0x190/0x190 [ 320.704186][T26619] do_splice_direct+0x106/0x190 [ 320.709017][T26619] do_sendfile+0x675/0xc40 [ 320.713493][T26619] __x64_sys_sendfile64+0x102/0x140 [ 320.718672][T26619] do_syscall_64+0x44/0xd0 [ 320.723068][T26619] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 320.728945][T26619] RIP: 0033:0x7f48b3ecaae9 [ 320.733350][T26619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:53:38 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x32d000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:38 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001040000002f0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100100000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 320.752959][T26619] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 320.761444][T26619] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 320.769399][T26619] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 320.777418][T26619] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 320.785455][T26619] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001 [ 320.793409][T26619] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 320.801436][T26619] 14:53:38 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x5000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100110000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 320.841658][T26629] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:38 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x32e000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 7) 14:53:38 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x6000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100600000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000002300000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:38 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0}) r5 = accept4(r0, &(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000004c0)=0x80, 0x80000) r6 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x7f65, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, r6}, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000300)) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {r9}, {r4, r10}, {}, {}, {r8}, {}, {}, {}, {r8, r10}, {}, {}, {0x0, r10}, {r9, r10}, {}, {r8, r10}, {}, {0x0, r10}, {r9}, {}, {0x0, r10}, {r9}, {}, {r9}, {}, {}, {}, {}, {}, {}, {r9}, {r8}, {}, {}, {}, {}, {0x0, r10}, {}, {0x0, r10}, {}, {}, {}, {}, {r9}, {}, {}, {r8}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {r9}, {0x0, r10}, {}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {}, {}, {0x0, r10}, {0x0, r10}, {0x0, r10}, {r8}, {0x0, r10}, {0x0, r10}, {r8, r10}, {r9}, {}, {r8}, {}, {}, {}, {r8}, {r8, r10}, {}, {0x0, r10}, {}, {}, {0x0, r10}, {0x0, r10}, {}, {}, {}, {r3}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {0x0, r10}, {}, {}, {r9}, {0x0, r10}, {}, {r8}, {}, {}, {}, {0x0, r10}, {r8, r10}, {0x0, r10}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8, r10}, {}, {0x0, r10}, {}, {}, {0x0, r10}, {}, {r8}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {r3}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {r9}, {0x0, r10}, {}, {}, {}, {}, {r8}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000054240)={{0x0, 0x9, 0x9, 0xfffffffffffffff8, 0x9, 0xb3d, 0x3, 0xfffffffb, 0x7fff, 0x7, 0x2, 0x1ff, 0x40, 0x10, 0x8}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {r13}, {0x0, r14}, {}, {}, {r12}, {}, {}, {}, {r12, r14}, {}, {}, {0x0, r14}, {r13, r14}, {}, {r12, r14}, {}, {0x0, r14}, {r13}, {}, {0x0, r14}, {r13}, {}, {r13}, {}, {}, {}, {}, {}, {}, {r13}, {r12}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {r12}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {r13}, {0x0, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {}, {}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {r12}, {0x0, r14}, {0x0, r14}, {r12, r14}, {r13}, {}, {r12}, {}, {}, {}, {r12}, {r12, r14}, {}, {0x0, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {0x0, r14}, {}, {}, {r13}, {0x0, r14}, {}, {r12}, {}, {}, {}, {0x0, r14}, {r12, r14}, {0x0, r14}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12, r14}, {}, {0x0, r14}, {}, {}, {0x0, r14}, {}, {r12}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {r13}, {0x0, r14}, {}, {}, {}, {}, {r12}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000054500)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {r11, r14}, {0x0, r15}], 0x1f, "92520449475167"}) io_uring_enter(r6, 0x2ff, 0x5, 0x0, 0x0, 0x0) io_submit(0x0, 0x5, &(0x7f00000008c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x9ad, 0xffffffffffffffff, &(0x7f0000000380)="764a257734133a7214375cd73971c3f2293020a7d3e8835baa77026ad7c9a7fcfb50bd432c941e3b6495533e620b095eddec33536c319840b4ae95dabd9c9473d9c54ab4603ebe48681c25a093ff78b7593aa3", 0x53, 0x6, 0x0, 0x2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x3ff, r5, &(0x7f0000000500)="086d47cfb64fc7dc53c6401fbfeb3980bc5cb1c56951932339fe32db571225b971dd5c5ca10ed7ea56e20fcd7ea8c6ef1a02a69e3ad12b55abc5d886d2dbd8eb200977b009eaa605edffbaf8e656c8e0d72ad2408a082de20a81bd971b43b8288fc7ff14abf325c576300137b53cef48dbc1277bcaa899c454f32846ec4c12be4d9268243f58b63f918c3f957d75395e765ed297bb19fba9a652cf6e5babf91620fc2140b3f906b98260d4167b3681", 0xaf, 0x7f, 0x0, 0x3, r0}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x3, r6, &(0x7f0000000600)="7cd2cb92475cf199be8dad3eba6294e855830d8ead2a3fc4fa6c06867294016a2f", 0x21, 0x88, 0x0, 0x1, r1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x6, 0x7, r1, &(0x7f0000000680)="a797c14806401c9b8755a0a30625c16f62f1d3296fb9b5c048f99c011320079bad22576b353d561d9f712b2b24b0deaee2de7d642066c849374e775c325a2bf4ea00f6b4a5772c182b85989c9ec040e3d6423d178b6b568c9b7b9f46c43dc3f5eb680b7615a7c7eb5c140998fb0dfbeca12d857e3b18acbc9b6f5903425af891da0a9dff26a1df90b5bbcc4ef687bfa49a4dbc1b2224baa204f8f324159c1ae51042a24cbdbf99bcbbf3", 0xaa, 0x80000000, 0x0, 0x1, r0}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0xa, 0x8001, r2, &(0x7f0000000780)="8e15830d56d22884c1bd83549f5138e3d069b0a6648e369a5627add45b3baebe49db51e152a35b6d350073626f286ee180cea10e3da01c10495aff4d67628dd3982e53e18cdd34ef54269c10eb840a7204c7d52e1849899c3bbf7a4ac1a01b463ec727e1b0dbcbe49d78e7f8980880dcf022c0b42bd3df3da3a4ea6691bea54e8035a7d5d5c89ed14e2ff2bb8d541a44be686ea8e80259afb7d6d22b8525677d8005e7462f78636359aa87593ce7a27a9ff7d23003fa194e78a56a19a112290be870c4d642cbcc63ff183aa6197b7a93afa06f8d26a32b2419c76ab0909a187a16626f9de3", 0xe5, 0x7fff, 0x0, 0x2, r2}]) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="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"/706], 0x2c2) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:38 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000300000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:38 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x8000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 321.033437][T26647] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000500000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001040000003a0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:39 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x9000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 321.111150][T26660] loop4: detected capacity change from 0 to 262160 [ 321.155581][T26666] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 321.159078][T26660] FAULT_INJECTION: forcing a failure. [ 321.159078][T26660] name failslab, interval 1, probability 0, space 0, times 0 [ 321.177802][T26660] CPU: 0 PID: 26660 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 321.186571][T26660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.196743][T26660] Call Trace: [ 321.200017][T26660] [ 321.202958][T26660] dump_stack_lvl+0xd6/0x122 [ 321.207571][T26660] dump_stack+0x11/0x1b [ 321.211726][T26660] should_fail+0x23c/0x250 [ 321.216139][T26660] ? mempool_alloc_slab+0x16/0x20 [ 321.221224][T26660] __should_failslab+0x81/0x90 [ 321.226060][T26660] should_failslab+0x5/0x20 [ 321.230605][T26660] kmem_cache_alloc+0x4f/0x320 [ 321.235369][T26660] mempool_alloc_slab+0x16/0x20 [ 321.240242][T26660] ? mempool_free+0x130/0x130 [ 321.244923][T26660] mempool_alloc+0x9d/0x310 [ 321.249642][T26660] bio_alloc_bioset+0xcc/0x560 [ 321.254501][T26660] ? __this_cpu_preempt_check+0x18/0x20 [ 321.260055][T26660] ? sysvec_apic_timer_interrupt+0x4a/0xb0 [ 321.265894][T26660] submit_bh_wbc+0x133/0x320 [ 321.270487][T26660] write_dirty_buffer+0xde/0xf0 [ 321.275416][T26660] fat_sync_bhs+0x52/0x160 [ 321.279847][T26660] fat_alloc_clusters+0x95a/0xab0 [ 321.284878][T26660] fat_get_block+0x267/0x610 [ 321.289528][T26660] __block_write_begin_int+0x4c5/0x1010 [ 321.295343][T26660] ? fat_block_truncate_page+0x30/0x30 [ 321.300832][T26660] cont_write_begin+0x4cf/0x7b0 14:53:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000600000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:39 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x32f000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 321.305725][T26660] fat_write_begin+0x61/0xf0 [ 321.310325][T26660] ? fat_block_truncate_page+0x30/0x30 [ 321.315787][T26660] generic_perform_write+0x1c8/0x400 [ 321.321100][T26660] __generic_file_write_iter+0x195/0x2b0 [ 321.326720][T26660] ? generic_write_checks+0x250/0x290 [ 321.332070][T26660] generic_file_write_iter+0x75/0x130 [ 321.337428][T26660] do_iter_readv_writev+0x2de/0x380 [ 321.342683][T26660] do_iter_write+0x192/0x5c0 [ 321.347284][T26660] vfs_iter_write+0x4c/0x70 [ 321.351884][T26660] iter_file_splice_write+0x43a/0x790 [ 321.357316][T26660] ? splice_from_pipe+0xd0/0xd0 [ 321.362181][T26660] direct_splice_actor+0x80/0xa0 [ 321.367271][T26660] splice_direct_to_actor+0x345/0x650 [ 321.372643][T26660] ? do_splice_direct+0x190/0x190 [ 321.377675][T26660] do_splice_direct+0x106/0x190 [ 321.382608][T26660] do_sendfile+0x675/0xc40 [ 321.387045][T26660] __x64_sys_sendfile64+0x102/0x140 [ 321.392363][T26660] do_syscall_64+0x44/0xd0 [ 321.396787][T26660] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 321.402768][T26660] RIP: 0033:0x7f48b3ecaae9 [ 321.407217][T26660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 321.426996][T26660] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 321.435436][T26660] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 321.443388][T26660] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 321.451340][T26660] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 321.459298][T26660] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001 [ 321.467247][T26660] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 321.475259][T26660] 14:53:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 8) 14:53:39 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000100)=ANY=[], 0x200002e6) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) pidfd_open(0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) dup2(r1, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000016c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) fcntl$setpipe(r0, 0x407, 0x7000000) 14:53:39 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x330000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000700000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:39 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0xa000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001040000003f0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:39 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0xc000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1002a0800000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:39 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0xf000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 321.610583][T26681] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:39 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000900000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000400000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 321.672605][ C0] sd 0:0:1:0: tag#4016 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 321.678619][T26700] loop4: detected capacity change from 0 to 262160 [ 321.682567][ C0] sd 0:0:1:0: tag#4016 CDB: opcode=0xe5 (vendor) [ 321.695399][ C0] sd 0:0:1:0: tag#4016 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 321.704466][ C0] sd 0:0:1:0: tag#4016 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 321.713530][ C0] sd 0:0:1:0: tag#4016 CDB[20]: ba 14:53:39 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x10000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 321.763710][T26707] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 321.806862][T26700] FAULT_INJECTION: forcing a failure. [ 321.806862][T26700] name failslab, interval 1, probability 0, space 0, times 0 [ 321.819548][T26700] CPU: 1 PID: 26700 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 321.828503][T26700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.838568][T26700] Call Trace: [ 321.841845][T26700] [ 321.844809][T26700] dump_stack_lvl+0xd6/0x122 [ 321.849398][T26700] dump_stack+0x11/0x1b [ 321.853126][ C0] sd 0:0:1:0: tag#4017 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 321.853551][T26700] should_fail+0x23c/0x250 [ 321.863403][ C0] sd 0:0:1:0: tag#4017 CDB: opcode=0xe5 (vendor) [ 321.867739][T26700] ? mempool_alloc_slab+0x16/0x20 [ 321.874069][ C0] sd 0:0:1:0: tag#4017 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 321.879040][T26700] __should_failslab+0x81/0x90 [ 321.888403][ C0] sd 0:0:1:0: tag#4017 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 321.893216][T26700] should_failslab+0x5/0x20 [ 321.902238][ C0] sd 0:0:1:0: tag#4017 CDB[20]: ba [ 321.906692][T26700] kmem_cache_alloc+0x4f/0x320 [ 321.916564][T26700] mempool_alloc_slab+0x16/0x20 [ 321.921596][T26700] ? mempool_free+0x130/0x130 [ 321.926299][T26700] mempool_alloc+0x9d/0x310 [ 321.930980][T26700] bio_alloc_bioset+0xcc/0x560 [ 321.936119][T26700] ? submit_bio_noacct+0x49f/0x4e0 [ 321.941232][T26700] submit_bh_wbc+0x133/0x320 [ 321.945823][T26700] ? mark_buffer_dirty+0x190/0x260 [ 321.950938][T26700] __sync_dirty_buffer+0x136/0x1e0 [ 321.956050][T26700] sync_dirty_buffer+0x16/0x20 [ 321.961731][T26700] fat_mirror_bhs+0x24b/0x330 [ 321.966408][T26700] fat_alloc_clusters+0x9ad/0xab0 [ 321.972076][T26700] fat_get_block+0x267/0x610 [ 321.976677][T26700] __block_write_begin_int+0x4c5/0x1010 [ 321.982284][T26700] ? fat_block_truncate_page+0x30/0x30 [ 321.987724][T26700] cont_write_begin+0x4cf/0x7b0 [ 321.992594][T26700] fat_write_begin+0x61/0xf0 [ 321.997222][T26700] ? fat_block_truncate_page+0x30/0x30 [ 322.002674][T26700] generic_perform_write+0x1c8/0x400 [ 322.007980][T26700] __generic_file_write_iter+0x195/0x2b0 [ 322.013680][T26700] ? generic_write_checks+0x250/0x290 [ 322.019067][T26700] generic_file_write_iter+0x75/0x130 [ 322.024696][T26700] do_iter_readv_writev+0x2de/0x380 [ 322.029912][T26700] do_iter_write+0x192/0x5c0 [ 322.034485][T26700] ? splice_from_pipe_next+0x34f/0x3b0 [ 322.040020][T26700] ? kmalloc_array+0x2d/0x40 [ 322.044655][T26700] vfs_iter_write+0x4c/0x70 [ 322.049165][T26700] iter_file_splice_write+0x43a/0x790 [ 322.054539][T26700] ? splice_from_pipe+0xd0/0xd0 [ 322.059386][T26700] direct_splice_actor+0x80/0xa0 [ 322.064307][T26700] splice_direct_to_actor+0x345/0x650 [ 322.069668][T26700] ? do_splice_direct+0x190/0x190 [ 322.074676][T26700] do_splice_direct+0x106/0x190 [ 322.079510][T26700] do_sendfile+0x675/0xc40 [ 322.083977][T26700] __x64_sys_sendfile64+0x102/0x140 [ 322.089267][T26700] do_syscall_64+0x44/0xd0 [ 322.093663][T26700] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 322.099536][T26700] RIP: 0033:0x7f48b3ecaae9 [ 322.103951][T26700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 322.123538][T26700] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 322.131998][T26700] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 322.139949][T26700] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 322.147920][T26700] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 322.155933][T26700] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001 [ 322.164028][T26700] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 322.171997][T26700] 14:53:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 9) 14:53:40 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x331000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:40 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x60000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:40 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000a00000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:40 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x1006) 14:53:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000480000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:40 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000b00000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:40 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x65580000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:40 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x750e0000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:40 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000c00000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 322.324479][T26715] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001040000014a0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 322.409364][T26737] loop4: detected capacity change from 0 to 262160 [ 322.431011][T26737] FAULT_INJECTION: forcing a failure. [ 322.431011][T26737] name failslab, interval 1, probability 0, space 0, times 0 [ 322.443704][T26737] CPU: 1 PID: 26737 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 14:53:40 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x332000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 322.452466][T26737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.454859][T26741] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 322.462518][T26737] Call Trace: [ 322.462528][T26737] [ 322.462535][T26737] dump_stack_lvl+0xd6/0x122 [ 322.462558][T26737] dump_stack+0x11/0x1b [ 322.462589][T26737] should_fail+0x23c/0x250 [ 322.462606][T26737] ? mempool_alloc_slab+0x16/0x20 [ 322.496290][T26737] __should_failslab+0x81/0x90 [ 322.501082][T26737] should_failslab+0x5/0x20 [ 322.505595][T26737] kmem_cache_alloc+0x4f/0x320 [ 322.510385][T26737] mempool_alloc_slab+0x16/0x20 [ 322.515230][T26737] ? mempool_free+0x130/0x130 [ 322.519907][T26737] mempool_alloc+0x9d/0x310 [ 322.524510][T26737] bio_alloc_bioset+0xcc/0x560 [ 322.529271][T26737] submit_bh_wbc+0x133/0x320 [ 322.533894][T26737] ? mark_buffer_dirty+0x190/0x260 [ 322.538986][T26737] write_dirty_buffer+0xde/0xf0 [ 322.543842][T26737] fat_sync_bhs+0x52/0x160 [ 322.548274][T26737] fat_ent_write+0x85/0xd0 [ 322.552760][T26737] fat_chain_add+0x15b/0x410 [ 322.557381][T26737] fat_get_block+0x48d/0x610 [ 322.561975][T26737] __block_write_begin_int+0x4c5/0x1010 [ 322.567583][T26737] ? fat_block_truncate_page+0x30/0x30 [ 322.573064][T26737] cont_write_begin+0x4cf/0x7b0 [ 322.578014][T26737] fat_write_begin+0x61/0xf0 [ 322.582602][T26737] ? fat_block_truncate_page+0x30/0x30 [ 322.588093][T26737] generic_perform_write+0x1c8/0x400 [ 322.594410][T26737] __generic_file_write_iter+0x195/0x2b0 [ 322.600027][T26737] ? generic_write_checks+0x250/0x290 [ 322.605491][T26737] generic_file_write_iter+0x75/0x130 [ 322.610896][T26737] do_iter_readv_writev+0x2de/0x380 [ 322.616080][T26737] do_iter_write+0x192/0x5c0 [ 322.620656][T26737] ? splice_from_pipe_next+0x34f/0x3b0 [ 322.626118][T26737] ? kmalloc_array+0x2d/0x40 [ 322.630698][T26737] vfs_iter_write+0x4c/0x70 [ 322.635259][T26737] iter_file_splice_write+0x43a/0x790 [ 322.640634][T26737] ? splice_from_pipe+0xd0/0xd0 [ 322.645464][T26737] direct_splice_actor+0x80/0xa0 [ 322.650481][T26737] splice_direct_to_actor+0x345/0x650 [ 322.655910][T26737] ? do_splice_direct+0x190/0x190 [ 322.661340][T26737] do_splice_direct+0x106/0x190 [ 322.666204][T26737] do_sendfile+0x675/0xc40 [ 322.670600][T26737] __x64_sys_sendfile64+0x102/0x140 [ 322.675777][T26737] do_syscall_64+0x44/0xd0 [ 322.680379][T26737] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 322.686259][T26737] RIP: 0033:0x7f48b3ecaae9 [ 322.690711][T26737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 322.710365][T26737] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 322.718942][T26737] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 322.726897][T26737] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 322.734856][T26737] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 322.742855][T26737] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001 [ 322.750890][T26737] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 322.758946][T26737] 14:53:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 10) 14:53:40 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x81000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:40 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x333000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:40 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000f00000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 322.930799][T26759] loop4: detected capacity change from 0 to 262160 [ 322.943350][T26759] FAULT_INJECTION: forcing a failure. [ 322.943350][T26759] name failslab, interval 1, probability 0, space 0, times 0 [ 322.956079][T26759] CPU: 1 PID: 26759 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 322.964845][T26759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.974899][T26759] Call Trace: [ 322.978224][T26759] [ 322.981217][T26759] dump_stack_lvl+0xd6/0x122 [ 322.985845][T26759] dump_stack+0x11/0x1b [ 322.990012][T26759] should_fail+0x23c/0x250 [ 322.994428][T26759] ? mempool_alloc_slab+0x16/0x20 [ 322.999457][T26759] __should_failslab+0x81/0x90 [ 323.004217][T26759] should_failslab+0x5/0x20 [ 323.008740][T26759] kmem_cache_alloc+0x4f/0x320 [ 323.013584][T26759] mempool_alloc_slab+0x16/0x20 [ 323.018426][T26759] ? mempool_free+0x130/0x130 [ 323.023083][T26759] mempool_alloc+0x9d/0x310 [ 323.027585][T26759] bio_alloc_bioset+0xcc/0x560 [ 323.032341][T26759] submit_bh_wbc+0x133/0x320 [ 323.037026][T26759] ? mark_buffer_dirty+0x190/0x260 [ 323.042117][T26759] __sync_dirty_buffer+0x136/0x1e0 [ 323.047208][T26759] sync_dirty_buffer+0x16/0x20 [ 323.051977][T26759] fat_mirror_bhs+0x24b/0x330 [ 323.056656][T26759] fat_ent_write+0xc2/0xd0 [ 323.061062][T26759] fat_chain_add+0x15b/0x410 [ 323.066073][T26759] fat_get_block+0x48d/0x610 [ 323.070648][T26759] __block_write_begin_int+0x4c5/0x1010 [ 323.076278][T26759] ? fat_block_truncate_page+0x30/0x30 [ 323.081737][T26759] cont_write_begin+0x4cf/0x7b0 [ 323.086618][T26759] fat_write_begin+0x61/0xf0 [ 323.091302][T26759] ? fat_block_truncate_page+0x30/0x30 [ 323.096833][T26759] generic_perform_write+0x1c8/0x400 [ 323.102177][T26759] __generic_file_write_iter+0x195/0x2b0 [ 323.107869][T26759] ? generic_write_checks+0x250/0x290 [ 323.113290][T26759] generic_file_write_iter+0x75/0x130 [ 323.118698][T26759] do_iter_readv_writev+0x2de/0x380 [ 323.123916][T26759] do_iter_write+0x192/0x5c0 14:53:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x81ffffff, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001040000004c0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100001100000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 323.128762][T26759] ? splice_from_pipe_next+0x34f/0x3b0 [ 323.134220][T26759] ? kmalloc_array+0x2d/0x40 [ 323.138794][T26759] vfs_iter_write+0x4c/0x70 [ 323.143281][T26759] iter_file_splice_write+0x43a/0x790 [ 323.148669][T26759] ? splice_from_pipe+0xd0/0xd0 [ 323.153634][T26759] direct_splice_actor+0x80/0xa0 [ 323.158594][T26759] splice_direct_to_actor+0x345/0x650 [ 323.163951][T26759] ? do_splice_direct+0x190/0x190 [ 323.169057][T26759] do_splice_direct+0x106/0x190 [ 323.173924][T26759] do_sendfile+0x675/0xc40 14:53:41 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x334000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:41 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) ioprio_set$pid(0x1, r2, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r1, @ANYBLOB="83086b0a302b2e65f6fb06178c31fa4c11633cc2c1d73c6595004f6a3609e835723e46f534207608fefb0f3708b356e47e939c80d31cfbee01128fcbebab5910cde04509de6a066d55c7421bd2f9a1862d4239d24a22eccee4c579c3f37b4f2cb692e27c8feacef62329272c058f169adb"], 0x200002e6) dup2(r0, r1) r3 = io_uring_setup(0x3468, &(0x7f0000000200)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100)={0x0, r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r2, r5, 0x0, 0x1, &(0x7f0000000140)='\x00'}, 0x30) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x4) fcntl$setpipe(r1, 0x407, 0x7000000) [ 323.178421][T26759] __x64_sys_sendfile64+0x102/0x140 [ 323.183625][T26759] do_syscall_64+0x44/0xd0 [ 323.188046][T26759] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 323.193949][T26759] RIP: 0033:0x7f48b3ecaae9 [ 323.198388][T26759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 323.218024][T26759] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 323.226421][T26759] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 323.234775][T26759] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 323.242798][T26759] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 323.250842][T26759] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002 [ 323.258862][T26759] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 323.266848][T26759] 14:53:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x88470000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 323.275688][T26766] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100082a00000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x88480000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 11) 14:53:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001040000024d0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x88a8ffff, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100884700000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:41 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x335000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100884800000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 323.520898][T26790] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x9effffff, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 323.567088][T26797] loop4: detected capacity change from 0 to 262160 14:53:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001040000014f0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 323.624675][T26797] FAULT_INJECTION: forcing a failure. [ 323.624675][T26797] name failslab, interval 1, probability 0, space 0, times 0 [ 323.637712][T26797] CPU: 0 PID: 26797 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 323.646477][T26797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.656587][T26797] Call Trace: [ 323.659861][T26797] [ 323.662785][T26797] dump_stack_lvl+0xd6/0x122 [ 323.667382][T26797] dump_stack+0x11/0x1b [ 323.671554][T26797] should_fail+0x23c/0x250 [ 323.676038][T26797] ? fat_cache_add+0x1f7/0x4f0 [ 323.680913][T26797] __should_failslab+0x81/0x90 [ 323.685689][T26797] should_failslab+0x5/0x20 [ 323.690197][T26797] kmem_cache_alloc+0x4f/0x320 [ 323.695037][T26797] fat_cache_add+0x1f7/0x4f0 [ 323.699636][T26797] ? __schedule+0x44a/0x6a0 [ 323.704226][T26797] fat_get_cluster+0x5ca/0x890 [ 323.709001][T26797] fat_get_mapped_cluster+0xe0/0x260 [ 323.714298][T26797] fat_bmap+0x258/0x290 [ 323.718463][T26797] fat_get_block+0x3cb/0x610 [ 323.723075][T26797] __block_write_begin_int+0x4c5/0x1010 [ 323.728642][T26797] ? fat_block_truncate_page+0x30/0x30 [ 323.734172][T26797] cont_write_begin+0x4cf/0x7b0 [ 323.739107][T26797] fat_write_begin+0x61/0xf0 [ 323.743777][T26797] ? fat_block_truncate_page+0x30/0x30 [ 323.749239][T26797] generic_perform_write+0x1c8/0x400 [ 323.754532][T26797] __generic_file_write_iter+0x195/0x2b0 [ 323.760199][T26797] ? generic_write_checks+0x250/0x290 [ 323.765574][T26797] generic_file_write_iter+0x75/0x130 [ 323.771056][T26797] do_iter_readv_writev+0x2de/0x380 [ 323.776273][T26797] do_iter_write+0x192/0x5c0 [ 323.780871][T26797] ? splice_from_pipe_next+0x34f/0x3b0 [ 323.786337][T26797] ? kmalloc_array+0x2d/0x40 [ 323.791005][T26797] vfs_iter_write+0x4c/0x70 [ 323.795519][T26797] iter_file_splice_write+0x43a/0x790 [ 323.800896][T26797] ? splice_from_pipe+0xd0/0xd0 [ 323.805816][T26797] direct_splice_actor+0x80/0xa0 [ 323.810757][T26797] splice_direct_to_actor+0x345/0x650 [ 323.816138][T26797] ? do_splice_direct+0x190/0x190 [ 323.821221][T26797] do_splice_direct+0x106/0x190 [ 323.826087][T26797] do_sendfile+0x675/0xc40 [ 323.830637][T26797] __x64_sys_sendfile64+0x102/0x140 [ 323.836704][T26797] do_syscall_64+0x44/0xd0 [ 323.841163][T26797] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 323.847075][T26797] RIP: 0033:0x7f48b3ecaae9 [ 323.851486][T26797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 323.871150][T26797] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 323.879561][T26797] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 323.887534][T26797] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 323.895509][T26797] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 323.903490][T26797] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002 [ 323.911640][T26797] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 323.919618][T26797] 14:53:41 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100655800000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:41 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x336000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000003500000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:41 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0xc4050000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 12) 14:53:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100006000000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000002520000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:42 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x337000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:42 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0xeaffffff, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100586500000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:42 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0xefffffff, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100008100000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000003520000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:42 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0xf0ffffff, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100478800000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:42 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x338000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 324.427076][T26846] loop4: detected capacity change from 0 to 262160 [ 324.516010][T26846] FAULT_INJECTION: forcing a failure. [ 324.516010][T26846] name failslab, interval 1, probability 0, space 0, times 0 [ 324.528882][T26846] CPU: 0 PID: 26846 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 324.537642][T26846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.547691][T26846] Call Trace: [ 324.550965][T26846] [ 324.553887][T26846] dump_stack_lvl+0xd6/0x122 [ 324.558494][T26846] dump_stack+0x11/0x1b [ 324.562650][T26846] should_fail+0x23c/0x250 [ 324.567069][T26846] ? fat_cache_add+0x1f7/0x4f0 [ 324.571834][T26846] __should_failslab+0x81/0x90 [ 324.576603][T26846] should_failslab+0x5/0x20 [ 324.581144][T26846] kmem_cache_alloc+0x4f/0x320 [ 324.585908][T26846] fat_cache_add+0x1f7/0x4f0 [ 324.590494][T26846] ? __schedule+0x44a/0x6a0 [ 324.595056][T26846] fat_get_cluster+0x5ca/0x890 [ 324.599821][T26846] fat_get_mapped_cluster+0xe0/0x260 [ 324.605180][T26846] fat_bmap+0x258/0x290 [ 324.609400][T26846] fat_get_block+0x3cb/0x610 [ 324.614016][T26846] __block_write_begin_int+0x4c5/0x1010 [ 324.619746][T26846] ? fat_block_truncate_page+0x30/0x30 [ 324.625211][T26846] cont_write_begin+0x4cf/0x7b0 [ 324.630305][T26846] fat_write_begin+0x61/0xf0 [ 324.634891][T26846] ? fat_block_truncate_page+0x30/0x30 [ 324.640350][T26846] generic_perform_write+0x1c8/0x400 [ 324.645645][T26846] __generic_file_write_iter+0x195/0x2b0 [ 324.651316][T26846] ? generic_write_checks+0x250/0x290 [ 324.656750][T26846] generic_file_write_iter+0x75/0x130 [ 324.662129][T26846] do_iter_readv_writev+0x2de/0x380 [ 324.667325][T26846] do_iter_write+0x192/0x5c0 [ 324.671965][T26846] vfs_iter_write+0x4c/0x70 [ 324.676472][T26846] iter_file_splice_write+0x43a/0x790 [ 324.681856][T26846] ? splice_from_pipe+0xd0/0xd0 [ 324.686724][T26846] direct_splice_actor+0x80/0xa0 [ 324.691702][T26846] splice_direct_to_actor+0x345/0x650 [ 324.697164][T26846] ? do_splice_direct+0x190/0x190 [ 324.702269][T26846] do_splice_direct+0x106/0x190 [ 324.707210][T26846] do_sendfile+0x675/0xc40 [ 324.711629][T26846] __x64_sys_sendfile64+0x102/0x140 [ 324.716829][T26846] do_syscall_64+0x44/0xd0 [ 324.721255][T26846] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 324.727151][T26846] RIP: 0033:0x7f48b3ecaae9 [ 324.731586][T26846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 324.751306][T26846] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 324.759744][T26846] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 324.767711][T26846] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 324.775706][T26846] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 324.783675][T26846] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002 [ 324.791645][T26846] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 324.799620][T26846] 14:53:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 13) 14:53:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000002560000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:42 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0xfcffffff, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100488800000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:42 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x339000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:42 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {r3}, {0x0, r4}, {}, {}, {r2}, {}, {}, {}, {r2, r4}, {}, {}, {0x0, r4}, {r3, r4}, {}, {r2, r4}, {}, {0x0, r4}, {r3}, {}, {0x0, r4}, {r3}, {}, {r3}, {}, {}, {}, {}, {}, {}, {r3}, {r2}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {r2}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {0x0, r4}, {0x0, r4}, {r2}, {0x0, r4}, {0x0, r4}, {r2, r4}, {r3}, {}, {r2}, {}, {}, {}, {r2}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {0x0, r4}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {0x0, r4}, {}, {}, {r3}, {0x0, r4}, {}, {r2}, {}, {}, {}, {0x0, r4}, {r2, r4}, {0x0, r4}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r4}, {}, {0x0, r4}, {}, {}, {0x0, r4}, {}, {r2}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {r3}, {0x0, r4}, {}, {}, {}, {}, {r2}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x0, "2156816c73038c"}) r5 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x7f65, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, r5}, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000300)) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {r8}, {0x0, r9}, {}, {}, {r7}, {}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {r8, r9}, {}, {r7, r9}, {}, {0x0, r9}, {r8}, {}, {0x0, r9}, {r8}, {}, {r8, 0x0}, {}, {}, {}, {}, {}, {}, {r8}, {r7}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {r7}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {r8}, {0x0, r9}, {}, {}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r7}, {0x0, r9}, {0x0, r9}, {r7, r9}, {r8}, {}, {r7}, {}, {}, {}, {r7}, {r7, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {}, {r7}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {r7}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000054240)={{0x0, 0x9, 0x9, 0xfffffffffffffff8, 0x9, 0xb3d, 0x3, 0xfffffffb, 0x7fff, 0x7, 0x2, 0x1ff, 0x40, 0x10, 0x8}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {r13}, {0x0, r14}, {}, {}, {r12}, {}, {}, {}, {r12, r14}, {}, {}, {0x0, r14}, {r13, r14}, {}, {r12, r14}, {}, {0x0, r14}, {r13}, {}, {0x0, r14}, {r13}, {}, {r13}, {}, {}, {}, {}, {}, {}, {r13}, {r12}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {r12}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {r13}, {0x0, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {}, {}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {r12}, {0x0, r14}, {0x0, r14}, {r12, r14}, {r13}, {}, {r12}, {}, {}, {}, {r12}, {r12, r14}, {}, {0x0, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {0x0, r14}, {}, {}, {r13}, {0x0, r14}, {}, {r12}, {}, {}, {}, {0x0, r14}, {r12, r14}, {0x0, r14}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12, r10}, {}, {0x0, r14}, {}, {}, {0x0, r14}, {}, {r12}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {r13}, {0x0, r14}, {}, {}, {}, {}, {r12}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000054500)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {r11, r14}, {0x0, r15}], 0x1f, "92520449475167"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000046e00)=ANY=[@ANYRES64=0x0, @ANYBLOB="e60000000000000001010000000000000500000000000000ff0f00000000000000010000000000000000000000000000000000008bffffff0700000009000000400000230000000000000000000000000000000000000000420c00e2000000002800"/144]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000046ec0)={0x8001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r14}, {r16}], 0x2, "cae199e9ad5c3a"}) fcntl$setpipe(r1, 0x407, 0x7000000) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x28, 0x0, 0x5, 0xad, 0x0, 0x3, 0x80000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x800, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8090, 0x1, 0xf873, 0x0, 0x7, 0x2, 0x10, 0x0, 0x9, 0x0, 0x181c5ae0}, 0xffffffffffffffff, 0x0, r0, 0x1) 14:53:42 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0xfeffffff, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:42 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100004003000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0xffffa888, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000002580000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000340000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 325.103416][T26877] loop4: detected capacity change from 0 to 262160 [ 325.160547][T26877] FAULT_INJECTION: forcing a failure. [ 325.160547][T26877] name failslab, interval 1, probability 0, space 0, times 0 [ 325.173578][T26877] CPU: 0 PID: 26877 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 325.182440][T26877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.192513][T26877] Call Trace: [ 325.195788][T26877] [ 325.198714][T26877] dump_stack_lvl+0xd6/0x122 [ 325.203309][T26877] dump_stack+0x11/0x1b [ 325.207649][T26877] should_fail+0x23c/0x250 [ 325.212064][T26877] ? mempool_alloc_slab+0x16/0x20 [ 325.217141][T26877] __should_failslab+0x81/0x90 [ 325.222023][T26877] should_failslab+0x5/0x20 [ 325.226532][T26877] kmem_cache_alloc+0x4f/0x320 [ 325.231324][T26877] mempool_alloc_slab+0x16/0x20 [ 325.236400][T26877] ? mempool_free+0x130/0x130 [ 325.241187][T26877] mempool_alloc+0x9d/0x310 [ 325.245748][T26877] bio_alloc_bioset+0xcc/0x560 [ 325.250572][T26877] submit_bh_wbc+0x133/0x320 [ 325.255186][T26877] ? mark_buffer_dirty+0x190/0x260 [ 325.260296][T26877] __sync_dirty_buffer+0x136/0x1e0 [ 325.265499][T26877] sync_dirty_buffer+0x16/0x20 [ 325.270311][T26877] fat_mirror_bhs+0x24b/0x330 [ 325.274987][T26877] fat_alloc_clusters+0x9ad/0xab0 [ 325.280067][T26877] fat_get_block+0x267/0x610 [ 325.284667][T26877] __block_write_begin_int+0x4c5/0x1010 [ 325.290268][T26877] ? fat_block_truncate_page+0x30/0x30 [ 325.295753][T26877] cont_write_begin+0x4cf/0x7b0 [ 325.300918][T26877] fat_write_begin+0x61/0xf0 [ 325.305510][T26877] ? fat_block_truncate_page+0x30/0x30 14:53:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 325.310976][T26877] generic_perform_write+0x1c8/0x400 [ 325.316414][T26877] __generic_file_write_iter+0x195/0x2b0 [ 325.322057][T26877] ? generic_write_checks+0x250/0x290 [ 325.327566][T26877] generic_file_write_iter+0x75/0x130 [ 325.332950][T26877] do_iter_readv_writev+0x2de/0x380 [ 325.338210][T26877] do_iter_write+0x192/0x5c0 [ 325.342815][T26877] ? iter_file_splice_write+0x2d7/0x790 [ 325.348450][T26877] vfs_iter_write+0x4c/0x70 [ 325.353011][T26877] iter_file_splice_write+0x43a/0x790 [ 325.358379][T26877] ? amd_put_event_constraints+0x92/0x120 [ 325.364094][T26877] ? splice_from_pipe+0xd0/0xd0 [ 325.368933][T26877] direct_splice_actor+0x80/0xa0 [ 325.373885][T26877] splice_direct_to_actor+0x345/0x650 [ 325.379255][T26877] ? do_splice_direct+0x190/0x190 [ 325.384277][T26877] do_splice_direct+0x106/0x190 [ 325.389110][T26877] do_sendfile+0x675/0xc40 [ 325.393519][T26877] __x64_sys_sendfile64+0x102/0x140 [ 325.398711][T26877] do_syscall_64+0x44/0xd0 [ 325.403188][T26877] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 325.409067][T26877] RIP: 0033:0x7f48b3ecaae9 [ 325.413456][T26877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 325.433128][T26877] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 325.441518][T26877] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 325.449548][T26877] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 325.457496][T26877] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 325.465463][T26877] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002 [ 325.473467][T26877] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 325.481420][T26877] 14:53:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 14) 14:53:43 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r3 = syz_io_uring_setup(0x7f65, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, r2}, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000300)) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) preadv2(r3, &(0x7f0000001840)=[{&(0x7f0000000040)=""/83, 0x53}, {&(0x7f0000000200)=""/33, 0x21}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000000640)=""/224, 0xe0}, {&(0x7f00000003c0)=""/43, 0x2b}, {&(0x7f0000000740)=""/125, 0x7d}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/87, 0x57}], 0x8, 0x8e327e11, 0x4, 0x6) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {r6}, {0x0, r7}, {}, {}, {r5}, {}, {}, {}, {r5, r7}, {}, {}, {0x0, r7}, {r6, r7}, {}, {r5, r7}, {}, {0x0, r7}, {r6}, {}, {0x0, r7}, {r6}, {}, {r6}, {}, {}, {}, {}, {}, {}, {r6}, {r5}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {r5}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {0x0, r7}, {}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {r5}, {0x0, r7}, {0x0, r7}, {r5, r7}, {r6}, {}, {r5}, {}, {}, {}, {r5}, {r5, r7}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {0x0, r7}, {}, {}, {r6}, {0x0, r7}, {}, {r5}, {}, {}, {}, {0x0, r7}, {r5, r7}, {0x0, r7}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {r5}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {r6}, {0x0, r7}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000054240)={{0x0, 0x9, 0x9, 0xfffffffffffffff8, 0x9, 0xb3d, 0x3, 0xfffffffb, 0x7fff, 0x7, 0x2, 0x1ff, 0x40, 0x10, 0x8}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {r10}, {0x0, r11}, {}, {}, {r9}, {}, {}, {}, {r9, r11}, {}, {}, {0x0, r11}, {r10, r11}, {}, {r9, r11}, {}, {0x0, r11}, {r10}, {}, {0x0, r11}, {r10}, {}, {r10}, {}, {}, {}, {}, {}, {}, {r10}, {r9}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {r9}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {r10}, {0x0, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {r10}, {}, {r9}, {}, {}, {}, {r9}, {r9, r11}, {}, {0x0, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {0x0, r11}, {}, {}, {r10}, {0x0, r11}, {}, {r9}, {}, {}, {}, {0x0, r11}, {r9, r11}, {0x0, r11}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9, r11}, {}, {0x0, r11}, {}, {}, {0x0, r11}, {}, {r9}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {r10}, {0x0, r11}, {}, {}, {}, {}, {r9}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000054500)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {r8, r11}, {0x0, r12}], 0x1f, "92520449475167"}) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) flock(r2, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000600000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:43 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x33a000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0xffffff81, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000010000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000020000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0xffffff9e, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0xffffffea, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000030000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 325.609344][T26899] __nla_validate_parse: 5 callbacks suppressed [ 325.609359][T26899] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:43 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0xffffffef, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:43 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000040000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 325.709078][T26920] loop4: detected capacity change from 0 to 262160 [ 325.767861][T26920] FAULT_INJECTION: forcing a failure. [ 325.767861][T26920] name failslab, interval 1, probability 0, space 0, times 0 [ 325.780508][T26920] CPU: 1 PID: 26920 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 325.789313][T26920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.799360][T26920] Call Trace: [ 325.802714][T26920] [ 325.805636][T26920] dump_stack_lvl+0xd6/0x122 [ 325.810231][T26920] dump_stack+0x11/0x1b [ 325.814385][T26920] should_fail+0x23c/0x250 [ 325.818811][T26920] ? mempool_alloc_slab+0x16/0x20 [ 325.823847][T26920] __should_failslab+0x81/0x90 [ 325.828614][T26920] should_failslab+0x5/0x20 [ 325.833125][T26920] kmem_cache_alloc+0x4f/0x320 [ 325.837952][T26920] mempool_alloc_slab+0x16/0x20 [ 325.842805][T26920] ? mempool_free+0x130/0x130 [ 325.847663][T26920] mempool_alloc+0x9d/0x310 [ 325.852184][T26920] bio_alloc_bioset+0xcc/0x560 [ 325.856954][T26920] submit_bh_wbc+0x133/0x320 [ 325.861540][T26920] ? mark_buffer_dirty+0x190/0x260 [ 325.866671][T26920] write_dirty_buffer+0xde/0xf0 [ 325.871521][T26920] fat_sync_bhs+0x52/0x160 [ 325.875937][T26920] fat_ent_write+0x85/0xd0 [ 325.880351][T26920] fat_chain_add+0x15b/0x410 [ 325.884940][T26920] fat_get_block+0x48d/0x610 [ 325.889534][T26920] __block_write_begin_int+0x4c5/0x1010 [ 325.895134][T26920] ? fat_block_truncate_page+0x30/0x30 [ 325.900660][T26920] cont_write_begin+0x4cf/0x7b0 [ 325.905564][T26920] fat_write_begin+0x61/0xf0 [ 325.910164][T26920] ? fat_block_truncate_page+0x30/0x30 [ 325.915617][T26920] generic_perform_write+0x1c8/0x400 [ 325.920888][T26920] __generic_file_write_iter+0x195/0x2b0 [ 325.926593][T26920] ? generic_write_checks+0x250/0x290 [ 325.931975][T26920] generic_file_write_iter+0x75/0x130 [ 325.937381][T26920] do_iter_readv_writev+0x2de/0x380 [ 325.942583][T26920] do_iter_write+0x192/0x5c0 [ 325.947212][T26920] ? splice_from_pipe_next+0x34f/0x3b0 [ 325.952793][T26920] ? kmalloc_array+0x2d/0x40 [ 325.957391][T26920] vfs_iter_write+0x4c/0x70 [ 325.961921][T26920] iter_file_splice_write+0x43a/0x790 [ 325.967308][T26920] ? splice_from_pipe+0xd0/0xd0 [ 325.972204][T26920] direct_splice_actor+0x80/0xa0 [ 325.977163][T26920] splice_direct_to_actor+0x345/0x650 [ 325.982518][T26920] ? do_splice_direct+0x190/0x190 [ 325.987523][T26920] do_splice_direct+0x106/0x190 [ 325.992439][T26920] do_sendfile+0x675/0xc40 [ 325.996838][T26920] __x64_sys_sendfile64+0x102/0x140 [ 326.002031][T26920] do_syscall_64+0x44/0xd0 [ 326.006436][T26920] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 326.012308][T26920] RIP: 0033:0x7f48b3ecaae9 [ 326.016735][T26920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 326.036355][T26920] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 326.044755][T26920] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 326.052706][T26920] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 326.060656][T26920] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 326.068612][T26920] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002 [ 326.076634][T26920] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 326.084671][T26920] 14:53:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 15) 14:53:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000003620000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:44 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x33b000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000050000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:44 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0xfffffff0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:44 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0x200002e6) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000060000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:44 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 326.225191][T26930] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000070000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:44 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000058650000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 326.301809][T26950] loop4: detected capacity change from 0 to 262160 [ 326.348055][T26950] FAULT_INJECTION: forcing a failure. [ 326.348055][T26950] name failslab, interval 1, probability 0, space 0, times 0 [ 326.360694][T26950] CPU: 1 PID: 26950 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 326.369520][T26950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.373812][T26958] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 326.379585][T26950] Call Trace: [ 326.379595][T26950] 14:53:44 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 326.379601][T26950] dump_stack_lvl+0xd6/0x122 [ 326.379627][T26950] dump_stack+0x11/0x1b [ 326.403792][T26950] should_fail+0x23c/0x250 [ 326.408209][T26950] ? mempool_alloc_slab+0x16/0x20 [ 326.413284][T26950] __should_failslab+0x81/0x90 [ 326.418193][T26950] should_failslab+0x5/0x20 [ 326.422697][T26950] kmem_cache_alloc+0x4f/0x320 [ 326.427463][T26950] mempool_alloc_slab+0x16/0x20 [ 326.432375][T26950] ? mempool_free+0x130/0x130 [ 326.437107][T26950] mempool_alloc+0x9d/0x310 [ 326.441617][T26950] bio_alloc_bioset+0xcc/0x560 [ 326.446566][T26950] submit_bh_wbc+0x133/0x320 [ 326.451158][T26950] ? mark_buffer_dirty+0x190/0x260 [ 326.456277][T26950] __sync_dirty_buffer+0x136/0x1e0 [ 326.461393][T26950] sync_dirty_buffer+0x16/0x20 [ 326.466200][T26950] fat_mirror_bhs+0x24b/0x330 [ 326.470873][T26950] fat_ent_write+0xc2/0xd0 [ 326.475338][T26950] fat_chain_add+0x15b/0x410 [ 326.480096][T26950] fat_get_block+0x48d/0x610 [ 326.484731][T26950] __block_write_begin_int+0x4c5/0x1010 [ 326.490348][T26950] ? fat_block_truncate_page+0x30/0x30 [ 326.495845][T26950] cont_write_begin+0x4cf/0x7b0 [ 326.500921][T26950] fat_write_begin+0x61/0xf0 [ 326.505515][T26950] ? fat_block_truncate_page+0x30/0x30 [ 326.510975][T26950] generic_perform_write+0x1c8/0x400 [ 326.516266][T26950] __generic_file_write_iter+0x195/0x2b0 [ 326.521969][T26950] ? generic_write_checks+0x250/0x290 [ 326.527343][T26950] generic_file_write_iter+0x75/0x130 [ 326.532718][T26950] do_iter_readv_writev+0x2de/0x380 [ 326.537942][T26950] do_iter_write+0x192/0x5c0 [ 326.542544][T26950] ? splice_from_pipe_next+0x34f/0x3b0 [ 326.548121][T26950] ? kmalloc_array+0x2d/0x40 [ 326.552723][T26950] vfs_iter_write+0x4c/0x70 [ 326.557236][T26950] iter_file_splice_write+0x43a/0x790 [ 326.562598][T26950] ? splice_from_pipe+0xd0/0xd0 [ 326.567486][T26950] direct_splice_actor+0x80/0xa0 [ 326.572425][T26950] splice_direct_to_actor+0x345/0x650 [ 326.577832][T26950] ? do_splice_direct+0x190/0x190 [ 326.582849][T26950] do_splice_direct+0x106/0x190 [ 326.587677][T26950] do_sendfile+0x675/0xc40 [ 326.592215][T26950] __x64_sys_sendfile64+0x102/0x140 [ 326.597390][T26950] do_syscall_64+0x44/0xd0 [ 326.601803][T26950] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 326.607696][T26950] RIP: 0033:0x7f48b3ecaae9 [ 326.612086][T26950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 326.631671][T26950] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 326.640113][T26950] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 326.648063][T26950] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 326.656013][T26950] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 326.664072][T26950] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002 [ 326.672024][T26950] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 326.679976][T26950] [ 326.722733][T26958] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 16) 14:53:44 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x33c000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000080000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000054300)) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x7f65, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, r2}, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000300)=0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {r6}, {0x0, r7}, {}, {}, {r5}, {}, {}, {}, {r5, r7}, {}, {}, {0x0, r7}, {r6, r7}, {}, {r5, r7}, {}, {0x0, r7}, {r6}, {}, {0x0, r7}, {r6}, {}, {r6}, {}, {}, {}, {}, {}, {}, {r6}, {r5}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {0x0, 0x0}, {}, {}, {}, {r6}, {}, {}, {r5}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {0x0, r7}, {}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {r5}, {0x0, r7}, {0x0, r7}, {r5, r7}, {r6}, {}, {r5}, {}, {}, {}, {r5}, {r5, r7}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {0x0, r7}, {}, {}, {r6}, {0x0, r7}, {}, {r5}, {}, {}, {}, {0x0, r7}, {r5, r7}, {0x0, r7}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {r5}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {r6}, {0x0, r7}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r6}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, r7}, {0x0, 0x0}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000054240)={{0x0, 0x9, 0x9, 0xfffffffffffffff8, 0x9, 0xb3d, 0x3, 0xfffffffb, 0x7fff, 0x7, 0x2, 0x1ff, 0x40, 0x10, 0x8}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {r13}, {0x0, r14}, {}, {}, {r12}, {r9}, {}, {}, {r12, r14}, {}, {}, {0x0, r14}, {r13, r14}, {}, {r12, r14}, {}, {0x0, r14}, {r13}, {}, {0x0, r14}, {r13}, {}, {r13}, {}, {}, {}, {}, {}, {}, {r13}, {r12}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {0x0, r11}, {r13}, {}, {}, {r12}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {r13}, {0x0, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {}, {}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {r12}, {0x0, r14}, {0x0, r14}, {r12, r14}, {r13}, {}, {r12}, {}, {}, {}, {r12}, {r12, r14}, {}, {0x0, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {0x0, r14}, {}, {}, {r13}, {0x0, r14}, {}, {r12}, {}, {}, {0x0, r10}, {0x0, r14}, {r12, r14}, {0x0, r14}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12, r14}, {}, {0x0, r14}, {}, {}, {0x0, r14}, {}, {r12}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {r13}, {0x0, r14}, {}, {}, {}, {}, {r12}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {0x0, r8}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000054300)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000300)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000054300)) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000040)="f867e4020d0bdc56", 0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r16, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r15, r16) fcntl$setpipe(r16, 0x407, 0x7000000) syz_io_uring_submit(0x0, r3, &(0x7f0000000c40)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, r1, 0x0, &(0x7f0000000c00)={&(0x7f0000000640)=@can, 0x80, &(0x7f0000000200)=[{&(0x7f00000006c0)="9f7252c1292e56f92e8aded56287d4c9de596fd3cddd7abd4233d2824d9d347980555f88a5d015ba3159bfbbca1a89ec00bdc9e310ebcf3d4ab4b3af5724178fba3bc3dba689c2dd07730b548add8fac8d5a6c13db97ae0cddc174d31141e98e70157702ad5726f42da6c09d0f903d907059fd26b2cfb9ea4f78178dc7dcc589763883eef44d516a0973fef06c5e62344f8d79a6bcf9efc45644acb8a273a3ba62e6999746ea064735f31c0ffe", 0xad}, {&(0x7f0000000780)="19931feaa3a8d814ef1b4b3c3c682831095529f503cc7eff3dffac07dfbb16be00168aadcc4d158d14576ea8f96b86e5ef28c441ee570821271ea630b0ea1498555dce05102da92014b39e5ae3d555eae1dd0d48573a12fa232e1fd32076984cdcfc00d9bf4479cd3337e0227dee79c866e9a3c051f12df49b6e9fb4da934bb90ccef56bcd0df305b1ad8c32a7e04c63cdd2a953d04c33072d9ca1716ee86dabf3360a6266aecb3beb80cd1683e59190a49359f7a094ef78627b64a91022e67384b48423ff7ba1113641bbd76ea7098b4a685c6d6afff082a8c703f319bea6f8749ecd0a88", 0xe5}, {&(0x7f0000000080)="6ee7c39770cb0a79bd2b5fe284274b8e8223c53746d1afc5e8c95dd31c03b14efaabf64b3338e5", 0x27}], 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x368}, 0x0, 0x10, 0x1}, 0xcdc) 14:53:44 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000680000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:44 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000090000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:44 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x4, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 326.823412][T26967] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1000000000a0000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:44 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x33d000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 326.900017][T26987] loop4: detected capacity change from 0 to 262160 14:53:44 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1000000000b0000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 326.966386][T26987] FAULT_INJECTION: forcing a failure. [ 326.966386][T26987] name failslab, interval 1, probability 0, space 0, times 0 [ 326.979911][T26987] CPU: 0 PID: 26987 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 326.988722][T26987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.998801][T26987] Call Trace: [ 327.002071][T26987] [ 327.004994][T26987] dump_stack_lvl+0xd6/0x122 [ 327.009632][T26987] dump_stack+0x11/0x1b [ 327.013811][T26987] should_fail+0x23c/0x250 [ 327.018230][T26987] ? mempool_alloc_slab+0x16/0x20 [ 327.023318][T26987] __should_failslab+0x81/0x90 [ 327.028085][T26987] should_failslab+0x5/0x20 [ 327.032612][T26987] kmem_cache_alloc+0x4f/0x320 [ 327.037484][T26987] mempool_alloc_slab+0x16/0x20 [ 327.042433][T26987] ? mempool_free+0x130/0x130 [ 327.047115][T26987] mempool_alloc+0x9d/0x310 [ 327.051795][T26987] ? sysvec_apic_timer_interrupt+0x4a/0xb0 [ 327.057604][T26987] bio_alloc_bioset+0xcc/0x560 [ 327.062365][T26987] submit_bh_wbc+0x133/0x320 [ 327.066957][T26987] write_dirty_buffer+0xde/0xf0 [ 327.071854][T26987] fat_sync_bhs+0x52/0x160 [ 327.076347][T26987] fat_alloc_clusters+0x95a/0xab0 [ 327.081417][T26987] fat_get_block+0x267/0x610 [ 327.086106][T26987] __block_write_begin_int+0x4c5/0x1010 [ 327.091785][T26987] ? fat_block_truncate_page+0x30/0x30 [ 327.097316][T26987] cont_write_begin+0x4cf/0x7b0 [ 327.102153][T26987] fat_write_begin+0x61/0xf0 [ 327.106824][T26987] ? fat_block_truncate_page+0x30/0x30 [ 327.112292][T26987] generic_perform_write+0x1c8/0x400 [ 327.117594][T26987] __generic_file_write_iter+0x195/0x2b0 [ 327.123427][T26987] ? generic_write_checks+0x250/0x290 [ 327.128795][T26987] generic_file_write_iter+0x75/0x130 [ 327.134168][T26987] do_iter_readv_writev+0x2de/0x380 [ 327.139366][T26987] do_iter_write+0x192/0x5c0 [ 327.143975][T26987] vfs_iter_write+0x4c/0x70 [ 327.148495][T26987] iter_file_splice_write+0x43a/0x790 [ 327.153934][T26987] ? splice_from_pipe+0xd0/0xd0 [ 327.158785][T26987] direct_splice_actor+0x80/0xa0 [ 327.163751][T26987] splice_direct_to_actor+0x345/0x650 [ 327.169131][T26987] ? do_splice_direct+0x190/0x190 [ 327.174229][T26987] do_splice_direct+0x106/0x190 [ 327.179138][T26987] do_sendfile+0x675/0xc40 [ 327.183593][T26987] __x64_sys_sendfile64+0x102/0x140 [ 327.188935][T26987] do_syscall_64+0x44/0xd0 [ 327.193359][T26987] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 327.199250][T26987] RIP: 0033:0x7f48b3ecaae9 [ 327.203660][T26987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 327.223463][T26987] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 327.231945][T26987] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 327.239942][T26987] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 327.247957][T26987] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 327.255959][T26987] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002 [ 327.263914][T26987] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 327.271871][T26987] 14:53:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 17) 14:53:45 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x5, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001040000026a0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:45 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x33e000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:45 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) ioprio_set$pid(0x1, r2, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) r4 = getpgrp(0x0) ioprio_set$pid(0x1, r4, 0x0) r5 = getpgrp(0x0) ioprio_set$pid(0x1, r5, 0x0) r6 = getpgrp(0x0) ioprio_set$pid(0x1, r6, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRES16, @ANYRESOCT=r3, @ANYRESDEC=r5, @ANYRESOCT=r6], 0x200002e6) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1000000000c0000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:45 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x6, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:45 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)=0x10) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x1e47d0f6) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x7f65, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, r2}, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000300)) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {r4}, {}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {r5, r6}, {}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {}, {r5}, {}, {}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r5}, {}, {r4}, {}, {}, {}, {r4}, {r4, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r4}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000640)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {r10}, {0x0, r11}, {}, {}, {r9}, {0x0}, {}, {}, {r9, r11}, {}, {}, {0x0, r11}, {r10, r11}, {}, {r9, r11}, {}, {0x0, r11}, {r10}, {}, {0x0, r11}, {r10}, {}, {r10}, {}, {}, {}, {}, {}, {}, {r10}, {r9}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {r9}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {r10}, {0x0, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {r10}, {}, {r9}, {}, {}, {}, {r9}, {r9, r11}, {}, {0x0, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {0x0, r11}, {}, {}, {r10}, {0x0, r11}, {}, {r9}, {}, {}, {}, {0x0, r11}, {r9, r11}, {0x0, r11}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9, r11}, {}, {0x0, r11}, {}, {}, {0x0, r11}, {}, {r9}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {r10}, {0x0, r11}, {}, {}, {}, {}, {r9}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000054500)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r8, r11}, {0x0, r13}], 0x1f, "92520449475167"}) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) dup2(r0, r2) dup2(r0, r1) r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$dupfd(r14, 0x0, r1) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfffffbffffffff02) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000000c0)=0x7) 14:53:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1000000000f0000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 327.413286][T27011] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001040000006c0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:45 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x8, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000100000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 327.485947][T27022] loop4: detected capacity change from 0 to 262160 [ 327.524275][T27026] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 327.541338][T27022] FAULT_INJECTION: forcing a failure. [ 327.541338][T27022] name failslab, interval 1, probability 0, space 0, times 0 [ 327.554032][T27022] CPU: 1 PID: 27022 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 327.562798][T27022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.572865][T27022] Call Trace: [ 327.576320][T27022] [ 327.579242][T27022] dump_stack_lvl+0xd6/0x122 [ 327.583838][T27022] dump_stack+0x11/0x1b [ 327.587998][T27022] should_fail+0x23c/0x250 [ 327.592430][T27022] ? mempool_alloc_slab+0x16/0x20 [ 327.597498][T27022] __should_failslab+0x81/0x90 [ 327.602279][T27022] should_failslab+0x5/0x20 [ 327.606864][T27022] kmem_cache_alloc+0x4f/0x320 [ 327.611629][T27022] mempool_alloc_slab+0x16/0x20 [ 327.616461][T27022] ? mempool_free+0x130/0x130 [ 327.621166][T27022] mempool_alloc+0x9d/0x310 [ 327.625695][T27022] bio_alloc_bioset+0xcc/0x560 [ 327.630501][T27022] ? __getblk_gfp+0x3f/0x530 [ 327.635072][T27022] submit_bh_wbc+0x133/0x320 [ 327.639645][T27022] ? mark_buffer_dirty+0x190/0x260 [ 327.644845][T27022] write_dirty_buffer+0xde/0xf0 [ 327.649755][T27022] fat_sync_bhs+0x52/0x160 [ 327.654251][T27022] fat_alloc_clusters+0x95a/0xab0 [ 327.659259][T27022] fat_get_block+0x267/0x610 [ 327.663859][T27022] __block_write_begin_int+0x4c5/0x1010 [ 327.669404][T27022] ? fat_block_truncate_page+0x30/0x30 [ 327.674886][T27022] cont_write_begin+0x4cf/0x7b0 [ 327.679729][T27022] fat_write_begin+0x61/0xf0 [ 327.684344][T27022] ? fat_block_truncate_page+0x30/0x30 [ 327.689788][T27022] generic_perform_write+0x1c8/0x400 [ 327.695058][T27022] __generic_file_write_iter+0x195/0x2b0 [ 327.700682][T27022] ? generic_write_checks+0x250/0x290 [ 327.706092][T27022] generic_file_write_iter+0x75/0x130 [ 327.711455][T27022] do_iter_readv_writev+0x2de/0x380 [ 327.716645][T27022] do_iter_write+0x192/0x5c0 [ 327.721248][T27022] ? splice_from_pipe_next+0x34f/0x3b0 [ 327.726730][T27022] ? kmalloc_array+0x2d/0x40 [ 327.731393][T27022] vfs_iter_write+0x4c/0x70 [ 327.735882][T27022] iter_file_splice_write+0x43a/0x790 [ 327.741295][T27022] ? splice_from_pipe+0xd0/0xd0 [ 327.746126][T27022] direct_splice_actor+0x80/0xa0 [ 327.751097][T27022] splice_direct_to_actor+0x345/0x650 [ 327.756453][T27022] ? do_splice_direct+0x190/0x190 [ 327.761538][T27022] do_splice_direct+0x106/0x190 [ 327.766397][T27022] do_sendfile+0x675/0xc40 [ 327.770812][T27022] __x64_sys_sendfile64+0x102/0x140 [ 327.776000][T27022] do_syscall_64+0x44/0xd0 [ 327.780504][T27022] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 327.786463][T27022] RIP: 0033:0x7f48b3ecaae9 [ 327.790930][T27022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 327.810567][T27022] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 327.819038][T27022] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 327.827113][T27022] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 327.835077][T27022] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 327.843048][T27022] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002 [ 327.851133][T27022] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 327.859152][T27022] 14:53:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 18) 14:53:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000110000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:45 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x9, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000740000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:45 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x33f000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:45 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0xa, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:45 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1000000082a0000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 327.987947][T27037] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 328.052834][T27052] loop4: detected capacity change from 0 to 262160 [ 328.090990][T27052] FAULT_INJECTION: forcing a failure. [ 328.090990][T27052] name failslab, interval 1, probability 0, space 0, times 0 [ 328.103648][T27052] CPU: 1 PID: 27052 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 328.112448][T27052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.122576][T27052] Call Trace: [ 328.125927][T27052] [ 328.128850][T27052] dump_stack_lvl+0xd6/0x122 [ 328.133447][T27052] dump_stack+0x11/0x1b [ 328.137634][T27052] should_fail+0x23c/0x250 [ 328.142049][T27052] ? mempool_alloc_slab+0x16/0x20 [ 328.147110][T27052] __should_failslab+0x81/0x90 [ 328.151859][T27052] should_failslab+0x5/0x20 [ 328.156371][T27052] kmem_cache_alloc+0x4f/0x320 [ 328.161171][T27052] mempool_alloc_slab+0x16/0x20 [ 328.166143][T27052] ? mempool_free+0x130/0x130 [ 328.170827][T27052] mempool_alloc+0x9d/0x310 [ 328.175313][T27052] bio_alloc_bioset+0xcc/0x560 [ 328.180057][T27052] submit_bh_wbc+0x133/0x320 [ 328.184676][T27052] ? mark_buffer_dirty+0x190/0x260 [ 328.189820][T27052] write_dirty_buffer+0xde/0xf0 [ 328.194768][T27052] fat_sync_bhs+0x52/0x160 [ 328.199169][T27052] fat_ent_write+0x85/0xd0 [ 328.203627][T27052] fat_chain_add+0x15b/0x410 [ 328.208285][T27052] fat_get_block+0x48d/0x610 [ 328.213036][T27052] __block_write_begin_int+0x4c5/0x1010 [ 328.218748][T27052] ? fat_block_truncate_page+0x30/0x30 [ 328.224190][T27052] cont_write_begin+0x4cf/0x7b0 [ 328.229046][T27052] fat_write_begin+0x61/0xf0 [ 328.233764][T27052] ? fat_block_truncate_page+0x30/0x30 [ 328.239215][T27052] generic_perform_write+0x1c8/0x400 [ 328.244502][T27052] __generic_file_write_iter+0x195/0x2b0 [ 328.250136][T27052] generic_file_write_iter+0x75/0x130 [ 328.255529][T27052] do_iter_readv_writev+0x2de/0x380 [ 328.260730][T27052] do_iter_write+0x192/0x5c0 [ 328.265400][T27052] vfs_iter_write+0x4c/0x70 [ 328.269888][T27052] iter_file_splice_write+0x43a/0x790 [ 328.275261][T27052] ? splice_from_pipe+0xd0/0xd0 [ 328.280100][T27052] direct_splice_actor+0x80/0xa0 [ 328.285037][T27052] splice_direct_to_actor+0x345/0x650 [ 328.290429][T27052] ? do_splice_direct+0x190/0x190 [ 328.295451][T27052] do_splice_direct+0x106/0x190 [ 328.300369][T27052] do_sendfile+0x675/0xc40 [ 328.304796][T27052] __x64_sys_sendfile64+0x102/0x140 [ 328.309998][T27052] do_syscall_64+0x44/0xd0 [ 328.314418][T27052] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 328.320350][T27052] RIP: 0033:0x7f48b3ecaae9 [ 328.324757][T27052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 328.344439][T27052] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 14:53:46 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000600000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:46 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0xc, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:46 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x340000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001040000007a0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 328.352892][T27052] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 328.360877][T27052] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 328.368905][T27052] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 328.376865][T27052] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002 [ 328.384907][T27052] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 328.392881][T27052] [ 328.403744][T27062] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 19) 14:53:46 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0xf, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000058650000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001040000037e0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:46 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x341000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:46 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000054300)) splice(r2, &(0x7f0000000080)=0xd0, r0, &(0x7f00000000c0)=0x5, 0x5, 0xb) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000054300)) r4 = openat$cgroup_type(r1, &(0x7f0000000040), 0x2, 0x0) fcntl$setpipe(r4, 0x407, 0xfffffffffffffffb) 14:53:46 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x10, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000810000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:46 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x60, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 328.606142][T27078] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:46 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100ffffff810000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:46 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x300, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000810000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 328.673572][T27093] loop4: detected capacity change from 0 to 262160 [ 328.747182][T27093] FAULT_INJECTION: forcing a failure. [ 328.747182][T27093] name failslab, interval 1, probability 0, space 0, times 0 [ 328.760288][T27093] CPU: 0 PID: 27093 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 328.769052][T27093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.779097][T27093] Call Trace: [ 328.782363][T27093] [ 328.785332][T27093] dump_stack_lvl+0xd6/0x122 [ 328.789912][T27093] dump_stack+0x11/0x1b [ 328.794049][T27093] should_fail+0x23c/0x250 [ 328.798503][T27093] ? mempool_alloc_slab+0x16/0x20 [ 328.803516][T27093] __should_failslab+0x81/0x90 [ 328.808483][T27093] should_failslab+0x5/0x20 [ 328.813073][T27093] kmem_cache_alloc+0x4f/0x320 [ 328.817872][T27093] mempool_alloc_slab+0x16/0x20 [ 328.822719][T27093] ? mempool_free+0x130/0x130 [ 328.827453][T27093] mempool_alloc+0x9d/0x310 [ 328.831991][T27093] bio_alloc_bioset+0xcc/0x560 [ 328.836744][T27093] submit_bh_wbc+0x133/0x320 [ 328.841450][T27093] ? mark_buffer_dirty+0x190/0x260 [ 328.846610][T27093] write_dirty_buffer+0xde/0xf0 [ 328.851507][T27093] fat_sync_bhs+0x52/0x160 [ 328.855963][T27093] fat_ent_write+0x85/0xd0 [ 328.860471][T27093] fat_chain_add+0x15b/0x410 [ 328.865065][T27093] fat_get_block+0x48d/0x610 [ 328.869649][T27093] __block_write_begin_int+0x4c5/0x1010 [ 328.875206][T27093] ? fat_block_truncate_page+0x30/0x30 [ 328.880649][T27093] cont_write_begin+0x4cf/0x7b0 [ 328.885551][T27093] fat_write_begin+0x61/0xf0 [ 328.890131][T27093] ? fat_block_truncate_page+0x30/0x30 [ 328.895692][T27093] generic_perform_write+0x1c8/0x400 [ 328.900970][T27093] ? __generic_file_write_iter+0xbe/0x2b0 [ 328.906778][T27093] __generic_file_write_iter+0x195/0x2b0 [ 328.912417][T27093] ? generic_write_checks+0x250/0x290 [ 328.917828][T27093] generic_file_write_iter+0x75/0x130 [ 328.923185][T27093] do_iter_readv_writev+0x2de/0x380 [ 328.928387][T27093] do_iter_write+0x192/0x5c0 [ 328.933079][T27093] ? __sanitizer_cov_trace_pc+0x38/0x60 [ 328.938615][T27093] vfs_iter_write+0x4c/0x70 [ 328.943105][T27093] iter_file_splice_write+0x43a/0x790 [ 328.948462][T27093] ? splice_from_pipe+0xd0/0xd0 [ 328.953401][T27093] direct_splice_actor+0x80/0xa0 [ 328.958376][T27093] splice_direct_to_actor+0x345/0x650 [ 328.963834][T27093] ? do_splice_direct+0x190/0x190 [ 328.968946][T27093] do_splice_direct+0x106/0x190 [ 328.973848][T27093] do_sendfile+0x675/0xc40 [ 328.978333][T27093] __x64_sys_sendfile64+0x102/0x140 [ 328.983614][T27093] do_syscall_64+0x44/0xd0 [ 328.988042][T27093] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 328.993923][T27093] RIP: 0033:0x7f48b3ecaae9 [ 328.998390][T27093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 329.018075][T27093] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 329.026560][T27093] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 329.034532][T27093] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 329.042691][T27093] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 329.050742][T27093] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002 [ 329.058727][T27093] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 329.066694][T27093] 14:53:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 20) 14:53:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000047880000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x500, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:47 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x342000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104ffffff810000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 329.242804][T27114] loop4: detected capacity change from 0 to 262160 [ 329.263586][T27114] FAULT_INJECTION: forcing a failure. [ 329.263586][T27114] name failslab, interval 1, probability 0, space 0, times 0 [ 329.276506][T27114] CPU: 0 PID: 27114 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 329.285275][T27114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.295528][T27114] Call Trace: [ 329.298807][T27114] [ 329.301738][T27114] dump_stack_lvl+0xd6/0x122 [ 329.306439][T27114] dump_stack+0x11/0x1b [ 329.310621][T27114] should_fail+0x23c/0x250 [ 329.315137][T27114] ? mempool_alloc_slab+0x16/0x20 [ 329.320188][T27114] __should_failslab+0x81/0x90 [ 329.324991][T27114] should_failslab+0x5/0x20 [ 329.329482][T27114] kmem_cache_alloc+0x4f/0x320 [ 329.334321][T27114] mempool_alloc_slab+0x16/0x20 [ 329.339279][T27114] ? mempool_free+0x130/0x130 [ 329.343946][T27114] mempool_alloc+0x9d/0x310 [ 329.348498][T27114] bio_alloc_bioset+0xcc/0x560 [ 329.353243][T27114] submit_bh_wbc+0x133/0x320 [ 329.357846][T27114] ? mark_buffer_dirty+0x190/0x260 [ 329.362971][T27114] write_dirty_buffer+0xde/0xf0 [ 329.367804][T27114] fat_sync_bhs+0x52/0x160 [ 329.372274][T27114] fat_alloc_clusters+0x95a/0xab0 [ 329.377279][T27114] fat_get_block+0x267/0x610 [ 329.381850][T27114] __block_write_begin_int+0x4c5/0x1010 [ 329.387396][T27114] ? fat_block_truncate_page+0x30/0x30 [ 329.392836][T27114] cont_write_begin+0x4cf/0x7b0 [ 329.397708][T27114] fat_write_begin+0x61/0xf0 [ 329.402279][T27114] ? fat_block_truncate_page+0x30/0x30 [ 329.407772][T27114] generic_perform_write+0x1c8/0x400 [ 329.413042][T27114] __generic_file_write_iter+0x195/0x2b0 [ 329.418683][T27114] ? generic_write_checks+0x250/0x290 [ 329.424057][T27114] generic_file_write_iter+0x75/0x130 [ 329.429515][T27114] do_iter_readv_writev+0x2de/0x380 [ 329.435018][T27114] do_iter_write+0x192/0x5c0 [ 329.439613][T27114] ? page_cache_pipe_buf_confirm+0x65/0x180 [ 329.445894][T27114] ? page_cache_pipe_buf_confirm+0xbf/0x180 [ 329.451785][T27114] vfs_iter_write+0x4c/0x70 [ 329.456345][T27114] iter_file_splice_write+0x43a/0x790 [ 329.461729][T27114] ? splice_from_pipe+0xd0/0xd0 [ 329.466589][T27114] direct_splice_actor+0x80/0xa0 [ 329.471596][T27114] splice_direct_to_actor+0x345/0x650 [ 329.477031][T27114] ? do_splice_direct+0x190/0x190 [ 329.482085][T27114] do_splice_direct+0x106/0x190 [ 329.486946][T27114] do_sendfile+0x675/0xc40 14:53:47 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r2, 0xc) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x4e20, @local}, 0x10) recvmsg$can_bcm(r1, &(0x7f0000000400)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/176, 0xb0}], 0x2, &(0x7f0000000300)=""/204, 0xcc}, 0x40010123) getsockopt$inet_int(r4, 0x10d, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='cgroup\x00') r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x34, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x8}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x8}, @TCA_FQ_PLIMIT={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x3}, @TCA_FQ_CE_THRESHOLD={0x8}]}}]}, 0x60}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local, @in=@rand_addr=0x64010100, 0x4e20, 0x5, 0x4e22, 0x0, 0xa, 0x80, 0x0, 0x29, r8, 0xee00}, {0x1ffe00, 0xa683, 0x8, 0x6057, 0x80000001, 0x101, 0x7, 0xf2}, {0x2, 0xe87, 0x1000, 0x7fffffff}, 0xffff0000, 0x0, 0x2, 0x0, 0x2, 0x3}, {{@in6=@mcast2, 0x4d5, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3505, 0x2, 0x2, 0x5, 0x1, 0x0, 0x3ff}}, 0xe8) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x5c4, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000048880000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000003840000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:47 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x343000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 329.491583][T27114] __x64_sys_sendfile64+0x102/0x140 [ 329.496909][T27114] do_syscall_64+0x44/0xd0 [ 329.501331][T27114] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 329.507313][T27114] RIP: 0033:0x7f48b3ecaae9 [ 329.511756][T27114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 329.531421][T27114] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 14:53:47 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x344000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x600, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 329.539839][T27114] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 329.547808][T27114] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 329.555855][T27114] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 329.563848][T27114] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002 [ 329.571941][T27114] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 329.579912][T27114] 14:53:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 21) 14:53:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100ffffa8880000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000047880000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x900, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:47 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x345000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:47 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x7f65, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, r2}, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000300)) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {r8}, {0x0, r9}, {}, {}, {r7}, {}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {r8, r9}, {}, {r7, r9}, {}, {0x0, r9}, {r8}, {}, {0x0, r9}, {r8}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r8}, {r7}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {r7}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {r8}, {0x0, r9}, {}, {}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r7}, {0x0, r9}, {0x0, r9}, {r7, r9}, {r8}, {}, {r7}, {}, {}, {}, {r7}, {r7, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {}, {r7}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {r7}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r5}, {0x0, r6}, {}, {}, {r4}, {}, {}, {}, {r4, r6}, {}, {}, {0x0, r6}, {r5, r6}, {}, {r4, r6}, {}, {0x0, r6}, {r5}, {}, {0x0, r6}, {r5}, {}, {r5}, {}, {}, {}, {}, {}, {}, {r5}, {r4}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r4}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {r4}, {0x0, r6}, {0x0, r6}, {r4, r6}, {r5}, {}, {r4}, {}, {}, {}, {r4}, {r4, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {}, {r5}, {0x0, r6}, {}, {r4}, {}, {}, {}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r10}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r6}, {}, {0x0, r6}, {}, {}, {0x0, r6}, {}, {r4}, {}, {r4}, {}, {}, {r8}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {r5}, {0x0, r6}, {}, {}, {}, {}, {r4}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000ac0)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {r13}, {0x0, r14}, {}, {}, {r12}, {}, {}, {}, {r12, r14}, {}, {}, {0x0, r14}, {r13, r14}, {}, {r12, r14}, {}, {0x0, r14}, {r13}, {}, {0x0, r14}, {r13}, {}, {r13}, {}, {}, {}, {}, {}, {}, {r13}, {r12}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {r12}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {r13}, {0x0, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {}, {}, {0x0, r14}, {0x0, r14}, {0x0, r14}, {r12}, {0x0, r14}, {0x0, r14}, {r12, r14}, {r13}, {}, {r12}, {}, {}, {}, {r12}, {r12, r14}, {}, {0x0, r14}, {}, {}, {0x0, r14}, {0x0, r14}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {0x0, r14}, {}, {}, {r13}, {0x0, r14}, {}, {r12}, {}, {}, {}, {0x0, r14}, {r12, r14}, {0x0, r14}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12, r14}, {}, {0x0, r14}, {}, {}, {0x0, r14}, {}, {r12}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {}, {}, {r13}, {0x0, r14}, {}, {}, {}, {}, {r12}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000054500)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {r11, r14}, {0x0, r15}], 0x1f, "92520449475167"}) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) 14:53:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100ffffff9e0000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0xa00, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000048880000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100ffffffea0000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0xc00, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:47 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100ffffffef0000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 329.853593][T27161] loop4: detected capacity change from 0 to 262160 [ 329.934406][T27161] FAULT_INJECTION: forcing a failure. [ 329.934406][T27161] name failslab, interval 1, probability 0, space 0, times 0 [ 329.947363][T27161] CPU: 0 PID: 27161 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 329.956188][T27161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.966280][T27161] Call Trace: [ 329.969556][T27161] [ 329.972485][T27161] dump_stack_lvl+0xd6/0x122 [ 329.977174][T27161] dump_stack+0x11/0x1b [ 329.981345][T27161] should_fail+0x23c/0x250 [ 329.985765][T27161] ? mempool_alloc_slab+0x16/0x20 [ 329.990865][T27161] __should_failslab+0x81/0x90 [ 329.995649][T27161] should_failslab+0x5/0x20 [ 330.000158][T27161] kmem_cache_alloc+0x4f/0x320 [ 330.004989][T27161] mempool_alloc_slab+0x16/0x20 [ 330.010068][T27161] ? mempool_free+0x130/0x130 [ 330.014912][T27161] mempool_alloc+0x9d/0x310 [ 330.019463][T27161] bio_alloc_bioset+0xcc/0x560 [ 330.024249][T27161] submit_bh_wbc+0x133/0x320 [ 330.028841][T27161] ? mark_buffer_dirty+0x190/0x260 [ 330.034110][T27161] __sync_dirty_buffer+0x136/0x1e0 [ 330.039224][T27161] sync_dirty_buffer+0x16/0x20 [ 330.043993][T27161] fat_mirror_bhs+0x24b/0x330 [ 330.048685][T27161] fat_alloc_clusters+0x9ad/0xab0 [ 330.053725][T27161] fat_get_block+0x267/0x610 [ 330.058363][T27161] __block_write_begin_int+0x4c5/0x1010 [ 330.064003][T27161] ? fat_block_truncate_page+0x30/0x30 [ 330.069472][T27161] cont_write_begin+0x4cf/0x7b0 [ 330.074383][T27161] fat_write_begin+0x61/0xf0 [ 330.079040][T27161] ? fat_block_truncate_page+0x30/0x30 [ 330.084561][T27161] generic_perform_write+0x1c8/0x400 [ 330.089838][T27161] ? __generic_file_write_iter+0xbe/0x2b0 [ 330.095721][T27161] __generic_file_write_iter+0x195/0x2b0 [ 330.101413][T27161] ? generic_write_checks+0x250/0x290 [ 330.106827][T27161] generic_file_write_iter+0x75/0x130 [ 330.112422][T27161] do_iter_readv_writev+0x2de/0x380 [ 330.117608][T27161] do_iter_write+0x192/0x5c0 [ 330.122234][T27161] vfs_iter_write+0x4c/0x70 [ 330.126723][T27161] iter_file_splice_write+0x43a/0x790 [ 330.132119][T27161] ? splice_from_pipe+0xd0/0xd0 [ 330.136962][T27161] direct_splice_actor+0x80/0xa0 [ 330.142049][T27161] splice_direct_to_actor+0x345/0x650 [ 330.147590][T27161] ? do_splice_direct+0x190/0x190 [ 330.152608][T27161] do_splice_direct+0x106/0x190 [ 330.157502][T27161] do_sendfile+0x675/0xc40 [ 330.162049][T27161] __x64_sys_sendfile64+0x102/0x140 [ 330.167330][T27161] do_syscall_64+0x44/0xd0 [ 330.171915][T27161] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 330.177818][T27161] RIP: 0033:0x7f48b3ecaae9 [ 330.182220][T27161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 330.201991][T27161] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 330.210458][T27161] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 330.218554][T27161] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 330.226516][T27161] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 330.234502][T27161] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002 [ 330.242535][T27161] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 330.250500][T27161] 14:53:48 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x346000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:48 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x80000001}}, './file0\x00'}) dup2(r0, r1) write$binfmt_elf64(r1, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x6, 0xff, 0xff, 0x9, 0x3, 0x3e, 0x2, 0xe5, 0x40, 0x2e, 0x1000, 0x0, 0x38, 0x2, 0x0, 0x8000, 0xc000}, [{0x70000000, 0x3, 0x3, 0x40, 0x1, 0x400, 0x3, 0x1}], "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"}, 0x1078) fcntl$setpipe(r1, 0x407, 0x7000000) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000054300)) open_tree(r3, &(0x7f0000000040)='./file0\x00', 0x801) 14:53:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104ffffa8880000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 22) 14:53:48 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0xe75, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100fffffff00000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100fffffffc0000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:48 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0xf00, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100fffffffe0000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000920000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:48 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x4788, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e10088a8ffff0000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 330.442904][T27200] loop4: detected capacity change from 0 to 262160 [ 330.491122][T27200] FAULT_INJECTION: forcing a failure. [ 330.491122][T27200] name failslab, interval 1, probability 0, space 0, times 0 [ 330.504107][T27200] CPU: 0 PID: 27200 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 330.512920][T27200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.522994][T27200] Call Trace: [ 330.526271][T27200] [ 330.529345][T27200] dump_stack_lvl+0xd6/0x122 [ 330.533940][T27200] dump_stack+0x11/0x1b [ 330.538121][T27200] should_fail+0x23c/0x250 [ 330.542532][T27200] ? mempool_alloc_slab+0x16/0x20 [ 330.547622][T27200] __should_failslab+0x81/0x90 [ 330.552388][T27200] should_failslab+0x5/0x20 [ 330.556901][T27200] kmem_cache_alloc+0x4f/0x320 [ 330.561695][T27200] mempool_alloc_slab+0x16/0x20 [ 330.566608][T27200] ? mempool_free+0x130/0x130 [ 330.571362][T27200] mempool_alloc+0x9d/0x310 [ 330.575936][T27200] bio_alloc_bioset+0xcc/0x560 [ 330.580702][T27200] ? submit_bio_noacct+0x49f/0x4e0 [ 330.585816][T27200] submit_bh_wbc+0x133/0x320 [ 330.590488][T27200] ? mark_buffer_dirty+0x190/0x260 [ 330.595623][T27200] __sync_dirty_buffer+0x136/0x1e0 [ 330.600754][T27200] sync_dirty_buffer+0x16/0x20 [ 330.605565][T27200] fat_mirror_bhs+0x24b/0x330 [ 330.610240][T27200] fat_alloc_clusters+0x9ad/0xab0 [ 330.615292][T27200] fat_get_block+0x267/0x610 [ 330.619880][T27200] __block_write_begin_int+0x4c5/0x1010 [ 330.625449][T27200] ? fat_block_truncate_page+0x30/0x30 [ 330.630905][T27200] cont_write_begin+0x4cf/0x7b0 [ 330.635759][T27200] fat_write_begin+0x61/0xf0 [ 330.640346][T27200] ? fat_block_truncate_page+0x30/0x30 [ 330.645833][T27200] generic_perform_write+0x1c8/0x400 [ 330.651140][T27200] __generic_file_write_iter+0x195/0x2b0 [ 330.656807][T27200] ? generic_write_checks+0x250/0x290 [ 330.662175][T27200] generic_file_write_iter+0x75/0x130 [ 330.667635][T27200] do_iter_readv_writev+0x2de/0x380 [ 330.672842][T27200] do_iter_write+0x192/0x5c0 [ 330.677492][T27200] ? page_cache_pipe_buf_confirm+0x65/0x180 [ 330.683509][T27200] vfs_iter_write+0x4c/0x70 [ 330.688021][T27200] iter_file_splice_write+0x43a/0x790 [ 330.693452][T27200] ? splice_from_pipe+0xd0/0xd0 [ 330.698304][T27200] direct_splice_actor+0x80/0xa0 [ 330.703242][T27200] splice_direct_to_actor+0x345/0x650 [ 330.708723][T27200] ? do_splice_direct+0x190/0x190 [ 330.713746][T27200] do_splice_direct+0x106/0x190 [ 330.718595][T27200] do_sendfile+0x675/0xc40 [ 330.723076][T27200] __x64_sys_sendfile64+0x102/0x140 [ 330.728288][T27200] do_syscall_64+0x44/0xd0 [ 330.732732][T27200] entry_SYSCALL_64_after_hwframe+0x44/0xae 14:53:48 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x347000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 330.738631][T27200] RIP: 0033:0x7f48b3ecaae9 [ 330.743045][T27200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 330.762894][T27200] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 330.771370][T27200] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 330.779321][T27200] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 330.787279][T27200] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 330.795293][T27200] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002 [ 330.803264][T27200] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 330.811296][T27200] 14:53:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 23) 14:53:48 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x348000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:48 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x4888, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104ffffff9e0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:48 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) r2 = dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) r3 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x7f65, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, r3}, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000300)) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {r6}, {0x0, r7}, {}, {}, {r5}, {}, {}, {}, {r5, r7}, {}, {}, {0x0, r7}, {r6, r7}, {0x0}, {r5, r7}, {}, {0x0, r7}, {r6}, {}, {0x0, r7}, {r6}, {}, {r6}, {}, {}, {}, {}, {}, {}, {r6}, {r5}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {r5}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {0x0, r7}, {}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {r5}, {0x0, r7}, {0x0, r7}, {r5, r7}, {r6}, {}, {r5}, {}, {}, {}, {r5}, {r5, r7}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {0x0, r7}, {0x0, 0x0}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {0x0, r7}, {}, {}, {r6}, {0x0, r7}, {}, {r5}, {}, {}, {}, {0x0, r7}, {r5, r7}, {0x0, r7}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {r5}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {r6}, {0x0, r7}, {}, {}, {}, {}, {r5}, {0x0}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000640)=ANY=[@ANYRES64=0x0, @ANYBLOB="09000000000000000900000000000000f8ffffffffffffff09000000000000003d0b0000000000000300000000000000fbffffffff7f00000700000002000000ff010000000000004000000000000000100000000000000008000000000000003800000000000000000000000000000000000000bac4d93c2e97851f053c8f7cc6671beb00"/176]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r18}, {}, {}, {}, {}, {}, {r18}, {}, {}, {}, {}, {}, {}, {0x0, r19}, {}, {r18}, {0x0, r19}, {}, {}, {r17}, {}, {}, {}, {r17, r19}, {}, {}, {0x0, r19}, {r18, r19}, {}, {r17, r19}, {}, {0x0, r19}, {r18}, {}, {0x0, r19}, {r18}, {}, {r18}, {}, {}, {}, {}, {}, {}, {r18}, {r17}, {}, {}, {}, {}, {0x0, r19}, {}, {}, {}, {0x0, 0x0}, {}, {}, {r18}, {}, {}, {r17}, {}, {}, {}, {}, {r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r19}, {}, {0x0, r19}, {0x0, r19}, {}, {}, {}, {}, {}, {}, {}, {r18}, {0x0, r19}, {}, {}, {0x0, r19}, {0x0, r19}, {}, {}, {}, {}, {}, {0x0, r19}, {0x0, r19}, {0x0, r19}, {r17}, {0x0, r19}, {0x0, r19}, {r17, r19}, {r18}, {}, {r17}, {}, {}, {}, {r17}, {r17, r19}, {}, {0x0, r19}, {}, {}, {0x0, r19}, {0x0, r19}, {}, {}, {}, {}, {}, {0x0, r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r19}, {}, {0x0, r19}, {}, {}, {r18}, {0x0, r19}, {}, {r17}, {}, {}, {}, {0x0, r19}, {r17, r19}, {0x0, r19}, {}, {}, {}, {}, {0x0, r19}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17, r19}, {}, {0x0, r19}, {}, {}, {0x0, r19}, {}, {r17}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r19}, {}, {}, {}, {}, {}, {}, {}, {r18}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, r19}, {}, {}, {}, {r18}, {0x0, r19}, {}, {}, {}, {}, {r17}, {}, {}, {}, {r18}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r19}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {r15}, {0x0, r16}, {}, {0x0, r10}, {r14}, {}, {}, {}, {r14, r16}, {}, {}, {0x0, r16}, {r15, r16}, {}, {r14, r16}, {}, {0x0, r16}, {r15}, {}, {0x0, r16}, {r15}, {}, {r15}, {}, {}, {}, {}, {}, {}, {r15}, {r14}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {r14}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {0x0, r16}, {}, {0x0, r16}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {r15}, {0x0, r16}, {}, {}, {0x0, r16}, {0x0, r16}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {0x0, r16}, {r14, r11}, {0x0, r16}, {0x0, r16}, {r14, r16}, {r15}, {}, {r14}, {}, {}, {}, {r14}, {r14, r16}, {}, {0x0, r16}, {}, {}, {0x0, r16}, {0x0, r16}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {0x0, r16}, {}, {}, {r15}, {0x0, r16}, {}, {r14}, {}, {}, {}, {0x0, r16}, {r14, r16}, {0x0, r16}, {}, {}, {}, {}, {0x0, r16}, {}, {r17}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {0x0, r16}, {}, {}, {0x0, r16}, {}, {r14}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {0x0, r16}, {}, {}, {}, {r15}, {0x0, r16}, {}, {}, {}, {}, {r14}, {r8}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {r21, r16}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000054500)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {r13, r16}, {0x0, r22}], 0x1f, "92520449475167"}) io_uring_enter(r3, 0x2ff, 0x5, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000000000)={0x1, 0x7fffffff}) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) syz_io_uring_setup(0x31b1, &(0x7f0000000340)={0x0, 0x342f, 0x18, 0x1, 0x25e}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000200)) 14:53:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1007fffffff0000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e10081ffffff0000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:48 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x5865, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e1009effffff0000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 330.954588][T27223] __nla_validate_parse: 7 callbacks suppressed [ 330.954601][T27223] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001040000059f0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:48 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x6000, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:48 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100eaffffff0000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 331.032441][T27236] loop4: detected capacity change from 0 to 262160 [ 331.108365][T27247] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 331.124648][T27236] FAULT_INJECTION: forcing a failure. [ 331.124648][T27236] name failslab, interval 1, probability 0, space 0, times 0 [ 331.138317][T27236] CPU: 0 PID: 27236 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 331.147088][T27236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.157232][T27236] Call Trace: [ 331.160503][T27236] [ 331.163423][T27236] dump_stack_lvl+0xd6/0x122 [ 331.168016][T27236] dump_stack+0x11/0x1b [ 331.172265][T27236] should_fail+0x23c/0x250 [ 331.176685][T27236] ? mempool_alloc_slab+0x16/0x20 [ 331.181779][T27236] __should_failslab+0x81/0x90 [ 331.186639][T27236] should_failslab+0x5/0x20 [ 331.191146][T27236] kmem_cache_alloc+0x4f/0x320 [ 331.195999][T27236] mempool_alloc_slab+0x16/0x20 [ 331.200855][T27236] ? mempool_free+0x130/0x130 [ 331.205608][T27236] mempool_alloc+0x9d/0x310 [ 331.210193][T27236] ? save_fpregs_to_fpstate+0xf5/0x140 [ 331.215733][T27236] bio_alloc_bioset+0xcc/0x560 [ 331.220498][T27236] submit_bh_wbc+0x133/0x320 [ 331.225087][T27236] ? mark_buffer_dirty+0x190/0x260 [ 331.230334][T27236] __sync_dirty_buffer+0x136/0x1e0 [ 331.235455][T27236] sync_dirty_buffer+0x16/0x20 [ 331.240277][T27236] fat_mirror_bhs+0x24b/0x330 [ 331.245041][T27236] fat_ent_write+0xc2/0xd0 [ 331.249546][T27236] fat_chain_add+0x15b/0x410 [ 331.254185][T27236] fat_get_block+0x48d/0x610 [ 331.258780][T27236] __block_write_begin_int+0x4c5/0x1010 [ 331.264330][T27236] ? fat_block_truncate_page+0x30/0x30 [ 331.269796][T27236] cont_write_begin+0x4cf/0x7b0 [ 331.274716][T27236] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 331.280877][T27236] fat_write_begin+0x61/0xf0 [ 331.285511][T27236] ? fat_block_truncate_page+0x30/0x30 [ 331.290969][T27236] generic_perform_write+0x1c8/0x400 [ 331.296295][T27236] __generic_file_write_iter+0x195/0x2b0 [ 331.301934][T27236] ? generic_write_checks+0x250/0x290 [ 331.307308][T27236] generic_file_write_iter+0x75/0x130 [ 331.312807][T27236] do_iter_readv_writev+0x2de/0x380 [ 331.318014][T27236] do_iter_write+0x192/0x5c0 [ 331.322694][T27236] vfs_iter_write+0x4c/0x70 [ 331.327243][T27236] iter_file_splice_write+0x43a/0x790 [ 331.332621][T27236] ? splice_from_pipe+0xd0/0xd0 [ 331.337691][T27236] direct_splice_actor+0x80/0xa0 [ 331.342617][T27236] splice_direct_to_actor+0x345/0x650 [ 331.347972][T27236] ? do_splice_direct+0x190/0x190 [ 331.353035][T27236] do_splice_direct+0x106/0x190 [ 331.357916][T27236] do_sendfile+0x675/0xc40 [ 331.362387][T27236] __x64_sys_sendfile64+0x102/0x140 [ 331.367587][T27236] do_syscall_64+0x44/0xd0 [ 331.371999][T27236] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 331.377995][T27236] RIP: 0033:0x7f48b3ecaae9 [ 331.382392][T27236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 331.401977][T27236] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 331.410395][T27236] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 331.418378][T27236] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 331.426393][T27236] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 331.434390][T27236] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002 [ 331.442386][T27236] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 331.450397][T27236] 14:53:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 24) 14:53:49 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x6558, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:49 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x349000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100efffffff0000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:49 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)={0x0, @aes256, 0x0, @desc3}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000054300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000600)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000680)={r4, 0x1, r2, 0x4}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r4, 0x0, r5, 0x5, 0x80000}) 14:53:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000af0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100f0ffffff0000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:49 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x750e, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 331.565110][T27249] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:49 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x8100, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000002c20000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100fcffffff0000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 331.638481][ T24] audit: type=1326 audit(1638024829.536:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27252 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2e5196ae9 code=0x0 [ 331.651547][T27270] loop4: detected capacity change from 0 to 262160 14:53:49 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x8847, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 331.694020][T27276] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 331.725230][T27270] FAULT_INJECTION: forcing a failure. [ 331.725230][T27270] name failslab, interval 1, probability 0, space 0, times 0 [ 331.737861][T27270] CPU: 1 PID: 27270 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 331.746696][T27270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.756746][T27270] Call Trace: [ 331.760013][T27270] [ 331.762932][T27270] dump_stack_lvl+0xd6/0x122 [ 331.767536][T27270] dump_stack+0x11/0x1b [ 331.771691][T27270] should_fail+0x23c/0x250 [ 331.776107][T27270] ? mempool_alloc_slab+0x16/0x20 [ 331.781208][T27270] __should_failslab+0x81/0x90 [ 331.786111][T27270] should_failslab+0x5/0x20 [ 331.790645][T27270] kmem_cache_alloc+0x4f/0x320 [ 331.795395][T27270] mempool_alloc_slab+0x16/0x20 [ 331.800243][T27270] ? mempool_free+0x130/0x130 [ 331.805001][T27270] mempool_alloc+0x9d/0x310 [ 331.809487][T27270] bio_alloc_bioset+0xcc/0x560 [ 331.814230][T27270] submit_bh_wbc+0x133/0x320 [ 331.818801][T27270] ? mark_buffer_dirty+0x190/0x260 [ 331.823898][T27270] __sync_dirty_buffer+0x136/0x1e0 [ 331.829029][T27270] sync_dirty_buffer+0x16/0x20 [ 331.833831][T27270] fat_mirror_bhs+0x24b/0x330 [ 331.838499][T27270] fat_ent_write+0xc2/0xd0 [ 331.842902][T27270] fat_chain_add+0x15b/0x410 [ 331.847514][T27270] fat_get_block+0x48d/0x610 [ 331.852090][T27270] __block_write_begin_int+0x4c5/0x1010 [ 331.857634][T27270] ? fat_block_truncate_page+0x30/0x30 [ 331.863076][T27270] cont_write_begin+0x4cf/0x7b0 [ 331.867996][T27270] fat_write_begin+0x61/0xf0 [ 331.873043][T27270] ? fat_block_truncate_page+0x30/0x30 [ 331.878711][T27270] generic_perform_write+0x1c8/0x400 [ 331.883979][T27270] __generic_file_write_iter+0x195/0x2b0 [ 331.889614][T27270] ? generic_write_checks+0x250/0x290 [ 331.894977][T27270] generic_file_write_iter+0x75/0x130 [ 331.900331][T27270] do_iter_readv_writev+0x2de/0x380 [ 331.905524][T27270] do_iter_write+0x192/0x5c0 [ 331.910121][T27270] ? splice_from_pipe_next+0x34f/0x3b0 [ 331.915558][T27270] ? kmalloc_array+0x2d/0x40 [ 331.920123][T27270] vfs_iter_write+0x4c/0x70 [ 331.924607][T27270] iter_file_splice_write+0x43a/0x790 [ 331.929965][T27270] ? splice_from_pipe+0xd0/0xd0 [ 331.934819][T27270] direct_splice_actor+0x80/0xa0 [ 331.939771][T27270] splice_direct_to_actor+0x345/0x650 [ 331.945246][T27270] ? do_splice_direct+0x190/0x190 [ 331.950288][T27270] do_splice_direct+0x106/0x190 [ 331.955126][T27270] do_sendfile+0x675/0xc40 [ 331.959527][T27270] __x64_sys_sendfile64+0x102/0x140 [ 331.964764][T27270] do_syscall_64+0x44/0xd0 [ 331.969214][T27270] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 331.975102][T27270] RIP: 0033:0x7f48b3ecaae9 [ 331.979534][T27270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 331.999173][T27270] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 332.007914][T27270] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 332.016087][T27270] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 332.024063][T27270] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 332.032137][T27270] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002 [ 332.040090][T27270] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 332.048053][T27270] 14:53:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 25) 14:53:50 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x34a000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100feffffff0000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:50 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x8848, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 332.270071][T27291] loop4: detected capacity change from 0 to 262160 [ 332.287096][T27291] FAULT_INJECTION: forcing a failure. [ 332.287096][T27291] name failslab, interval 1, probability 0, space 0, times 0 [ 332.300022][T27291] CPU: 0 PID: 27291 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 332.308768][T27291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.318870][T27291] Call Trace: [ 332.322129][T27291] [ 332.325042][T27291] dump_stack_lvl+0xd6/0x122 [ 332.329715][T27291] dump_stack+0x11/0x1b [ 332.333951][T27291] should_fail+0x23c/0x250 [ 332.338395][T27291] ? mempool_alloc_slab+0x16/0x20 [ 332.343404][T27291] __should_failslab+0x81/0x90 [ 332.348246][T27291] should_failslab+0x5/0x20 [ 332.352735][T27291] kmem_cache_alloc+0x4f/0x320 [ 332.357491][T27291] mempool_alloc_slab+0x16/0x20 [ 332.362327][T27291] ? mempool_free+0x130/0x130 [ 332.367040][T27291] mempool_alloc+0x9d/0x310 [ 332.371545][T27291] bio_alloc_bioset+0xcc/0x560 [ 332.376365][T27291] ? submit_bio_noacct+0x49f/0x4e0 [ 332.381458][T27291] submit_bh_wbc+0x133/0x320 [ 332.386042][T27291] ? mark_buffer_dirty+0x190/0x260 [ 332.391147][T27291] __sync_dirty_buffer+0x136/0x1e0 [ 332.396255][T27291] sync_dirty_buffer+0x16/0x20 [ 332.401057][T27291] fat_mirror_bhs+0x24b/0x330 [ 332.405717][T27291] fat_alloc_clusters+0x9ad/0xab0 [ 332.410741][T27291] fat_get_block+0x267/0x610 [ 332.415400][T27291] __block_write_begin_int+0x4c5/0x1010 [ 332.420950][T27291] ? fat_block_truncate_page+0x30/0x30 [ 332.426404][T27291] cont_write_begin+0x4cf/0x7b0 [ 332.431240][T27291] fat_write_begin+0x61/0xf0 [ 332.435894][T27291] ? fat_block_truncate_page+0x30/0x30 [ 332.441490][T27291] generic_perform_write+0x1c8/0x400 [ 332.446771][T27291] __generic_file_write_iter+0x195/0x2b0 [ 332.452456][T27291] ? generic_write_checks+0x250/0x290 [ 332.457813][T27291] generic_file_write_iter+0x75/0x130 [ 332.463202][T27291] do_iter_readv_writev+0x2de/0x380 [ 332.468461][T27291] do_iter_write+0x192/0x5c0 [ 332.473040][T27291] ? splice_from_pipe_next+0x34f/0x3b0 [ 332.478505][T27291] ? kmalloc_array+0x2d/0x40 [ 332.483082][T27291] vfs_iter_write+0x4c/0x70 [ 332.487714][T27291] iter_file_splice_write+0x43a/0x790 [ 332.493118][T27291] ? splice_from_pipe+0xd0/0xd0 [ 332.498025][T27291] direct_splice_actor+0x80/0xa0 [ 332.502959][T27291] splice_direct_to_actor+0x345/0x650 [ 332.508316][T27291] ? do_splice_direct+0x190/0x190 [ 332.513332][T27291] do_splice_direct+0x106/0x190 [ 332.518234][T27291] do_sendfile+0x675/0xc40 [ 332.522666][T27291] __x64_sys_sendfile64+0x102/0x140 [ 332.527857][T27291] do_syscall_64+0x44/0xd0 [ 332.532258][T27291] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 332.538139][T27291] RIP: 0033:0x7f48b3ecaae9 [ 332.542553][T27291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 332.562141][T27291] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 332.570540][T27291] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 332.578492][T27291] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 332.586524][T27291] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 332.594483][T27291] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002 [ 332.602435][T27291] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 332.610390][T27291] 14:53:50 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000002c0)=[{&(0x7f0000000040)="02707a7e9004bd370b511f74b302afa001b9a5efc22973b05bd725ad5d568632d96bbd8fab3501cb753f6380a3d13f1145cb9592199c50e2f5d6f1dd6ec276051f872b56674380fb2ac4634295ea22599a8a2eb58a", 0x55}, {&(0x7f00000000c0)="12043d63d79803528c048e57f349000ea3acda66ae7eb8eb5bfe923f4b1d1699b8e0fcb5bb697087f6cf842ab00cafb681d53c069aa62dd14dc84e7479dac298f5b0e7cf53c514f66b098c8a6da9f33ba71e6ccde1f66476caa4510979b6561cdb713f46445dfb5968d081f42e483b93e528f333d8179f830738516965ad341cf04714d94abd526f2b8dc32fe03dd291b0bbe13e01bcec1a15c02bd256e705b20e5d8017964898a71275020b76feaa6c148af4d2ae78a56aa634bc53f0b418765a5d39c1e466f7d931e273a10643c421bc29a9fb1f", 0xd5}, {&(0x7f00000001c0)="16a66547f945153bf3acf0c15a719a3aad446ddc30245ff93a63d0a12ea83174ada1697ad79fab9e485a073fe0d75f8f0db63a95d8a4", 0x36}, {&(0x7f0000000200)="e6d5cdbaee66c485059daeec4b1e2a4ebf3d348f72fa32391df33dc92cd4db8b8a737607bc4e67c6e45b966e99fd15bd08d392e7f50c6a197fb4bbe165aa08e52a2d5e6d2e1bb9c0b7a618db5a61cd1ae355c5f8abd70b433f79b9d2829f165197bd58eb4ef9d5148a0b8b40e4e165f647f917e57199dcf066b4a8eaa999a9692b8eef317a7bb824cb6b1601e5f15ce183e6df0b4ff17c61088268a50c2e52b3ce", 0xa1}], 0x4, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x5) 14:53:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104ffffffc30000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000003400000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 332.671709][ T24] audit: type=1326 audit(1638024830.576:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27252 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2e5196ae9 code=0x0 14:53:50 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0xc405, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:50 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x34b000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:50 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x1000000, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000000100", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:50 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x2000000, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 332.741546][T27297] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 26) 14:53:50 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000000200", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000005c40000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:50 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x34c000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 332.847596][T27320] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 332.884565][T27326] loop4: detected capacity change from 0 to 262160 [ 332.896354][ T3235] ================================================================== [ 332.898302][T27326] FAULT_INJECTION: forcing a failure. [ 332.898302][T27326] name failslab, interval 1, probability 0, space 0, times 0 [ 332.904434][ T3235] BUG: KCSAN: data-race in copy_page_to_iter / fat16_ent_put [ 332.904458][ T3235] [ 332.904463][ T3235] write to 0xffff88814d5cb20a of 2 bytes by task 27326 on cpu 0: [ 332.904478][ T3235] fat16_ent_put+0x24/0x50 [ 332.904496][ T3235] fat_alloc_clusters+0x493/0xab0 [ 332.904514][ T3235] fat_get_block+0x267/0x610 [ 332.904532][ T3235] __block_write_begin_int+0x4c5/0x1010 [ 332.904554][ T3235] cont_write_begin+0x4cf/0x7b0 [ 332.904572][ T3235] fat_write_begin+0x61/0xf0 [ 332.917160][T27326] CPU: 0 PID: 27326 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 332.924469][ T3235] generic_perform_write+0x1c8/0x400 [ 332.926804][T27326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.934489][ T3235] __generic_file_write_iter+0x195/0x2b0 [ 332.938880][T27326] Call Trace: [ 332.938888][T27326] [ 332.943874][ T3235] generic_file_write_iter+0x75/0x130 [ 332.948436][T27326] dump_stack_lvl+0xd6/0x122 [ 332.953966][ T3235] do_iter_readv_writev+0x2de/0x380 [ 332.958786][T27326] dump_stack+0x11/0x1b [ 332.963357][ T3235] do_iter_write+0x192/0x5c0 [ 332.963383][ T3235] vfs_iter_write+0x4c/0x70 [ 332.972250][T27326] should_fail+0x23c/0x250 [ 332.977510][ T3235] iter_file_splice_write+0x43a/0x790 [ 332.987550][T27326] ? mempool_alloc_slab+0x16/0x20 [ 332.993153][ T3235] direct_splice_actor+0x80/0xa0 [ 332.996412][T27326] __should_failslab+0x81/0x90 [ 332.999337][ T3235] splice_direct_to_actor+0x345/0x650 [ 333.004786][T27326] should_failslab+0x5/0x20 [ 333.009346][ T3235] do_splice_direct+0x106/0x190 [ 333.009365][ T3235] do_sendfile+0x675/0xc40 [ 333.009380][ T3235] __x64_sys_sendfile64+0x102/0x140 [ 333.009396][ T3235] do_syscall_64+0x44/0xd0 [ 333.014559][T27326] kmem_cache_alloc+0x4f/0x320 [ 333.018690][ T3235] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 333.023255][T27326] mempool_alloc_slab+0x16/0x20 [ 333.027727][ T3235] [ 333.027734][ T3235] read to 0xffff88814d5cb000 of 4096 bytes by task 3235 on cpu 1: [ 333.032112][T27326] ? mempool_free+0x130/0x130 [ 333.037452][ T3235] copy_page_to_iter+0x2cb/0x950 [ 333.042447][T27326] mempool_alloc+0x9d/0x310 [ 333.047354][ T3235] filemap_read+0x138b/0x16d0 [ 333.052098][T27326] ? __this_cpu_preempt_check+0x18/0x20 [ 333.057434][ T3235] generic_file_read_iter+0x72/0x2a0 [ 333.061909][T27326] ? sysvec_apic_timer_interrupt+0x4a/0xb0 [ 333.066729][ T3235] blkdev_read_iter+0x96/0x140 [ 333.071117][T27326] bio_alloc_bioset+0xcc/0x560 [ 333.076281][ T3235] vfs_read+0x66c/0x750 [ 333.080672][T27326] ? submit_bh_wbc+0x71/0x320 [ 333.085405][ T3235] ksys_read+0xd9/0x190 [ 333.091268][T27326] submit_bh_wbc+0x133/0x320 [ 333.096091][ T3235] __x64_sys_read+0x3e/0x50 [ 333.098402][T27326] ? mark_buffer_dirty+0x190/0x260 [ 333.106179][ T3235] do_syscall_64+0x44/0xd0 [ 333.110831][T27326] write_dirty_buffer+0xde/0xf0 [ 333.115766][ T3235] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 333.115791][ T3235] [ 333.115794][ T3235] Reported by Kernel Concurrency Sanitizer on: [ 333.115801][ T3235] CPU: 1 PID: 3235 Comm: udevd Not tainted 5.16.0-rc2-syzkaller #0 [ 333.120273][T27326] fat_sync_bhs+0x52/0x160 [ 333.125178][ T3235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.130696][T27326] fat_ent_write+0x85/0xd0 [ 333.135966][ T3235] ================================================================== [ 333.141743][T27326] fat_chain_add+0x15b/0x410 [ 333.241584][T27326] fat_get_block+0x48d/0x610 [ 333.246162][T27326] __block_write_begin_int+0x4c5/0x1010 [ 333.251694][T27326] ? fat_block_truncate_page+0x30/0x30 [ 333.257226][T27326] cont_write_begin+0x4cf/0x7b0 [ 333.262148][T27326] fat_write_begin+0x61/0xf0 [ 333.266771][T27326] ? fat_block_truncate_page+0x30/0x30 [ 333.272214][T27326] generic_perform_write+0x1c8/0x400 [ 333.277579][T27326] __generic_file_write_iter+0x195/0x2b0 [ 333.283192][T27326] ? generic_write_checks+0x250/0x290 [ 333.288795][T27326] generic_file_write_iter+0x75/0x130 [ 333.294401][T27326] do_iter_readv_writev+0x2de/0x380 [ 333.299584][T27326] do_iter_write+0x192/0x5c0 [ 333.304158][T27326] ? splice_from_pipe_next+0x34f/0x3b0 [ 333.309651][T27326] ? kmalloc_array+0x2d/0x40 [ 333.314332][T27326] vfs_iter_write+0x4c/0x70 [ 333.318887][T27326] iter_file_splice_write+0x43a/0x790 [ 333.324283][T27326] ? splice_from_pipe+0xd0/0xd0 [ 333.329127][T27326] direct_splice_actor+0x80/0xa0 [ 333.334047][T27326] splice_direct_to_actor+0x345/0x650 [ 333.339403][T27326] ? do_splice_direct+0x190/0x190 [ 333.344538][T27326] do_splice_direct+0x106/0x190 [ 333.349386][T27326] do_sendfile+0x675/0xc40 [ 333.354016][T27326] __x64_sys_sendfile64+0x102/0x140 [ 333.359192][T27326] do_syscall_64+0x44/0xd0 [ 333.363591][T27326] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 333.369559][T27326] RIP: 0033:0x7f48b3ecaae9 [ 333.374032][T27326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 333.393674][T27326] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 333.402122][T27326] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 333.410105][T27326] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 333.418062][T27326] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 333.426033][T27326] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002 [ 333.434015][T27326] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 333.442079][T27326] 14:53:51 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="4b05932f85faca55e1ec2341c75d3ab3efd8d2116b801799f52b08bc63abbf60952e2bd9702f743558fd34e42720fa7f94d6b7ef67cebb4190786049b3a6fcbe4c5567cac794322341214030429449e4ed16936ab23fe105ce8440feceaf0cda1a0fc9b27c68e2397ec16eeff23ac2daee9527d9214b697d094fa6f447343f4a783bbd0c238d04f77080a7be4e0e9a62db69057af54a0443b096330ad57fc4d7e91b57f64e4c78c15bd6f0a498b5bb97f09a633a324e94be1242e7a43fda2e82ad418e5a51fbe1b44571e6c1b155d8bff521"], 0x200002e6) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000000300", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:51 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x3000000, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000005c50000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:51 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x34d000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 27) 14:53:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000000400", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:51 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000000500", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 333.610890][T27332] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 333.641167][T27345] loop4: detected capacity change from 0 to 262160 14:53:51 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000000600", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 333.712821][T27345] FAULT_INJECTION: forcing a failure. [ 333.712821][T27345] name failslab, interval 1, probability 0, space 0, times 0 [ 333.725598][T27345] CPU: 0 PID: 27345 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 333.734383][T27345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 333.744564][T27345] Call Trace: [ 333.747833][T27345] [ 333.750762][T27345] dump_stack_lvl+0xd6/0x122 [ 333.755371][T27345] dump_stack+0x11/0x1b [ 333.759555][T27345] should_fail+0x23c/0x250 [ 333.763964][T27345] ? mempool_alloc_slab+0x16/0x20 [ 333.769065][T27345] __should_failslab+0x81/0x90 [ 333.773859][T27345] should_failslab+0x5/0x20 [ 333.778366][T27345] kmem_cache_alloc+0x4f/0x320 [ 333.783203][T27345] mempool_alloc_slab+0x16/0x20 [ 333.788094][T27345] ? mempool_free+0x130/0x130 [ 333.792771][T27345] mempool_alloc+0x9d/0x310 [ 333.797280][T27345] bio_alloc_bioset+0xcc/0x560 [ 333.802046][T27345] submit_bh_wbc+0x133/0x320 [ 333.806632][T27345] ? mark_buffer_dirty+0x190/0x260 14:53:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000002c80000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:51 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x5000000, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 333.811804][T27345] write_dirty_buffer+0xde/0xf0 [ 333.816654][T27345] fat_sync_bhs+0x52/0x160 [ 333.821146][T27345] fat_ent_write+0x85/0xd0 [ 333.825557][T27345] fat_chain_add+0x15b/0x410 [ 333.830235][T27345] fat_get_block+0x48d/0x610 [ 333.834825][T27345] __block_write_begin_int+0x4c5/0x1010 [ 333.840487][T27345] ? fat_block_truncate_page+0x30/0x30 [ 333.845947][T27345] cont_write_begin+0x4cf/0x7b0 [ 333.850805][T27345] fat_write_begin+0x61/0xf0 [ 333.855457][T27345] ? fat_block_truncate_page+0x30/0x30 14:53:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000008f00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x5, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_HANDLE={0xc}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) 14:53:51 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x34e000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 333.860972][T27345] generic_perform_write+0x1c8/0x400 [ 333.866344][T27345] __generic_file_write_iter+0x195/0x2b0 [ 333.872025][T27345] ? generic_write_checks+0x250/0x290 [ 333.877458][T27345] generic_file_write_iter+0x75/0x130 [ 333.882901][T27361] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 333.882924][T27345] do_iter_readv_writev+0x2de/0x380 [ 333.882965][T27345] do_iter_write+0x192/0x5c0 [ 333.882989][T27345] ? splice_from_pipe_next+0x34f/0x3b0 [ 333.907458][T27345] ? kmalloc_array+0x2d/0x40 [ 333.912177][T27345] vfs_iter_write+0x4c/0x70 [ 333.916751][T27345] iter_file_splice_write+0x43a/0x790 [ 333.922125][T27345] ? splice_from_pipe+0xd0/0xd0 [ 333.926484][T27362] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 333.926975][T27345] direct_splice_actor+0x80/0xa0 [ 333.941073][T27345] splice_direct_to_actor+0x345/0x650 [ 333.946464][T27345] ? do_splice_direct+0x190/0x190 [ 333.951499][T27345] do_splice_direct+0x106/0x190 [ 333.956329][T27345] do_sendfile+0x675/0xc40 [ 333.960724][T27345] __x64_sys_sendfile64+0x102/0x140 [ 333.965905][T27345] do_syscall_64+0x44/0xd0 [ 333.970338][T27345] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 333.976274][T27345] RIP: 0033:0x7f48b3ecaae9 [ 333.980744][T27345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 334.000348][T27345] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 14:53:51 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x34f000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 334.008760][T27345] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 334.016724][T27345] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 334.024689][T27345] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 334.032657][T27345] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002 [ 334.040650][T27345] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 334.048619][T27345] 14:53:51 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x6000000, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000000700", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 334.055575][T27361] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 14:53:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 28) 14:53:52 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000054300)) write$P9_RGETLOCK(r2, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000001ce0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000000800", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:52 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x8000000, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:52 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x350000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:52 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) pread64(r1, &(0x7f0000000440)=""/5, 0x5, 0x4) fcntl$setpipe(r1, 0x407, 0x7000000) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000054300)) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000040)={0x0, 0x40d7, 0x0, 0x1}) 14:53:52 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x9000000, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000000900", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000000a00", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:52 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0xa000000, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 334.309116][T27404] loop4: detected capacity change from 0 to 262160 14:53:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000003e10000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 334.351328][T27404] FAULT_INJECTION: forcing a failure. [ 334.351328][T27404] name failslab, interval 1, probability 0, space 0, times 0 [ 334.364242][T27404] CPU: 0 PID: 27404 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 334.372999][T27404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.383049][T27404] Call Trace: [ 334.386324][T27404] [ 334.389343][T27404] dump_stack_lvl+0xd6/0x122 [ 334.393933][T27404] dump_stack+0x11/0x1b [ 334.398141][T27404] should_fail+0x23c/0x250 [ 334.402602][T27404] ? mempool_alloc_slab+0x16/0x20 [ 334.407702][T27404] __should_failslab+0x81/0x90 [ 334.412465][T27404] should_failslab+0x5/0x20 [ 334.417034][T27404] kmem_cache_alloc+0x4f/0x320 [ 334.421979][T27404] mempool_alloc_slab+0x16/0x20 [ 334.426843][T27404] ? mempool_free+0x130/0x130 [ 334.431541][T27404] mempool_alloc+0x9d/0x310 [ 334.436075][T27404] ? sysvec_apic_timer_interrupt+0x4a/0xb0 [ 334.441923][T27404] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 334.448197][T27404] bio_alloc_bioset+0xcc/0x560 [ 334.452962][T27404] submit_bh_wbc+0x133/0x320 [ 334.457549][T27404] ? mark_buffer_dirty+0x190/0x260 [ 334.462667][T27404] write_dirty_buffer+0xde/0xf0 [ 334.467515][T27404] fat_sync_bhs+0x52/0x160 [ 334.471990][T27404] fat_alloc_clusters+0x95a/0xab0 [ 334.477018][T27404] fat_get_block+0x267/0x610 [ 334.481734][T27404] __block_write_begin_int+0x4c5/0x1010 [ 334.487292][T27404] ? fat_block_truncate_page+0x30/0x30 [ 334.492736][T27404] cont_write_begin+0x4cf/0x7b0 [ 334.497581][T27404] fat_write_begin+0x61/0xf0 [ 334.502166][T27404] ? fat_block_truncate_page+0x30/0x30 [ 334.507664][T27404] generic_perform_write+0x1c8/0x400 [ 334.512976][T27404] __generic_file_write_iter+0x195/0x2b0 [ 334.518742][T27404] ? generic_write_checks+0x250/0x290 [ 334.524091][T27404] generic_file_write_iter+0x75/0x130 [ 334.529443][T27404] do_iter_readv_writev+0x2de/0x380 [ 334.534720][T27404] do_iter_write+0x192/0x5c0 [ 334.539475][T27404] vfs_iter_write+0x4c/0x70 [ 334.543972][T27404] iter_file_splice_write+0x43a/0x790 [ 334.549394][T27404] ? xfrm_migrate+0xba2/0x1e60 [ 334.554137][T27404] ? splice_from_pipe+0xd0/0xd0 [ 334.558986][T27404] direct_splice_actor+0x80/0xa0 [ 334.563927][T27404] splice_direct_to_actor+0x345/0x650 [ 334.569295][T27404] ? do_splice_direct+0x190/0x190 [ 334.574297][T27404] do_splice_direct+0x106/0x190 [ 334.579125][T27404] do_sendfile+0x675/0xc40 [ 334.583553][T27404] __x64_sys_sendfile64+0x102/0x140 [ 334.588798][T27404] do_syscall_64+0x44/0xd0 [ 334.593216][T27404] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 334.599170][T27404] RIP: 0033:0x7f48b3ecaae9 [ 334.603568][T27404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 334.623150][T27404] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 334.631538][T27404] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 334.639493][T27404] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 334.647519][T27404] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 334.655477][T27404] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002 [ 334.663434][T27404] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 334.671406][T27404] 14:53:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 29) 14:53:52 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0xc000000, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:52 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000054300)) syz_io_uring_setup(0x502f, &(0x7f0000000040)={0x0, 0xd8eb, 0x4, 0x0, 0xbc, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) write$P9_RGETLOCK(r0, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r0) fcntl$setpipe(r0, 0x407, 0x7000000) 14:53:52 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x351000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000000b00", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000003ea0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000000c00", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:52 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0xf000000, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 334.851658][T27429] loop4: detected capacity change from 0 to 262160 [ 334.891796][T27429] FAULT_INJECTION: forcing a failure. [ 334.891796][T27429] name failslab, interval 1, probability 0, space 0, times 0 [ 334.904842][T27429] CPU: 0 PID: 27429 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 334.913606][T27429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 334.923656][T27429] Call Trace: [ 334.926950][T27429] [ 334.929872][T27429] dump_stack_lvl+0xd6/0x122 [ 334.934475][T27429] dump_stack+0x11/0x1b 14:53:52 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000000f00", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:52 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 334.938695][T27429] should_fail+0x23c/0x250 [ 334.943174][T27429] ? mempool_alloc_slab+0x16/0x20 [ 334.948353][T27429] __should_failslab+0x81/0x90 [ 334.953481][T27429] should_failslab+0x5/0x20 [ 334.957989][T27429] kmem_cache_alloc+0x4f/0x320 [ 334.962755][T27429] mempool_alloc_slab+0x16/0x20 [ 334.967632][T27429] ? mempool_free+0x130/0x130 [ 334.972385][T27429] mempool_alloc+0x9d/0x310 [ 334.976896][T27429] bio_alloc_bioset+0xcc/0x560 [ 334.981813][T27429] ? __this_cpu_preempt_check+0x18/0x20 14:53:52 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x352000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104ffffffea0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 334.987380][T27429] ? sysvec_apic_timer_interrupt+0x4a/0xb0 [ 334.993266][T27429] submit_bh_wbc+0x133/0x320 [ 334.997882][T27429] write_dirty_buffer+0xde/0xf0 [ 335.002734][T27429] fat_sync_bhs+0x52/0x160 [ 335.007152][T27429] fat_alloc_clusters+0x95a/0xab0 [ 335.012255][T27429] fat_get_block+0x267/0x610 [ 335.016930][T27429] __block_write_begin_int+0x4c5/0x1010 [ 335.022479][T27429] ? fat_block_truncate_page+0x30/0x30 [ 335.027978][T27429] cont_write_begin+0x4cf/0x7b0 [ 335.032828][T27429] fat_write_begin+0x61/0xf0 [ 335.037569][T27429] ? fat_block_truncate_page+0x30/0x30 [ 335.043146][T27429] generic_perform_write+0x1c8/0x400 [ 335.048532][T27429] __generic_file_write_iter+0x195/0x2b0 [ 335.054164][T27429] ? generic_write_checks+0x250/0x290 [ 335.059517][T27429] generic_file_write_iter+0x75/0x130 [ 335.064938][T27429] do_iter_readv_writev+0x2de/0x380 [ 335.070147][T27429] do_iter_write+0x192/0x5c0 [ 335.074718][T27429] vfs_iter_write+0x4c/0x70 [ 335.079206][T27429] iter_file_splice_write+0x43a/0x790 [ 335.084664][T27429] ? splice_from_pipe+0xd0/0xd0 [ 335.089540][T27429] direct_splice_actor+0x80/0xa0 [ 335.094491][T27429] splice_direct_to_actor+0x345/0x650 [ 335.099943][T27429] ? do_splice_direct+0x190/0x190 [ 335.104999][T27429] do_splice_direct+0x106/0x190 [ 335.109931][T27429] do_sendfile+0x675/0xc40 [ 335.114352][T27429] __x64_sys_sendfile64+0x102/0x140 [ 335.119575][T27429] do_syscall_64+0x44/0xd0 [ 335.123988][T27429] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 335.129977][T27429] RIP: 0033:0x7f48b3ecaae9 [ 335.134384][T27429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 335.154049][T27429] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 335.162471][T27429] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 335.170437][T27429] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 335.178406][T27429] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 335.186370][T27429] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002 [ 335.194357][T27429] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 335.202322][T27429] 14:53:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 30) 14:53:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000001000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:53 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x60000000, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:53 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x7f65, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, r4}, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000300)) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {r7}, {0x0, r8}, {}, {}, {r6}, {}, {}, {}, {r6, r8}, {}, {}, {0x0, r8}, {r7, r8}, {}, {r6, r8}, {}, {0x0, r8}, {r7}, {}, {0x0, r8}, {r7}, {}, {r7}, {}, {}, {}, {}, {}, {}, {r7}, {r6}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {r6}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {r7}, {0x0, r8}, {}, {}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r6}, {0x0, r8}, {0x0, r8}, {r6, r8}, {r7}, {}, {r6}, {}, {}, {}, {r6}, {r6, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r7}, {0x0, r8}, {}, {r6}, {}, {}, {}, {0x0, r8}, {r6, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6, r8}, {}, {0x0, r8}, {}, {}, {0x0, r8}, {}, {r6}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {r7}, {0x0, r8}, {}, {}, {}, {}, {r6}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000054240)={{0x0, 0x9, 0x9, 0xfffffffffffffff8, 0x9, 0xb3d, 0x3, 0xfffffffb, 0x7fff, 0x7, 0x2, 0x1ff, 0x40, 0x10, 0x8}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {r11}, {0x0, r12}, {}, {}, {r10}, {}, {}, {}, {r10, r12}, {}, {}, {0x0, r12}, {r11, r12}, {}, {r10, r12}, {}, {0x0, r12}, {r11}, {}, {0x0, r12}, {r11}, {}, {r11}, {}, {}, {}, {}, {}, {}, {r11}, {r10}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {r10}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {0x0, r12}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {r11}, {0x0, r12}, {}, {}, {0x0, r12}, {0x0, r12}, {}, {}, {}, {}, {}, {0x0, r12}, {0x0, r12}, {0x0, r12}, {r10}, {0x0, r12}, {0x0, r12}, {r10, r12}, {r11}, {}, {r10}, {}, {}, {}, {r10}, {r10, r12}, {}, {0x0, r12}, {}, {}, {0x0, r12}, {0x0, r12}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {0x0, r12}, {}, {}, {r11}, {0x0, r12}, {}, {r10}, {}, {}, {}, {0x0, r12}, {r10, r12}, {0x0, r12}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10, r12}, {}, {0x0, r12}, {}, {}, {0x0, r12}, {}, {r10}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {r11}, {0x0, r12}, {}, {}, {}, {}, {r10}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f0000054500)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {r9, r12}, {0x0, r13}], 0x1f, "92520449475167"}) io_uring_enter(r4, 0x2ff, 0x5, 0x0, 0x0, 0x0) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f00000000c0)={0xe, 0x28, &(0x7f0000000040)="4d21b791fae43f2ab86ccf40a93813f0a8aedd4f81d29ee952d5191fab49e700928d60ecc388b2e6"}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r2, 0xae962000) 14:53:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000003ec0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:53 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x353000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:53 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x65580000, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000001100", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:53 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x750e0000, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000082a00", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000003ee0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 335.381066][T27469] loop4: detected capacity change from 0 to 262160 [ 335.428964][T27469] FAULT_INJECTION: forcing a failure. [ 335.428964][T27469] name failslab, interval 1, probability 0, space 0, times 0 [ 335.441610][T27469] CPU: 1 PID: 27469 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 335.450371][T27469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.460428][T27469] Call Trace: [ 335.463708][T27469] [ 335.466674][T27469] dump_stack_lvl+0xd6/0x122 [ 335.471268][T27469] dump_stack+0x11/0x1b [ 335.475466][T27469] should_fail+0x23c/0x250 [ 335.479953][T27469] ? mempool_alloc_slab+0x16/0x20 [ 335.485153][T27469] __should_failslab+0x81/0x90 [ 335.489953][T27469] should_failslab+0x5/0x20 [ 335.494465][T27469] kmem_cache_alloc+0x4f/0x320 [ 335.499231][T27469] mempool_alloc_slab+0x16/0x20 [ 335.504087][T27469] ? mempool_free+0x130/0x130 [ 335.508769][T27469] mempool_alloc+0x9d/0x310 [ 335.513273][T27469] bio_alloc_bioset+0xcc/0x560 [ 335.518046][T27469] submit_bh_wbc+0x133/0x320 [ 335.522695][T27469] ? mark_buffer_dirty+0x190/0x260 [ 335.527856][T27469] __sync_dirty_buffer+0x136/0x1e0 [ 335.532969][T27469] sync_dirty_buffer+0x16/0x20 [ 335.537779][T27469] fat_mirror_bhs+0x24b/0x330 [ 335.542457][T27469] fat_alloc_clusters+0x9ad/0xab0 [ 335.547481][T27469] fat_get_block+0x267/0x610 [ 335.552125][T27469] __block_write_begin_int+0x4c5/0x1010 [ 335.557695][T27469] ? fat_block_truncate_page+0x30/0x30 [ 335.563161][T27469] cont_write_begin+0x4cf/0x7b0 [ 335.568011][T27469] fat_write_begin+0x61/0xf0 [ 335.572663][T27469] ? fat_block_truncate_page+0x30/0x30 14:53:53 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x4, r2, &(0x7f0000000040)="0310fdafad05c2ba3c5c41439811038f57c360e02cb7acfb90677d6b86dc2651281549fe3e8eb14069e077104f89e435f79fcb8b4d29714e6d6ac84ca16bf86c490378f49b740f87c29693d485475b65", 0x50, 0x1f, 0x0, 0x0, r1}, &(0x7f0000000340)) syz_io_uring_setup(0x7f65, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, r2}, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000300)) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) fcntl$setpipe(r4, 0x407, 0x8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {r6}, {0x0, r7}, {}, {}, {r5}, {}, {}, {}, {r5, r7}, {}, {}, {0x0, r7}, {r6, r7}, {}, {r5, r7}, {}, {0x0, r7}, {r6}, {}, {0x0, r7}, {r6}, {}, {r6}, {}, {}, {}, {}, {}, {}, {r6}, {r5}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {r5}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {0x0, r7}, {}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {0x0, r7}, {0x0, r7}, {0x0, r7}, {r5}, {0x0, r7}, {0x0, r7}, {r5, r7}, {r6}, {}, {r5}, {}, {}, {}, {r5}, {r5, r7}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {0x0, r7}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {0x0, r7}, {}, {}, {r6}, {0x0, r7}, {}, {r5}, {}, {}, {}, {0x0, r7}, {r5, r7}, {0x0, r7}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}, {}, {0x0, r7}, {}, {}, {0x0, r7}, {}, {r5}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {r6}, {0x0, r7}, {}, {}, {}, {}, {r5}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000054240)={{0x0, 0x9, 0x9, 0xfffffffffffffff8, 0x9, 0xb3d, 0x3, 0xfffffffb, 0x7fff, 0x7, 0x2, 0x1ff, 0x40, 0x10, 0x8}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {r10}, {0x0, r11}, {}, {}, {r9}, {}, {}, {}, {r9, r11}, {}, {}, {0x0, r11}, {r10, r11}, {}, {r9, r11}, {}, {0x0, r11}, {r10}, {}, {0x0, r11}, {r10}, {}, {r10}, {}, {}, {}, {}, {}, {}, {r10}, {r9}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {r9}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {r10}, {0x0, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {0x0, r11}, {0x0, r11}, {0x0, r11}, {r9}, {0x0, r11}, {0x0, r11}, {r9, r11}, {r10}, {}, {r9}, {}, {}, {}, {r9}, {r9, r11}, {}, {0x0, r11}, {}, {}, {0x0, r11}, {0x0, r11}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {0x0, r11}, {}, {}, {r10}, {0x0, r11}, {}, {r9}, {}, {}, {}, {0x0, r11}, {r9, r11}, {0x0, r11}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9, r11}, {}, {0x0, r11}, {}, {}, {0x0, r11}, {}, {r9}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {r10}, {0x0, r11}, {}, {}, {}, {}, {r9}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000054300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000054500)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {r8, r11}, {0x0, r12}], 0x1f, "92520449475167"}) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) close(r2) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) [ 335.578120][T27469] generic_perform_write+0x1c8/0x400 [ 335.583422][T27469] __generic_file_write_iter+0x195/0x2b0 [ 335.589093][T27469] ? generic_write_checks+0x250/0x290 [ 335.594512][T27469] generic_file_write_iter+0x75/0x130 [ 335.599891][T27469] do_iter_readv_writev+0x2de/0x380 [ 335.605089][T27469] do_iter_write+0x192/0x5c0 [ 335.609738][T27469] ? splice_from_pipe_next+0x34f/0x3b0 [ 335.615217][T27469] ? kmalloc_array+0x2d/0x40 [ 335.619863][T27469] vfs_iter_write+0x4c/0x70 [ 335.624392][T27469] iter_file_splice_write+0x43a/0x790 [ 335.629761][T27469] ? splice_from_pipe+0xd0/0xd0 [ 335.634595][T27469] direct_splice_actor+0x80/0xa0 [ 335.639518][T27469] splice_direct_to_actor+0x345/0x650 [ 335.644961][T27469] ? do_splice_direct+0x190/0x190 [ 335.650177][T27469] do_splice_direct+0x106/0x190 [ 335.655030][T27469] do_sendfile+0x675/0xc40 [ 335.659527][T27469] __x64_sys_sendfile64+0x102/0x140 [ 335.664757][T27469] do_syscall_64+0x44/0xd0 [ 335.669207][T27469] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 335.675145][T27469] RIP: 0033:0x7f48b3ecaae9 [ 335.679592][T27469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 335.699192][T27469] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 335.707599][T27469] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 335.715565][T27469] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 335.723528][T27469] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 335.731491][T27469] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002 [ 335.739453][T27469] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 335.747430][T27469] 14:53:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 31) 14:53:53 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x81000000, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:53 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x354000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:53 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000140)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000054300)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0xa6a2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, &(0x7f00000000c0)=0x10) fcntl$setpipe(r1, 0x407, 0x7000000) write$P9_RFLUSH(r2, &(0x7f0000000180)={0x7, 0x6d, 0x2}, 0x7) 14:53:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000006000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104ffffffef0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000586500", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:53 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x81ffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000008000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104fffffff00000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 335.948089][T27505] loop4: detected capacity change from 0 to 262160 14:53:53 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x88470000, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:53 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000008100", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 335.993923][T27505] FAULT_INJECTION: forcing a failure. [ 335.993923][T27505] name failslab, interval 1, probability 0, space 0, times 0 [ 336.006595][T27505] CPU: 1 PID: 27505 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 336.015353][T27505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.025556][T27505] Call Trace: [ 336.028900][T27505] [ 336.031849][T27505] dump_stack_lvl+0xd6/0x122 [ 336.036440][T27505] dump_stack+0x11/0x1b [ 336.040661][T27505] should_fail+0x23c/0x250 [ 336.045148][T27505] ? mempool_alloc_slab+0x16/0x20 [ 336.050211][T27505] __should_failslab+0x81/0x90 [ 336.054989][T27505] should_failslab+0x5/0x20 [ 336.059504][T27505] kmem_cache_alloc+0x4f/0x320 [ 336.064268][T27505] mempool_alloc_slab+0x16/0x20 [ 336.069119][T27505] ? mempool_free+0x130/0x130 [ 336.073827][T27505] mempool_alloc+0x9d/0x310 [ 336.078358][T27505] bio_alloc_bioset+0xcc/0x560 [ 336.083220][T27505] submit_bh_wbc+0x133/0x320 [ 336.087811][T27505] ? mark_buffer_dirty+0x190/0x260 [ 336.092948][T27505] write_dirty_buffer+0xde/0xf0 [ 336.097849][T27505] fat_sync_bhs+0x52/0x160 [ 336.102264][T27505] fat_ent_write+0x85/0xd0 [ 336.106707][T27505] fat_chain_add+0x15b/0x410 [ 336.111303][T27505] fat_get_block+0x48d/0x610 [ 336.116144][T27505] __block_write_begin_int+0x4c5/0x1010 [ 336.117442][T27518] __nla_validate_parse: 7 callbacks suppressed [ 336.117454][T27518] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 336.121707][T27505] ? fat_block_truncate_page+0x30/0x30 [ 336.121734][T27505] cont_write_begin+0x4cf/0x7b0 [ 336.147308][T27505] fat_write_begin+0x61/0xf0 [ 336.152046][T27505] ? fat_block_truncate_page+0x30/0x30 [ 336.157507][T27505] generic_perform_write+0x1c8/0x400 [ 336.162802][T27505] __generic_file_write_iter+0x195/0x2b0 [ 336.168438][T27505] ? generic_write_checks+0x250/0x290 [ 336.173861][T27505] generic_file_write_iter+0x75/0x130 [ 336.179268][T27505] do_iter_readv_writev+0x2de/0x380 [ 336.184507][T27505] do_iter_write+0x192/0x5c0 [ 336.189140][T27505] ? splice_from_pipe_next+0x34f/0x3b0 [ 336.194594][T27505] ? kmalloc_array+0x2d/0x40 [ 336.199219][T27505] vfs_iter_write+0x4c/0x70 [ 336.203813][T27505] iter_file_splice_write+0x43a/0x790 [ 336.209162][T27505] ? splice_from_pipe+0xd0/0xd0 [ 336.213991][T27505] direct_splice_actor+0x80/0xa0 [ 336.218954][T27505] splice_direct_to_actor+0x345/0x650 [ 336.224384][T27505] ? do_splice_direct+0x190/0x190 [ 336.229400][T27505] do_splice_direct+0x106/0x190 [ 336.234319][T27505] do_sendfile+0x675/0xc40 [ 336.238713][T27505] __x64_sys_sendfile64+0x102/0x140 [ 336.243888][T27505] do_syscall_64+0x44/0xd0 [ 336.248336][T27505] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 336.254239][T27505] RIP: 0033:0x7f48b3ecaae9 [ 336.258665][T27505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 336.278252][T27505] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 336.286764][T27505] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 336.294732][T27505] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 336.302680][T27505] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 336.310643][T27505] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002 [ 336.318609][T27505] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 336.326621][T27505] 14:53:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 32) 14:53:54 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000100)=ANY=[], 0x200002e6) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000080)) r3 = getpgrp(0x0) ioprio_set$pid(0x1, r3, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1e000000003f7f00"/24, @ANYRES32=r3, @ANYBLOB='\x00\x00'], 0x1e) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:54 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x355000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e10000000000ffffff8100", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:54 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x88480000, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000003f20000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:54 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x88a8ffff, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000478800", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 336.471922][T27530] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000003f60000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000000000488800", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:54 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x9effffff, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:54 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) r2 = dup2(r0, r1) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x7f65, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, r6}, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000300)) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058c40)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {r8}, {0x0, r9}, {}, {}, {r7}, {}, {}, {}, {r7, r9}, {}, {}, {0x0, r9}, {r8, r9}, {}, {r7, r9}, {}, {0x0, r9}, {r8}, {}, {0x0, r9}, {r8}, {}, {r8}, {}, {}, {}, {}, {}, {}, {r8}, {r7}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {r7}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {r8}, {0x0, r9}, {}, {}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {r7}, {0x0, r9}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {}, {}, {r7}, {r7, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {}, {r8}, {0x0, r9}, {}, {r7}, {}, {}, {}, {0x0, r9}, {r7, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7, r9}, {}, {0x0, r9}, {}, {}, {0x0, r9}, {}, {r7}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {r8}, {0x0, r9}, {}, {}, {}, {}, {r7}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x0, "2156816c73038c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000054240)={{0x0, 0x9, 0x9, 0xfffffffffffffff8, 0x9, 0xb3d, 0x3, 0xfffffffb, 0x7fff, 0x7, 0x2, 0x1ff, 0x40, 0x10, 0x8}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001c00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) perf_event_open(&(0x7f0000001b80)={0x2, 0x80, 0xa9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r4, 0x0) r11 = syz_open_procfs$userns(0x0, &(0x7f0000000240)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000b80)={{r11}, r10, 0x0, @unused=[0xc986, 0x38], @devid=r12}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f00000000c0)={{r1}, r10, 0xa, @inherit={0x78, &(0x7f0000000040)={0x0, 0x6, 0xfffffffffffff001, 0x5, {0x5, 0x8, 0x0, 0x80000000, 0x1}, [0xfff, 0x8, 0x7fffffff, 0x1205, 0x8, 0xf7e]}}, @subvolid=0x9d4}) [ 336.553943][T27543] loop4: detected capacity change from 0 to 262160 [ 336.599319][T27545] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 336.611844][T27543] FAULT_INJECTION: forcing a failure. [ 336.611844][T27543] name failslab, interval 1, probability 0, space 0, times 0 [ 336.624470][T27543] CPU: 1 PID: 27543 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 336.633246][T27543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.643326][T27543] Call Trace: [ 336.646584][T27543] [ 336.649561][T27543] dump_stack_lvl+0xd6/0x122 [ 336.654167][T27543] dump_stack+0x11/0x1b [ 336.658322][T27543] should_fail+0x23c/0x250 [ 336.660702][ C0] sd 0:0:1:0: tag#4030 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 336.662745][T27543] ? mempool_alloc_slab+0x16/0x20 [ 336.672910][ C0] sd 0:0:1:0: tag#4030 CDB: opcode=0xe5 (vendor) [ 336.677874][T27543] __should_failslab+0x81/0x90 [ 336.684199][ C0] sd 0:0:1:0: tag#4030 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 336.684233][ C0] sd 0:0:1:0: tag#4030 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 336.688997][T27543] should_failslab+0x5/0x20 [ 336.698012][ C0] sd 0:0:1:0: tag#4030 CDB[20]: ba [ 336.707071][T27543] kmem_cache_alloc+0x4f/0x320 [ 336.721372][T27543] mempool_alloc_slab+0x16/0x20 [ 336.726219][T27543] ? mempool_free+0x130/0x130 [ 336.730928][T27543] mempool_alloc+0x9d/0x310 [ 336.735432][T27543] bio_alloc_bioset+0xcc/0x560 [ 336.740193][T27543] ? __getblk_gfp+0x3f/0x530 [ 336.744768][T27543] submit_bh_wbc+0x133/0x320 [ 336.749437][T27543] ? mark_buffer_dirty+0x190/0x260 [ 336.754628][T27543] write_dirty_buffer+0xde/0xf0 [ 336.759475][T27543] fat_sync_bhs+0x52/0x160 [ 336.764000][T27543] fat_alloc_clusters+0x95a/0xab0 [ 336.769014][T27543] fat_get_block+0x267/0x610 [ 336.773591][T27543] __block_write_begin_int+0x4c5/0x1010 [ 336.779154][T27543] ? fat_block_truncate_page+0x30/0x30 [ 336.784647][T27543] cont_write_begin+0x4cf/0x7b0 [ 336.789528][T27543] fat_write_begin+0x61/0xf0 [ 336.794162][T27543] ? fat_block_truncate_page+0x30/0x30 [ 336.799687][T27543] generic_perform_write+0x1c8/0x400 [ 336.805011][T27543] __generic_file_write_iter+0x195/0x2b0 [ 336.810634][T27543] ? generic_write_checks+0x250/0x290 [ 336.816031][T27543] generic_file_write_iter+0x75/0x130 [ 336.821472][T27543] do_iter_readv_writev+0x2de/0x380 [ 336.826667][T27543] do_iter_write+0x192/0x5c0 [ 336.831396][T27543] ? splice_from_pipe_next+0x34f/0x3b0 [ 336.836843][T27543] ? kmalloc_array+0x2d/0x40 [ 336.841422][T27543] vfs_iter_write+0x4c/0x70 [ 336.845913][T27543] iter_file_splice_write+0x43a/0x790 [ 336.851312][T27543] ? splice_from_pipe+0xd0/0xd0 [ 336.856198][T27543] direct_splice_actor+0x80/0xa0 [ 336.861120][T27543] splice_direct_to_actor+0x345/0x650 [ 336.866493][T27543] ? do_splice_direct+0x190/0x190 [ 336.871508][T27543] do_splice_direct+0x106/0x190 [ 336.876395][T27543] do_sendfile+0x675/0xc40 [ 336.880799][T27543] __x64_sys_sendfile64+0x102/0x140 [ 336.886015][T27543] do_syscall_64+0x44/0xd0 [ 336.890546][T27543] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 336.896567][T27543] RIP: 0033:0x7f48b3ecaae9 [ 336.900999][T27543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 336.920666][T27543] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 336.929227][T27543] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 336.937187][T27543] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 336.945150][T27543] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 336.953116][T27543] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002 [ 336.961132][T27543] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 336.969091][T27543] 14:53:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 33) 14:53:54 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x356000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:54 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e10000000000ffffa88800", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:54 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0xc4050000, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000f70000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:55 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0xeaffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e10000000000ffffff9e00", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:55 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0xefffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 337.076030][T27562] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e10000000000ffffffea00", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:55 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0xf0ffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000003fa0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 337.155758][T27578] loop4: detected capacity change from 0 to 262160 [ 337.197673][T27585] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 337.201571][T27578] FAULT_INJECTION: forcing a failure. [ 337.201571][T27578] name failslab, interval 1, probability 0, space 0, times 0 [ 337.219488][T27578] CPU: 1 PID: 27578 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 337.228245][T27578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 337.238299][T27578] Call Trace: [ 337.241574][T27578] [ 337.244559][T27578] dump_stack_lvl+0xd6/0x122 [ 337.249136][T27578] dump_stack+0x11/0x1b [ 337.253278][T27578] should_fail+0x23c/0x250 [ 337.257716][T27578] ? mempool_alloc_slab+0x16/0x20 [ 337.262816][T27578] __should_failslab+0x81/0x90 [ 337.267584][T27578] should_failslab+0x5/0x20 [ 337.272085][T27578] kmem_cache_alloc+0x4f/0x320 [ 337.276860][T27578] mempool_alloc_slab+0x16/0x20 [ 337.281716][T27578] ? mempool_free+0x130/0x130 [ 337.286468][T27578] mempool_alloc+0x9d/0x310 [ 337.290960][T27578] bio_alloc_bioset+0xcc/0x560 [ 337.295730][T27578] ? submit_bio_noacct+0x49f/0x4e0 [ 337.300891][T27578] submit_bh_wbc+0x133/0x320 [ 337.305473][T27578] ? mark_buffer_dirty+0x190/0x260 [ 337.310579][T27578] __sync_dirty_buffer+0x136/0x1e0 [ 337.315718][T27578] sync_dirty_buffer+0x16/0x20 [ 337.320554][T27578] fat_mirror_bhs+0x24b/0x330 [ 337.325258][T27578] fat_alloc_clusters+0x9ad/0xab0 [ 337.330288][T27578] fat_get_block+0x267/0x610 [ 337.334870][T27578] __block_write_begin_int+0x4c5/0x1010 [ 337.340447][T27578] ? fat_block_truncate_page+0x30/0x30 [ 337.345893][T27578] cont_write_begin+0x4cf/0x7b0 [ 337.350783][T27578] fat_write_begin+0x61/0xf0 [ 337.355356][T27578] ? fat_block_truncate_page+0x30/0x30 [ 337.360820][T27578] generic_perform_write+0x1c8/0x400 [ 337.366113][T27578] __generic_file_write_iter+0x195/0x2b0 [ 337.371779][T27578] ? generic_write_checks+0x250/0x290 [ 337.377167][T27578] generic_file_write_iter+0x75/0x130 [ 337.382530][T27578] do_iter_readv_writev+0x2de/0x380 [ 337.387839][T27578] do_iter_write+0x192/0x5c0 [ 337.392425][T27578] vfs_iter_write+0x4c/0x70 [ 337.397027][T27578] iter_file_splice_write+0x43a/0x790 [ 337.402382][T27578] ? splice_from_pipe+0xd0/0xd0 [ 337.407218][T27578] direct_splice_actor+0x80/0xa0 [ 337.412144][T27578] splice_direct_to_actor+0x345/0x650 [ 337.417525][T27578] ? do_splice_direct+0x190/0x190 [ 337.422540][T27578] do_splice_direct+0x106/0x190 [ 337.427389][T27578] do_sendfile+0x675/0xc40 [ 337.431804][T27578] __x64_sys_sendfile64+0x102/0x140 [ 337.436996][T27578] do_syscall_64+0x44/0xd0 [ 337.441435][T27578] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 337.447320][T27578] RIP: 0033:0x7f48b3ecaae9 [ 337.451719][T27578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 337.471391][T27578] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 337.479806][T27578] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 337.487762][T27578] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 14:53:55 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) [ 337.495725][T27578] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 337.503735][T27578] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002 [ 337.511703][T27578] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 337.519752][T27578] 14:53:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 34) 14:53:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e10000000000ffffffef00", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:55 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0xfcffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:55 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x357000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:55 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) r2 = dup2(r0, r1) fcntl$setpipe(r1, 0x407, 0x7000000) write$P9_RGETLOCK(r2, &(0x7f00000000c0)={0x1e, 0x37, 0x2, {0x1, 0x20, 0x3}}, 0x1e) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) accept4$x25(r3, 0x0, &(0x7f0000000080), 0x800) 14:53:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000003fc0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:55 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0xfeffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e10000000000fffffff000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 337.662092][T27597] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000003fe0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:55 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e10000000000fffffffc00", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:55 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0xffffa888, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 337.731544][T27612] loop4: detected capacity change from 0 to 262160 [ 337.755575][T27614] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 337.784904][T27612] FAULT_INJECTION: forcing a failure. [ 337.784904][T27612] name failslab, interval 1, probability 0, space 0, times 0 [ 337.797739][T27612] CPU: 0 PID: 27612 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 337.806672][T27612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 337.816719][T27612] Call Trace: [ 337.819995][T27612] [ 337.822968][T27612] dump_stack_lvl+0xd6/0x122 [ 337.827584][T27612] dump_stack+0x11/0x1b [ 337.831814][T27612] should_fail+0x23c/0x250 [ 337.836284][T27612] ? mempool_alloc_slab+0x16/0x20 [ 337.841309][T27612] __should_failslab+0x81/0x90 [ 337.846072][T27612] should_failslab+0x5/0x20 [ 337.850587][T27612] kmem_cache_alloc+0x4f/0x320 [ 337.855350][T27612] mempool_alloc_slab+0x16/0x20 [ 337.860223][T27612] ? mempool_free+0x130/0x130 [ 337.864936][T27612] mempool_alloc+0x9d/0x310 [ 337.869442][T27612] bio_alloc_bioset+0xcc/0x560 [ 337.874245][T27612] submit_bh_wbc+0x133/0x320 [ 337.878870][T27612] ? mark_buffer_dirty+0x190/0x260 [ 337.883977][T27612] write_dirty_buffer+0xde/0xf0 [ 337.889010][T27612] fat_sync_bhs+0x52/0x160 [ 337.893502][T27612] fat_ent_write+0x85/0xd0 [ 337.897910][T27612] fat_chain_add+0x15b/0x410 [ 337.902525][T27612] fat_get_block+0x48d/0x610 [ 337.907136][T27612] __block_write_begin_int+0x4c5/0x1010 [ 337.912684][T27612] ? fat_block_truncate_page+0x30/0x30 [ 337.918207][T27612] cont_write_begin+0x4cf/0x7b0 [ 337.923063][T27612] fat_write_begin+0x61/0xf0 [ 337.927723][T27612] ? fat_block_truncate_page+0x30/0x30 14:53:55 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x358000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 337.933190][T27612] generic_perform_write+0x1c8/0x400 [ 337.938496][T27612] __generic_file_write_iter+0x195/0x2b0 [ 337.944194][T27612] ? generic_write_checks+0x250/0x290 [ 337.949614][T27612] generic_file_write_iter+0x75/0x130 [ 337.954985][T27612] do_iter_readv_writev+0x2de/0x380 [ 337.960214][T27612] do_iter_write+0x192/0x5c0 [ 337.964813][T27612] ? memcpy_erms+0x8/0x10 [ 337.969215][T27612] vfs_iter_write+0x4c/0x70 [ 337.973735][T27612] iter_file_splice_write+0x43a/0x790 [ 337.979110][T27612] ? splice_from_pipe+0xd0/0xd0 [ 337.984020][T27612] direct_splice_actor+0x80/0xa0 [ 337.989008][T27612] splice_direct_to_actor+0x345/0x650 [ 337.994410][T27612] ? do_splice_direct+0x190/0x190 [ 337.999436][T27612] do_splice_direct+0x106/0x190 [ 338.004348][T27612] do_sendfile+0x675/0xc40 [ 338.008766][T27612] __x64_sys_sendfile64+0x102/0x140 [ 338.014035][T27612] do_syscall_64+0x44/0xd0 [ 338.018451][T27612] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 338.024391][T27612] RIP: 0033:0x7f48b3ecaae9 [ 338.028799][T27612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 338.048486][T27612] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 338.056901][T27612] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 338.064911][T27612] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 338.072911][T27612] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 338.080878][T27612] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002 [ 338.088853][T27612] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 338.096828][T27612] 14:53:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 35) 14:53:56 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x359000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:56 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0xffffff7f, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e10000000000fffffffe00", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000100001040000fffe0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) [ 338.329083][T27633] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 338.360762][T27636] loop4: detected capacity change from 0 to 262160 14:53:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000000007fffffff00", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104fffffffe0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:56 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 338.461734][T27643] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 338.462400][T27636] FAULT_INJECTION: forcing a failure. [ 338.462400][T27636] name failslab, interval 1, probability 0, space 0, times 0 [ 338.483874][T27636] CPU: 0 PID: 27636 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 338.492642][T27636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.502690][T27636] Call Trace: [ 338.505959][T27636] 14:53:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e10000000000ffffffff00", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:56 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x35a000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 338.508895][T27636] dump_stack_lvl+0xd6/0x122 [ 338.513510][T27636] dump_stack+0x11/0x1b [ 338.517663][T27636] should_fail+0x23c/0x250 [ 338.522077][T27636] ? mempool_alloc_slab+0x16/0x20 [ 338.527190][T27636] __should_failslab+0x81/0x90 [ 338.532023][T27636] should_failslab+0x5/0x20 [ 338.536560][T27636] kmem_cache_alloc+0x4f/0x320 [ 338.541373][T27636] mempool_alloc_slab+0x16/0x20 [ 338.546227][T27636] ? mempool_free+0x130/0x130 [ 338.550984][T27636] mempool_alloc+0x9d/0x310 [ 338.555489][T27636] bio_alloc_bioset+0xcc/0x560 [ 338.560252][T27636] submit_bh_wbc+0x133/0x320 [ 338.564843][T27636] ? mark_buffer_dirty+0x190/0x260 [ 338.569951][T27636] __sync_dirty_buffer+0x136/0x1e0 [ 338.575122][T27636] sync_dirty_buffer+0x16/0x20 [ 338.579886][T27636] fat_mirror_bhs+0x24b/0x330 [ 338.584629][T27636] fat_ent_write+0xc2/0xd0 [ 338.589038][T27636] fat_chain_add+0x15b/0x410 [ 338.593627][T27636] fat_get_block+0x48d/0x610 [ 338.598255][T27636] __block_write_begin_int+0x4c5/0x1010 [ 338.603802][T27636] ? fat_block_truncate_page+0x30/0x30 [ 338.609312][T27636] cont_write_begin+0x4cf/0x7b0 [ 338.614163][T27636] fat_write_begin+0x61/0xf0 [ 338.618805][T27636] ? fat_block_truncate_page+0x30/0x30 [ 338.624338][T27636] generic_perform_write+0x1c8/0x400 [ 338.629632][T27636] __generic_file_write_iter+0x195/0x2b0 [ 338.635330][T27636] ? generic_write_checks+0x250/0x290 [ 338.640785][T27636] generic_file_write_iter+0x75/0x130 [ 338.646157][T27636] do_iter_readv_writev+0x2de/0x380 [ 338.651455][T27636] do_iter_write+0x192/0x5c0 [ 338.656122][T27636] vfs_iter_write+0x4c/0x70 [ 338.660624][T27636] iter_file_splice_write+0x43a/0x790 [ 338.665998][T27636] ? splice_from_pipe+0xd0/0xd0 [ 338.670891][T27636] direct_splice_actor+0x80/0xa0 [ 338.675832][T27636] splice_direct_to_actor+0x345/0x650 [ 338.681252][T27636] ? do_splice_direct+0x190/0x190 [ 338.686290][T27636] do_splice_direct+0x106/0x190 [ 338.691205][T27636] do_sendfile+0x675/0xc40 [ 338.695637][T27636] __x64_sys_sendfile64+0x102/0x140 [ 338.700909][T27636] do_syscall_64+0x44/0xd0 [ 338.705373][T27636] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 338.711299][T27636] RIP: 0033:0x7f48b3ecaae9 [ 338.715700][T27636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 338.735319][T27636] RSP: 002b:00007f48b1c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 338.743764][T27636] RAX: ffffffffffffffda RBX: 00007f48b3fddf60 RCX: 00007f48b3ecaae9 [ 338.751892][T27636] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 338.759879][T27636] RBP: 00007f48b1c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 338.767847][T27636] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000002 [ 338.775831][T27636] R13: 00007ffe84b8d05f R14: 00007f48b1c41300 R15: 0000000000022000 [ 338.784001][T27636] 14:53:56 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0xffffff9e, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:56 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000200000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 36) 14:53:57 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x35b000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) 14:53:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000003ff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000300000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:57 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0xffffffea, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:57 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0xffffffef, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000400000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 339.125161][T27663] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 14:53:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000500000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) 14:53:57 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0xfffffff0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 14:53:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010400000fff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000b1ff02800800030010504a0a"], 0x3c}}, 0x0) 14:53:57 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x35c000) dup2(r0, r1) r2 = syz_io_uring_setup(0x501a, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r2, 0x2ff, 0x5, 0x0, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x7000000) [ 339.218002][T27680] loop4: detected capacity change from 0 to 262160 14:53:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000024004fe841e100000600000000000000", @ANYRES32=r2, @ANYBLOB="00001000ffffffff000000000700010066710000040002"], 0x30}}, 0x0) [ 339.286388][T27680] FAULT_INJECTION: forcing a failure. [ 339.286388][T27680] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 339.300581][T27680] CPU: 0 PID: 27680 Comm: syz-executor.4 Not tainted 5.16.0-rc2-syzkaller #0 [ 339.309508][T27680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 339.319558][T27680] Call Trace: [ 339.322836][T27680] [ 339.325797][T27680] dump_stack_lvl+0xd6/0x122 [ 339.330403][T27680] dump_stack+0x11/0x1b [ 339.334601][T27680] should_fail+0x23c/0x25