z_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000ec0)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000440)=""/179, 0xb3}], 0x1, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f0000000700)=""/16, 0x10}, {&(0x7f0000000740)=""/62, 0x3e}, {&(0x7f0000000780)=""/144, 0x90}, {&(0x7f0000000840)=""/201, 0xc9}, {&(0x7f0000000940)=""/228, 0xe4}], 0x6}}, {{&(0x7f0000000ac0), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/174, 0xae}, {&(0x7f0000000c00)=""/225, 0xe1}], 0x2, &(0x7f0000000d40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x3, 0x40000041, &(0x7f0000000e40)={0x77359400}) io_uring_enter(r6, 0x2db9, 0xedaf, 0x2, &(0x7f0000000e80)={[0x10001]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:04 executing program 1: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x800080804524, &(0x7f0000000180)) 18:00:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0xb000000}, 0x0) 18:00:04 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x80000, 0x1, 0x13}, &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x23456}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001640)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x2000, @fd=r5, 0x400, &(0x7f0000001600)=[{&(0x7f00000003c0)=""/8, 0x8}, {&(0x7f0000000400)=""/215, 0xd7}, {&(0x7f0000000500)=""/194, 0xc2}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x4}, 0x100) 18:00:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x2}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x3}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:04 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000ec0)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000440)=""/179, 0xb3}], 0x1, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f0000000700)=""/16, 0x10}, {&(0x7f0000000740)=""/62, 0x3e}, {&(0x7f0000000780)=""/144, 0x90}, {&(0x7f0000000840)=""/201, 0xc9}, {&(0x7f0000000940)=""/228, 0xe4}], 0x6}}, {{&(0x7f0000000ac0), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/174, 0xae}, {&(0x7f0000000c00)=""/225, 0xe1}], 0x2, &(0x7f0000000d40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x3, 0x40000041, &(0x7f0000000e40)={0x77359400}) io_uring_enter(r6, 0x2db9, 0xedaf, 0x2, &(0x7f0000000e80)={[0x10001]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000dc000/0x4000)=nil, 0x4000}, 0x0) 18:00:04 executing program 1: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x800080804524, &(0x7f0000000180)) 18:00:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000000}, 0x0) 18:00:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x4}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x5}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 647.141480][ C1] sd 0:0:1:0: tag#2112 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 647.151342][ C1] sd 0:0:1:0: tag#2112 CDB: opcode=0xe5 (vendor) [ 647.157734][ C1] sd 0:0:1:0: tag#2112 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 647.166774][ C1] sd 0:0:1:0: tag#2112 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 647.175828][ C1] sd 0:0:1:0: tag#2112 CDB[20]: ba 18:00:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:04 executing program 1: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x800080804524, &(0x7f0000000180)) 18:00:04 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000ec0)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000440)=""/179, 0xb3}], 0x1, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f0000000700)=""/16, 0x10}, {&(0x7f0000000740)=""/62, 0x3e}, {&(0x7f0000000780)=""/144, 0x90}, {&(0x7f0000000840)=""/201, 0xc9}, {&(0x7f0000000940)=""/228, 0xe4}], 0x6}}, {{&(0x7f0000000ac0), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/174, 0xae}, {&(0x7f0000000c00)=""/225, 0xe1}], 0x2, &(0x7f0000000d40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x3, 0x40000041, &(0x7f0000000e40)={0x77359400}) io_uring_enter(r6, 0x2db9, 0xedaf, 0x2, &(0x7f0000000e80)={[0x10001]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) 18:00:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0xd000000}, 0x0) 18:00:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x6}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:04 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) connect(r5, &(0x7f00000003c0)=@l2={0x1f, 0x5, @none, 0xeb2, 0x1}, 0x80) 18:00:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x7}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) 18:00:04 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000ec0)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000440)=""/179, 0xb3}], 0x1, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f0000000700)=""/16, 0x10}, {&(0x7f0000000740)=""/62, 0x3e}, {&(0x7f0000000780)=""/144, 0x90}, {&(0x7f0000000840)=""/201, 0xc9}, {&(0x7f0000000940)=""/228, 0xe4}], 0x6}}, {{&(0x7f0000000ac0), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/174, 0xae}, {&(0x7f0000000c00)=""/225, 0xe1}], 0x2, &(0x7f0000000d40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x3, 0x40000041, &(0x7f0000000e40)={0x77359400}) io_uring_enter(r6, 0x2db9, 0xedaf, 0x2, &(0x7f0000000e80)={[0x10001]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) 18:00:04 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x0, &(0x7f0000000180)) 18:00:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) 18:00:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x8}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:04 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x0, &(0x7f0000000180)) 18:00:04 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000ec0)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000440)=""/179, 0xb3}], 0x1, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f0000000700)=""/16, 0x10}, {&(0x7f0000000740)=""/62, 0x3e}, {&(0x7f0000000780)=""/144, 0x90}, {&(0x7f0000000840)=""/201, 0xc9}, {&(0x7f0000000940)=""/228, 0xe4}], 0x6}}, {{&(0x7f0000000ac0), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/174, 0xae}, {&(0x7f0000000c00)=""/225, 0xe1}], 0x2, &(0x7f0000000d40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x3, 0x40000041, &(0x7f0000000e40)={0x77359400}) io_uring_enter(r6, 0x2db9, 0xedaf, 0x2, &(0x7f0000000e80)={[0x10001]}, 0x8) 18:00:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x11000000}, 0x0) 18:00:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x9}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:04 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0)={0x0, 0x503c, 0x3, 0x3, 0x10}, &(0x7f00000da000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000680)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r4}}, 0x20) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x50, r0, 0x8000000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r7, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x1, 0x8200, 0x12345}, 0x38ec05ef) syz_io_uring_submit(r6, r3, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd=r7, 0x5, &(0x7f0000000240)=[{&(0x7f00000003c0)="f91934a6ce43da1939ec3d76667179beb930862db9e15be3e77a0e264a210f1db6f78b758bbde48225ec285a1826992d8133f60e7347c44f05399f004470f295e3c70fb1b559cfc680d564b9e3857d4138d823ee85eabfdad12504494b54a68e11e4bb830645d3f0547c604c5699c5a86cccb97838331f2ff2a823d100d62c1d797244570a07d755438c421448024240c1e0e996e99705641805ac7a726a392896705b7a1d8213549c432eafaf55fa0d", 0xb0}, {&(0x7f0000000480)="367976aa26c1b966c45ca28e2c6468d19851fe42084d16d60e7bba3acc6b40a76ea54d7a2bcfa1368a9705b7efe16e1ac833f54d8cdbc0258525b12c797e995d9c264a92859407c07fb3d16a1f39f8b3e81c9e788f6bd4ef404bc92e79203bba7d34bf6f80db05c806d54ad090141be9dea8c9f1abab1b7205e076bbdfef387c880dd17fb4ebec46fa37fc46ddf20230a35e9287a908513c9f94cc59b3582a9b58e9ab5209942687287789595f1770b096de73ea3a1c81b814d83b58b0a155e799fb12a22e919cef4c90451e0060a66e447517315bb97c0cfc1634429b81", 0xde}], 0x2, 0x1, 0x0, {0x3}}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:04 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000ec0)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000440)=""/179, 0xb3}], 0x1, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f0000000700)=""/16, 0x10}, {&(0x7f0000000740)=""/62, 0x3e}, {&(0x7f0000000780)=""/144, 0x90}, {&(0x7f0000000840)=""/201, 0xc9}, {&(0x7f0000000940)=""/228, 0xe4}], 0x6}}, {{&(0x7f0000000ac0), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/174, 0xae}, {&(0x7f0000000c00)=""/225, 0xe1}], 0x2, &(0x7f0000000d40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x3, 0x40000041, &(0x7f0000000e40)={0x77359400}) 18:00:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xa}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x12000000}, 0x0) 18:00:04 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x0, &(0x7f0000000180)) 18:00:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 18:00:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xb}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:04 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000ec0)) 18:00:04 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, 0x0) 18:00:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x10}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x25000000}, 0x0) 18:00:04 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, 0x0) 18:00:04 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) 18:00:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x11}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000000}, 0x0) 18:00:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:04 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x0) r7 = syz_io_uring_setup(0x15e6, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000400)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r8}}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x2000, @fd_index=0x8, 0x264, 0xa366, 0x7, 0x15, 0x96c27f083dfc79c9}, 0x80) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:04 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, 0x0) 18:00:04 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c000000}, 0x0) 18:00:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x21b}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:04 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 18:00:04 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) (fail_nth: 1) [ 648.037680][T12617] FAULT_INJECTION: forcing a failure. [ 648.037680][T12617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.050771][T12617] CPU: 0 PID: 12617 Comm: syz-executor.1 Not tainted 5.15.0-rc2-syzkaller #0 [ 648.059546][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 648.069602][T12617] Call Trace: [ 648.072877][T12617] dump_stack_lvl+0xd6/0x122 [ 648.077484][T12617] dump_stack+0x11/0x1b [ 648.081655][T12617] should_fail+0x23c/0x250 [ 648.086102][T12617] should_fail_usercopy+0x16/0x20 [ 648.091127][T12617] _copy_to_user+0x1c/0x90 [ 648.095536][T12617] evdev_ioctl_handler+0xfd2/0x18e0 [ 648.100778][T12617] evdev_ioctl+0x20/0x30 [ 648.105100][T12617] ? evdev_poll+0x110/0x110 [ 648.109632][T12617] __se_sys_ioctl+0xcb/0x140 [ 648.114224][T12617] __x64_sys_ioctl+0x3f/0x50 [ 648.118811][T12617] do_syscall_64+0x44/0xa0 [ 648.123401][T12617] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 648.129336][T12617] RIP: 0033:0x7f9cdf7d3709 [ 648.133742][T12617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 648.153349][T12617] RSP: 002b:00007f9cdd54b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 648.161769][T12617] RAX: ffffffffffffffda RBX: 00007f9cdf8d7f60 RCX: 00007f9cdf7d3709 [ 648.169741][T12617] RDX: 0000000020000180 RSI: 0000800080804524 RDI: 0000000000000003 [ 648.177724][T12617] RBP: 00007f9cdd54b1d0 R08: 0000000000000000 R09: 0000000000000000 18:00:05 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) 18:00:05 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) 18:00:05 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 18:00:05 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 18:00:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x300}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 648.185697][T12617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.193671][T12617] R13: 00007ffc3e6a105f R14: 00007f9cdd54b300 R15: 0000000000022000 18:00:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:05 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x68000000}, 0x0) 18:00:05 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) (fail_nth: 2) 18:00:05 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) 18:00:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x500}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:05 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_setup(0x5256, &(0x7f00000003c0)={0x0, 0x342a, 0x1, 0x1, 0x1ac, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280), &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000480)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x6f54cb386b28d735, 0x1}, 0x8) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:05 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) [ 648.406503][T12638] FAULT_INJECTION: forcing a failure. [ 648.406503][T12638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.419759][T12638] CPU: 1 PID: 12638 Comm: syz-executor.1 Not tainted 5.15.0-rc2-syzkaller #0 [ 648.428664][T12638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 648.438806][T12638] Call Trace: [ 648.442077][T12638] dump_stack_lvl+0xd6/0x122 [ 648.446722][T12638] dump_stack+0x11/0x1b [ 648.450876][T12638] should_fail+0x23c/0x250 18:00:05 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) [ 648.455288][T12638] should_fail_usercopy+0x16/0x20 [ 648.460327][T12638] _copy_to_user+0x1c/0x90 [ 648.464737][T12638] simple_read_from_buffer+0xab/0x120 [ 648.470173][T12638] proc_fail_nth_read+0x10d/0x150 [ 648.475215][T12638] ? proc_fault_inject_write+0x230/0x230 [ 648.480899][T12638] vfs_read+0x1e6/0x750 [ 648.485129][T12638] ? __fget_light+0x21b/0x260 [ 648.489851][T12638] ? __cond_resched+0x11/0x40 [ 648.494591][T12638] ksys_read+0xd9/0x190 [ 648.498753][T12638] __x64_sys_read+0x3e/0x50 18:00:05 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:05 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) [ 648.503259][T12638] do_syscall_64+0x44/0xa0 [ 648.507767][T12638] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 648.513729][T12638] RIP: 0033:0x7f9cdf78648c [ 648.518134][T12638] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 648.537770][T12638] RSP: 002b:00007f9cdd54b170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 648.546212][T12638] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f9cdf78648c 18:00:05 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:05 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x6c000000}, 0x0) [ 648.554186][T12638] RDX: 000000000000000f RSI: 00007f9cdd54b1e0 RDI: 0000000000000004 [ 648.562155][T12638] RBP: 00007f9cdd54b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 648.570217][T12638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.578185][T12638] R13: 00007ffc3e6a105f R14: 00007f9cdd54b300 R15: 0000000000022000 18:00:05 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x600}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:05 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:05 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:05 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x74000000}, 0x0) 18:00:05 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r0}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f0000001a80)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001bc0)="0445cdd6e30d22df034f82f0ac0fbd4ff9ecfceca1f80f7be6aca8ca7d58190d2d3fe8d825eeadc8c7c828e4e4845ba4defb74b7751ebe4acba28a6cf8d15d7eed972f39f17654cf08af9d659c53019d7391da7ef09b1165069446", 0x5b, 0x0, 0x1}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) syz_io_uring_submit(r1, r2, &(0x7f0000002040)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, &(0x7f0000001d80)=0x80, &(0x7f0000001fc0)=@ll, 0x0, 0x80800}, 0x1) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x110, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)="6287380244088d31edcbb8b001a86481c0143db9196d5537ada0e0bbbfdaf1d3d79b5c9dc3adf5c79aeea050f7a655a8c2570d833c02908d4e2a17459671812aeb58ee591209a920b6", 0x49}, {&(0x7f00000003c0)="32e9cb5491b9e66aa44c1b39f15d38780ac0731045a3a4a0ecb5bb4ed6bdca3e99a20b87daab7bbfed4cfbcc8fe4815e9d32cfcccccbbfe611aca1e097db825adcbdb404a56c30b980b6484a23a5fdd2d58674cafa459a6b5b2fa1efab6aaca79c", 0x61}, {&(0x7f0000000440)="7a91cd4139fd3b3faa0d440e9c46750c19fd1992341feb1356a9629e028733740e1d40027cb82c6c349d4830ce1c3147ac68e29df167e73044a8222d433fee1ea2dae31360ecb140f8a678e801b2f19a9573c8b6b5cf9eeade581b2414e1a992abec60d095241c6df7b31632d9df507781ad38cc0ed767c821d1e456c11bd0809498d7162be101c76b3818d190756aeacff0fb903d5ce22eed47f83a8da007bf34a3803b91083a7b59f89ef8fa5859e2727d977a1fffb4c38b7f2d4fe2", 0xbd}], 0x3, &(0x7f0000000540)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x48}}, {{&(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x3, 0x2, 0x0, 0x0, {0xa, 0x4e23, 0x3, @empty, 0x3}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000640)="084e316cbb029397006e6d75c1c1e16944af42aa316b573c2a99d7a783bc3a74f4a579bb0a12127583379c0b7790fdb5cec52b542f2328a79bc3be2ea743d17e15ef8d9ed1a8b916684443b0161089166ae448b517f8a79a9b37b150806e7d1af55d9eb63f85dad3b079387e", 0x6c}], 0x1}}, {{&(0x7f0000000700)=@ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="3bb94dad567a5be544d094203cb95b155297b612e38cf0986d944f0b39e43390787121c1063885f34959fd52c2fbbd9f653c68", 0x33}, {&(0x7f00000017c0)="a96f0669393bae5b3dbfc83dfdab8bd81ddded7db0c64f4a846d981513168af7dac5923dba47dd546d9490bd1a081c3eaca98e983f4e9f3604cc04155889a29b5d8c053f9243190a6c89c1dcfe4f57f679235fab92032daea6452401ecd17b5151e6c244bc905a42aa411e3ed641da28444dae7daf8f20d2e260910e7af56c01dea4ab3a54c85c014dd340ccaac1e551f7a056568f11e3bf2ef665aab82a7d4ce7e628822b70192b07ec29d43a2a31ac2b8cad29b2fa8ad4262f496e6ee7306ab1179426bcf5579e99", 0xc9}], 0x3, &(0x7f0000001900)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001a80), 0x0, &(0x7f0000001ac0)=[@mark={{0x14, 0x1, 0x24, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x30}}, {{&(0x7f0000001b00)=@caif=@dbg={0x25, 0xd0, 0x1}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001b80)="6cb198002864eb8d936408c817b34deecb894fd0c8aa3c40938c73882597d40eb443e3198ce4", 0x26}, {&(0x7f0000001940)="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", 0x11b}], 0x2}}, {{&(0x7f0000001d00)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @rand_addr=0x64010102}, 0x4, 0x1, 0x4, 0x1}}, 0x80, &(0x7f0000001d80), 0x0, &(0x7f0000001dc0)=[@mark={{0x14, 0x1, 0x24, 0x3f}}, @mark={{0x14, 0x1, 0x24, 0x100}}, @txtime={{0xfedb, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x78}}], 0x6, 0x4040001) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x700}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:05 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000180)) 18:00:05 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:05 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x7a000000}, 0x0) 18:00:05 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x4b47, &(0x7f0000000180)) 18:00:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x900}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 18:00:06 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xa00}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x4b49, &(0x7f0000000180)) 18:00:06 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:06 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ee9000/0x1000)=nil, 0x1000}, 0xfffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x20000000}, 0x1) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4007, @fd_index=0x2, 0x100, &(0x7f00000003c0)=""/214, 0xd6, 0x15}, 0x9c) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0xda1c0000}, 0x0) 18:00:06 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0xeaffffff}, 0x0) 18:00:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xb00}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x541b, &(0x7f0000000180)) 18:00:06 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0xefffffff}, 0x0) 18:00:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x1100}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x5421, &(0x7f0000000180)) 18:00:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x5450, &(0x7f0000000180)) 18:00:06 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:06 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 18:00:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x5451, &(0x7f0000000180)) 18:00:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x1b02}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:06 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) bind(0xffffffffffffffff, &(0x7f0000000240)=@llc={0x1a, 0x7, 0x1, 0x20, 0xe8, 0x9, @broadcast}, 0x80) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x2000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:06 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0xfcffffff}, 0x0) 18:00:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x5452, &(0x7f0000000180)) 18:00:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x1000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:06 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) [ 649.505171][ C0] scsi_io_completion_action: 6 callbacks suppressed [ 649.505202][ C0] sd 0:0:1:0: tag#2149 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 649.522022][ C0] sd 0:0:1:0: tag#2149 CDB: opcode=0xe5 (vendor) [ 649.528354][ C0] sd 0:0:1:0: tag#2149 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 649.537408][ C0] sd 0:0:1:0: tag#2149 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 649.546460][ C0] sd 0:0:1:0: tag#2149 CDB[20]: ba 18:00:06 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000180)) 18:00:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x2000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0xfd0c0000}, 0x0) 18:00:06 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:06 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000, 0x12, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:06 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0xfeffffff}, 0x0) 18:00:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x3000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x40044581, &(0x7f0000000180)) 18:00:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x40044590, &(0x7f0000000180)) 18:00:06 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) [ 649.754849][ C0] sd 0:0:1:0: tag#2126 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 649.764718][ C0] sd 0:0:1:0: tag#2126 CDB: opcode=0xe5 (vendor) [ 649.771051][ C0] sd 0:0:1:0: tag#2126 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 649.780103][ C0] sd 0:0:1:0: tag#2126 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 649.789148][ C0] sd 0:0:1:0: tag#2126 CDB[20]: ba 18:00:06 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0xffffe000}, 0x0) 18:00:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x4000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x40044591, &(0x7f0000000180)) 18:00:06 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r1 = syz_io_uring_setup(0x3c72, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r2, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r1, 0x10000000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x3c, 0x0, &(0x7f00000001c0)=0xffffff67) syz_io_uring_submit(0x0, r5, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x1, 0x0, @fd=r0, 0x37, {0x0, r6}, 0x4, 0x5, 0x1, {0x0, 0x0, r1}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r7, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) syz_io_uring_submit(r2, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r1, 0x6374, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 18:00:06 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:06 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:06 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 18:00:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x5000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:07 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x400445a0, &(0x7f0000000180)) 18:00:07 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:07 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) [ 650.056284][ C1] sd 0:0:1:0: tag#2129 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 650.066147][ C1] sd 0:0:1:0: tag#2129 CDB: opcode=0xe5 (vendor) [ 650.072503][ C1] sd 0:0:1:0: tag#2129 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 650.081609][ C1] sd 0:0:1:0: tag#2129 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 650.090744][ C1] sd 0:0:1:0: tag#2129 CDB[20]: ba 18:00:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x6000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:07 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 18:00:07 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x40049409, &(0x7f0000000180)) 18:00:07 executing program 0: r0 = syz_io_uring_setup(0x4959, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:07 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x20000000}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x503, &(0x7f0000000240)={0x0, 0x3b, 0x1, 0x1, 0x1d}, &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f00000004c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x284c0, 0x90, 0xa}, &(0x7f0000000480)='./file0\x00', 0x18, 0x0, 0x23456}, 0x2) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x1}, 0x8) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x7000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:07 executing program 0: r0 = syz_io_uring_setup(0x4959, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:07 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0xffffffea}, 0x0) 18:00:07 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x40084503, &(0x7f0000000180)) 18:00:07 executing program 0: r0 = syz_io_uring_setup(0x4959, 0x0, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:07 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(0x0, r1, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) [ 650.311984][T12828] __nla_validate_parse: 30 callbacks suppressed [ 650.311999][T12828] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 650.314848][ C1] sd 0:0:1:0: tag#2126 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 650.337367][ C1] sd 0:0:1:0: tag#2126 CDB: opcode=0xe5 (vendor) [ 650.343734][ C1] sd 0:0:1:0: tag#2126 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 650.352773][ C1] sd 0:0:1:0: tag#2126 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 18:00:07 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0xffffffef}, 0x0) [ 650.361820][ C1] sd 0:0:1:0: tag#2126 CDB[20]: ba 18:00:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x8000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:07 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x40084504, &(0x7f0000000180)) 18:00:07 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(0x0, r1, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) [ 650.407539][T12838] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x9000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:07 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x40086602, &(0x7f0000000180)) 18:00:07 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 18:00:07 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f00000da000/0x1000)=nil, 0x1000, 0xae16b58e95e127c4, 0x80010, r0, 0x0) syz_io_uring_setup(0x12e6, &(0x7f0000000240)={0x0, 0x1932, 0x0, 0x0, 0x2fa}, &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)=0x0) r6 = open$dir(&(0x7f0000000440)='./file0\x00', 0x20200, 0x1ac) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000005c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, r6, &(0x7f0000000480), &(0x7f0000000580)='./file0\x00', 0x400, 0x0, 0x0, {0x0, r7}}, 0xfffffffc) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r8, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r8, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:07 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(0x0, r1, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:07 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x40087602, &(0x7f0000000180)) 18:00:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xa000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:07 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) [ 650.565799][T12855] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:07 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0xfffffffc}, 0x0) 18:00:07 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0xfffffffe}, 0x0) 18:00:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xb000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 650.634664][ C1] sd 0:0:1:0: tag#2113 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 650.644526][ C1] sd 0:0:1:0: tag#2113 CDB: opcode=0xe5 (vendor) [ 650.650850][ C1] sd 0:0:1:0: tag#2113 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 650.654577][T12866] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 650.659903][ C1] sd 0:0:1:0: tag#2113 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 650.678175][ C1] sd 0:0:1:0: tag#2113 CDB[20]: ba [ 650.707609][T12869] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:07 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x40104593, &(0x7f0000000180)) 18:00:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x10000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:07 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:07 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x2) 18:00:07 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x13, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) dup2(r6, r5) getsockopt$SO_BINDTODEVICE(r5, 0x6, 0xc, &(0x7f0000000000), 0x20a154cc) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ee9000/0x1000)=nil, 0x1000}, 0xfffffffc) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r8, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r9}}, 0x7) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) 18:00:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x11000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:07 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x401c5820, &(0x7f0000000180)) 18:00:07 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x3) 18:00:07 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) [ 650.879811][T12884] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x1b020000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:07 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x4) [ 650.963558][ C1] sd 0:0:1:0: tag#2116 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 650.973453][ C1] sd 0:0:1:0: tag#2116 CDB: opcode=0xe5 (vendor) [ 650.979873][ C1] sd 0:0:1:0: tag#2116 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 650.989008][ C1] sd 0:0:1:0: tag#2116 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 650.998146][ C1] sd 0:0:1:0: tag#2116 CDB[20]: ba [ 651.024231][T12900] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x20000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:08 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:08 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x4020940d, &(0x7f0000000180)) 18:00:08 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f00000db000/0x2000)=nil, &(0x7f00000dc000/0x1000)=nil, &(0x7f00000dd000/0x3000)=nil, &(0x7f00000de000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000df000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000db000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0)="715f07c4a4e5bc8b7bdbcdc846e076cd83afccafaf27c82f8036bd86ad26cde58900df61169275c132ffa500d0be98211a2e2711eada94709d7c6f57c219b11a021f723b5c0e3108253614f7731bce91f08a2cfd57540314e849d40a25eb4fd7fb048833b8fb372bfc73d4cfde993d6c0b16fca4d094f4cb53fd10e22f47d79a5795065f8e9a34d35e1cddc4c5", 0x8d, r0}, 0x68) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x5) 18:00:08 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x6) 18:00:08 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x40284504, &(0x7f0000000180)) 18:00:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x9effffff}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:08 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) [ 651.242578][T12921] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 651.254362][ C1] sd 0:0:1:0: tag#2113 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 651.264208][ C1] sd 0:0:1:0: tag#2113 CDB: opcode=0xe5 (vendor) [ 651.270715][ C1] sd 0:0:1:0: tag#2113 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 651.279797][ C1] sd 0:0:1:0: tag#2113 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 18:00:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x7) [ 651.288869][ C1] sd 0:0:1:0: tag#2113 CDB[20]: ba 18:00:08 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:08 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x80044501, &(0x7f0000000180)) 18:00:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x8) 18:00:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xeaffffff}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:08 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000400)={r0, 0x9, 0x8000, 0xffffffffffffff81}) io_uring_enter(r5, 0xb4, 0x9e82, 0x1, &(0x7f0000000440)={[0x7]}, 0x8) setxattr$security_selinux(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000003c0)='system_u:object_r:zero_device_t:s0\x00', 0x23, 0x1) r6 = dup(r5) recvmmsg$unix(r6, &(0x7f0000000680)=[{{&(0x7f0000000480), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000500)=""/202, 0xca}, {&(0x7f0000000600)=""/56, 0x38}], 0x2}}], 0x1, 0x0, &(0x7f00000006c0)) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xefffffff}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:08 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x80044584, &(0x7f0000000180)) 18:00:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xf0ffffff}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:08 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) [ 651.504817][T12939] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x9) 18:00:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xfcffffff}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:08 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) [ 651.557778][ C1] sd 0:0:1:0: tag#2128 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 651.567720][ C1] sd 0:0:1:0: tag#2128 CDB: opcode=0xe5 (vendor) [ 651.574091][ C1] sd 0:0:1:0: tag#2128 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 651.583226][ C1] sd 0:0:1:0: tag#2128 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 651.592462][ C1] sd 0:0:1:0: tag#2128 CDB[20]: ba 18:00:08 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x80084502, &(0x7f0000000180)) 18:00:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xa) 18:00:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xfeffffff}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 651.702349][T12961] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:08 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:08 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x80084503, &(0x7f0000000180)) 18:00:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xffffff7f}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xb) 18:00:08 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x2e6}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0xc000}}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ee9000/0x1000)=nil, 0x1000}, 0xfffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x420440, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r5, 0x0, r6, 0x2, 0x0, 0x1}, 0x3) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x9, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xc) 18:00:08 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x80084504, &(0x7f0000000180)) 18:00:08 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:08 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xd) 18:00:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xffffff9e}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:08 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x80086601, &(0x7f0000000180)) [ 651.940561][ C1] sd 0:0:1:0: tag#2149 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 651.950447][ C1] sd 0:0:1:0: tag#2149 CDB: opcode=0xe5 (vendor) [ 651.956827][ C1] sd 0:0:1:0: tag#2149 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 651.965880][ C1] sd 0:0:1:0: tag#2149 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 651.974944][ C1] sd 0:0:1:0: tag#2149 CDB[20]: ba 18:00:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xffffffea}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:09 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xe) 18:00:09 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x4000010, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0xa}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x40000103, 0x1}, 0x400) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:09 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x80087601, &(0x7f0000000180)) 18:00:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xffffffef}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:09 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x80104592, &(0x7f0000000180)) 18:00:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x10) 18:00:09 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xfffffff0}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:09 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x801c581f, &(0x7f0000000180)) 18:00:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x11) 18:00:09 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) [ 652.228418][ C0] sd 0:0:1:0: tag#2150 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 652.238275][ C0] sd 0:0:1:0: tag#2150 CDB: opcode=0xe5 (vendor) [ 652.244622][ C0] sd 0:0:1:0: tag#2150 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 652.253672][ C0] sd 0:0:1:0: tag#2150 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 652.262714][ C0] sd 0:0:1:0: tag#2150 CDB[20]: ba 18:00:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xfffffffc}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:09 executing program 2: r0 = syz_io_uring_setup(0x1596, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x23f}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = dup2(r0, r0) r5 = signalfd(r0, &(0x7f0000000280)={[0x4]}, 0x8) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f00000003c0)=r5, 0x1) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r7, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) ioctl$sock_inet_SIOCSIFPFLAGS(r7, 0x8934, &(0x7f0000000240)={'bridge_slave_1\x00'}) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:09 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x80284504, &(0x7f0000000180)) 18:00:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x12) 18:00:09 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xfffffffe}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:09 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x25) 18:00:09 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0xc0045878, &(0x7f0000000180)) 18:00:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x100000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x48) 18:00:09 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x200000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:09 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0xc0045878, &(0x7f0000000180)) 18:00:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x4c) 18:00:09 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:09 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r0, 0x2, 0x0, 0x1}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000004c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) close_range(0xffffffffffffffff, r0, 0x2) syz_io_uring_setup(0x69eb, &(0x7f0000000240)={0x0, 0x99a0, 0x2, 0x3, 0x3dc, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x6000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000480), 0x4) syz_io_uring_submit(r5, r4, &(0x7f0000000440)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index=0xa, 0x4, 0x0, 0x71}, 0x6) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10202}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x7, 0x8, 0x0, 0x1, 0x2}, 0xfc) io_uring_enter(r0, 0x6374, 0x72a5, 0x0, 0x0, 0x0) 18:00:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x300000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x400000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:09 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x500000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x60) 18:00:09 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0xc0189436, &(0x7f0000000180)) 18:00:09 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) mkdirat(r2, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(0xffffffffffffffff, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r5, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r4, r3, 0x0, 0x100000002) 18:00:09 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0xc020660b, &(0x7f0000000180)) 18:00:09 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x600000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:09 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x68) 18:00:09 executing program 2: r0 = syz_io_uring_setup(0x532, &(0x7f00000002c0)={0x0, 0xe7e7, 0x8, 0x44, 0x198}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x0) r7 = syz_io_uring_setup(0x15e6, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000400)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r8}}, 0x9) syz_io_uring_submit(0x0, r4, &(0x7f0000000280)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="7e44f25610bfb945d6", 0x9, 0x7121, 0x1, {0x0, r8}}, 0x4) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:09 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:10 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x700000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:10 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x6c) 18:00:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x800000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:10 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x74) 18:00:10 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000000)) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @mss={0x2, 0x200}, @window={0x3, 0x5, 0x2}, @timestamp, @mss={0x2, 0x3}], 0x5) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f00000001c0)=""/194) 18:00:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x900000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:10 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={0x0, @empty, @remote}, &(0x7f0000000500)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'ip6_vti0\x00', r5, 0x2f, 0x0, 0xff, 0x5, 0x61, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x34}, 0x7800, 0x8, 0x2, 0x6}}) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) mkdirat(r2, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(0xffffffffffffffff, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r5, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r4, r3, 0x0, 0x100000002) 18:00:10 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:10 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x7a) 18:00:10 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{}, 0x4, 0x9, 0x80}, {{r1, r2/1000+10000}, 0x10, 0x0, 0x1}, {{}, 0x15, 0x6, 0x4a4}, {{0x0, 0xea60}, 0x17, 0x7, 0x644}, {{r3, r4/1000+10000}, 0x17}, {{0x77359400}, 0x12, 0xa39, 0x101}, {{}, 0x2, 0xa0d, 0x8}, {{}, 0x14, 0x7, 0x10000}], 0xc0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xa00000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:10 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:10 executing program 1: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) 18:00:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x300) 18:00:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xb00000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:10 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:10 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x1000009, 0x10010, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) mkdirat(r2, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(0xffffffffffffffff, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r5, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r4, r3, 0x0, 0x100000002) 18:00:10 executing program 1: ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x0, 0x2, 0x8}) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x1000000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x500) 18:00:10 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:10 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f0000000580), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x28cd, &(0x7f00000003c0)={0x0, 0x4e4f, 0x1, 0x0, 0x392}, &(0x7f00000db000/0x1000)=nil, &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000440)) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) r3 = syz_open_dev$vcsn(&(0x7f0000000480), 0x2, 0x1c70c0) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x0) syz_io_uring_setup(0x15e6, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000400)) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r3, 0x74, &(0x7f00000004c0)=@ll={0x11, 0xf8, 0x0, 0x1, 0x6, 0x6, @random="d818ce6f16c7"}}, 0x10001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) chroot(&(0x7f0000000240)='./file0\x00') syz_io_uring_submit(r1, r6, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r6, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r3, 0x80, &(0x7f0000000600)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x4}}, 0x0, 0x0, 0x1}, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x85) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x1100000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:10 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:10 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x400040) ioctl$int_out(r0, 0x1, &(0x7f0000000040)) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x8, 0x15, 0x6, 0xe32, "82f404857fb4e62e38e570448057e289850509f5d0b6d16e45b8753765364a69"}) 18:00:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x600) 18:00:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x1b02000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:10 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, 0x0, 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x700) 18:00:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x2000000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:10 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x189800) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000038c) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000040)={0x6, 0x4, 0xffff, 0x9, "580b533f2c844f398bc62b9c51502c9faf1060ef74788c04587ad1e81942aca8"}) getsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) ioctl$int_out(r1, 0x5462, &(0x7f0000000180)) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x40010, r0, 0x89aaf000) 18:00:10 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:10 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x900) 18:00:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x8000000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:10 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x9effffff00000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:10 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xa00) 18:00:10 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, 0x0, 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xb00) 18:00:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xeaffffff00000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:11 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0xea60}, 0x5, 0x8001, 0x5}, {{0x77359400}, 0x5, 0x7fff, 0x10001}], 0x30) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:11 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x10, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:11 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x2000)=nil, 0x2000, 0x2, 0x20010, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0xfffffffc) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xefffffff00000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:11 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xc00) 18:00:11 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xf0ffffff00000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xcfd) 18:00:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, 0x0, 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xfcffffff00000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:11 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xd00) 18:00:11 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(0x0, r2, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x0) r8 = syz_io_uring_setup(0x15e6, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000400)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r5, 0x80, &(0x7f0000000240)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, 0x1}, 0x0, 0x0, 0x1, {0x0, r9}}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xe00) 18:00:11 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xfeffffff00000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x1100) 18:00:11 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xffffff7f00000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 654.698596][ C1] scsi_io_completion_action: 7 callbacks suppressed [ 654.698642][ C1] sd 0:0:1:0: tag#2137 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 654.715089][ C1] sd 0:0:1:0: tag#2137 CDB: opcode=0xe5 (vendor) [ 654.721425][ C1] sd 0:0:1:0: tag#2137 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 654.730476][ C1] sd 0:0:1:0: tag#2137 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 654.739524][ C1] sd 0:0:1:0: tag#2137 CDB[20]: ba 18:00:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x1200) 18:00:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x0, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:12 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0xffffffff00000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:12 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x1cda) 18:00:12 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000005c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd_index=0x5, 0x8001, &(0x7f0000000580)=[{&(0x7f00000003c0)="af1a4c1aaa6bb3381f7daae66208bfe2b40ba26ae60759fa942a24991d04cf8026cc2145d076b55ffb1f198bb1ee1f5dba6096939389393b7c4e9330e81414ca357b3fd07e118bb73e4ccab013d445168f65c66885b83ba1e830109343f55fb08a2f8daefcce535f5493ea5c0399b90ee0b04825a69b9b5900dbb1cba1262c7ba2c490780193e86e04c61690bc5b066beeabef78a325e837341a84d1362d9bf47f741ce4ae960fa07d8dd1be6f82bc1a93101a0cada64e8aca77c59c2899bcd77189ef5270", 0xc5}, {&(0x7f0000000240)="d42611049d660d94f2a3a3ce966c2b8a4386f998e2f0aa906f66bb088662e92278cd69bcbc056f6144177f7fd470d4092f2029279212dd6b179373ccc2857b1c7ff4764b320ef8a595f019efd7b2dcc5c2a4b02c95493987a16be61ce4f387fe81f8e29b", 0x64}, {&(0x7f00000004c0)="d1e3e6269e5de6792c5276ba2a0204a945f3f4c7a6ab96ae6e44dac9a4e5be5c66f14edc2311d5121bb9517c2bb562871818b9d94e9b03b23bbc9669f1a2b6f9ec18a922a045cd6121e2dbcde9ee833222a4b76c1f981e5e", 0x58}, {&(0x7f0000000540)="9ab60ff855fda419fae467de3fb96f306cbbf6d9ba320f", 0x17}], 0x4, 0x12, 0x0, {0x2, r5}}, 0xf8) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:12 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x2000) 18:00:12 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x2}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:12 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x2500) 18:00:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x3}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:12 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x4}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 655.229563][ C0] sd 0:0:1:0: tag#2162 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 655.239504][ C0] sd 0:0:1:0: tag#2162 CDB: opcode=0xe5 (vendor) [ 655.246041][ C0] sd 0:0:1:0: tag#2162 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 655.255111][ C0] sd 0:0:1:0: tag#2162 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 655.264156][ C0] sd 0:0:1:0: tag#2162 CDB[20]: ba 18:00:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x0, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:12 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x4800) 18:00:12 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x5}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x6}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:12 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:12 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, 0x0, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:12 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000038c) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000040)={0x8, 0x800, 0x3, 0x7, 0xedf, 0x80}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000063040)={{0x0, 0x0, 0x3, 0x0, 0x200, 0x8001, 0x200, 0xca, 0x1, 0x0, 0x7, 0x8, 0x80, 0x7ff, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000064040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}], 0x49, "0e6aacb3cc3178"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004ef80)={0x0, ""/256, 0x0, 0x0}) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000062040)={r9, r7, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000063040)={{0x0, 0x0, 0x3, 0x0, 0x200, 0x8001, 0x200, 0xca, 0x1, 0x0, 0x7, 0x8, 0x80, 0x7ff, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000064040)={0x0, [{r8, r9}, {r8}, {r7, r9}, {0x0, r9}, {0x0, r9}, {}, {}, {}, {r7}, {0x0, r9}, {r7, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {}, {r8}, {r8, r9}, {0x0, r9}, {r7, r9}, {0x0, r9}, {r7, r9}, {0x0, r9}, {}, {r7}, {r8}, {r8}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {r7, r9}, {0x0, r9}, {}, {}, {}, {}, {0x0, r9}, {}, {r7, r9}, {}, {}, {}, {}, {0x0, r9}, {r7}, {r7}, {0x0, r9}, {r7}, {r7}, {r7, r9}, {0x0, r9}, {r8}, {r8, r9}, {r8, r9}, {}, {}, {0x0, r9}, {r7, r9}, {r8}, {}, {}, {}, {}, {r7}, {}, {r7}, {}, {}, {}, {r7}, {}, {r8, r9}, {}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {r7}, {}, {r8, r9}, {r8}, {r7}, {}, {r7}, {}, {}, {}, {0x0, r9}, {0x0, r9}, {r8}, {r8}, {0x0, r9}, {}, {}, {}, {r8, r9}, {}, {r7, r9}, {r7, r9}, {}, {}, {0x0, r9}, {r7}, {r7}, {}, {r7}, {r7}, {0x0, r9}, {r7}, {0x0, r9}, {r8}, {r8}, {0x0, r9}, {r7}, {}, {r8}, {r8, r9}, {}, {}, {r8, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {0x0, r9}, {}, {0x0, r9}, {r8, r9}, {r8}, {0x0, r9}, {r7}, {r8, r9}, {}, {r8}, {r7}, {r8, r9}, {0x0, r9}, {r8}, {}, {r7}, {}, {0x0, r9}, {}, {}, {}, {}, {r7}, {0x0, r9}, {}, {r7}, {r7, r9}, {}, {r8}, {}, {}, {}, {}, {r7}, {r7, r9}, {0x0, r9}, {}, {}, {}, {r8}, {}, {}, {r8, r9}, {0x0, r9}, {}, {r7}, {}, {0x0, r9}, {0x0, r9}, {r8}, {0x0, r9}, {}, {r8}, {0x0, r9}, {r7}, {}, {r8}, {}, {r8}, {r7, r9}, {0x0, r9}, {}, {}, {r7, r9}, {0x0, r9}, {}, {r8, r9}, {r7}, {0x0, r9}, {r8, r9}, {r7, r9}, {0x0, r9}, {r8, r9}, {}, {r8}, {0x0, r9}, {r8}, {}, {}, {r7}, {r8}, {0x0, r9}, {0x0, r9}, {r7}, {0x0, r9}, {}, {r7, r9}, {r8, r9}, {r8}, {r8}, {}, {0x0, r9}, {}, {}, {}, {r8, r9}, {0x0, r9}, {r8, r9}, {r7}, {}, {}, {}, {r8}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {0x0, r9}, {}, {r7, r9}, {0x0, r9}, {r7, r9}, {r7}, {0x0, r9}, {r8, r9}, {0x0, r9}, {r8}, {0x0, r10}, {r11, r9}, {0x0, r9}], 0x49, "0e6aacb3cc3178"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000004f180)={0x0, 0x0, "f4611382e14612ed7a47137622bbf53027e32419797115cca4a69d4d16ba84e1f5bc2bf5161407a58e5cb909ae17e063e813259d326d5744036b25dd0a942a7cfdb927b28aaeba970a70e6100e21464fa9f284342004a5e7787ccd3a4d7ff57be48c2f9a3def146de29d6c47eb4cf98c2f6e41ffffc2c8c784e44d1adaf37b2a8e57ebcd9fe524c159fb963075c8dd9e73997049d23b21256755a7f3ce57c4bab09eeba96108ef9fe57cb51a5bdda6dfa83b949551a04beb042a1db08d76ead8a9eacbded971800d7c9d9c6f703253d4caa5cdd988ac76b28bae87f55dcefb371ff99507803cb2377ad98965fff623340456f49f329bb5efbaee40400a212ac0", "f165b07f6dd0790baebc70e906b3a3e80337dba810ef75d8a8e859f3d27377b7504bb4aa3f551cc3c7fe491329192b25694efd7b7c533d7894923afeab2b2677e5aab08eec85c9fbaa6303e2ce80e78438ba4b5211f31d05dca228564a4d216b3f4d8d9a3d5aa6f174ca2146ff6e3912cb4f8e0bdf5bb422700a6bb3e4fd380fd57994bb3dec6972838f3d99444aef0621b4e073229f780c7b9aa1344f6f4de8dbb9906b2e8a3c7228da3812d04b450c3d46ca1718b918abe46b53a33eadc814814de6d63ab3ab4604eaca1f9a54ec3254a034ee3b5a25b590a04b20e8cab898868d1d3f2a2436c85c3fc42355afa769e7e08b60ae58cc5d0147294bee51305c6543d55c8bf95a6633edab777c078a4dee51290b2c43af7e754e15d6067267cc7925cdcfdb591562407b78a947db2e9b0431cedcd0a5bb62c7e1abaf0eee3fbb2850395874496a6d460e440bd8bc0861a494f7dc85745f4855de02ddd72f936a667fcd38cc580793289798597d2d723ae4b163593ee4f7f4082e4f033bbc992e29df57349a3c14bdd187eace9cf723d54243d1d9bfa911477c18bab997fd71a291cf6f787e9286891a9ce1f0de42f38108e05e77e4ab5877c0a7d0b3f65c7adf4a2c5b38f9b52660973164e0d3acefc7144416ad5a1e01c620f766f4adf13fb9d139c4f54736f0552a587ee993813b026ac2af42a680cb2996b3037ed3f49a50cbefd02a452a0ee7b8dfee09f32ae5c5ad058ec161b6170af3aad7842167d3692660d23788c9e01eeea7a1eaa0ac404055259b7f5a89e10abf0f76afc84070361c41e40556aa2f2062bd04dfb365e3deeec30528136389aa78673805ce4c27fac6551465acfe800d05c5c808917a1896a24127de284131af7c818b6bccf5e5c286995ba2af5ba8bff25142781d66e1037d275bd488d7b4a9500c8596f9c36e0980f2d1bd5f89a5bbaa80fb88397f82aa5ddd21806c9b97622c43f22b3effae33cf967a9cd28b9ccc41e1edcf21306f452fd8383b93aed8966a02e548de0bbcc441a8005399c49184565e91aa3f9df8606eb2ade695c0426bf0cc8cce59e16a16bbfb2edecce2f3f303cec6d3c91801d7979607e8e35dd6f3520c822cb6bb3f671394dcc8750dfc1bf5bdc971d80e9927095a4e0d91ad7f71bf39c889b45944c6ce7265c6a491523d4a8332cc5f6faa5716a7a1925e220730688c09f331e4c14821c32091226dc9bc9823dfb50d5999164bf06040a95c7df55c1a9bce7bf84792bb701102373ea4722bf42bd246fb90e9f454762c476bbe70a09e0150675c220953b680d01df244fab795185e530224139d78cf5631bed2fa9aac5dd2b8cdeae8292a16edd9732ebffac59c7059b13993e532f0b981ca7fa5fa91e4288cbb5f9925860cd277a86caa1d54d1824001e1fe071282c0fdab0b0d9c111729a8b0408a30dd2a2b781c4a5d08d1bc6b104d6373f61a731289245ab39bd382bd3044f84c04f3ce009e09bd6d24b7ed55d9a58353ab294137e776d41d135cb2776318c86b61ce5096448103a9c93e235c0bf05baf897eb50c4670bae8f14d0205c0f9c07547e6d1e7bc6c0ac00f5696fd1d16a96f4db08581473a78bd676fa7001ce1c3c0761e27e809897a6b9dfd053c7abb399db857f06c8c18486481a1a4f312b731ac2bd85accd6768b202da47eb4b64a3a10cd59df9333a69dbd61f09be6aa7afceb68b2dd7b55b2ccd7c062b5ef4dd0648c2951083e2f0b23aa41853069653e73bf2c40d5a014298972f73d0a018e6dbfddc0805a94a92b52bcb6a3eacb45af0b61f1d9d0e149a267b68e989951a92a5b9d67515e96c60f7f77a0fbfdfb6abf80320971b6459d25f19c9488a3a3eda08a27243c2e62ae769f287009ffcb61956ac5fcac7ddbfc78fb2a7ba506f1145c79361d0eb4e65687edf376560c7d3d760616aab75c81ef3964beb7b721cb1ec2d1570b4ecfb54593605ccc92824cb95d7ebd032a78fa8f44566d7b30e1800eb508cd1bc52bb99689fb39a56587b995bf81080f1e1e94fdde5693e8b36e0362bc0f4853cd6ab9efdea7f4ad3798af9877925cd3edea0101fd6335e040a5a83f449148dbc9f286d7d2a728f25b3030e8946320fc3b54407dd37d4e9e6c587765f5286814a36d1d0bd3992911f88e715db177139341507786ee250a52ce013dcd69c2a8dac02f029f1b9c0162ec6a511f931285c87d3f380af5cf7a3c3d6b57aca4526665fa2b380f1dcbec2d78b02f5f4c3aafad310fa50b1b20bd7c428c40cd439472d87e6c7a860786973c93cfaea255e6a914483a2c02a1e4f6c532c11dcaa0eafd301dc9e5a649ecff923974520f160ed54bda4f6dbf03008414b9e85cf23cb029e64462607063616ac92da74498d6216a9b6b5b703b9933c477c8c193aaf06f0b86c42a6505b8c747e0eab92efd2332562e25b42726f99eb74a4334b6c642e6e00c596f323b7abacaa58841c2890204076603b1fc10523e4426f798abeb22311b78eca7e059c538fef0435f6b2e97a254406f6f449497f3c7ce8fac44bc98c1456c73d5841e23ab87faedb5acb8ca552b5ab73c85b46cf35d6318dbb72283203cd6d1bc6e432d9f10006ca7d19620647fa63a9a40619990c229377a3f9d1f29fb3008c6b8d15dd8d760670dd1efd8a5854ba85fb51cedbd1430d5e578d9fef34efb73df013c821885f1c22e2bdc4bd3f36fe763670b97e5818736dd61f39a3e3312793cfee35f2b718e148549f15d02acd663205ed86b8edd0fd01fbca1110d3e784f52b2f7288da91a8446ff09b00719c2e246199e69777fff02b6d8f1ce7a3da5fddbf9ba86566a4acd90ed1344ffe90b8553fe7691e835fb8609507892d01fcc92bc47850b8ce3aaaeb12e6a6d2a41399681a4bfaf5920b25e46c2283ee0f621ab285e223b8ba0fe673f45bb4ff595325674d68182598cc8a095f4f04a1330f54d3e14585b94e5b89449c34c85a31c772a123942c17b3e7c58e30dc7bf8878221458a513fbc2a1bab7a9d7f01532bd3c81804da7f7672aa562a5db3bb2817f467aaaffd1b9ef20019a27040ceb83bbcb3aace9f60bfc54c25d19dbd02eb138ee9b1f7384d68312fa38663dae2e4aec64211f4819041da8b31a54538c86cfda2a42dda7665f03ca70df7fc21187bb2287b37b5553db1e52dcdba210a0f3ae38378cc8ed628b6909b97355c6eeffa4c517f46b9bfcbb0b6a243229832ac36ee62e6de5c462d8fbb263a2cba12799fc6b8b2702f7e1b8d004ac6c415b1eda78b10664fb875d87f7390b6c8d43e55a950e1cd6d24f58c0f3d5e4321d0688a23002eea289b0513c4dfe150a631ff7f4517a34a7494f6696a0bbdd513f34e57ea11c091f0b6bff7ac06c81dcc312a56913c9e89158ec3c07c2913167fb6670b25a9e3011059f71537f62185a0e5ea590dedc3783005e6bc4165239dc524a882c28598d88a8f016961bfcc06a2eb0fc34ae587388db810c1499ac4a7478045cd8297af42adaf1a5f1db7d10c0ec432b310c1a828af8f995237433a0565858c004d5b69566b4b8d76b6010150a077e5c73e71d209bf3d384480df14096d548602d32b73f54f24efa282d9a7ea97c1be02c7044494fccbe30f1b50b82825e6cb335d875badddaf9206e61ea88f26b4b0c26f33b934d7d9af1d406f63cc1447e1260973a0cf7cf8dd5ae2b3da3741f304a888c3b8742a1ff42397148841e5adbb1c7141e0cf0eecf5bf37a4b698f7faaa210c0dbb28bc4cb1b589a73cac89eeb50855f347410f07b27c7a8c1f870adb7b566478df5a5e88721cae04703ad4ffea8b9c1d329769758ba00aacfe682a09fcf2c499f849fc1eab192d59855a477f56f85add06ccb2def7ccfb65364f34c68198f9666fc747882e80d1c81dfb59c27f6adb152952d8ac9b3844475cec85a644444c0a1f0424faac3d4c0236d2ee5d7ad0dacd5b9400e78aa085a072aa6d48477aa1996d95f9d0c5318d0e0b4d2fc08a1af069b8627f6321e33bb26eb024470f46f575f2836322dd53fc13dc62a030c3fba5e2bc75c3ae0265adec06a9187337db726af2f7893cc48e019506fccf749f4b96ebba96d0603d73eebd5eb50c08274ad339f450fe8d0872bf727b7abea9e841bc1c63fae1221531392a6df570c8446e5947c0a475f483b1b9d8cf316763559e568362f7e563ac36fc8f55266cd47f3fa33f57a73c5feef5abc882026b7861e714853bf900bc06472fe577419b71c5f824e9562c4b76af73f60e7ba5f5abd1a732dc7780113e9d5677034dbee1441b7d489e8d5958bf68ec9d67d522112e3906c9e4e2999326641dfd1818d9bdee10b5b661f5e94c11a8d43b5a57ba2aa305ca0250ec1b35043fd2e95e0a1a116283aadca89267f218b5692675c7c435b0575ca25edc5dcee0999364fd648cea95f7f27d87ec6ba2fbe28334c1e563fdae760af6e650422c78ef4757a97f9ebe8d77665fdb80a762c36f58d4a6e574abc74b74c23ed7c2009093ee916801a23f6f7c478565513bd4803f5590acf6724d51ee4dd20a073dad435f7675840011347c1bde621ef78d17d997335b84d14ad417e0f071840e6694220f16aa52517a0d05996de4cfbde835b2719ffe5c81f130407a1bfb7c2a65340df329f00595768170f236201226d618935b4b5af74e22becbdfb79a8b35e6dee46f63999bd00f2c1e20fd90c22eeeb83e4f81677262505914e66b82cd2eb8c843ee943961999c80bc4bff20721833a35385119b075963dc80dd5ec005fb7b048d40f9b083624d7a79f49366b162f1587b2de5a5abd052da5576d2bfd91bed533d9c7833a76c42bc351927a4647c5a12e1aa6c5562f6af6f48a877d0084df01a84a6ab0b335709cbbb1e30eab4b24ae4edf480026dcab1e2f36b223a41db14d9e6f5ed4197461ee5752d60a8d4f1907a71d1610b8c80df85d3c7a2ca1ca5d7fd455d85f0aa39dd52fb62c42a65e4fce39ca4ce9915dd1013e547557a58ca9f1a4ae3baba5c51f2b974aed353bc10a069b7bfacf2cf470ce9d71f58b9830a1c39b4da57cab01dbaf73e0b82e6e2326246bdda1b3c1b9e3b778df53572ccbb2f9ace856f66dec3fdd22f0d0b54e8e97a3f67b7d4a2b5179f3852637edba7f2297230ba0c14d8c63aa7f80e25fd4d5f543a6d79ee6195b5836ba380be78495b0617bc891afdbe858e30fb1b3d44b5b2680efc01c7c29b6186f5c20f2b78808fb15e52c493ba5f8d0811f2f3751062603008cffddd20d2f79cba2307b09fb712812b8e71598d66eaa547eae5d8aa26bd8e10cc7a2abf270b33bd6b80245709271e0959c9391a8b2b3f5d0d3a178e4ac408ab6c9e222cd62ee5a49e6024f30227e58d778b36269ac80c8f903cdccacb94af2f59a08457a0de9f54a7c280dd6af"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000050180)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000050380)={0x7fffffff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {r7, r12}, {}, {0x0, r13}], 0xcc, "0e21c5e83bbf8d"}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000000)=""/10) ioctl$int_out(r0, 0x800080801146, &(0x7f0000000180)) 18:00:12 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x4c00) [ 655.508809][T13313] __nla_validate_parse: 26 callbacks suppressed [ 655.508823][T13313] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x7}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:12 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x6000) [ 655.568661][ C0] sd 0:0:1:0: tag#2167 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 655.578528][ C0] sd 0:0:1:0: tag#2167 CDB: opcode=0xe5 (vendor) [ 655.584893][ C0] sd 0:0:1:0: tag#2167 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 655.592228][T13323] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 655.594033][ C0] sd 0:0:1:0: tag#2167 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 655.612451][ C0] sd 0:0:1:0: tag#2167 CDB[20]: ba 18:00:12 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, 0x0, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) [ 655.631087][T13330] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 655.692373][ C0] sd 0:0:1:0: tag#2121 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 655.702229][ C0] sd 0:0:1:0: tag#2121 CDB: opcode=0xe5 (vendor) [ 655.708581][ C0] sd 0:0:1:0: tag#2121 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 655.717662][ C0] sd 0:0:1:0: tag#2121 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 655.726763][ C0] sd 0:0:1:0: tag#2121 CDB[20]: ba [ 655.741183][ C1] sd 0:0:1:0: tag#2159 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 655.751114][ C1] sd 0:0:1:0: tag#2159 CDB: opcode=0xe5 (vendor) [ 655.757472][ C1] sd 0:0:1:0: tag#2159 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 655.766532][ C1] sd 0:0:1:0: tag#2159 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 655.775576][ C1] sd 0:0:1:0: tag#2159 CDB[20]: ba 18:00:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x0, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:12 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x6800) 18:00:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x8}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:12 executing program 2: r0 = syz_io_uring_setup(0x410c, &(0x7f00000002c0)={0x0, 0x1a4e, 0x0, 0x0, 0x116}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) r5 = dup(0xffffffffffffffff) epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0xfffffffa, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2001) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000000)) sendfile(0xffffffffffffffff, r6, &(0x7f0000000100)=0x5, 0x4) write$binfmt_elf64(r6, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r6, &(0x7f0000000240)={0x58390ac4a2fe4017}) 18:00:12 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, 0x0, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:12 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x10100, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000038c) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)) r3 = openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000009, 0x810, r3, 0x51542000) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:13 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x9}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:13 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0xffffffe1) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x7, 0x40, 0x8, 0x5, 0x5, 0x3de}, 0x1c) 18:00:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x6c00) [ 655.994442][T13342] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xa}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:13 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) [ 656.074732][ C0] sd 0:0:1:0: tag#2164 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 656.084592][ C0] sd 0:0:1:0: tag#2164 CDB: opcode=0xe5 (vendor) [ 656.090924][ C0] sd 0:0:1:0: tag#2164 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 656.099989][ C0] sd 0:0:1:0: tag#2164 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 656.109029][ C0] sd 0:0:1:0: tag#2164 CDB[20]: ba [ 656.116655][T13357] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:13 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:13 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:13 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x15, 0x1000, &(0x7f00000001c0)="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"}) 18:00:13 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x1, 0x2007, @fd_index=0x7, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="06fd1327923353d5a8346bcbbaad44f10bced50c06e04334c0d9bc66", 0x1c}, {&(0x7f00000003c0)="3d9bdca8eedd0483377ea7ca2e3cd15f87ab3203c89321aa7831bf895c58845fa09a360b2aa697117a678724c8b94be625f553d2d8d9eb30ffdc2980d85b61d3dfc7af5f218d45e2feee5a907d15b76fbfb7e597563066af21e058d32bae9575b0a8d325024a6d2a0b95da80b14f31ab2c09aa45297b329b4f4944d32a34a6187fd0ddc9ca3b81a14cc9383043505adf75a94a725a98af9a6972d8ce29156ebe", 0xa0}, {&(0x7f0000000480)="9a4483ba8c9d2450c8be6c6a736915f3318b1bde6a9b0b52dd48c58d4524878a91e11abf06b451ac128ee4495716071e3ccf471b369b90728baabf7a7cfae7d846b9fdc64dddbe92b8f1537d", 0x4c}, {&(0x7f0000000500)="40602f2888f3917f32c6251e0a04ccc78c22497e1c72c2fc7a8adcd8b4a657ae561e905ca37cef38ae9fe4ef49a9abe75c07222a6a636ed574de92c6ae711f3ceb7baae2dc7aa9a4eed733af7ec3c259628fa6f46d3095e144815935d6f285c1870974339533654412f7daa525d0fbe534cb19990f48fd1ce338e5442eed8e1689e0b84b3b9f39be3aef3174dc0d679bb09481f39ef3", 0x96}, {&(0x7f00000005c0)="423e16cc356da6f17bdd30eb2bc653849bedfd8a339c0a9d6a9a9b5e3574012704daab526429229e344174fd705408fbb90afa035880ab475541eba3bc145aae29a8a5ac7e80beaaf3e5d69239548cda9a8e2545a32aa21239c6e46337709c742d7f122046a80e814a379d3985b41cb3a2db274ea3a9b2ea434cba4583067c64a4226d4f008fb87df7723ee04d591c00f52154158f6f45e9c74358d681f3123b62a3e6971240f68ce4773bbce11a3a87829fb964cb781d50120edd35b223de10ba92e1f36fce912e6f958737a2f06e9dab2059d5148d616976e779b7cdb10d0e4033ab04ac", 0xe5}, {&(0x7f00000006c0)="fc5f3b448779bda63f906aa3cf87c421b486505cb607c0e303a97d5a0103bb6e886d6d249dd0a053be9e9fe9acfc1c0612092313ea1921e302b0a56d49eb81a1f39a014a8016ccd452b26f20020dfc48a17eaf9e09052e89ac083ba630612bf171d17386f205582dd95d4fbd2c4f5d88752e6778de038cbc1debe905ba4d74156cd2757ecca9486b9d42edd1abaef5a9c5cef22ad6aa04e5720e459ab7b89ce3765f2b24e18e595aac6ab0b274871a4a5e123145949f062f8fd96bab2c978e82b80f5e8e7211669ee5211d6292fa183c45e13d889a9fadf278d51d56a961b97d7f3a97d1c73255a4", 0xe8}, {&(0x7f00000007c0)="e5c0375bb378edb2f9fa9e6af97a83d4ff2cc3e37ffad28af5a60660acf3307d55b093d7350b26ca9eb35ded9b38063edbc30c733fcb9663ca065af69816b227401d5a664b157ddb9db97e1521acf375916f6d83267b459f56792f2c18bea7d575692e1f4dbb8caa49479cf904ba96e05cae1897dc01ecba4fd7c83f1eba20e4490dcc11bf72646f67fdc5eb9b6bef2a842ad340d965a51a923e3187", 0x9c}], 0x7, 0x0, 0x1, {0x0, r5}}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r6 = syz_mount_image$nfs(&(0x7f0000000280), &(0x7f0000000900)='./file0\x00', 0x8000, 0x6, &(0x7f0000000c40)=[{&(0x7f0000000940)="35a46b992079a0bdb41f0ed5cfa9c8499c7296ff0f86931df741640aa17b6374e21bc23cb7534fcd9f24c0005b4bfd", 0x2f, 0x1}, {&(0x7f0000000980)="fac7a3289d7478b45225b6cd0053169e601ace99636f72acabc352a90be9b841c250d9c79095a61fbcac46e3abb9ede46f3bf26a0954e05d854da9cc16eee46bb02af7a6970fae89d5e09db47e8e271cc04105c8891fd1d7f90ef4fd6c08863e6d4c69ab81f097171badf6d031c2054239942539b0e4733a4b635149705697ab43c7377be54cc93a9a2ddf880c389d18aa390ad9d681", 0x96, 0x6}, {&(0x7f0000000a40)="ac60158ad7", 0x5, 0x8000}, {&(0x7f0000000a80)="51b0c1bfa223ffb469975ff615eea89ad8d467ad6852c62b1342fe465572c399e7f5ed926815df520f447e91bba73c97ad836f25dd968ba6bada5c4ae4169abe1b3f40487a23d60ac8ed12004a4131660cf26d419cc65d133adc799c3fc15cf55e61a8319e436577569d258fc3126557fb629f59462d3a8679c6fbfdf465ba22e01c1d4f5726e36d3c5a8aade3659de9cf7d4b66df5c455849136b0e5eddc0e47b93484388a188c7dd66ce6a6201c29396", 0xb1, 0x7}, {&(0x7f0000000b40)="05f54d0251d1cc99eaa3726832319dcabe5c15c8cc23", 0x16}, {&(0x7f0000000b80)="7b3fd301fcbd58b206e2c71c50cb4c30c2f5ee789840b3145017097d428b4dbfc49dae9c4944056d549881df3134d978d331adc5f1ed2771226a23fa994cbbc45db9e01117aff7d316db63e9af9ca7cb2373aa75210e1006c7d73201e5bad92dd3050ad73a17be6a214c572aecb5f74d87b100c35c9f4628941eca6a0e0c1095bf6b6b5cc2ba6029357bfcc98bd113fe8b336fb0563f7a8e64235fdd979de5b3", 0xa0, 0x401}], 0x40000, &(0x7f0000000d00)={[{'-}$\'&,#'}, {'*!}:,'}, {'\x00'}, {}, {'\x00'}, {'\x00'}, {'\\'}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@obj_type={'obj_type', 0x3d, '\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x35, 0x35, 0x4, 0x61, 0x37, 0x64], 0x2d, [0x52, 0x62, 0x37], 0x2d, [0x66, 0x32, 0x35, 0x34], 0x2d, [0x36, 0x38, 0x3a, 0x39], 0x2d, [0x65, 0x31, 0x61, 0x63, 0x37, 0x30, 0x35, 0x65]}}}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x61, 0x37, 0x63, 0x39, 0x34, 0x61, 0x61], 0x2d, [0x30, 0x63, 0x61, 0x64], 0x2d, [0x37, 0x32, 0x36, 0x62], 0x2d, [0x33, 0x32, 0x37, 0x37], 0x2d, [0x37, 0x31, 0x62, 0x66, 0x32, 0x39, 0x66, 0x62]}}}, {@obj_user}, {@euid_lt}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) writev(r6, &(0x7f0000002140)=[{&(0x7f0000000e00)="bdd88521970254f2a9cc4b88847ca4038b3f5117cf5c85bf6cedcb1533396050eaa4e48ffc39447f55288596adbfe36d3f0a342d83f04e4e3def24fd85759f8c770ae081d287d175fe99c33d24a2", 0x4e}, {&(0x7f0000000e80)="9721157b28265def46a8cf8a3691b0c59eb2d29d2cacf2f1298fc5400ac8e6930ded7485ecb2b38ce72a35b9036ed8045dd86f2c68c0c0a35cc484fef00ea457d9", 0x41}, {&(0x7f0000000f00)="e0d9e385ad4c31b4e1422a08e861866ef9d337c20fd92b662c7809bd663325dba8cd44717bc13e88e07c2c4c5c9982718c860c73139cc6fc0d408d3818b8206e241ee17e95dd2ca349764c3c10cbed572e381a38996195efe5be670628f734c38fbaea113fe3db0f46d70d69fecbd04dff2cff6e630fdfe47e1a058c0d1d3786e9e1d7af3284db1d6d42605dc7a42e9143c37f6d811242ba0695137b6db049ea503c7a04ce92aab9fb30568d1b77df0ad9cd682c3e9fd3db8faad688d2c57c085ace9bfdf3878fc52f0c73", 0xcb}, {&(0x7f0000001000)="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", 0x1000}, {&(0x7f0000002000)="546f8d66e3248a94bc41be6698cd2ca2f4821d6687bafe48aea56408706c810fc6172e75e881329a919d3bd1fd3513030295cc0164383434969621fd3223d691a14bc6b2abde3017a68a29b7608979772a78ceb3774bd2ef9d6d6cc1bf6ec4d22a446cd95f", 0x65}, {&(0x7f0000002080)="d9386ea5b642d473f1b138352957b2d92d0d51838ce3007ce71c61f33655a19ab26e12daefd5b75734b819cd7b99d70c692a5f11f0009d0481b4f00b16", 0x3d}, {&(0x7f00000020c0)="a2e1b05eb305965c4a19c64623854d664b70bc846424efaf5a3cd924b4fea0a1b4ae776e77fa088252434abf616dcd03429c347620916a0df4f658f807757e7a40beadea383f8b4b4d5a859efb6c0fd75efb1183e69e507f8a55d7", 0x5b}], 0x7) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x7400) 18:00:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xb}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x10}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:13 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x1) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:13 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000038c) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000100)=[{{}, 0x16, 0xfff7, 0x6}, {{r3, r4/1000+60000}, 0x1f, 0x2, 0x2}, {{r5, r6/1000+60000}, 0x1, 0x8a04, 0xfff}, {{r7, r8/1000+60000}, 0x3, 0xfffa, 0xfffffffd}], 0x60) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x7a00) [ 656.273375][T13373] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x11}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:13 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x0) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) [ 656.350026][ C0] sd 0:0:1:0: tag#2118 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 656.359886][ C0] sd 0:0:1:0: tag#2118 CDB: opcode=0xe5 (vendor) [ 656.366264][ C0] sd 0:0:1:0: tag#2118 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 656.366396][T13385] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 656.375324][ C0] sd 0:0:1:0: tag#2118 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 656.375343][ C0] sd 0:0:1:0: tag#2118 CDB[20]: ba 18:00:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xda1c) 18:00:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x21b}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:13 executing program 1: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) 18:00:13 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x0) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:13 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:13 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x300}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:13 executing program 1: futex(&(0x7f0000000000)=0x2, 0x81, 0x2, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f00000000c0), 0x1) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x5c9c0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:13 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x0) io_uring_enter(r0, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xfd0c) [ 656.580021][T13406] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x500}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:13 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x600}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 656.643181][ C0] sd 0:0:1:0: tag#2154 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 656.653040][ C0] sd 0:0:1:0: tag#2154 CDB: opcode=0xe5 (vendor) [ 656.659395][ C0] sd 0:0:1:0: tag#2154 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 656.668439][ C0] sd 0:0:1:0: tag#2154 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 656.677529][ C0] sd 0:0:1:0: tag#2154 CDB[20]: ba 18:00:13 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x700}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xe0ffff) 18:00:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x900}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:14 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x2078, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x1000000) 18:00:14 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00000d7000/0x4000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={r5, 0x1, 0x6, @broadcast}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000005300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000052c0)={&(0x7f0000005140)=ANY=[@ANYBLOB="6c010000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fddbdf2502000000200001801400020076657468305f766c616e000000000000080003000200000038000180080003000100000008000300ad115c0c08000300030000001400020076657468305f766c616e0000000000000800030003000000040001805800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020069703665727370616e300000000000001400020067656e6576653100000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200677265300400000009000000000000002800018008000100", @ANYRES32=0x0, @ANYBLOB="140002006873723000000000000000000000000008000300030000000c00018008000100", @ANYRES32=r5, @ANYBLOB="700001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0800030003000000140002007465616d5f736c6176655f3000000000140002007465616d5f736c6176655f300000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006970365f767469300000000000000000"], 0x16c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x5, 0x4007, @fd=r6, 0x2, &(0x7f00000004c0)="29160c5027feca7f1af1dfb71caebd8f2a04ddde7b40a388143a74c5c92c437612f7acee013034556b2be5a4eee9634af81ead6b1f594868b59e20cdcbd51abec9276cb362c50bc4ca756387c484e44e69e4316500ee22f381d37e0ab7104df622ee016495b505adcf158c8fcb346cbbdc3be5613fd277622053d010ec59bdda87fa046444223d6c2159d82976fd9b6276a8ad7c51521b18da1fabc3a488aa61a266a65d4838805a1a8f7e067a8981afc53d705eb8c7c9b7537803112c43a72dfd625ec1616537994c97da87ad99ca3395", 0xd1, 0xc}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:14 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x0, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xa00}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 657.053718][T13438] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x2000000) [ 657.138399][T13447] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 657.150806][ C0] sd 0:0:1:0: tag#2157 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 657.160670][ C0] sd 0:0:1:0: tag#2157 CDB: opcode=0xe5 (vendor) [ 657.167043][ C0] sd 0:0:1:0: tag#2157 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 657.176095][ C0] sd 0:0:1:0: tag#2157 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d 18:00:14 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x0, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xb00}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x3000000) [ 657.185159][ C0] sd 0:0:1:0: tag#2157 CDB[20]: ba 18:00:14 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x0, 0x269b, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x1100}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x4000000) 18:00:14 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, &(0x7f0000000240)={[0x4a85]}, 0x8) 18:00:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000038c) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, r1) r3 = socket(0x2, 0x803, 0x9) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @multicast1}, @l2tp={0x2, 0x0, @local}, @isdn={0x22, 0x4, 0xf7, 0x1, 0x40}, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7}) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000180)) r4 = accept4(r3, &(0x7f0000000000)=@in={0x2, 0x0, @private}, &(0x7f0000000080)=0x80, 0x80800) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="00082dbd7000fddbdf2513000000fd251c8d026865a7052d1d4b2e89c858314cdf60b1ea9440db8112dac0af5b27b015446d687c774cdbf6eebd83a7871f9367b062345223b32a2472f9eb7768bb2f95914ba2681cb868c6cc4e7bec2f98df0ef52b79c7bca52ffb3bffeed3b35cd5d275a4180611db23c1d59f0a5bb46f55b75d9d745b74d472b6b37cad323834334924903918e355712a01ae45de8a9619161bd0d592362529c97a0c17f627be100befdd2ba3c5ed2a0470ec19d198a44e056ae787ee5298b2484c04920c2a6a000e5f35fc5a5106712781bed7af5231fa43bf1c46973aee21d6efed0668c14697e0cb212ab10cc11770ffc1887389c5747f917454a8a15dea29388c054ec3ba9ae4c62b0435d53821aa637a985e6755d05b6a91d263275994aa97e2b8adc4d7c70c784d5ac12e1b68fc1c2a27bf614a2bd427"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040040) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x11c, r5, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40000}, 0x20048054) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="8000df54206d090000", @ANYRES16=r5, @ANYBLOB="02002abd7000fcdbdf2513000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000900000006001100000800000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b00090000000600110028000000"], 0x80}}, 0x4000804) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)={0x10c, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0xdec}, {0x8, 0x15, 0x7fffffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6}, {0x7, 0x15, 0x3ff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0xffffffff}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x200200e0}, 0x20000004) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x180, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2cc0}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x80000000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x19}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffbff}, {0x6}, {0x8, 0x15, 0x9}}]}, 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r5, 0x400, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x80}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x20004084) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x14, r5, 0x400, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x1) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="48010000", @ANYRES16=r5, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0xe4, r5, 0x10, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4008890}, 0x4000) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x600081) ioctl$int_out(r6, 0x800080804524, &(0x7f0000000180)) 18:00:14 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x5000000) 18:00:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x1b02}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x2000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:14 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x6000000) 18:00:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0xf7a) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000038c) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000040)=0x400) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) dup(r0) [ 657.514269][ C0] sd 0:0:1:0: tag#2162 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 657.524150][ C0] sd 0:0:1:0: tag#2162 CDB: opcode=0xe5 (vendor) [ 657.530585][ C0] sd 0:0:1:0: tag#2162 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 657.539671][ C0] sd 0:0:1:0: tag#2162 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 657.548731][ C0] sd 0:0:1:0: tag#2162 CDB[20]: ba 18:00:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x7000000) 18:00:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x1000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:14 executing program 2: r0 = syz_io_uring_setup(0x495a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci', 0x111080, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000280)=[0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r0, r5, r0, r6], 0x8, 0x0, 0x1a5f3c037e02c181, {0x0, r7}}, 0x35f5) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:14 executing program 1: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x20000001) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0xd4) ioctl$int_out(r1, 0x800080804524, &(0x7f0000000180)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4004090) 18:00:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x8000000) 18:00:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x2000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:14 executing program 1: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000000)) 18:00:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x3000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x9000000) 18:00:14 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080801142, &(0x7f0000000180)) 18:00:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x4000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:14 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xa000000) 18:00:15 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 18:00:15 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) fcntl$getown(r0, 0x9) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x9001) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x5) tkill(r3, 0x34) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) kcmp(r3, r1, 0x3, r0, r2) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000000)={0x11, 0xffffff4d, &(0x7f00000000c0)="57a2bf67399f26f94f8626671e6e462fb68030162782191abaab6919332cc069d9689077a88f1ed81d659bb1fabaa48e5071bd08171304f5ffdbff7322feb999549bd28b0ce84c5dc389c6a68173f2773f8a3e628d285d2e94e0fc0849ca5e76e1ce1b51d94f17c5d4cb7ffe621fc4998108f490b4b03b77df168facd63a391ae4c0ab56"}) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:15 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2000, @fd=r0, 0x40, 0x9, 0x7f, 0x14, 0x1, {0x2, r3}}, 0x20) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x5000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xb000000) 18:00:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x6000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x7000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:15 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x1, 0x1, 0x5, r2}) 18:00:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x8000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 658.138305][T13535] FAULT_INJECTION: forcing a failure. [ 658.138305][T13535] name failslab, interval 1, probability 0, space 0, times 0 [ 658.151033][T13535] CPU: 1 PID: 13535 Comm: syz-executor.0 Not tainted 5.15.0-rc2-syzkaller #0 [ 658.159802][T13535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 658.169863][T13535] Call Trace: [ 658.173141][T13535] dump_stack_lvl+0xd6/0x122 [ 658.177747][T13535] dump_stack+0x11/0x1b [ 658.181907][T13535] should_fail+0x23c/0x250 [ 658.186329][T13535] __should_failslab+0x81/0x90 [ 658.191102][T13535] should_failslab+0x5/0x20 [ 658.196234][T13535] kmem_cache_alloc_bulk+0x40/0x340 [ 658.201442][T13535] io_submit_sqes+0x548/0xde0 [ 658.206135][T13535] ? __fget_light+0x21b/0x260 [ 658.210865][T13535] __se_sys_io_uring_enter+0x20d/0xb30 [ 658.216338][T13535] ? __fget_light+0x21b/0x260 [ 658.221068][T13535] ? fput+0x2d/0x130 [ 658.225012][T13535] __x64_sys_io_uring_enter+0x74/0x80 [ 658.230408][T13535] do_syscall_64+0x44/0xa0 [ 658.234833][T13535] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 658.240862][T13535] RIP: 0033:0x7f9ebfd9a709 [ 658.245271][T13535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 658.264995][T13535] RSP: 002b:00007f9ebdb12188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 658.273396][T13535] RAX: ffffffffffffffda RBX: 00007f9ebfe9ef60 RCX: 00007f9ebfd9a709 [ 658.281365][T13535] RDX: 0000000000000000 RSI: 0000000000002078 RDI: 0000000000000003 [ 658.289411][T13535] RBP: 00007f9ebdb121d0 R08: 0000000000000000 R09: 0000000000000000 [ 658.297384][T13535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.305385][T13535] R13: 00007ffdd5ed5b8f R14: 00007f9ebdb12300 R15: 0000000000022000 18:00:15 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x9000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xc000000) 18:00:15 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x0) r8 = syz_io_uring_setup(0x2066, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0xfffffffd}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000400)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r9}}, 0x9) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9, r5}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:15 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 18:00:15 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0xa8c4, &(0x7f0000000040)) r1 = signalfd(r0, &(0x7f0000000000)={[0x7b6]}, 0x8) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f00000000c0)=""/154) 18:00:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xa000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 658.396735][T13549] FAULT_INJECTION: forcing a failure. [ 658.396735][T13549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.409855][T13549] CPU: 1 PID: 13549 Comm: syz-executor.0 Not tainted 5.15.0-rc2-syzkaller #0 [ 658.419199][T13549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 658.429257][T13549] Call Trace: [ 658.432673][T13549] dump_stack_lvl+0xd6/0x122 [ 658.437283][T13549] dump_stack+0x11/0x1b [ 658.441501][T13549] should_fail+0x23c/0x250 18:00:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xd000000) [ 658.445927][T13549] should_fail_usercopy+0x16/0x20 [ 658.450957][T13549] _copy_to_user+0x1c/0x90 [ 658.455380][T13549] simple_read_from_buffer+0xab/0x120 [ 658.460755][T13549] proc_fail_nth_read+0x10d/0x150 [ 658.465790][T13549] ? proc_fault_inject_write+0x230/0x230 [ 658.471494][T13549] vfs_read+0x1e6/0x750 [ 658.475660][T13549] ? __fget_light+0x21b/0x260 [ 658.480354][T13549] ? __cond_resched+0x11/0x40 [ 658.485154][T13549] ksys_read+0xd9/0x190 [ 658.489348][T13549] __x64_sys_read+0x3e/0x50 18:00:15 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x0) r7 = syz_io_uring_setup(0x15e6, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000400)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r8}}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x4, 0x80000000, 0x0, 0x4, 0x6, 0x1, {0x0, r8}}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:15 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) [ 658.493859][T13549] do_syscall_64+0x44/0xa0 [ 658.498323][T13549] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 658.504287][T13549] RIP: 0033:0x7f9ebfd4d48c [ 658.508708][T13549] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 658.528322][T13549] RSP: 002b:00007f9ebdb12170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 658.536732][T13549] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f9ebfd4d48c 18:00:15 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x293b, &(0x7f0000000240)={0x0, 0x3f4d, 0x10, 0x1, 0x327}, &(0x7f00000dc000/0x4000)=nil, &(0x7f00000da000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xe000000) 18:00:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xb000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:15 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000038c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="3a689264dd08b64ac6dcfcf96d9d72c048ca9f0001a7f8389cf26f32840fd665776027cdb7d5e5a45caed6270e18129e2f4b2f8ed824a19ce3b2647281b7a333159a43a788ea0b81de6cb7b86bc401cd250bb1e9c106e128f7d78f470c9d2d5234ba6b182ba7fec7558030634b9378d533bb", @ANYRES16=r3, @ANYBLOB="9c103fa5be9c67ff425980b830119bb12ada4fbe1dd995459f992a32a55a04be04d3f3bae895f1f5d9062e5576a70010848bed410b32916ef0c85f3f530b90e587d430bdc2b3029613c24f7e3eac3d23da19bd9262f1d17797c26871563b8455ff92fb37571d764729ddd7a2cf3dfcad2a87098369d2a7daa2fc70e5be9448e3556b6f313a82f747c79e6720027c1ee1b6f6d468442091b9dca9748551adcc76a2cd34a918b93a141a2b67e5d5f5351997fc0cddf01574"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) write$binfmt_elf32(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x6, 0x5, 0x1, 0x0, 0x2, 0x3e, 0x93, 0xba, 0x38, 0x2a8, 0x7, 0x100, 0x20, 0x1, 0x1, 0x4, 0x4}, [{0x6474e551, 0xffffffff, 0x8000, 0xc94, 0x5, 0x835e, 0xfffffffe, 0x9}, {0x7, 0x8000, 0x4000000, 0x1f, 0x7, 0x0, 0xffff8fc0, 0x400}], "cb7d446d6d921d79f33ae8c2b0fb48df13fb19d0b4c2f9cd7fd70b1a74b3ba52b352f01d94415dc9943a669de4923ec5a7f5fe9339b3ec9ba0917dcb0b4f1966d97ea4978fc3ee3afefcbe6484f6d00e1bf1bdd7e39092bc5acbbc8ae509154e1e327a959253a43213cc3a88236e6652d93b87a502e07a9bede3c89b5ec3417b1db582815b811f267f40da9113a53cd3b9626d5f09ea40e227cc27b53246bad6a13b43e59738eb3ba76a19489ac372939ae82fa086f22c096b8069f4bbacf15bf4d3256d1c522a947e0319df92f94d5829f76dcb49a51a85ef", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x851) [ 658.544712][T13549] RDX: 000000000000000f RSI: 00007f9ebdb121e0 RDI: 0000000000000004 [ 658.552690][T13549] RBP: 00007f9ebdb121d0 R08: 0000000000000000 R09: 0000000000000000 [ 658.560723][T13549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.568701][T13549] R13: 00007ffdd5ed5b8f R14: 00007f9ebdb12300 R15: 0000000000022000 18:00:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x10000000) 18:00:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x10000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:15 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x11000000) 18:00:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x11000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x1b020000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:15 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{}, 0x1f, 0xffff}, {{0x0, 0x2710}, 0x11, 0x0, 0x4}, {{r1, r2/1000+60000}, 0x0, 0x6, 0x5}, {{}, 0x0, 0x6, 0x3}, {{0x0, 0xea60}, 0x0, 0x8, 0x9}], 0x78) r3 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000038c) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000040)={0x80, 0x9, 0x2, 0xfd, "8591533ea71cdab36605987170eb02c2d90fc28e8b1ec36daff3e00935950fee"}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) write$evdev(r4, &(0x7f00000001c0)=[{{r5, r6/1000+60000}, 0x3, 0x7, 0x5}], 0x18) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:15 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 18:00:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x12000000) 18:00:15 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ee9000/0x1000)=nil, 0x1000}, 0xfffffffc) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x20000000}, 0x1) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000240)="a077e26b9c691d33d50da7ee8463e5e650080a687ff624f13a3beee6918ee5a6c93a0f5ed6da883332b0554dea688a", 0x7, 0x0, 0x1, {0x3}}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:15 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x20000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x20000000) 18:00:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x9effffff}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:15 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:15 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x40000000000000, 0x842) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000040)={0x0, 0x2, 0xfffffffd, 0x4, 0x3, 0xfffffffe}) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:15 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x25000000) 18:00:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xeaffffff}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:15 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) ioctl$int_out(r0, 0x4, &(0x7f0000000000)) 18:00:15 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x2, 0x0, 0x0, 0x0) 18:00:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xefffffff}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:16 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ee9000/0x1000)=nil, 0x1000}, 0xfffffffc) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x10, 0x100, 0x1}, 0x8001) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x48000000) 18:00:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xf0ffffff}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:16 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x7, 0x0, 0x0, 0x0) 18:00:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xfcffffff}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x4c000000) 18:00:16 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x4, 0x40) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={r4, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000200)={r4, 0x1, 0x6, @broadcast}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000400)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x9c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x10000, 0x28}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x880}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0x101, 0x6, 0x4, 0x9, 0x0, 0x0, 0x7, 0x3, 0x8]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0xba5, 0x59]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0xc845) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0003000000000000000000000000006df76770000000004d261e72d167cc2934aecb0b4f3c3fa0ca44a594da73a04a497c47d501349a6664ad92c2e46d627fe6651cc93afefeafbd5c1dd0d938a5aa88a254d7d10e341e75b810110a75b5f7c997822ab34cdbf467052d3120a1068922c0a8797b0fdb09fdeb3894eccf03b89191477cc3583323e3939b260758ea8a3db9be3721496f0cc422e6f727edea784c66aa6272b62b", @ANYRES32=r7, @ANYBLOB="0600480060000000060048000100000006004800220000000a003400010101010101000006004800240000000a0034000202020202020000"], 0x54}, 0x1, 0x0, 0x0, 0x4004010}, 0x400c080) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x54, r1, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffff9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}]}, 0x54}}, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0xc0, 0x0) ioctl$int_out(r8, 0x800080804524, &(0x7f0000000180)) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6_vti0\x00', r4, 0x2f, 0x4, 0x7, 0x3f, 0x1, @private1, @remote, 0x1, 0x40, 0x9, 0xc08}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r9, 0x89f6, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'sit0\x00', r10, 0x29, 0x8, 0xff, 0x9, 0x1, @remote, @empty, 0x8, 0x40, 0x4, 0x8}}) 18:00:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xfeffffff}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:16 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0xf, 0x0, 0x0, 0x0) 18:00:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x60000000) 18:00:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xffffff7f}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:16 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ee8000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000db000/0x1000)=nil, 0x1000, 0x8, 0x110, r0, 0x10000000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f00000003c0)="ed777bf408c91f182552555cd7bf4aa721f695684cb9051afc93443077d63af755fa103ebac81f6f1ee169ade8de579048136bc4082166c9e62501b6d26cb0ef8baa5755f9b80021e88c9bd3c012c366c5e84f0bfd39c4e2dceb8a410fd85418ac02369611edd2319e14f0e96958973df7150af74b84f1f26c4f459a43d30348bf28e9967a2425ac5790d563671050dc211e0e17140681736057b1ce5be7b6497d60a98a483ea0d9869a8c00", 0xac, 0x40080, 0x1, {0x0, r7}}, 0xffffffff) r8 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r8, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r8, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r8, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:16 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x700, 0x0, 0x0, 0x0) 18:00:16 executing program 1: ioctl$int_out(0xffffffffffffffff, 0x800080804524, &(0x7f0000000180)) 18:00:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x68000000) 18:00:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xffffff9e}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:16 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000140)="66530700ae897094e7b126b097eaa769be6d05651bd34e677d114b654b499374a8db38f8c44f7b7d9ce423c26f45958dc387cf4c2e1fea4b7a3dfc8ea6a7efefe48dd9e05485b4ff15f7c6126795da78e925054caa2fcb1f6dde756da92e054b5f6c7a3877432f583868b7e7018e80ad3b35caee7719390b42c05fc9899122c5b2b6b60f7e8849c8fad68909f11b5e502375ed449638d5c3e73024dd19f8f325b0456a01f65442e64d9148a3a491b09f02eb19ac6aebb49b4f105563f426a41f099f3580c82835e0098276a7eab393f401cc0fa92e236c6239690f9834415b771b53a8d24d87e76223cd8243f9404b60339beb1d44387c4f04", 0xf9}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x5) tkill(r0, 0x34) ptrace$cont(0x18, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) exit_group(0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r1, 0x800080804524, &(0x7f0000000180)) 18:00:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x6c000000) 18:00:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xffffffea}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:16 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0xf00, 0x0, 0x0, 0x0) 18:00:16 executing program 1: ioctl$int_out(0xffffffffffffffff, 0x800080804524, &(0x7f0000000180)) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) clone(0x20000000, &(0x7f0000000040)="ca0c338d55d683397929deb603ef42088fb7df143f8c3a0c45a402e4b5b19091e59d25fe0700b4fe81381a07b951d23ad6dd8e1c87fb703da67a35451e22d0acb081b0483ee00f651fb747b6148f99b2c2933baf76bd420e62069b9645fd37221eb271a3daef01daf5bed9a9cceccf6ca95202ede98312e40314c5c62b8354e821e3db8fbd3b49e4475d4f6a74dfc270f570fee49d8dbb76d5be107d384e0dc8045ba4a411f810327d4c77a06c80df61e2d9836407301c981feecf95611de071b87206bef0a83359db46c55bb46d6a2c302a2c6d9e15285d6d1032b8317a9d496a2e965ce46b880d187d21b37dab6e", &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)="914fe57d6bf23d7759d4bbf66a85e9021de13b158852f4fd0b716754b5ae034c2138e0ca316ce92b97bff1cb1264f2caf4176c3db9ba3f740b64689e2096559e959cb1fd711bd85d2279b9d8dfa43857") ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0x3ff, 0x6, 0x7, 0x9, "7236c3558a10cd1cd8397cfd2b4f2f9cc793f3"}) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='sched\x00') ioctl$TCSETSF(r1, 0x5404, &(0x7f00000002c0)={0x81, 0x2, 0x8001, 0x1, 0xa, "a28aad5ef7c597124f777571c18024112208f9"}) 18:00:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x74000000) 18:00:16 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x2000, 0x0, 0x0, 0x0) 18:00:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xffffffef}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x7a000000) 18:00:16 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xff, 0x200101) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) dup(r4) 18:00:16 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0)={0x0, 0xbf76, 0x12, 0x0, 0x188}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}, 0x1}, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x0) r5 = syz_io_uring_setup(0x41015f6, &(0x7f0000000140)={0x0, 0x400f550, 0x0, 0x0, 0x5e, 0x0, r0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000280), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x5, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)={0x20000004}, r0}, 0x9) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x1}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x9effffff) 18:00:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xfffffff0}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:16 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x800000, 0x0, 0x0, 0x0) 18:00:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xfffffffc}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xda1c0000) 18:00:16 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x1000000, 0x0, 0x0, 0x0) 18:00:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xfffffffe}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xeaffffff) 18:00:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x100000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:16 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x2000000, 0x0, 0x0, 0x0) 18:00:16 executing program 1: ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001c40)=ANY=[@ANYRES64=0x0, @ANYBLOB="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"]) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x88401, 0x0) clone3(&(0x7f0000000700)={0x14048f00, &(0x7f00000004c0)=0xffffffffffffffff, &(0x7f0000000500)=0x0, &(0x7f0000000540), {0xa}, &(0x7f0000000580)=""/170, 0xaa, &(0x7f0000000640)=""/79, &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000440)=0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = getpid() r10 = socket$nl_xfrm(0x10, 0x3, 0x6) close(r10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@cred={{0x1c, 0x1, 0x2, {r9, r7, r8}}}], 0x20}, 0x0) r11 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) fchown(r11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b80)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000240)="917b0b17a4280840449935a721a3afc67de7ec4845c8850cfd902a4d80037d5756957f68bcbe231fee124180e41ded875769b1eaedbb040507e0e206abd7e1a295da5475ac692eab4a759c1d1a2327fc1a914e39c474c91265c6dce1315bf97c26b27647f43e6fdc6c63a1b8885b40ed5a242a85a9db31589b506724b88cecdfa63afee5c3d33c88ad626fed82eac6c47acd9c90c83a8412", 0x98}, {&(0x7f0000000140)="2da82c2903e2860faa133f8702466b77b622", 0x12}], 0x2, &(0x7f0000001d80)=ANY=[@ANYBLOB="1c000000000000c7010002000048389c8e69b715fc0000004ce3edfd182296dae23d2b9523288034e3aa75fbbbf4b212b26e5a335365ef4abe88a5dcec76f26adc55f6753d0ffc1dc988ff33c48002f2af28e5180963ef7700b3687d8ed22cfe3d6713b166ec4f11239d9a678764654966bb1e482286531f718229fc70dc0942b09cd708eaaf1dfa7e95721855b0d0beaaace4dfd26151700000000005c52a5347bb53bec3c14772fb3911a3c0c5349ce612d69862ea9da9e08fba", @ANYRES64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES16, @ANYBLOB="b7654c63c6fd4014c7b94db40d9ee05107c5ee52695fde9daa8a239b0f50ad3d587833258bf529869389b16496bd684b3aab8117d1f9b28a99b1783a81f099d4c31e6beb7669d235e1f87d786593341746cf32849c715633c81345d51df80a011e32ea971835d0a268c54770fa266b2d8d6bfc70ad", @ANYBLOB="0000001eaf391900000000000000000002000000169602e8bd0ef780af64546fbb79e22557147d159325ad3d9953b6a38b7a81980568fad3cb8e17d7fda25c424dc667a7772c18f16204cdaa85bd41e6cb9e4c6b79fe19f7fb41a996eef6c0ded6cb6df51d1955489d76b1841e5dd16bde1291700bf6570cd596a7529a860b763790b4c4e8ec0b51fc5e8f451575edd9055e4721897ec6a1297fed8a6af5006b1c19a114612b36d6005fb2f91172ce83e99cacfb014cee", @ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES16, @ANYRES32, @ANYBLOB="ab311edf271a519fcdf3afd04d6592b0", @ANYRESHEX=r3, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRESHEX=r9], 0xe8, 0x24008880}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000780)="23e320853de2b2dfb9a4eb3c38e7bd5a0f6951a058098fc58bc66dd92f69fa56c90fa5611744b7a3b3bb1fc4fa01bddea891b4562bdc82d26c5d0a082eb61015a3c60724b2c0cd26edf96f661297c333dea3a8ade97817e0fb829a3b84da6fcdada91cc5bf963803fc4331776c69a8a341c30531123803e9b49834ea4f6443ddfa5c49ab3d0b8a9bde7e5b24ab4f54c5205c572edc71f0f60301004b402a9aeb893b3d284f576292d79ed0c2ae", 0xad}, {&(0x7f0000000900)="c4e144277105ce62fcae7d4a096a317830e0d94d34c377f60589", 0x1a}], 0x2, 0x0, 0x0, 0x20040040}}, {{&(0x7f0000000980)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000000a00)="248bfb0be0693c321516acd6243d847fe1cb7ea2726484033ee3c13937db8f40a39fde558a18ef41aed876d855025b303ba8313523b502f6cfeb650814edb4919fb3760d16e35fe123758f252b3df91b12a505c026c5721a416c43e69c5938cd568c4ec7316268fde398f72b4d27448ff0cf138ee89829", 0x77}, {&(0x7f0000000a80)="4f11c53f7f809de9528b46137642c63e5cb081f0c1cf85d05d88989696346f442f1d617db6535307e0a7ec12a06d717e831134bf503c60a5c110a960f7fbcad06ddbd9758fc2cb56d4", 0x49}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="e0e37b0bd7d9fd339c84219bdcc41495e580ab3d9988adbdfd5d7b49618ac6", 0x1f}], 0x4, 0x0, 0x0, 0x8000}}], 0x3, 0x20000091) r12 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x204000, 0x108) ioctl$int_out(r12, 0x800080804524, &(0x7f0000000180)) 18:00:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xefffffff) 18:00:16 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x7000000, 0x0, 0x0, 0x0) 18:00:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x200000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:16 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0xa}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ee9000/0x1000)=nil, 0x1000}, 0xfffffffc) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r7, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) syz_io_uring_submit(0x0, r6, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x1}, 0x0) 18:00:16 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) ioctl$int_out(r0, 0x5462, &(0x7f0000000000)) 18:00:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x300000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xf0ffffff) 18:00:16 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0xf000000, 0x0, 0x0, 0x0) 18:00:16 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r0, &(0x7f00000001c0)=[{{0x77359400}, 0x16, 0xa8, 0x7}, {{0x77359400}, 0x17, 0xd6, 0x5}, {{}, 0x16, 0x8, 0x2}, {{r1, r2/1000+10000}, 0x3, 0x2, 0x6}, {{r3, r4/1000+10000}, 0x16, 0xffff, 0x6}, {{r5, r6/1000+10000}, 0x11, 0x9, 0x80000001}], 0x90) 18:00:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xfcffffff) 18:00:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xfd0c0000) [ 659.831556][ C0] scsi_io_completion_action: 9 callbacks suppressed [ 659.831582][ C0] sd 0:0:1:0: tag#2159 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 659.848080][ C0] sd 0:0:1:0: tag#2159 CDB: opcode=0xe5 (vendor) [ 659.854445][ C0] sd 0:0:1:0: tag#2159 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 659.863598][ C0] sd 0:0:1:0: tag#2159 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 659.872740][ C0] sd 0:0:1:0: tag#2159 CDB[20]: ba 18:00:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x400000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:17 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x12, 0x8, 0x6}, {{r1, r2/1000+60000}, 0x4, 0xe, 0x1}, {{r3, r4/1000+60000}, 0x0, 0x400, 0x3}, {{0x77359400}, 0x11, 0xc51, 0x8001}, {{0x77359400}, 0x5, 0xffff, 0x9}], 0x78) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xfeffffff) 18:00:17 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x20000000, 0x0, 0x0, 0x0) 18:00:17 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffc, 0x3}, &(0x7f00000da000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x3) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:17 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x2, 0x0, 0x0) 18:00:17 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x80000) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="080028bd7000fbdbdf2507000000080001002400000008000300", @ANYRES32=0x0, @ANYBLOB="14000400626f6e643000000000000000000000000a00180003030303030300000a00180003030303030300000400cc0008000500000000000800050008000000"], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 18:00:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xffffe000) 18:00:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x500000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:17 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x7, 0x0, 0x0) 18:00:17 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$evdev(r1, &(0x7f0000000000)=[{{0x77359400}, 0x3, 0x800, 0x1}, {{0x77359400}, 0x0, 0x5, 0x25000000}], 0x30) ioctl$int_out(r1, 0x800080804526, &(0x7f0000000180)) [ 660.177046][ C0] sd 0:0:1:0: tag#2118 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 660.187008][ C0] sd 0:0:1:0: tag#2118 CDB: opcode=0xe5 (vendor) [ 660.193381][ C0] sd 0:0:1:0: tag#2118 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 660.202438][ C0] sd 0:0:1:0: tag#2118 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 660.211471][ C0] sd 0:0:1:0: tag#2118 CDB[20]: ba 18:00:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xffffff7f) 18:00:17 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x4000000000, 0x50040) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000040)=[{{r1, r2/1000+60000}, 0x5, 0x81, 0x3}], 0x18) 18:00:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x600000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:17 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a00), 0x0, &(0x7f0000001780)=""/21, 0x15}, 0x0, 0xa5e25e8b1361afa6, 0x0, {0x1}}, 0x6) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQES(&(0x7f00000db000/0x2000)=nil, 0x2000, 0xa, 0x1010, r0, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001500)=@IORING_OP_WRITEV={0x2, 0x1, 0x4000, @fd_index=0x2, 0xc02, &(0x7f0000000240)=[{&(0x7f00000003c0)="625622423cdb8675c6f735efea75dfc283e3b7532660e731bed5cfdb6ae0f36102b68bbfb04e649f950c22f2613023136e0c8647e106d0d0c5feed82d7fa60a49208460fd0661dc1c82ad9b8bc3002009c5cd9e2d21eda358c067c9b2637086a7d361523658d31b0303104cca36b0981", 0x70}, {&(0x7f0000001640)="76a8970cc0670d3ab93d1d88a54786afdb4934e2910e1edd049857b507d9234a9919a20b9a573fa9680a19e93302768bc94de7d65ab54a797efdbf1cb80680ed848de55035c69cfd4f4aa9f6be99cffbcc711536bac082da49b10d3a437d4881f420ba22fd29e2604505f295ded2af7c1b4d09cf691a839c817dde935c33107083c070266ba4cf5674c3d5a97d72b3b63e29746c9f0ae66351ac69dc2e13bae4da163e789478ef0d73a4d9ad468ac412bee97888a6a07238a4f33c51ccc86cdf90e317766a5364295a4d687b572dd86850c3ead9d38fa122e1b303254654fc39852ffea7e6739db9e2ef193fbc132056d56958392e", 0xf5}, {&(0x7f00000004c0)="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", 0x1000}], 0x3, 0x11, 0x0, {0x3, r5}}, 0x6) r6 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000340), 0x2cc2) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:17 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0xf, 0x0, 0x0) 18:00:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xffffff9e) 18:00:17 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x0, &(0x7f0000000000)) 18:00:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x700000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:17 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x700, 0x0, 0x0) 18:00:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x800000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x900000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:17 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0xfffffffffffffffc, 0x204) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000006, 0x8010, r2, 0x28fd7000) sendfile(r1, r2, 0x0, 0x8000038c) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f00000000c0)=""/179) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) r3 = openat(r2, &(0x7f0000000040)='./bus\x00', 0x101000, 0x1) ioctl$KDDELIO(r3, 0x4b35, 0x96b) 18:00:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xffffffea) [ 660.526705][ C0] sd 0:0:1:0: tag#2165 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 660.536572][ C0] sd 0:0:1:0: tag#2165 CDB: opcode=0xe5 (vendor) [ 660.542930][ C0] sd 0:0:1:0: tag#2165 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 660.551969][ C0] sd 0:0:1:0: tag#2165 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 660.561016][ C0] sd 0:0:1:0: tag#2165 CDB[20]: ba 18:00:17 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0xf00, 0x0, 0x0) 18:00:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xa00000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:17 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x2000, 0x0, 0x0) 18:00:17 executing program 2: r0 = syz_io_uring_setup(0x495b, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ee9000/0x1000)=nil, 0x1000}, 0xfffffffc) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}, 0x20010001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x20000000}, 0x1) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000240)=0x80, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}}, 0x3) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xffffffef) 18:00:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xb00000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:17 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000038c) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f00000002c0)=0x1, 0x3, 0x2, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000340)=0x2, 0x2) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x280000, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x810, r7, 0x39e0000) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x5, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$evdev(r1, &(0x7f00000001c0)=[{{r3, r4/1000+60000}, 0x5, 0x401, 0x40}, {{r5, r6/1000+10000}, 0x1, 0x100, 0x4}, {{0x77359400}, 0x0, 0x5, 0x9}, {{}, 0x2, 0x7ff, 0x1}, {{r8, r9/1000+60000}, 0x3, 0x8, 0xe954}, {{r10, r11/1000+60000}, 0x4, 0xfffb}], 0x90) 18:00:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xfffffff0) 18:00:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x1000000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:17 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x800000, 0x0, 0x0) 18:00:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xfffffffc) 18:00:17 executing program 2: r0 = syz_io_uring_setup(0x61ae, &(0x7f0000000400)={0x0, 0x0, 0xd}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = syz_io_uring_complete(r1) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000003c0)=0x6e, 0x800) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:17 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x1000000, 0x0, 0x0) 18:00:17 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffffffff, 0x420183) ioctl$int_out(r0, 0x5460, &(0x7f0000000180)) r1 = socket(0x27, 0xa, 0xffffffff) accept4$unix(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x800) 18:00:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x1100000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 660.905952][ C0] sd 0:0:1:0: tag#2162 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 660.915809][ C0] sd 0:0:1:0: tag#2162 CDB: opcode=0xe5 (vendor) [ 660.922161][ C0] sd 0:0:1:0: tag#2162 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 660.931205][ C0] sd 0:0:1:0: tag#2162 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 660.940253][ C0] sd 0:0:1:0: tag#2162 CDB[20]: ba 18:00:17 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xfffffffe) 18:00:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x1b02000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xe0ffff00000000) [ 661.074740][T13911] __nla_validate_parse: 23 callbacks suppressed [ 661.074758][T13911] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x2000000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:18 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x2000000, 0x0, 0x0) 18:00:18 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x102, 0x214c00) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000038c) write$evdev(r1, &(0x7f00000000c0)=[{{0x0, 0xea60}, 0x12, 0xfff, 0x40000}, {{0x0, 0xea60}, 0x3, 0xf9ef, 0xfffffe00}, {{0x77359400}, 0x5, 0xfffd, 0x1}, {{0x77359400}, 0x5, 0x6}], 0x60) 18:00:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x100000000000000) 18:00:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:18 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ee9000/0x1000)=nil, 0x1000}, 0xfffffffc) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) syz_io_uring_submit(r1, r5, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0xbe23) r6 = syz_io_uring_setup(0x689e, &(0x7f0000000400)={0x0, 0x819d, 0x8, 0x1, 0x104, 0x0, r0}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000eea000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) r7 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r7, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000280)) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x3, 0xffff, {0x0, r6}, 0x9, 0xa, 0x1}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x8000000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:18 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x7000000, 0x0, 0x0) 18:00:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x200000000000000) 18:00:18 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x48100) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000040)={0x0, 0x4}) [ 661.205616][T13922] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x9effffff00000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xeaffffff00000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 661.279385][T13937] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 661.289072][ C0] sd 0:0:1:0: tag#2149 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 661.298923][ C0] sd 0:0:1:0: tag#2149 CDB: opcode=0xe5 (vendor) [ 661.305285][ C0] sd 0:0:1:0: tag#2149 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 661.314357][ C0] sd 0:0:1:0: tag#2149 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 661.323423][ C0] sd 0:0:1:0: tag#2149 CDB[20]: ba 18:00:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x300000000000000) 18:00:18 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x3, 0x2]) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:18 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0xf000000, 0x0, 0x0) 18:00:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xefffffff00000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 661.393922][T13950] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:18 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7000002, 0x8010, r0, 0x0) syz_io_uring_setup(0x20a8, &(0x7f0000000240)={0x0, 0xc233, 0x1, 0x0, 0x2bd, 0x0, r0}, &(0x7f00000dc000/0x1000)=nil, &(0x7f00000da000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}, 0x400) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:18 executing program 1: bind(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x4e23, @multicast1}, 0x80) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x3) 18:00:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x400000000000000) 18:00:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xf0ffffff00000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:18 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x20000000, 0x0, 0x0) 18:00:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xfcffffff00000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:18 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x10000000000, 0x0, 0x0) 18:00:18 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000038c) write$evdev(r2, &(0x7f0000000000)=[{{}, 0x51f73f404a403316, 0x1, 0x1000}, {{}, 0x5, 0x0, 0x8001}, {{0x0, 0xea60}, 0x12, 0x1000, 0x7f}, {{0x0, 0xea60}, 0x11, 0xfffd, 0x5}], 0x60) fcntl$setstatus(r0, 0x4, 0x2800) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) [ 661.555822][T13963] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x500000000000000) 18:00:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xfeffffff00000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 661.631330][ C1] sd 0:0:1:0: tag#2144 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 661.641281][ C1] sd 0:0:1:0: tag#2144 CDB: opcode=0xe5 (vendor) [ 661.647660][ C1] sd 0:0:1:0: tag#2144 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 661.656700][ C1] sd 0:0:1:0: tag#2144 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 661.665738][ C1] sd 0:0:1:0: tag#2144 CDB[20]: ba 18:00:18 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x80000000000000, 0x0, 0x0) [ 661.680764][T13982] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x600000000000000) 18:00:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xffffff7f00000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:18 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x100000000000000, 0x0, 0x0) 18:00:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:18 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:18 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000038c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000140)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40082102, &(0x7f0000000080)={r4}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r4, 0x1, r5, 0x40, 0x80000}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x1) r6 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000040)={0x2, 0xfd, &(0x7f00000001c0)="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"}) 18:00:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xffffffff00000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:18 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x200000000000000, 0x0, 0x0) 18:00:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x700000000000000) 18:00:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x2}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 661.954623][T13996] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x3}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 662.031554][ C0] sd 0:0:1:0: tag#2114 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 662.041525][ C0] sd 0:0:1:0: tag#2114 CDB: opcode=0xe5 (vendor) [ 662.047988][ C0] sd 0:0:1:0: tag#2114 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 662.057048][ C0] sd 0:0:1:0: tag#2114 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 662.066108][ C0] sd 0:0:1:0: tag#2114 CDB[20]: ba [ 662.074600][ T22] kauditd_printk_skb: 61 callbacks suppressed 18:00:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x4}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:19 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x700000000000000, 0x0, 0x0) 18:00:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x5}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 662.074657][ T22] audit: type=1326 audit(1632679219.043:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=13992 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf7d3709 code=0x7fc00000 [ 662.106027][T14008] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x800000000000000) [ 662.155936][ T22] audit: type=1326 audit(1632679219.043:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=13992 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf7d3709 code=0x7fc00000 [ 662.179875][T14024] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 662.201590][ T22] audit: type=1326 audit(1632679219.043:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=13992 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf7d3709 code=0x7fc00000 [ 662.227019][ T22] audit: type=1326 audit(1632679219.043:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=13992 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf7d3709 code=0x7fc00000 [ 662.255208][ T22] audit: type=1326 audit(1632679219.043:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=13992 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf7d3709 code=0x7fc00000 [ 662.280083][ T22] audit: type=1326 audit(1632679219.043:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=13992 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf7d3709 code=0x7fc00000 [ 662.304872][ T22] audit: type=1326 audit(1632679219.043:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=13992 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf7d3709 code=0x7fc00000 [ 662.329804][ T22] audit: type=1326 audit(1632679219.043:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=13992 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf7d3709 code=0x7fc00000 [ 662.356568][ T22] audit: type=1326 audit(1632679219.043:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=13992 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf7d3709 code=0x7fc00000 [ 662.381588][ T22] audit: type=1326 audit(1632679219.043:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:kernel_t:s0 pid=13992 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdf7d3709 code=0x7fc00000 18:00:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x900000000000000) 18:00:19 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0xf00000000000000, 0x0, 0x0) 18:00:19 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x6}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:19 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000038c) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000040)=0x7df) r3 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000038c) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000000)=0x7) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) fcntl$addseals(r5, 0x409, 0xa) 18:00:19 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x2000000000000000, 0x0, 0x0) 18:00:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x7}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xa00000000000000) [ 662.504033][T14035] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:19 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x2) 18:00:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x8}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xb00000000000000) 18:00:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x9}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 662.580976][ C1] sd 0:0:1:0: tag#2116 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 662.590847][ C1] sd 0:0:1:0: tag#2116 CDB: opcode=0xe5 (vendor) [ 662.597200][ C1] sd 0:0:1:0: tag#2116 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 662.606259][ C1] sd 0:0:1:0: tag#2116 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 662.615303][ C1] sd 0:0:1:0: tag#2116 CDB[20]: ba 18:00:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xc00000000000000) 18:00:19 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x810, r0, 0x10000000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) syz_io_uring_submit(r1, r5, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r6, &(0x7f0000000240)=0x80, &(0x7f00000003c0)=@l2tp={0x2, 0x0, @multicast2}, 0x0, 0x80000, 0x1}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:19 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x7) 18:00:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xd00000000000000) 18:00:19 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0xf) 18:00:19 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r4}}, 0x10000) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:19 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080801146, &(0x7f0000000180)) 18:00:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xe00000000000000) 18:00:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xb}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:19 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) r2 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000038c) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f00000001c0)=""/142) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000100)=""/65) finit_module(r1, &(0x7f00000000c0)='/dev/input/event#\x00', 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:19 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x700) 18:00:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x1000000000000000) 18:00:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x1100000000000000) 18:00:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x10}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:19 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0xf00) [ 662.950336][ C1] sd 0:0:1:0: tag#2138 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 662.960294][ C1] sd 0:0:1:0: tag#2138 CDB: opcode=0xe5 (vendor) [ 662.966657][ C1] sd 0:0:1:0: tag#2138 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 662.975734][ C1] sd 0:0:1:0: tag#2138 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 662.984776][ C1] sd 0:0:1:0: tag#2138 CDB[20]: ba 18:00:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x11}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:20 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x8, &(0x7f0000000240)={0x77359400}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r7, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) r8 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r8, 0xfffffffffffffffd, {0x0, r0}, 0x7fff, 0x7, 0x0, {0x0, r6, r7}}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x1200000000000000) 18:00:20 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x2000) 18:00:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x21b}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:20 executing program 2: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7f) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00000da000/0x4000)=nil, 0x4000, 0x3, 0x12, r0, 0x10000000) syz_io_uring_setup(0x3b7c, &(0x7f0000000240)={0x0, 0x8c80, 0x4, 0x3, 0x24b, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_TEE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f00000db000/0x2000)=nil, 0x2000}, 0x0) io_uring_enter(r0, 0x6374, 0x0, 0x0, 0x0, 0x0) 18:00:20 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000038c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x880, 0x0) r6 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8000038c) io_submit(0x0, 0x4, &(0x7f00000004c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, r3, &(0x7f00000000c0)="c3c7ee67a5254c95a50fa3a7edab945e6755c69311f913ac857bd1e52a5486b4c94294356e2f0dda0da3122c131d692ff95cbc7ce7aafe8bbfc0ce89ac49fbdd72fccf37ada73d54595fd2b1b0760ddcb51aaef9dc472b9a6b4be64a143064a263a846c1b55484b781bac2f7c7a0ff46870b4f071c2f2f7d1a6e55a97b4f897b6fc5d6f7d80d0ffe2916056047b14f3da1afd610da2e2f385007280611b11aa3fe63cd2d9b345a390fb024102ab6d4e1c64e663ff6a2d359", 0xb8, 0x0, 0x0, 0x5}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x57c2, r0, &(0x7f0000000200)="4e3ca027a666bb9dc7304e79fdd6d53fc636c96276014472aa071dbb5a90dac1655b76776a6d4cf9f16a1e27fd299ef0f5b5d1add9f896ead4e758daca4ac6ea99ab48067d0062d7a770c1744a32a87b59c044314a5684398958c1e3fbd18ca3fbd1f749978e1153f753ca427890fde7f799920ed327236cee0d513457d1722ec4249b7fcb13e4eb75cd6e94475424d5ceb362caf2b0129b8c1927894771d7d9bcb5bdeb8856b27728cc801f041d3fb85a52616ff30ba5f42c1cf6187ae0f56df1d33348fd3e83e1e61a23f89026d79cd89346a631f683", 0xd7, 0x7, 0x0, 0x1, r0}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0xfebd, r4, &(0x7f0000000340)="df3765b46ce8dbfd79dad95a75056b1b4acc13978e047aa2cf6f4f68564a078e965624d2", 0x24, 0x6, 0x0, 0x1, r5}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x800, r1, &(0x7f0000000400)="5de798278940628f5182f14540d2c6da02c877dceda19c75257220a8a6278e933e802f495e5642989420843330e55dc09b8ac0c9575a697a947abfdc4e39858eb98d5ab1448b928f2beb11093bfce4b4f35ace9d414012fde39355a204", 0x5d, 0x3, 0x0, 0x2, r7}]) mount(&(0x7f00000005c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000600)='./bus\x00', &(0x7f0000000640)='pstore\x00', 0x8, &(0x7f0000000680)='syztnl0\x00') ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000000)=""/121) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r8, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x0, 0x4, 0x8, 0x9, 0x28, @remote, @local, 0x700, 0x20, 0x3caa, 0x4}}) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:20 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x800000) 18:00:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x300}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x2000000000000000) 18:00:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x500}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:20 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x1000000) 18:00:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x2500000000000000) [ 663.327234][ C1] sd 0:0:1:0: tag#2126 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 663.337209][ C1] sd 0:0:1:0: tag#2126 CDB: opcode=0xe5 (vendor) [ 663.343577][ C1] sd 0:0:1:0: tag#2126 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 663.352624][ C1] sd 0:0:1:0: tag#2126 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 663.361657][ C1] sd 0:0:1:0: tag#2126 CDB[20]: ba 18:00:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x4800000000000000) 18:00:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x600}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:20 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x2000000) 18:00:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:20 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000180)) 18:00:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x700}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x4c00000000000000) 18:00:20 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000000)={0x2, 0x2, '=a'}) 18:00:20 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x7000000) 18:00:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x6000000000000000) 18:00:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x900}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:20 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0xf000000) 18:00:20 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) dup(r0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:20 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x6800000000000000) 18:00:21 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$evdev(r1, &(0x7f0000000000)=[{{0x77359400}, 0x3, 0x800, 0x1}, {{0x77359400}, 0x0, 0x5, 0x25000000}], 0x30) ioctl$int_out(r1, 0x800080804526, &(0x7f0000000180)) 18:00:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xa00}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x6c00000000000000) 18:00:21 executing program 1: sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c8, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1f, 0xb}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x7}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1}, {0x8, 0x0, 0x9}, {0x8}, {0x8}, {0x8, 0x0, 0x3ff}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x401}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x4}]}, @NL80211_ATTR_IE={0x120, 0x2a, [@challenge={0x10, 0x1, 0xc5}, @mesh_chsw={0x76, 0x6, {0x0, 0xfa, 0x40, 0x55bb}}, @random={0x5, 0x7a, "019a0af754a0456e702074450ef67eba0de95844103ccffff6266d9b347ae06f3439354d45f81cb64f8fb4261555475ff51f43243ac8b75bf35acdcf1430d1c1851ccf7896579f80c609a285c6e02431332434194d8def17bb60fe675d162ed8b0a4b03299216df06efb97d1b0bee749e090526ede2a2e061a0a"}, @ht={0x2d, 0x1a, {0x800, 0x0, 0x3, 0x0, {0x2, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x800, 0x7fffffff, 0x2}}, @gcr_ga={0xbd, 0x6}, @mesh_id={0x72, 0x6}, @channel_switch={0x25, 0x3, {0x0, 0xaf, 0x7}}, @preq={0x82, 0x62, @ext={{0x0, 0x0, 0x1}, 0xff, 0xfb, 0x1f, @device_b, 0xfffff800, @device_a, 0x4, 0x7fff, 0x6, [{{}, @broadcast}, {{}, @broadcast, 0x3}, {{0x0, 0x0, 0x1}, @device_a, 0x401}, {{}, @device_b, 0xffffff01}, {{0x1, 0x0, 0x1}, @device_b, 0x9}, {{0x1, 0x0, 0x1}, @device_a, 0x1}]}}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0xa3}}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3ff}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4000001}, 0x810) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:21 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x20000000) 18:00:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x7400000000000000) 18:00:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xb00}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:21 executing program 1: syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ee9000/0x1000)=nil, 0x1000}, 0xfffffffc) syz_io_uring_submit(r0, r1, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000000)=@caif=@util={0x25, "0d520b9bbb1434c41345a6c867e4c008"}}, 0x1) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0xbc380) ioctl$int_out(r2, 0x800080801144, &(0x7f0000000180)) 18:00:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x7a00000000000000) 18:00:21 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x10000000000) 18:00:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x1100}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:21 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200000) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:21 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$evdev(r1, &(0x7f0000000000)=[{{0x77359400}, 0x3, 0x800, 0x1}, {{0x77359400}, 0x0, 0x5, 0x25000000}], 0x30) ioctl$int_out(r1, 0x800080804526, &(0x7f0000000180)) 18:00:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x1b02}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x8000000000000000) 18:00:21 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x80000000000000) 18:00:21 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) dup(r1) 18:00:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x2000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x9effffff00000000) 18:00:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x1000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xda1c000000000000) 18:00:21 executing program 1: r0 = getpgid(0x0) ptrace$setsig(0x4203, r0, 0x99, &(0x7f0000000080)={0x38, 0x100, 0x3}) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x101080) 18:00:21 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x100000000000000) 18:00:21 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$evdev(r1, &(0x7f0000000000)=[{{0x77359400}, 0x3, 0x800, 0x1}, {{0x77359400}, 0x0, 0x5, 0x25000000}], 0x30) ioctl$int_out(r1, 0x800080804526, &(0x7f0000000180)) 18:00:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xeaffffff00000000) 18:00:21 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000240), 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000280)=""/203) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000100)=[{{r2, r3/1000+10000}, 0x5, 0x1, 0x4}, {{r4, r5/1000+60000}, 0x12, 0x3c, 0xeaf}, {{0x77359400}, 0x5, 0x101, 0x8}, {{0x77359400}, 0x0, 0x9, 0x101}, {{r6, r7/1000+10000}, 0x1, 0x100, 0x7}], 0x78) clock_nanosleep(0x2, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000200)) 18:00:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x2000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:21 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x200000000000000) 18:00:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xefffffff00000000) 18:00:21 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xf0ffffff00000000) [ 664.928054][ C1] scsi_io_completion_action: 4 callbacks suppressed [ 664.928085][ C1] sd 0:0:1:0: tag#2175 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 664.944548][ C1] sd 0:0:1:0: tag#2175 CDB: opcode=0xe5 (vendor) [ 664.950882][ C1] sd 0:0:1:0: tag#2175 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 664.959959][ C1] sd 0:0:1:0: tag#2175 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 664.969021][ C1] sd 0:0:1:0: tag#2175 CDB[20]: ba 18:00:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x3000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:22 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x700000000000000) 18:00:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xfcffffff00000000) 18:00:22 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$int_out(r1, 0x800080804526, &(0x7f0000000180)) 18:00:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xfd0c000000000000) 18:00:22 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0xf00000000000000) [ 665.204280][ C1] sd 0:0:1:0: tag#2164 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 665.214130][ C1] sd 0:0:1:0: tag#2164 CDB: opcode=0xe5 (vendor) [ 665.220452][ C1] sd 0:0:1:0: tag#2164 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 665.229477][ C1] sd 0:0:1:0: tag#2164 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 665.238515][ C1] sd 0:0:1:0: tag#2164 CDB[20]: ba 18:00:22 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x4000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:22 executing program 2: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x800080804526, &(0x7f0000000180)) 18:00:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xfeffffff00000000) 18:00:22 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x2000000000000000) 18:00:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:22 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000000)=""/123) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xffffff7f00000000) 18:00:22 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r3, 0x0, 0x0, 0x3, 0x0, 0xa4fff3379424245b, {0x0, 0x0, r4}}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x5000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:22 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0xffffffff00000000) 18:00:22 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@remote}}]}, 0x154}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0xbe, 0x5, 0x9, 0x36, @local, @loopback, 0x10, 0x20, 0x400, 0x7}}) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400, 0x400, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@getsa={0xfc, 0x12, 0x2, 0x70bd2a, 0x25dfdbfc, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x4d6, 0xa, 0x33}, [@XFRMA_IF_ID={0x8}, @lastused={0xc, 0xf, 0x8079}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@multicast1, 0x4e20, 0x0, 0x4e23, 0x8000, 0xa, 0x80, 0x20, 0x1, r1, r2}, {0x6, 0x80, 0x462c, 0x46f, 0x5, 0x3, 0x3}, {0x7fffffff, 0x8, 0x0, 0x1}, 0x9, 0x1000000, 0x0, 0x1, 0x3, 0x1}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x3}, @mark={0xc, 0x15, {0x35075b, 0x6}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 18:00:22 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x6756831d, 0x121000) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000000c0)={0x17, 0x1d4, &(0x7f00000002c0)="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"}) 18:00:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x6000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 665.913170][ C0] sd 0:0:1:0: tag#2119 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 665.923042][ C0] sd 0:0:1:0: tag#2119 CDB: opcode=0xe5 (vendor) [ 665.929407][ C0] sd 0:0:1:0: tag#2119 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 665.938461][ C0] sd 0:0:1:0: tag#2119 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 665.947530][ C0] sd 0:0:1:0: tag#2119 CDB[20]: ba 18:00:23 executing program 2: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x800080804526, &(0x7f0000000180)) 18:00:23 executing program 0: r0 = syz_io_uring_setup(0x618a, &(0x7f00000002c0)={0x0, 0x3904, 0x20, 0xfffffffd, 0xcd}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r3}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) io_uring_enter(r0, 0x7e3a, 0x73a8, 0x1, &(0x7f0000000140)={[0x72930020]}, 0x8) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) r5 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8000038c) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x7000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x420302) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x8000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:23 executing program 2: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x800080804526, &(0x7f0000000180)) 18:00:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x3060c0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0xea60}, 0x14, 0x4d3, 0x3}, {{0x0, 0xea60}, 0x2, 0xfff, 0x2}, {{}, 0x15, 0x7, 0xcb}, {{}, 0x12, 0x0, 0xff}], 0x60) r1 = dup(r0) fsmount(r1, 0x1, 0xf3) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f00000001c0)={{r0}, "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"}) 18:00:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x9000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 666.262629][ C1] sd 0:0:1:0: tag#2128 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 666.272479][ C1] sd 0:0:1:0: tag#2128 CDB: opcode=0xe5 (vendor) [ 666.278838][ C1] sd 0:0:1:0: tag#2128 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 666.287909][ C1] sd 0:0:1:0: tag#2128 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 666.296976][ C1] sd 0:0:1:0: tag#2128 CDB[20]: ba 18:00:23 executing program 1: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_out(r1, 0x5461, &(0x7f0000000180)) 18:00:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xa000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:23 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x0) r5 = syz_io_uring_setup(0x15e6, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000400)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r6}}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd=r0, 0xfff, 0x0, 0x0, 0x0, 0x0, {0x2, r6}}, 0xffffffff) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r7 = open$dir(&(0x7f0000000000)='./file0\x00', 0x680442, 0x20) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x183101, 0x0) bind(r8, &(0x7f0000000240)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80) mount_setattr(r7, &(0x7f0000000040)='./file0\x00', 0x100, &(0x7f0000000140)={0x200001, 0x80, 0x0, {r8}}, 0x20) r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r9, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) ioctl$int_in(r9, 0x5452, &(0x7f00000001c0)) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r10, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xb000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000038c) write$evdev(r1, &(0x7f0000000000)=[{{0x77359400}, 0x1, 0x7, 0xfffffffc}, {{}, 0x1f, 0x52f3}], 0x30) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:23 executing program 0: r0 = eventfd2(0x5, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) r1 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) fcntl$dupfd(r5, 0x0, r6) io_uring_enter(r1, 0x2078, 0x0, 0x0, 0x0, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x8000038c) read$eventfd(r7, &(0x7f0000000040), 0x8) 18:00:23 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$int_out(r0, 0x800080804526, &(0x7f0000000180)) 18:00:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x10000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:23 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x7ec243) readv(r0, &(0x7f0000000100), 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$FIONCLEX(r1, 0x5450) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000140)) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c4000000170a01020000000000000000010000030800074000000001a800038008000240000000817c0003801400010073797a6b616c6c65723000000000000014000100687372300000000000000000000000001400010073797a5f74756e0000000000000000001400010067656e65766530000000000000000000140001006970766c616e3100000000000000000014000100687372300000000000000000000000000800014000000000080002400000000808000140000000000800024000000004370b523eca7a328b18db233fd13f5b6607b635939bc3c019c3d6e49f21203635f08d6e629e096c4a165a25ef653baf2a36e97e51382ba60a243cbdc6c67608e0572931ace51618753311ed51864ea988a256e1d97d65118dbf7cef62c6ef46368d3101e4666e2dc632f546842298e1f819dd75009d1db154189db6d277bb6071af695dc8e4673a757a6cc1d00a457b7269c1f54ea446d1660bd1028b335384b8c7c5cf6b27cfbf3efb23f58bf59bde31c82ad7abe7554c7308318e2fdfb7a2bd1f0800c6c340f58181043005375f81527b842f50"], 0xc4}, 0x1, 0x0, 0x0, 0x2004c044}, 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000038c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getxattr(0x0, 0x0, 0x0, 0x0) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x1) 18:00:23 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x4000)=nil, 0x4000, 0x3, 0x4010, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_setup(0x7a74, &(0x7f0000000000)={0x0, 0x46e, 0x20, 0x0, 0x7d, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x8000001) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000000)) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001c0001000037d6e3cc8580ff829238000000000000002b0c00150032"], 0x20}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000180)=0x3) getsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000240)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000003bc0)=ANY=[@ANYBLOB="a676084547ef559e3b608b39e17e1d9f0e82de5f223294d7eeb16908925651d9944d36163cce9de0d5b22963bad7d29dabb4eb59bb331c5bb0d12259b041c8912938c958096ed965ccf6c6aa43b476bab7fe780982567193a54abf30df429ea5ae2d38fe074f50e957eb13d8c7f8da754691e46b02e20182a85a913572dd4b7eb4bbee44c37f898fe283bf190601e787d6d2003b5a0dded53b65d964f31684c31ab6834c43d9aa67c846d0c482e92f4c5dd6052ae838fd10e34afc44f3f7f5e16d36fff4f120c4382f0b4c6b57d7522e3c59f0d436edf65eef78229ad47cc8b83ee1faf2ae4aa9f730284996387ab992459e74db80ae53dd9c2949916759cccbcdc0dd5082e0055207257bbc6395a5dc597601f7aba686e04e16c0bdeccc129f1deac21905ec92be893fa308a69823e8f0217a30b8e2f3a688eecc49e5f2e5de2e4f4403ee579ac9599c6c54e9e0bdca620194ab15b9a85f2264a136ba8c25a2fee890b26233ea8922d702f6c402f44616a19ca821f3d889d1c3c7b9abcdfa22dca627136ae1360ae518d8ba58b9347b421b559c1d4d4f2033625c6866c7ae1b3b7329f238971b9e3d169fba1e7f88dbae9f09bcd18c7e13cd7ad7df100ce3b20705aa31cd9f6038a65f14c77fc01344018e928658f631d0ce4c42426ff3b8ea2b8cc5727da9cc1d13cfad7ca61fe04768878974a5ab18001988d16f23763483581683a168c8df1ec226d14e43cb0bd439be21e84ea5f2eef5284117a8febe17b10a042fce1ae79f0e5a5d88621be4c5f28b648be26ff95b35317866867f937ae366bd2d5b46b9c1375d74d81c8782f9f7c02bf64491ab92f911ce94e27c3203b27ce54c8f789c85267f64416b47dc9a6a58e4bfae9d82b4d82c3424dd47b2e5f60ad93b8ce0944c15dc88934db7d876bed4ae3bfa2781907d6aa5d6c800e246863ce7dc087289fb214a5eb40b745f0bf6b31b16f90d9f1cdd82651ab37cac49a92bc1e8fd477ffcbd243708e79d110c2176d5ffe1529fd8eb822944ec71ad13cf220892389586a4cb3fc800f0cf5606e18514548d664843567a8ebd2cc81f805c7f0783ed33a0922ae2fbfeebd4cc4d5013e047ea4c545952c3915a5d406bda65d9c369ba6ac54639ac780b39b2130913de1d0174ac6e7f51ed530afbd952d2bc517bddae7d447524ee6f5961792edd24db97e577f27e347acaa3124df708304dd55d553fd6f9055fc4de8e7232ff130904830bc74bdb312b02d8da4363f282204ba6fb7f6b8a4ec7784a1ee7f74c9f78b49419df94862c70fecca90e7d70bb69655c9c07440d74765c98f51bcbee39e0509583485d5369b9ecad6048b78919b455d580b72fc82c4280814eaa66dfdf34334e98ebf30b82f0033ad8a58fbf04e4aa4799c69afe6cd20d5ed06cffdb8e4ada08216bf2ed40d94782e3558deca45501b877b0f5cd10f272b602e71e00b79bfabc1e22a752201b06909a07a8a559cc64e05a1ec95d613c05ca97048f0e0b3a9e7f227d86ea865a7dae039ebf0a093ae4ad6a43b61c62373b18e0d06d56fc9ed9654a8b2a2363566c56f6e2d51fdaf624f51fb7e715f469fe22b995ef60d1106c9784278e19c41034fe9cb05b81a501ff2dc422704a9a49dc0cddf62728e50d850700000000000000ded19e7a71300635e2ef5f9955be8ae4d7e8319077687c955ba12db3d6068545f17b714ecfa1b5c69c25fbe4e279e91d2d19a72452f4719814831e3ae4a05976a45f955d4bd6ea0d6fda797f3f215e799787907e063f000000000000007bd778e426d04e4562cb31b61093f5ee0e8a38fb8e58b498e2577117b2854f12aa92588d6a7f9368aae35de3b965a1a30f44520f783718b4c7cfa163c1acbda149e3664ab608b2a3dd2d4331b7b8042ab5c5227d9ed2f4c6eb8f4f383ad08bfa72dcc6f944a8f0edb37ba65c527e2cbc4e45516a42cbaf236fedd66cdf6c0c4068b8fb5880fa01c9c5aad3d556efecd55271893f374fc36495831f00a17190ef9b879de707b648f9e43689638507afedebaeef99404bcd58950b9d1a5ae1ddcdd0882ef725e03ac1c43ddaea9a7726b836cb64d363ae7062d8a539d16471d7160d7bc1f8707c9aa77240189393eea889ac19a4958c56e2fdc38a7e264e6effacb0202a22a505003a6fe2352fee85cebca1d8706d00f2be8826b261b5fe6ee75fa8fa38984445e1cd4c382cf2cfe14d7c542b14a637d05e729cde31f6ceac712394137e2bb408f61d9972173b295bab2a74564236b6b6e441eeb835659caaa54404fd4706d32bbf981ced48c6e82f9e9cede593c8e063a9a789ae38c47ff9d14cd855d6eb72ea7009efd3ce318aa8c96d7d6e82925d10090c04642af652ddd9732fd01f8cddf759cc9f79308a43588df227d79f7db8750d4498be9cd4eeaf2b12435704e67c156aa74eba00bdd241f7d23652895ea54743a12ffeb606cfaae88d14400cd230d55e112891ebc96ac90183be301564d7d2fdf3d4bb7160ea889fee98a47fb4f816a2fe0cb66809ebf8763306c71203f86d6d85e7c4bd3694f71354367c69b7053ed75ca15cd441e6caebdf4ec15f3eec4f86b1e3506048c52851406897d63fe54db0100ac6eed6cad0733c941c345da94d0c6f4eec92820dab06bc330e74f52c5858fc71862701ec3b690605fb460d1f6e46f99299b4cf3df8d65f87c4a2ef8d05fa4b3841482f4572fe4773cb548ae691f12a219de1902a644f238a9f38d9913790de484a1251e3b8399a10b3e73a4895e2ae57088f38524ebd5fd2be455ceeb16b5bcf5300cfedd1e326a862c0bf3e1bef531a6c7a5895c247b12b39d9952529de825f8a31282be28ede06b7a5062c4dfefee45c52a901504723c59983d8746e84c457f8fdd18f55379189b63e5b9baaadf9a117f98538c1015f5d1da113c74f63b59545658c1df48ff840a691efd84f835a92a0a6ba2d9a4fb09a0577bdb3f888fa5ddc0abe98cdda0f0a165878e19fb99372077a605cc91e91e0bfdbd09c7b6ffa9db203000000bc6d7e572b5b46decb2e28ff71593b5bc58d21f86ed46db4eef142af07d53c1b405511da1c80d5db99b4957443ecaacfa6e66732bcdd609e9b4531f50f5619571aa738abf0cc61eb8973be69931a6fef7e52a19f70ad318d549b0c8c805922e81e6ada33a4b59a9af96b40e563b6b147d04fec6ef7029ae8246744cf2f803432223529ad6456b188f34c00ce0dc4863beb9be26ae19b590927712db57cde87f9aa13c23fca0d1ccdfb77eb2f987a8905627b294753124a4bd6c03df81bdf014d2ba8ad181e5ee6094635ec64f04d1932359bca717bf00101e06e23fd6aa73eecca651471d875b088b4fa5a4765a9ac30725ac4032cfa77ed55229d5efff09463913195d92c4956833f2c3132a9c08588882624839502b8e83b9f700fc95d38891c25cc0e47f5865005403907d75916a5b31694f627cd90dfa2878a6044b6283febda431180c84caf8b2dc73ea016124c668e9d650449c9d272b075aaa4fc2174ebc560c10db6a6c427086a498456b8a9adc05a67389e00d2dc429a865861fe241224d9d200e92dbb8605f76f347ea4bed15a0ebae4f434fad2069ee387465f96efd2d52affc44ab011b6aa8004393d59b7ef6fb0f13568eb20fb47d9007ca13267233b6862426565b75018d3bb63912d87053ed33ffd87c48ba6bf1d8c1c2fa7103b527077a83d00ffc5cb75a76bf8861090ff984a4de3354c0bf35719f5ffe3c2fb11035ec8a525e7f73997e337b195c2ef4f36ecf498b939d47297bec7b41480c8ccb6736e523c42ce4016caf7f7883ab62b44cbfbed0e4a621d44c67027f1b5be2cec6f086c4a73148f05c0a08046d1cb991fe11c43bbaa28e0746ff121cfbae5e6c9c04a2794019bafe704e058e6020dfdce967a6b86b569b8721fc172f9ffbe9a77e70e7a998772b6de720230a40b7a5796af6188c800b7fa06c54dd6be660a050781f8e03edae98532fef635dee9917145d831519e4b1e432ad926225bc4922214658cd0615760e1aa90b1c371811e475cbb69a3ee5392336afd2b8accfc204754ef95b362b0b2a229f1857a118c74cde213571b42f3a6340cd0b165712d7b47532e65a299d2d0c9a5661adfac383b8bd2a3fa625fec436516a9147be525f05577e485dd3d70076d94d2fddfee253963e4d7f9e9af4b3948a6757033ab65cbaabe09e4c2ee4e2803b97c84a109a4aa82ed72a1994c7ac159e7e6f5c26c11728ef65503127866a4c668379f82e8db5b8934f479aaf5df687bcc7933633471ab79443d69740cd880a5375e5ece1b05c41ccb70c7ef718fcb3667260f93b4c24478ed1c2112d3fa959b421c7e4e8bd75efc1014f6c8f69b1dd7993c4d04700a475118536dd43b142f1f6b21a349527ffc7ef678a7b567c78192d0cf1c1ef95bb2665eaca4f2e63a0c8ed6d5955b26931d98b8b190c36b54c6f8ae670e706a97965dec5881b070fb1341aa47ee181da6f85681c21b1bad7f8191881d920983c2ff0e523adaf3123b0773d561859a54a6a77c0eccccfef8abb808120ce27c43476b1c978985ae42c680147f092502bbb1f0e37570f876db7215b68ff453eee673519cb1d0adfcfcc477ed5663955e7d20228d0bdcb9a5a855c6a7eac601c79d91ba01f1d8575b721951e908fa72c295dcea1eb57531748875713cc6a32b3712e701b22b15d3e53337fff2271ce43c8023cab1c26130b017949a16e213e8186e6df3a1b7ba3dd63c668c3fa6542133cd30546fe519ee1dcb40f487066d2e6118e8f96705abe25f288789f38bcf8eb695e16a2c00e61f5ad1593d3c33e150ecf1d6f5a561b9698bca30a19cb71572146ff2dc771b5ae9f0e26ef2491f93d8605df6d849f4cce05e4687a5a4ed4cafb51ee94ed070aa9bbc9ea3edcbe457b518cebfa3d206dac8ec464c9a4ebc74bd951e6c38f197a915fa7b25d9d82fc2fccc36c782a2e79d73be2fa17b5929c723b88cda6b7b5e09e988ce68714fb650d8c394ca3608f101a9fb203a4c85273609343264b8e0dffd91be57f04ad2b845ac0a3b525a5160dbfd1e467f55ffb4f2543acb63855434ba7e6721aaa18c7497a6966809c0732f72a23f0de99e285a798cdfd6a59324a0969860715a06e99b338aaf99aa88d2198b99970f7d5efb123c4a66dc05c4d8cc9a53eff3bdf01a1a3202e63fe4f79a634279d95a574921f9f25466f47f59b230dbc34fd205ba57815f26e7083bd90419e21eb643f5ca893e2405118d5d6ac3dc2bdf5974cec29c824826c8197674096aa911d04fad7d149d82f6aa32c4a07ab2dcaceb575c83969e34410c4448b6cae5282cb5ca2449185985f68f66831f1eda1a722e1d036565034bf340c02999eb334ae5b79b2ca556511c2490413dd3d551a47e6a10d802d4effa55b4284c5967a479509f4efc41668e40573e6b7054f8ba005efb1fc7ca4ad7b67034fd0e4a52a2d8c78b6814560231b643df0e010422d215c73af5159d2dd51bf805b5d3642a21161e99d7966b7cfb09b1b15a63005b5dc86799b860fd048e130f084c430127494e31678f31daacb2ce8befe6e50dffd7e466447cd69241ca9e49b6f18ac0f72ebec5b326ae8ffa38e7137325290fb8a60964f99893cb9924f514d9c17a79a4fbaad0b0bca44502c0ff8b7bfd4f939c6e6edb33e765a6f066a4b2a191b815ed216864e2a9fb5d29de541a092ce67e32093cf3e8d88617f77e37104a7812d056c449d299e5ae7548a1513333870bd74012efbf125b269488ed1f64223d16b2cbc13646ef03e4c016fdc2e68990e6a657600a5730169b33da458a5d736b65bcef0513a5bcd5106a44d33f5c1367e51bfc11c89386c4e492707db87887e5b86c1dba5538fbf5391f5f450a9064b6dfb04f5e7a462277cbf6810e1adf7d64acba3d5e296f5c868cac1cfd76016ca31f52d1169826cf2b4dc548fa348c4c877f9ab4c5cd8fe90452d486d455f3312fa90d3cf031abb0c9ce4fe21496de73c4453770625096a76e7ec42de4e1d12074c68d26a2a143bc762209e77244fb62b8660a62251490e0e68ffc578d27c943632f5462ffe56a0811757d7a2a9ad5c690fd7a2118b5a9d0b266493cef716ef8308d61f4d4c8f2947599294b98f0664c7ba67d5080a67d01dd227e02ed92ac5e06a3a10fed4ea3ea109bf0f23ea44c108a31c56a82c296522328198f30f528927b59a6b38a0738bc055559b83f5be231a9137f16d4fd49611fd0f205afaad2ebe2487abd230a3de428529e18bdf20c9fe6e856607cfa83e5ba0d3eed7f6ab508358604a8e762553a884e07ec2a3b60adf543fc59379cdc66e06f0a33ac992ad3debe53e5f38409a462142004f5206b2f9d12d118f1dda3d0428728b48ebf7ebb786d00788467b63920247d5a95fedc2fa88ce0d7834d120e", @ANYRES64, @ANYRESHEX, @ANYRES32=r3, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESHEX=r2], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') sendmsg$NLBL_CIPSOV4_C_REMOVE(r10, &(0x7f0000000240)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000002980)=ANY=[@ANYBLOB="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", @ANYRES64=r9, @ANYRESHEX, @ANYRES32=r8, @ANYRESOCT, @ANYRES64, @ANYRESHEX=r7], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x40025) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000001440)={{r5}, r9, 0x2, @inherit={0x88, &(0x7f0000002440)=ANY=[@ANYBLOB="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"]}, @subvolid=0x40}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000440)={{r1}, r4, 0xa, @inherit={0x78, &(0x7f0000000080)={0x1, 0x6, 0x5, 0x8, {0x10, 0x7, 0x4245, 0x81, 0x4}, [0x8, 0x8, 0x7, 0x9, 0x1000, 0x10000]}}, @devid}) 18:00:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x11000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:23 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0)={0x0, 0x1be8, 0x0, 0x0, 0x316}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_FALLOCATE={0x11, 0x92e2df34491ed40e, 0x0, @fd_index=0x800003, 0x100, 0x0, 0x4}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) signalfd4(r4, &(0x7f0000000000)={[0x4]}, 0x8, 0x80800) [ 666.892405][T14378] __nla_validate_parse: 28 callbacks suppressed [ 666.892418][T14378] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x1b020000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:23 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000038c) syz_io_uring_setup(0x2b61, &(0x7f0000000000)={0x0, 0xd1e5, 0x10, 0x2, 0x170, 0x0, r4}, &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000ee8000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000140)) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x5104}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x20000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:24 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) [ 666.992074][ C0] sd 0:0:1:0: tag#2138 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 667.001927][ C0] sd 0:0:1:0: tag#2138 CDB: opcode=0xe5 (vendor) [ 667.008262][ C0] sd 0:0:1:0: tag#2138 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 667.017398][ C0] sd 0:0:1:0: tag#2138 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 667.026530][ C0] sd 0:0:1:0: tag#2138 CDB[20]: ba 18:00:24 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$int_out(r0, 0x800080804526, &(0x7f0000000180)) 18:00:24 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000038c) linkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00', 0x1400) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r2, 0x800080804524, &(0x7f0000000180)) 18:00:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x9effffff}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 667.096511][T14403] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xeaffffff}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:24 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 18:00:24 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x4101, 0x0, 0x16}, 0x18) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r4, 0x0, &(0x7f0000000140)="470fecbb48f7746536060195c0658a8a1b83f28243a3e81e090d9d2838c539628e1fab519d9de12ebc1553de585e3ba77876c9e7834e611e9cdbc0ac4343c36a6d29409d9b0c0708412f12c97c421b82e3bc286a0a55a29030e1769785cad265a1aa3d5c49aee0e07afbe7dc03ef7fe9a35aaf55c301cfffd84fd7e3f95ecfce6a1dc5c340ef40290c352999d3c37511b70cbdae99736f4afcd58e", 0x9b, 0x4004}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x0) 18:00:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xefffffff}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:24 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$int_out(r0, 0x800080804526, &(0x7f0000000180)) 18:00:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:24 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) accept(r1, 0x0, &(0x7f0000000040)) sendfile(r1, r2, 0x0, 0x8000038c) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f00000000c0)=""/221) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000000)) 18:00:24 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f00000000c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x20}}, 0x0) 18:00:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xf0ffffff}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 667.323848][T14440] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:24 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000038c) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x0) r8 = syz_io_uring_setup(0x15e6, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000400)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r9}}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r4, 0x0, &(0x7f0000000000)='./file0\x00', 0x40, 0x40000, 0x23456, {0x0, r9}}, 0x10001) 18:00:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xfcffffff}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:24 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000038c) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7f) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x6, 0x9, 0x1ff, 0x70, 0x5}) dup3(r2, r0, 0x80000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) dup(r3) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000440)=0xc) fchown(r4, r6, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="f80000001a000b002dbd7000fcdbdf25ac1e0001000000000000000000000000ffff03000000000000000000400000004e2400004e230003080000a033000000", @ANYRESDEC=r2, @ANYRES32=r6, @ANYBLOB="ff010000000000000000000000000001000004d232000000ac1414220000000000000000000000000004000000000000030000000000000000000000000000f8010000000000000080ff0d0000000000000000000000000000000000000000008a0b0000000000002000000000000000020000000000000007000000000000000200000000000000dc1a0000060000000300000029bd700002350000020001300000000000000000050019006c000000"], 0xf8}}, 0x8081) 18:00:24 executing program 2: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$int_out(r1, 0x800080804526, &(0x7f0000000180)) [ 667.437923][ C0] sd 0:0:1:0: tag#2137 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 667.447801][ C0] sd 0:0:1:0: tag#2137 CDB: opcode=0xe5 (vendor) [ 667.454169][ C0] sd 0:0:1:0: tag#2137 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 667.463219][ C0] sd 0:0:1:0: tag#2137 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 667.472286][ C0] sd 0:0:1:0: tag#2137 CDB[20]: ba 18:00:24 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000000)) 18:00:24 executing program 2: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$int_out(r1, 0x800080804526, &(0x7f0000000180)) 18:00:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xfeffffff}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:24 executing program 1: ioctl$int_out(0xffffffffffffffff, 0x800080804524, &(0x7f0000000180)) 18:00:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xffffff7f}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)=@getspdinfo={0x14, 0x25, 0x2, 0x70bd28, 0x25dfdbfd, 0x5, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0xc880) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@remote}}]}, 0x154}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200005001c0000f625bd7000000001002b0c0015000000000061000000000000"], 0x20}}, 0x8000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) r4 = syz_open_dev$vcsu(&(0x7f0000000940), 0x4b8, 0x200) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000440)=0xc) fchown(0xffffffffffffffff, r6, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d00)=@acquire={0x128, 0x17, 0x2, 0x70bd2a, 0x25dfdbfc, {{@in=@loopback, 0x4d5, 0x2b}, @in6=@private0, {@in=@broadcast, @in=@broadcast, 0x4e23, 0xfffe, 0x4e24, 0x0, 0xa, 0xa0, 0x80, 0xff, 0x0, r6}, {{@in=@loopback, @in=@multicast2, 0x4e24, 0x6, 0x4e20, 0x4, 0x2, 0xa0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x10000, 0x8520, 0x2, 0x6, 0x5, 0x5, 0xfffffffffffffff7}, {0x6, 0x8, 0x0, 0x7}, 0x6, 0x6e6bb8, 0x1, 0x1, 0x3}, 0x1, 0x2, 0x9, 0x70bd2c}}, 0x128}, 0x1, 0x0, 0x0, 0x840}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x0, 0x6, 0x2a, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private1, 0x1, 0x8000, 0xaf5, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000ac0)={'ip6_vti0\x00', &(0x7f0000000a40)={'syztnl2\x00', r7, 0x4, 0x57, 0x8, 0x2, 0x4, @private2, @mcast2, 0x80, 0x1, 0x4, 0x8}}) splice(r2, &(0x7f00000008c0)=0x3, r3, &(0x7f0000000900)=0x80000, 0x0, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x1f, 0x7, 0x62, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x7800, 0x768, 0x3, 0x6}}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/70, 0x46}], 0x1, &(0x7f0000000380)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x58}, 0x10080) sendmsg$nl_xfrm(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000440)=@newpolicy={0x250, 0x13, 0x400, 0x70bd29, 0x1, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x68, 0x4e24, 0x7fff, 0xa, 0x20, 0x30, 0x62, r8, r9}, {0x0, 0xc90, 0x4, 0x8, 0x1, 0x2, 0x200, 0xfffffffffffffffa}, {0x0, 0x0, 0xcd, 0x9}, 0x1fffc00, 0x0, 0x3, 0x1, 0x1, 0x2}, [@tmpl={0x184, 0x5, [{{@in=@multicast2, 0x4d5, 0x32}, 0xa, @in=@empty, 0x34ff, 0x1, 0x1, 0x65, 0x0, 0x4, 0x8}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d4, 0x33}, 0x16, @in=@loopback, 0x3506, 0x3, 0x3, 0x4, 0x3, 0x7, 0x2}, {{@in6=@private2, 0x4d5, 0x2b}, 0xa, @in=@remote, 0x0, 0x3, 0x1, 0x1, 0x7, 0x80000001, 0x6}, {{@in=@private=0xa010102, 0x4d3, 0xa0}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x41}, 0x0, 0x1, 0x3, 0xe1, 0x9, 0xfb5, 0x5}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d5, 0xfe}, 0x2, @in=@loopback, 0x3507, 0x1, 0x2, 0x1, 0x3ff, 0x9}, {{@in6=@loopback, 0x0, 0x32}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3504, 0x4, 0x1, 0xff, 0x2, 0x1}]}, @coaddr={0x14, 0xe, @in6=@loopback}]}, 0x250}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 18:00:24 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = signalfd(r0, &(0x7f0000000140)={[0x6]}, 0x8) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000200)=0x7) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x208082) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000040)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) r4 = io_uring_setup(0x71fe, &(0x7f00000002c0)={0x0, 0x1004d7e, 0x10, 0x3, 0x25b}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) listen(r5, 0x3f) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000400)=ANY=[@ANYRES64=0x0, @ANYBLOB="1f070000000000000600000000000000018000000000000007000000000000000800000000000000800000000000008100000005000000010000008100000000100000010000000080000000000000fefffffffffffffffaffd92a661b152162adffffffffffff180000000000000000000000000000000000000000000000008a931714016b9718085de43c85cc72de1c3b0a0a63850d6a709e113b030a270984b6179fe65192b54971d8c60c4dbe38b734e9af8794b9833b17d5214416136a3225bc68c107d958ab7f72ea5ae0aeba47ff56214ca2882e98e74ba0d4370d50bd4036c4c6199042b363cdb9971f1fdb8fc69d2f103d73047da4efe0a19a85ae7b15da42ecbe57cebfddd806a04e04a6b20b80b077d243d1af13acd169760c808e0632"]) r6 = socket$inet6_udp(0xa, 0x2, 0x0) eventfd2(0x0, 0x1) getsockopt$inet6_int(r3, 0x29, 0x42, 0x0, &(0x7f00000001c0)) r7 = socket$unix(0x1, 0x1, 0x0) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000380)=[r3, r6, r7, r0, r8, r0, r3, 0xffffffffffffffff], 0x8) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x1) 18:00:24 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x20010, r0, 0x0) syz_io_uring_setup(0x52cd, &(0x7f0000000000)={0x0, 0x9ce5, 0x2, 0x0, 0x68, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)=0x0) r6 = dup3(r0, r0, 0x80000) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, r6, 0x0, &(0x7f0000000180)='./file0\x00', 0x52, 0x802, 0x12345}, 0x7) io_uring_enter(r0, 0xed4, 0x0, 0x0, 0x0, 0x0) 18:00:24 executing program 2: r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$int_out(r1, 0x800080804526, &(0x7f0000000180)) 18:00:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xffffff9e}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:24 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = dup2(r0, r0) io_uring_enter(r3, 0x14c, 0x898a, 0x3, &(0x7f0000000000)={[0xfa8]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x0) r7 = syz_io_uring_setup(0x15e8, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000400)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r8}}, 0x9) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r0, 0x400, 0x100000001, 0xe, 0x10, 0x1, {0x2, r8}}, 0x50) 18:00:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xffffffea}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:24 executing program 1: setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000001c0)={0x0, 0xfb, 0x1015, 0x7, 0x0, "d5d63c58661e5ff4e730d3d29ec0130b", "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"}, 0x1015, 0x2) r0 = syz_open_dev$evdev(&(0x7f00000012c0), 0x0, 0x2541) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r2) recvfrom(r1, &(0x7f0000001200)=""/54, 0x36, 0x10160, &(0x7f0000001240)=@rc={0x1f, @any, 0xf5}, 0x80) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@v3={0x3000000, [{0xffff, 0x7f}, {0x0, 0x1000}], r2}, 0x18, 0x0) 18:00:24 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x810, r0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index, 0x1, {0x0, r5}, 0x1, 0x0, 0x0, {0x0, 0x0, r0}}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000200)={r3, 0x1, 0x6, @broadcast}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@dev={0xac, 0x14, 0x14, 0x2f}, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4e23, 0x0, 0x4e20, 0x14, 0xa, 0x0, 0x60, 0xad49ab133043ae6b, r3, 0xee01}, {0x4d, 0x5, 0x88, 0x9, 0x89e1, 0x9c2, 0x5, 0x1f}, {0x9, 0x40, 0x1f, 0x5}, 0x5, 0x6e6bbd, 0x0, 0x0, 0x3}, {{@in=@remote, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010102, 0x3507, 0x4, 0x0, 0x3, 0x5, 0x8, 0x7}}, 0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000001c00000000000000000000002b0c0015000000000000000000000000a59c2dad31f4d19e037879a6ceccbcf65f000b23dbea31a9a08505442774b3e78c69007f5b32b4b896c84923e4955987de844b798754dd21178891c1d1bbaf1947300b2108f568"], 0x20}}, 0x0) [ 667.802357][ C1] sd 0:0:1:0: tag#2135 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 667.812217][ C1] sd 0:0:1:0: tag#2135 CDB: opcode=0xe5 (vendor) [ 667.818545][ C1] sd 0:0:1:0: tag#2135 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 667.827596][ C1] sd 0:0:1:0: tag#2135 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 667.836635][ C1] sd 0:0:1:0: tag#2135 CDB[20]: ba [ 667.896566][T14521] device Y­4`Ò˜ entered promiscuous mode [ 667.902975][T14520] device Y­4`Ò˜ left promiscuous mode [ 667.909322][T14521] device Y­4`Ò˜ entered promiscuous mode [ 667.915799][T14520] device Y­4`Ò˜ left promiscuous mode 18:00:24 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xffffffef}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:24 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:24 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:24 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$int_out(r1, 0x800080804526, &(0x7f0000000180)) 18:00:24 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000038c) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x178, 0x0, 0x12, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe9d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8baf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2c0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @empty, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1d3e, @mcast2, 0x10000}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xffffffff, @mcast1, 0x80000000}}}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 18:00:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xfffffff0}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:25 executing program 1: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x810, 0xffffffffffffffff, 0x8000000) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/90) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:25 executing program 0: r0 = syz_io_uring_setup(0x4581, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) [ 668.038827][T14534] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xfffffffc}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:25 executing program 1: fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x1000000, [{0x1ff, 0x4}]}, 0xc, 0x3) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) ioctl$int_out(r1, 0x800080804526, &(0x7f0000000180)) 18:00:25 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$int_out(r1, 0x800080804526, &(0x7f0000000180)) [ 668.103341][ C1] sd 0:0:1:0: tag#2115 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 668.113324][ C1] sd 0:0:1:0: tag#2115 CDB: opcode=0xe5 (vendor) [ 668.119654][ C1] sd 0:0:1:0: tag#2115 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 668.128824][ C1] sd 0:0:1:0: tag#2115 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 668.137975][ C1] sd 0:0:1:0: tag#2115 CDB[20]: ba [ 668.180595][T14534] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:25 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xfffffffe}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000000)=""/53) 18:00:25 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$int_out(r1, 0x800080804526, &(0x7f0000000180)) 18:00:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001c00010000000000000000002b0c7ecb9d7a000000000000000000009da6b1ede8a27e5ab8de9dad69b429bbf1ac3aaee971c47ef08376ab1cae5d1b9c13437b407f147b7b6fc3b06f5db416dfde75977d482dcb6dce978982d11469a9472c1c5de11c46bb645758b40402c400a080409542d1a7e603886f721193e82b2a2e39522657ad954f3b8103d746d06ecbc8000000"], 0x20}}, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x34100, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r2, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x3, @link='syz1\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@newsa={0x114, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@multicast2, {0x0, 0x3f8000000000}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@replay_thresh={0x8, 0xb, 0xc4e5}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@remote}}]}, 0x114}}, 0x0) connect$netlink(r3, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc) 18:00:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x100000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:25 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ee9000/0x1000)=nil, 0x1000}, 0xfffffffc) syz_io_uring_setup(0x675f, &(0x7f0000000240)={0x0, 0x9dab, 0x10, 0x3, 0x151}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000400)) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r4, 0x10000000) syz_io_uring_submit(r5, r7, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x20000000}, 0x1) syz_io_uring_submit(r5, r7, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r8, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) syz_io_uring_submit(r5, r3, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r8, 0x0, &(0x7f0000000000)="4a0f515889c56b8545a5569957c012bca49fc341da508907dda5a2219d4b08d9843f431ae7a7f1ccc8d9991fe87aaf838e8bea5aba6e883cc79a5627a06ed85c9829ccb7a1b6614341c88c4a1d8c28cd7eff7803a8dd99c4401e246f85754f1389390b3e2b90eff750b24787c93815615de946f233bf4537d173ab1ed8a861e68f614fc88703ab3c8025efe20ced19d466309133e9473dfe211e0e", 0x9b, 0x10, 0x1}, 0x1) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:25 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffff9, 0x8a000) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) [ 668.314621][T14560] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 668.351529][T14560] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x200000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x300000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0)={[0x20001800000000]}, 0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x20}}, 0x100) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r2) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="8c0400001800000127bd7000fedbdf25ffffffff000000000000000000000000ffffffff0000000000000000000000004e2301014e230001020080803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="e0000002000000000000000000000000000004d3330000006401010100000000000000000000000006000000000000000200000000000000080000000000000007000000000000000700000000000000000000800000000001000000000000000000000000000000ff0f0000000000007f0000000000000027000000000000000100000000000000680f000009000000010000002dbd7000053500000a00004000000000000000000100000000000000050019003c00000008001f00", @ANYRES32=0x0, @ANYBLOB="0f0112006d6f727573313238302d61767832000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018060000400000009565f26e55ec766267df94ff931eec2d6dba59f8d709ebb4397d2d2349faa4595a95e003dde0473b867b1330f62176035fdaeed77ae2374cd4889e48178ead3a53c3113c89f277293f6762ed18837aa6bfda837c036fc1693fa511f12af4002cb4341f6b9e3d197ea70d75686820ab1379e5b802853bcd4a7195278c95e17eef8f4c311907eb8dfce83ba2ce4e275d6f976e9ab359f51a774cb5d0fadc4bc16333f0a9cd7b13d4d76bd363da3492246b010c0cb67991103e355319a85e0fc328d63c6300e4000600ac1414aa000000000000000000000000ac1414aa0000000000000000000000004e2400004e240061020020a01f000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000004d233000000ac14143e000000000000000000000000000000000000000009000000000000003a2200000000ebff070000000000000002000000000000000000c60e0000000003000000000000000300000000000000e10f000000000000faffffffffffffff04000000000000000600000000000000000000007f0000000000000025bd7000013500000a00000088000000000000001c000400feff4e204e2200000a010102000000000000000000000000e4000600ff020000000000000000000000000001ff0200000000000000000000000000014e2200004e200800020020403a000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="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"], 0x48c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c890) [ 668.398285][ C0] sd 0:0:1:0: tag#2123 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 668.408166][ C0] sd 0:0:1:0: tag#2123 CDB: opcode=0xe5 (vendor) [ 668.414524][ C0] sd 0:0:1:0: tag#2123 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 668.423591][ C0] sd 0:0:1:0: tag#2123 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 668.432626][ C0] sd 0:0:1:0: tag#2123 CDB[20]: ba 18:00:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x400000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:25 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 18:00:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x500000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:25 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$int_out(r1, 0x800080804526, &(0x7f0000000180)) 18:00:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:25 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = syz_io_uring_setup(0x14a1, &(0x7f0000000000)={0x0, 0x33bf, 0x0, 0x0, 0xba, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r4, r2, &(0x7f0000000180), 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) r6 = signalfd4(r3, &(0x7f00000001c0)={[0x1]}, 0x8, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r6, 0x89fb, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x29, 0xe0, 0xff, 0x101, 0x21, @local, @private0, 0x80, 0x700, 0x7ff, 0x920}}) 18:00:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x600000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:25 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000038c) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='A\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000225bd7000fbdbdf25040000000800030007000000080003000200000008000300080000000400018046fe02000800000008000200010000000800030000000000"], 0x48}, 0x1, 0x0, 0x0, 0xc043}, 0x463a15d56d590148) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@remote}}]}, 0x154}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=@updpolicy={0xd8, 0x19, 0x200, 0x70bd2b, 0x25dfdbfc, {{@in6=@loopback, @in6=@loopback, 0x4e22, 0x4, 0x4e21, 0x8, 0xa, 0xa0, 0xa0, 0x2c, 0x0, r5}, {0x4, 0x5, 0x20, 0xca2, 0xfa, 0x3, 0x7, 0x6}, {0x0, 0xfff}, 0xfffff0aa, 0x0, 0x1, 0x0, 0x2, 0x1}, [@etimer_thresh={0x8, 0xc, 0x2132}, @policy_type={0xa, 0x10, {0x1}}, @policy_type={0xa}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40050}, 0x40805) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x8, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) 18:00:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x700000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:25 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) syz_io_uring_setup(0x417a, &(0x7f0000000040)={0x0, 0xb3fd, 0x4, 0x3, 0x24, 0x0, r0}, &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0xc) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x800000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 668.716430][ C1] sd 0:0:1:0: tag#2145 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 668.726314][ C1] sd 0:0:1:0: tag#2145 CDB: opcode=0xe5 (vendor) [ 668.732691][ C1] sd 0:0:1:0: tag#2145 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 668.741804][ C1] sd 0:0:1:0: tag#2145 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 668.750868][ C1] sd 0:0:1:0: tag#2145 CDB[20]: ba 18:00:25 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="001c00010000000000000000002b0c001500"/32], 0x20}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xe8, 0xa, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xf9}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x17}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0xa, 0x1a, '[$\'%-\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3ff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x3}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x4000) connect(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @local}, 0x3, 0x1, 0x0, 0x3}}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) 18:00:25 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x0) r7 = syz_io_uring_setup(0x15e6, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000400)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x20000000}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x0) r11 = syz_io_uring_setup(0x15e6, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000400)) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r12}}, 0x9) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x6000, @fd=r0, 0xd4, 0x7fff, 0x6, 0x13, 0x0, {0x2, r12}}, 0x7) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r8}}, 0x9) r13 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x2010, r4, 0x0) syz_io_uring_submit(r13, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x2, 0x2, &(0x7f0000000080)="fa0000805486fdde81486ce44a10bef5008fbd1c8d3759b003b14e1be0243f6e000000", 0x10000, 0x0, 0x0, {0x1, r8}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x900000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:25 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000038c) fallocate(r1, 0x2, 0x20, 0x6c45) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000000)='^\x00', 0x0, 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) openat2(r0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)={0x56c000, 0xc9, 0x1a}, 0x18) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x0) [ 668.842168][T14628] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1546 sclass=netlink_xfrm_socket pid=14628 comm=syz-executor.3 [ 668.862409][T14628] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1546 sclass=netlink_xfrm_socket pid=14628 comm=syz-executor.3 18:00:25 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$int_out(r1, 0x800080804526, &(0x7f0000000180)) 18:00:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xa00000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:25 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x64}, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:25 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xb00000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:26 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x501900) io_uring_enter(0xffffffffffffffff, 0x429e, 0x9643, 0x2, &(0x7f00000001c0)={[0x1]}, 0x8) r4 = syz_io_uring_setup(0xada, &(0x7f0000000040)={0x0, 0x3ce2, 0x1, 0x3, 0xe1, 0x0, r3}, &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r8 = syz_io_uring_setup(0x7705, &(0x7f0000000240)={0x0, 0xa1d3, 0x2, 0x3, 0x390}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x17, 0x1, {0x0, r10}}, 0x1) syz_io_uring_setup(0x1c31, &(0x7f0000000400)={0x0, 0xa1d, 0x8, 0x0, 0x314, 0x0, r3}, &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0)=0x0) syz_io_uring_submit(r9, r6, &(0x7f0000000540)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd_index=0x8, 0x0, {}, 0x8000, 0x0, 0x0, {0x0, 0x0, r4}}, 0xfff) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r12, 0x0, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x0) r14 = syz_io_uring_setup(0x15e6, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000400)) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r14, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r15}}, 0x9) syz_io_uring_submit(r5, r11, &(0x7f0000000500)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r15}}, 0xe851) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) [ 668.973628][T14645] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x1000000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:26 executing program 3: ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000380)=0x3) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000002c0)={'nat\x00', 0x0, 0x4, 0xe6, [0x1, 0x1, 0x7, 0x5, 0x7ff, 0x5], 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)=""/230}, &(0x7f0000000340)=0x78) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f00000000c0)={{0xffffffffffffffff, 0x1, 0x9, 0x2, 0xff}, 0xd771, 0xfffffffffffffffb, 0x6}) r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7, 0x8000) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffff, 0x4402) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x10002014}) 18:00:26 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ee9000/0x1000)=nil, 0x1000}, 0xfffffffc) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r4, 0x10000000) syz_io_uring_submit(r5, r7, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x20000000}, 0x1) syz_io_uring_submit(r5, r7, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x7f) syz_io_uring_submit(r5, r7, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x2, 0x0, r8, 0x80, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0x0, {0xa, 0x4e23, 0x81, @remote, 0x100}}}, 0x0, 0x0, 0x1}, 0x8) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r10 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd, 0x200, {0x0, r9}, 0x8000, 0x0, 0x0, {0x0, 0x0, r10}}, 0x7) 18:00:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001c000100000000000000002b0c001500"/31], 0x20}}, 0x0) 18:00:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x1100000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@remote}}]}, 0x154}}, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=@allocspi={0x1a8, 0x16, 0x600, 0x70bd25, 0x25dfdbfe, {{{@in=@empty, @in=@empty, 0x4e22, 0x1, 0x4e24, 0x0, 0x2, 0xa0, 0x80, 0x2, 0x0, r2}, {@in6=@local, 0x4d5, 0x3c}, @in6=@remote, {0x5, 0x7ff, 0x400, 0x5c0d, 0x6, 0x10001, 0x7c50, 0x2}, {0x7fffffff, 0x401, 0x3, 0x7098}, {0x1, 0x81, 0xc2c}, 0x70bd28, 0x3505, 0x2, 0x0, 0x5, 0xe}, 0x7f, 0xfffffffd}, [@algo_auth={0xb0, 0x1, {{'sha3-512-generic\x00'}, 0x340, "931cb4efa5b1efaee70a3eb1e1c966143040f6f4ea14d8cf7b118acfe1dd2edf26c29ef4559ae06a47ab7ec5598f4281e30819c25b0f4a48173087e880b66ae8a343cd7568243bd0d83e4829782299dfa224389b4f40a04539a100296948a75dd9b768353a3172e5"}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4000}, 0x64008014) [ 669.130403][T14662] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:26 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$int_out(r1, 0x800080804526, &(0x7f0000000180)) 18:00:26 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x239f, 0x4a7a, 0x1, &(0x7f0000000000)={[0x3f]}, 0x8) 18:00:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x1b02000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) [ 669.190100][T14668] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001c00010000000000fcdbdf252b0c0015000000000000000000000000900acf546a238e10ad6e3d8b1f669c54b702cb6a8c8aae05ce42793f097444d62ac7f92cae706dbb31ac4b868cf9f7b4d67faf9b094c2a191ed1a0ef97d4e0d630924e852bbba3632f71e344c9e591be9831467580d111658a6631fd475e0405325fbbb830be9f9ba1010c7f66e190cdc291ebcd4ee26e2fe09d5f2081e7d50a2a2f9acec1e69209738c945355ac48e1e8f84a53a729925a04af61fe"], 0x20}}, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x9089b000) 18:00:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x2000000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:26 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x2, 0x3, &(0x7f0000000140)="d12b037446b12004f50f30c6443ce3beae4f800b8ce29cc60fe4c101ce69c6ca0e81416125ebc481b33eb47d9012c337f3934d7d5f627651103f076c4d8f6c2df40cfdf67b880ab87922e82db347d6043f7c366916e3f0d9c900c09452bd649efe0f09f474a5def28f2b3dc286a39e74daaf9d01c15ec0a496cce9dd36ae3110f4146a820e34343588", 0x7}, 0xc) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}, 0x0, {0x0, r6}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x8000000000000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="54010000100013070000000000000000fe880000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x200, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=@migrate={0xe8, 0x21, 0x8, 0x70bd25, 0x25dfdbfd, {{@in6=@loopback, @in6=@empty, 0x4e20, 0x0, 0x4e23, 0x1, 0xa, 0x20, 0x20, 0x3b, 0x0, r2}, 0x6e6bbd}, [@coaddr={0x14, 0xe, @in=@private=0xa010101}, @extra_flags={0x8, 0x18, 0x7}, @algo_crypt={0x7a, 0x2, {{'ecb(cast6)\x00'}, 0x190, "bca109fffa3ecc75b333a1d02a14dc95e3d1ffd3fb26f7dffab0475e6c0df3f7f386db71fbbd801f68902b4164b64bef7fee"}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@remote}}]}, 0x154}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a00)={'syztnl0\x00', 0x0, 0x4, 0x8, 0xd9, 0xfffffff7, 0x4, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x7800, 0x8, 0x6}}) sendmsg$nl_xfrm(r3, &(0x7f0000000d40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000ac0)=@newae={0x234, 0x1e, 0x4, 0x70bd25, 0x200000, {{@in6=@remote, 0x4d4, 0xa, 0x3c}, @in=@broadcast, 0x1ff, 0x3502}, [@algo_aead={0x91, 0x12, {{'ccm(aes-arm)\x00'}, 0x228, 0x180, "bb3f4b9e6e4ac32c1733c0575363cb3e19144f65ac7bf84adc3b04eca620926007efaae1e7f1b29d2290be53623a3c682f32eab99d954807ea481c6c093ff639893482e930"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e20, 0x4e20, @in=@empty}}, @XFRMA_IF_ID={0x8, 0x1f, r4}, @algo_auth_trunc={0x132, 0x14, {{'blake2s-224\x00'}, 0x730, 0xc0, "73f444ed7826c5277b429d1eb710b9f9da98d0ed5382e1b653ec91a58cab935780af7400eb9199bdf79372d322f6fe5663051b5947c32ebfecb247c06bcd7ad2f342f39fd9330c43ead152c77efc27526cd535f6336e321c9a0db870922ff7a5ae7930c2d12dbad1885ca5855198e13bf9b48b55f65d45885586e712090121b622088b9f494cbb56d82384d9bdcd3e157b6fa34146a8b8607884e20be97b9a496d73b1715a1ddc052ce892a400a3e6bc48c019f82fcb79e207b6aebc1743dffc2db88865afa5b4f54d532ba2d8eee72cf9d72f746a467ac8cb0a546ead116cc68bc6618e8ac9"}}]}, 0x234}, 0x1, 0x0, 0x0, 0x4a001}, 0x8800) r5 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8000038c) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000e00)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@local}}, &(0x7f0000000880)=0xe8) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000980)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="7c0019f9", @ANYRES16=r7, @ANYBLOB="02002cbd7000fbdbdf25050000000800020002000000080003000100000008000300b86f8e11080002000300000048000180060001000a000000060005004e22000008000300ac1414aa08000700", @ANYRES32=r8, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r9, @ANYBLOB="08000300e000000214000400fc020000000000000000000000000001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@delpolicy={0x60, 0x14, 0x800, 0x70bd25, 0x25dfdbff, {{@in6=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x9, 0x4e21, 0x0, 0xa, 0xa0, 0x80, 0xff, r10, r2}, 0x6e6bbf, 0x1}, [@replay_thresh={0x8}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x240408a0}, 0x40800) 18:00:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x9effffff00000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:26 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0)={0x0, 0xf34c, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f0000000080)) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:26 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$int_out(0xffffffffffffffff, 0x800080804526, &(0x7f0000000180)) 18:00:26 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x7794, 0xdf22, 0x2, 0x0, 0x0) 18:00:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xeaffffff00000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:26 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@polexpire={0xcc, 0x1b, 0x800, 0x70bd2b, 0x25dfdbfe, {{{@in=@rand_addr=0x64010102, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x3, 0x4e21, 0x0, 0xa, 0x0, 0xa0, 0xff, 0x0, 0xffffffffffffffff}, {0x1ff, 0x4, 0x100000000, 0xa0b, 0x10000, 0x1, 0x8, 0x3}, {0x1, 0x100000001, 0x62, 0x60000000000}, 0x2, 0x4, 0x0, 0x1, 0xec513c88d971a96a, 0x1}, 0x4c}, [@mark={0xc, 0x15, {0x35075a, 0x6}}]}, 0xcc}}, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000200)={r3, 0x1, 0x6, @broadcast}, 0x10) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000440)=0xc) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0x6, @broadcast}, 0x10) fchown(r4, r6, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r8) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="e80100001500010029bd7000ffdbdf25ac1e010100000000000000000000e00000010000000000000000000000004e2400004e220064020029002ce80000", @ANYRES32=r3, @ANYRES32=r6, @ANYBLOB="b06b6e000000000008001d00ff000000e4000600ac1e0101000000000000000000000000000000000000000000000000000000004e2400654e2201010200200000000000", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000800000000000000060000000000000006000000000000000300000000000000000000000100000005000000000000000500000000000000000000000000000003000000000000000000000000010000030000000000000005000000bb6b6e000101010000000000"], 0x1e8}}, 0x0) 18:00:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xefffffff00000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:26 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x64bd, &(0x7f0000000040)={0x0, 0x4c7, 0x20, 0x0, 0xa7}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ee9000/0x1000)=nil, 0x1000}, 0xfffffffc) r4 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000038c) faccessat2(r5, &(0x7f0000000240)='./file0\x00', 0x28, 0x1200) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f00000013c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x0, 0x1, 0x4, 0x0, {0xa, 0x4e24, 0x8000000, @private1, 0x4}}}, 0x80) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x3) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x4) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xf0ffffff00000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) r4 = dup2(r1, r0) close(r4) [ 669.802278][T14722] device Y­4`Ò˜ entered promiscuous mode [ 669.809141][T14718] device Y­4`Ò˜ left promiscuous mode 18:00:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x0, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:26 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x29, 0x67, 0x1f, 0x20, 0x4, @mcast1, @private0, 0x7, 0x20, 0xf7, 0x5}}) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@migrate={0x278, 0x21, 0x8, 0x70bd28, 0x25dfdbfb, {{@in=@multicast2, @in6=@mcast2, 0x4e20, 0x5, 0x4e24, 0x527, 0xa, 0x20, 0x80, 0x11, r1, 0xffffffffffffffff}, 0x0, 0x1}, [@coaddr={0x14, 0xe, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}}, @lastused={0xc, 0xf, 0x10000}, @migrate={0x1cc, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x40}, @in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3c, 0x4, 0x0, 0x0, 0xa, 0x2}, {@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x3, 0x0, 0x0, 0xa, 0xa}, {@in=@loopback, @in=@local, @in=@rand_addr=0x64010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x33, 0x4, 0x0, 0x3500, 0x0, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@private=0xa010101, @in6=@loopback, @in=@local, 0x2b, 0x0, 0x0, 0x3500, 0xa, 0x2}, {@in6=@mcast2, @in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x2d}, @in=@private=0xa010101, 0x2b, 0x2, 0x0, 0x0, 0xa, 0x2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@dev={0xfe, 0x80, '\x00', 0x12}, @in6=@empty, @in=@broadcast, 0x6c, 0x1, 0x0, 0x3505, 0x0, 0x2}]}, @etimer_thresh={0x8, 0xc, 0xdc4}, @user_kmaddress={0x2c, 0x13, {@in6=@local, @in=@remote, 0x0, 0x2}}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x278}}, 0x0) 18:00:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xfcffffff00000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:27 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$int_out(0xffffffffffffffff, 0x800080804526, &(0x7f0000000180)) 18:00:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200c00001c00010000000000000000002b0c00"], 0x20}}, 0x0) 18:00:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xfeffffff00000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:27 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ee9000/0x1000)=nil, 0x1000}, 0xfffffffc) syz_io_uring_submit(r5, r6, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r4, 0x10000000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r8, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) write$binfmt_aout(r8, &(0x7f0000000480)={{0x107, 0x0, 0x0, 0x72, 0x2f7, 0x24000000, 0x35a, 0x8000}, "011773c71ad8a9463e4bb2f6c4e6e6ed05b90973c9f94bfa474efc56d8e0f3e1df52e97ce53e4e9380c8907e90168e218b6e2cad22f9de2a815028082a723aec8fe57058631fd7538f6107bbb18599f4eb0cb90e3387b87dfc0750bddbfc0c9efe717d04ca7eb739a63213891927dceb2464b86525e694c02b20169fd0484af3f6d6842324ab7480e8e9d9b397790089296e7d79e110ee9d7f0dba0725d2b71bccb28b7c419fb6ec73d7be0cff79b9613870b4cce060863dd68ffe99d4882817940c732f040965e9c1f222fdef4ca99310d21ed9257e8db1def6b668d46967525c73f74360", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa05) syz_io_uring_submit(r5, r7, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x20000000}, 0x1) syz_io_uring_submit(r5, r7, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x4986, &(0x7f0000000000)={0x0, 0x7080, 0x0, 0x2, 0x3e2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r9, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x4, 0x2004, @fd_index=0x1, 0x1f, &(0x7f0000000240)=[{&(0x7f0000000180)="ce280af09f5b7201be96709ebc0520a58be82488c54a4d480da311e5ce71f5af0ce94a6e44babd5b82160fdebfe7f60154423bfb4e3287fcc80d3d511043c3aa0860dbfd661c1adeff298e875cef91313fad6a5d7ede28ae3a18df86da11", 0x5e}, {&(0x7f00000003c0)="fb386b669c5c8b7d3dad237879f79c4c14cd52bb5733ec38659185659b03f75d8bea426b21bafc2ecff8a3b2aeeace515c5470134186e817c798c6319237ca97b0f5906a332f9107f2c5b53eda595e13a43acd1f5cca154cd8c7e549f0b1cae9b7619b88ea2f5e8c26c6d7c8b9a46491f7404c36ffc87724bd0ecf848858f01f8c47844f613d0ca589253dbe51919f3f7ffd4ca775", 0x95}], 0x2, 0x9}, 0x9) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r10, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) [ 670.005243][ C0] scsi_io_completion_action: 4 callbacks suppressed [ 670.005270][ C0] sd 0:0:1:0: tag#2146 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 670.021770][ C0] sd 0:0:1:0: tag#2146 CDB: opcode=0xe5 (vendor) [ 670.028206][ C0] sd 0:0:1:0: tag#2146 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 670.037285][ C0] sd 0:0:1:0: tag#2146 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 670.046346][ C0] sd 0:0:1:0: tag#2146 CDB[20]: ba 18:00:27 executing program 3: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001c00010000000000000000002b0c03000000000000000000000000009f4a381225b72f9432b177"], 0x20}}, 0x0) 18:00:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xffffff7f00000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:27 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0)={0x0, 0x888a, 0x0, 0x0, 0xffffffff}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)=@tipc=@name, 0x80, &(0x7f0000000100)=[{&(0x7f0000000480)=""/248, 0xf8}, {&(0x7f0000000580)=""/213, 0xd5}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/137, 0x89}], 0x4, &(0x7f0000001740)=""/252, 0xfc}, 0x10002) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000001980)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f0000001840), &(0x7f0000001940)='./file0\x00', 0x400, 0x2000}, 0x7) r4 = syz_io_uring_setup(0x557f, &(0x7f0000000000)={0x0, 0x643a, 0x0, 0x2, 0x101, 0x0, r0}, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000140)) vmsplice(r4, &(0x7f0000000180)=[{&(0x7f00000003c0)="e2a65fdeae5a36e93e457b2489820fc7f93bf1d585e7b8976c237ec61e7c5ab120b7ec47c875d1e72c376b7f66d1d730fcecc80f33a7740f3f4dc6245808695d8b7ab1dde44cdef7e4cf3e3ae01f4089388a18263a9d5244d713d124d30067966d181d541c0cb338d76519bc46211d2fcefcf4e1313e5d5f3c459acc7495ff2306f997237f0473ed6d4a2dd9055f968a1821b7e34e2321f5", 0x98}], 0x1, 0xf) 18:00:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xffffffff00000000}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001c00010000000000000000002b0c00150074fa87f679c45f8e5f0ba4358ed100"/46], 0x20}}, 0x0) 18:00:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x0, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000d99b1061b0a9d3001c00010000000000000000002b0c00150000000000"], 0x20}}, 0x0) socketpair(0xaf23d69e5180c837, 0x3, 0x3ff, &(0x7f0000000380)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@getsa={0x1d8, 0x12, 0x800, 0x70bd26, 0x25dfdbfe, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4d6, 0x2}, [@extra_flags={0x8, 0x18, 0x401}, @XFRMA_IF_ID={0x8}, @algo_crypt={0x127, 0x2, {{'cbc-twofish-3way\x00'}, 0x6f8, "f02374178c74cb7ab01a56fa0921a3fe6fc0040a49783f0c0b1afdc449bd963f8f58693267bc05dcd7ca72acf5e66e40bd15f3702c79535e7e25bd7cc822457d00470fd61b29ef16d8c0dfeedf97945d9ece0a789d583be95b36fc4d44c6a6e60b884ac6216995c9b05d384c3ab68c8bf7b1b6aa70e32bd9876b08662214fdd6f0e281bd9a4e5932a75085cb8d74b3363c9e89b7ed481909e7391b269a4bff31b913f973e6c8a87d28abb4b230e7822ec095009bf08fc909a1089b1e9fa3fb9a312ab17ce6e089189d4e32fa2ab7b6eae607abf4d097f477b816aeafd51fba"}}, @extra_flags={0x8, 0x18, 0x1000}, @algo_auth={0x6e, 0x1, {{'cmac(aes)\x00'}, 0x130, "f63e67e42a400c0113d4d669c1e58deb561290a80df6164e5918a7cc9f0b82c364157117c3ad"}}]}, 0x1d8}}, 0x24040004) 18:00:27 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) r3 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ee9000/0x1000)=nil, 0x1000}, 0xfffffffc) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r6 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8000038c) openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x640080, 0x3a) io_uring_enter(r6, 0x48ea, 0x1f0, 0x3, &(0x7f0000000240)={[0x5]}, 0x8) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x20000000}, 0x1) syz_io_uring_submit(r4, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x17, 0x1}, 0x10000) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000140), &(0x7f00000001c0)=0x8) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r9, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:27 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$int_out(0xffffffffffffffff, 0x800080804526, &(0x7f0000000180)) 18:00:27 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x0) 18:00:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x2}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:27 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000038c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000038c) r4 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000038c) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x35eecbe9c3b32d34}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r5}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000010}, 0x8801) 18:00:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x3}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 670.373099][ C0] sd 0:0:1:0: tag#2137 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 670.382957][ C0] sd 0:0:1:0: tag#2137 CDB: opcode=0xe5 (vendor) [ 670.389303][ C0] sd 0:0:1:0: tag#2137 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 670.398367][ C0] sd 0:0:1:0: tag#2137 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 670.407435][ C0] sd 0:0:1:0: tag#2137 CDB[20]: ba 18:00:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x4}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:27 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) syz_io_uring_setup(0x5f98, &(0x7f0000000000)={0x0, 0x96f2, 0x20, 0x1, 0x1d5, 0x0, r0}, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000002740)=0x0, &(0x7f0000000140)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x40010, r0, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40002001, 0x0, {0x3, r5}}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee8000/0x1000)=nil, 0x1000, 0x8, 0x1010, r0, 0x10000000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r7, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x0) r10 = syz_io_uring_setup(0x15e6, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000400)) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r11}}, 0x9) syz_io_uring_submit(0x0, r6, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x76964a62be97d2ab, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r11}}, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000002700)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000026c0)={&(0x7f0000000180)=@vsock, 0x80, &(0x7f0000002600)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f0000000340)}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/47, 0x2f}, {&(0x7f0000002400)=""/216, 0xd8}, {&(0x7f0000002500)=""/165, 0xa5}, {&(0x7f00000025c0)=""/5, 0x5}], 0x8, &(0x7f0000002680)=""/55, 0x37}, 0x0, 0x40000042, 0x0, {0x2, r5}}, 0x200) r12 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r12, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x5}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x0, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:27 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) r4 = signalfd4(r0, &(0x7f0000000000)={[0x7]}, 0x8, 0x800) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x1010, r0, 0x8000000) r6 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ee9000/0x1000)=nil, 0x1000}, 0xfffffffc) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r6, 0x10000000) syz_io_uring_submit(r7, r9, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x20000000}, 0x1) syz_io_uring_submit(r7, r9, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r9, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x7fff) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000008, 0x10, r4, 0xa3956000) 18:00:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x9, 0x2, 0x40, &(0x7f0000000440)="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"}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x0) 18:00:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x6}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:27 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$int_out(r1, 0x0, &(0x7f0000000180)) 18:00:27 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) ioctl$int_out(r0, 0x800080801146, &(0x7f0000000180)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x400100, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x3, 0x0, 0x2, 0x8, 0x200, 0x20}, 0x20) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000140)='\x00', 0x0, r4) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000100)={0x1, 0x40, 0xffffffff, 0x1, 0xc, "ec2b3f343e0c54de2b66693f1316e00ecc41b9"}) ppoll(&(0x7f0000000000)=[{r1, 0x400}, {0xffffffffffffffff, 0x60a4}, {}, {r2}, {r3, 0x1000}], 0x5, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={[0x6]}, 0x8) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000062040)={r8, r6, "360df2192ad209d828efd29f844b213a4927fa7d308f3c8230966c36254347863815d84352e19fc2ede26227981f5feb45b4dcd3332be9f2cf774f5ed6384f2c3cb2f6a85b79fc9ca0036b2d4a1863d7091e92dbe91d07cf10f1e0f288ca142bc00977034e98f13d27f89423b4eb6f15050886fbef329e5ac6cc67348cddefbd150e8960932a4da3691fdf5c9855121ecfeabfa9b46b3eac95467f6a13563e1062943ab7257337271fa5d64af39936d99d8d98e30ba192dae84829b672c84c2505d25734f9fc32d1397560b7577bf6c23efa5e47512cd5c06dfe53190bd510a78d0efaad726153dbe24cbc648f4bd32ea5e034e09381196793829fe4e25aef78", "4673a9f495654a5eb52a64e727edfdb8d5313080268305f992d6cae88bfb90faa977f6500dea06ec7498b2f9909e23188219d0e8e7de5755a58a7c9149f322ba0632b972ee5cff92dcab8d7f8431a6ebf16c670d64260b68723b533afecdd93659ebf0e4f3a3d90a2e6e45bd0e360162cad866af92ae170c177a9aa9776bf473fba4b35881fda4f35b86ebb626d9d4ae922b92b12ec2cd5d60b44646a410ed3c4a936433f6d1f6a743b8c0ef2b7c259bb604dec648ecb043cf0dd03e21ab934b2a8ce4ffa5862f5e103b83f5627087e540e91bdd605e0129d659e0bcf704084ca2177ee24b5f5aa6ee778d9e790bbf93da4235dbf39438a9dd23243698280055c9aa74cfba83a1db1c34ec0e32845d94343bcb6dd0b165c844f4f38eceba0a54b91f88455cf5e33e5ec09070988a42c728b3c9247c8f18d68fb0cd05bbf0698145cf8a0fa368429499f04605d6b7ae78978e96f9830631bec811d243b59124bf15c375403553f9aaecbe5d8e8326c75766e92872148a0f0f2f71b5cbf6230e44b4ac78289d75103ea536d985ee2b48c8a7278da628f84c03ca93d518f3d9d07c0a0b272f51312efba779181e50c2a2c926689a3443e8b1e8300ecdecaf35f429ea4ef61bee4181d3f8ba7de64429328e3b5d2b3ec671ed64eaed2a400b71fae8796a36bf467f3e5ec22b6bfe8ce1c3b1010d552a7891dec5b945b59e000e4677b94d7a5cfa996a829c7759fed325c0e3606b3c4eb702ad574ee580121305db918d306d9da746121c1fbfebb5cdc91952a6e6f448b35a49fd4a34d037fea785ef3a8907a407c94c7c66da84fcab9b254915c7e9f1a225082777f3dfbff776fdf4ec40822c5fce65e6e92cf8fa30b349f9f145449cc33b4c8b80b7a6e889142171cf5c39355d1a7684a7e16b456a1a3c905e85956006f5cab5c821c7227811e54efb61997c03288a28ae57135a4999c5c1e971198b565c9aa137fab417ec2af8fcb5164c8ed71df2e05675ccdb22b197bf0150fe88c9054d984e9263f451399d2d32efb5ac3c6a6448ead5a4511adf208c130b1b658214dc9e1308720f0e7a1e0e4565404cfc6e39227e7a35e11b26a9fc7c9714c348abdc39906db67ba96771ea70446ae2d4e661bd92d1dae3829bea1c7ba90ecefba96fe875ff7ce2b9d515bb6924c940a70d013875d8d24943be3b5f326f65fb383f7229a08a111c24acf1eef48996a4754300245b63021243540a3130b7ae53dec596a9dbdcbbc7b43b080318798ba091a779ab4c10283f73ccdb49249881b6c576f1063475e72636d39c825fe89438c9498a63a60f269eda278a7cdd925a1d8334e6523a819ac9eb6d59db855fb24edf4f06875f9489383db3815fe5dd896018e72c22510b40c3ff30f54c6b79789bfdda44f2ce2717522099024455c095dda4886d2fdcc0ed972bea5c2a973a3a6d97b10f84182b27c3d2b1434477e0998435ae5669304c67e5171050944b72b30204ca7fd5f40e54fba5dbf6ac479c833053c14b4babbd12e5547c836386b269554d39073114e1fd08c37d8716c9bf4f41d186d3bb7e2b76d3588a35f4acadcc6094a3c20fa1fa88e542e48f515931d74da7229b4e0adc7615181fe698629d545699f0e2b568c6928990ce8daee90dc13efbdba5c3df1c4826e7f8bc15d32b3c888011f257e0b87292c25b1db14949d9375ed170015786ce1d14d71b76bd60bebaece81bd07f337bcb7d35674a21cafb76892bdb863e067d134c5e2550bc1f13e77b8f6bd403bc51abdd3cc154d101da7e91c8900d13964a906306e8fea5ee3c98062fb11c86ef1a3731f1ac459cb0c691c93152467fcc4213edcaadf95bc36e71a2288eacdffd278996aecf51e449fb7c085262cd675803a6354209299cfd49bf9bb80a35214f0f2cc57509966fa217eb692ad81b3a87f10c82e28ccc7c0a0b4baf0ba85136b30c92f90287b28cc170150b71dc537d5876324cb4cf0096c413ab3408e02e20e4bff8b0023b6241716c50ff09d958b5e5a84c5ea589f6d3b34d694cfc131a9bb1668be52258ef85382675c8f33b93e1f2d5963eb349113adfed4f7b5ff6cc65599811721f094b2d6cb39d7f8291f6ac3bfa3006853880c3ac6a8c1d03d627976646f0df27a849e93dd6d85d6c959f4aeae3877e79be213c663aa3c71b2c361c3a3524b7ed83c590000cbfcdec82ec9d21b906a58acc31a44effa5e0cfb9b2da080480c76f2a92d7e5238758ce4adfb820c027ba8cfb3bcb5ce4f9564d4431f57faa233f37865ee931dbee4809e7e6f60fe73a17219fa1d1a90fae9c78aff146624bc3bdc62603ad168f41f90575d99e9d9823a24a96d2253fc474df8b46d161d1531b0e4361179d1af5676d7f538beb32c914753466c114aac6ba89073bee39b3ed6ccae6bb53b623f41fef1fb791461284be151b17059c5199ba198a02dc8e6ad7187bce05a343122d947216ae00a8db6fb03059b76ce982c34d8e6238fabd3fc48afe9334228d85ea6667c3c7b644df8d2de99b3d7b7526c556e950c37658bc7ca5e39c2b086a169e9874381c83bcea5849fcd36341254fbaf8a8e9bc011f18ec363b0cd4edfb9fc489d1bb56f7b8571b51dfecc0e6b2eacc9f17c3a34d9b0acb9e647be0cd3ca5db76c1e75a58c740100e2a28352c4d26cae11dfa256ed61046182bc3673c51973ad9e0efbe2ebd8975398e6ac082c61c87316988b254d6c6272ed2719b7a1b21bcccc74158ad296478895e176cfd15e6da912077b574dbfa5f8f897ecad5642c962fe4622276762bbf704e56b3375dc26ea42b9871ed4452a47ec19ccda4c60c67a52bf6dd8034049d24cc4bcf9c6856be629c5244cee568d420b36bbbf9dd55d2c35767baeedf668b2330888a07d5dbee37627bde6367aa6b7250418bc3b39c9b8d4a24e4a5682e53ba592cae66e7576619f76b0481dd55fccb69051e91aed9ec3a7b39e0693d1a48f2bc738d989a662ce28da8e3ee5efe48fa798736a92388c22a0bac63ed387f924a18229c1d347648a391ed1d7793fc65c7fcadedc62c59e697ce9fe6c28f9016eba3f8f50c8a513d1ba999a19936c2093da8b8fd9767eaa3dfffb3676b7497ede1bacead67d6001a131a0b724d2dd488b7c1e576562ef0d4239a085eab83c33577b0291f9b7f73da32a8935369d8c2ee7c37755a604dec0368aaa0710f8bdd7647c8576ff3e48a81463072c73f528820ab672d636cb65ebd2ce2f0de3001af7d4954192dd0a4a40f5ccb9356f3a1cdd25609ebdb412bcafbde561a0d2476ec69818d674627154d57b5184d0172104046cf895ed0f17814ecd82fa66cac5d4d052c242072081371277a9cb4349da902a54786f1951b1d85cd94a6545e27ceeb2c3196b702accfe9dfac7ace23bcaab52575e6432a0733d20fbddbae71da62eb46619b60ef1316e7528e808ba106db7bc651f877e6f1ab4fdb0ed7ff9159f15213e829699eb0813489baa3a20103754035515d9b9be90db276dcfa75643a8e3de3b3e0f611c37cf8d2f21dbf7634bccadc613a18657133b94dbb2266c211f24efb7ce7f7f7207cd51d6cf05cf548d5b20b49b964d18a14a0574888881ff0a4ca127ec3d32a785291efdda39765b92b603e06c81fee92fc3ad3f4beed09cd1e603e21acbd233803996e2676c80852771a6a2a1e5a0c0d347cf283abf6cd3676ad64121a58fb39473777892a74745115316db998e01a4f5de5347ee257a214033525d5cf11f96bf60cbc2f1084b8c5d2395d7c73227ab6486b772ad05f748beafd6f7ea295a9125f99eb0629df304f2f5eb7af67b9f29dec0322cdc860f4de20246e83c5850f8057d83268b7baeeef583a4d8d6f6012c238435e956706903982078a4e74fab8cf60565507ca17ecf737f305df60cebd3e1d6390a091048205c4d2b67f593024f0c371d5f655c300f9d4fc8ca435e58e5f0b20b41d2058c86adfc393c61766cca88a2eb37154fad64dc52d82d363392a586927b489e50243e97c60d7ee30e8ba6d06d66d7b881257e28f0ddd7697061d7125060218c6e8d8932fee6133828d4df097b6c322f572361fbf9758cb3f7ec4b1970563597a08a47500927ac2d2c6b0bef36d41ff12394a43e2d68b2fc1ab522435f1eb134a1da92eb13cbbebe4ba499003a0208f77d2d184cb30ccf9dd728622274b711bac958c8d9c358bdbd0d9c1050e137dbf81fcfe9ee1c56bf5745ba02d06246dd8bc15e2bcdb846ce344720ce2ab18efd9648ac23aeea77d70919f01eca16f1330b63bf14ee37d54a0404fe1d4266ff1112b320b5d818b24aef63f21d0409e7facf5e61df24be8e4b50dd395109395da57c0225c3eaa1515f162b24fd95b010bade6b935648aa8e062ca75fda7513b19d2495c37ffb458c21207965aee27539290e24a2349318a8ac56d8e279a464273f375bc31ae453b371b9754186291efff4bab1563dae9d1151b9f69f7174386e306f1dfc2d0d63e9843e1c158acf9c76100ed1b0769a320f737ede4e355bea41762dc536f21481c66d946f0c77e0cf523cb86440848313042e751d8acce599ed49c8f21e6a1be09ee23bcea291feb43926016241101d3079b3a066dc6973ac2547d5d75dbb4f53900df06be28554e2242c038d816ac375e261f053bb160858d763c10e68a20ad9a2dbc5a32edced7483cb97220112c81f00fe93406c079a872063767e4d6752c987554162095ce54f12a425e505bde4534638aeb1a82b030b009d5c5d3b16c578f88403087b41a0ae1dcabd6cc62fcd16ad71b422b861d5ffc49e853e343f746bd2ebfaafced33bafb60944b3d261172d9024f8164fda39045615446826228076ba47955c9c2603ff710c90934c93f30ad2dc92b9b2f5e836743ea1244fe967781968e3e0a56095cc0bcde4ab4e79e0faa4fe96793e15e34d018183ebc64c7df8afb8165158a43d4bcf74fa53496e63339cbc0ea6ca91d8c2d42a49a6167f3d85e365ce65992fc8825d69f9a07a38df0b024e499504f2cf56eb2b9920a5de2dc045703928c5ed8acf7a823d29c7327553876fd951b38fbe25507beb670bef2f1ede58344d534c69e164ac34c49a0b1fa997cb9c7230341e644cb8fcc208a4a86c2a5f529ec07231f44e0bf10b72294eaac2fc890125bda89fbf307dee22ae388f619ce5b64fbc7bcdfa93fcf71d58ee02a733c933f0d81c8945220b6a77cd12687ca6402d13d58a49bf2480d7be6ecd0e8ce6eef5270139c58ca5a2540337d97f3c0345f868a56b216f72634358e30210146041d65a49c4bcfb3329b7c622dda47c5e73d7ff6724e341bc32ea1974e99f5a69beb5c2dcdcab7c3e92e68046c25cc7dad824318a3e5ee2d30c0a1cb0b14cf962440c9af50a0a088b2f30a28ecaa578a6ad561ce5c"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000063040)={{0x0, 0x0, 0x3, 0x0, 0x200, 0x8001, 0x200, 0xca, 0x1, 0x0, 0x7, 0x8, 0x80, 0x7ff, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000064040)={0x0, [{r7, r8}, {r7}, {r6, r8}, {0x0, r8}, {0x0, r8}, {}, {}, {}, {r6}, {0x0, r8}, {r6, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {}, {r7}, {r7, r8}, {0x0, r8}, {r6, r8}, {0x0, r8}, {r6, r8}, {0x0, r8}, {}, {r6}, {r7}, {r7}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {r6, r8}, {0x0, r8}, {}, {}, {}, {}, {0x0, r8}, {r6}, {r6, r8}, {}, {}, {}, {}, {0x0, r8}, {r6}, {r6}, {0x0, r8}, {r6}, {r6}, {r6, r8}, {0x0, r8}, {r7}, {r7, r8}, {r7, r8}, {}, {}, {0x0, r8}, {r6, r8}, {r7}, {}, {}, {}, {}, {r6}, {}, {r6}, {}, {}, {0x0, r9}, {r6}, {}, {r7, r8}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {r6}, {}, {r7, r8}, {r7}, {r6}, {}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {r7}, {r7}, {0x0, r8}, {}, {}, {}, {r7, r8}, {}, {r6, r8}, {r6, r8}, {}, {}, {0x0, r8}, {r6}, {r6}, {}, {r6}, {r6}, {0x0, r8}, {r6}, {0x0, r8}, {r7}, {r7}, {0x0, r8}, {r6}, {}, {r7}, {r7, r8}, {}, {}, {r7, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {r7, r8}, {r7}, {0x0, r8}, {r6}, {r7, r8}, {}, {r7}, {r6}, {r7, r8}, {}, {r7}, {}, {r6, 0x0}, {}, {0x0, r8}, {}, {}, {}, {}, {r6}, {}, {}, {r6}, {r6, r8}, {}, {r7}, {}, {}, {}, {}, {r6}, {r6, r8}, {0x0, r8}, {}, {}, {}, {r7}, {}, {}, {r7, r8}, {0x0, r8}, {}, {r6}, {}, {0x0, r8}, {0x0, r8}, {r7}, {0x0, r8}, {}, {r7}, {0x0, r8}, {r6}, {}, {r7}, {}, {r7}, {r6, r8}, {0x0, r8}, {}, {}, {r6, r8}, {0x0, r8}, {}, {r7, r8}, {r6}, {0x0, r8}, {r7, r8}, {r6, r8}, {0x0, r8}, {r7, r8}, {}, {r7}, {0x0, r8}, {r7}, {}, {}, {r6}, {r7}, {0x0, r8}, {0x0, r8}, {r6}, {0x0, r8}, {}, {r6, r8}, {r7, r8}, {r7}, {r7}, {}, {0x0, r8}, {}, {}, {}, {r7, r8}, {0x0, r8}, {r7, r8}, {r6}, {}, {}, {}, {r7}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {}, {r6, r8}, {0x0, r8}, {r6, r8}, {r6}, {0x0, r8}, {r7, r8}, {0x0, r8}, {r7}, {0x0, r9}, {r10, r8}, {0x0, r8}], 0x49, "0e6aacb3cc3178"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000501c0)={0x101, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11, r8}], 0x75, "b4efd12f933fd1"}) 18:00:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$inet(r1, &(0x7f0000002800)={&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000002c0)="9a3240a49e87a63b8c5dda17df5dd2e6e133247613ecb473304a7db15f31d1805af25a916c82b3f43883916c23a39bad289b74ef5d0877c9775eb17d57f9dfc89a29e10231381b3d26f2f37b890606c9c3d588bc32cb23cd89f857250bbac3d56a4b376dfacae6ffc48d6de0cb3a7cf83fc10407641c58915d7d11f05a805ef1c5993fbf98f625eb29d31750aa9d05bc2a94cb930fc91e96bdc3eca8d9b04c4c3760c7b570710087ec713532d79e22a9ae0fbb0e64a0f38f9d527f478579", 0xbe}, {&(0x7f0000000380)="726b19ac2e41c8f1f9efe858da09b8669d71714e5397c9e0a997aba4dc6cd2beb0153be2", 0x24}, {&(0x7f00000003c0)}, {&(0x7f0000000640)="14b82f3757aaf994fd71d6d2b03fd3345f7ca34b81de801ab0cf6b3e9c72796bf819e4b2a072f2ac6b1f6d0cd5fc3c855eaceb51e0d146cbeb200ba9510a2ebf35d8d3ace40254940912e77bbf45a3ce97a954dff04c7aef6a06ec06895076af4ecf628b8ca5d13d0a295cbd240c4fc3e0e7e7af001f45d36c8b6926929443f8f95fbaa6144c164c01ff3fdae01bb5d8f0dd48c1830978acb5c2c87fa2cde2c6d4fd44b5d93c94458330a194df20", 0xae}, {&(0x7f0000000700)="90aa149c66b035bab4c716e7ee8afa382e038c7188d463e30d33da984c4d03679544c5de41407b7efe6cb659ceb4ee40944081377dd1f7a45cd130a4a17891a038d760ea7379889ec8fecad9631b7aabe2f6cdf34524fe3827b58f85dac53ea9003abd97ef1d42bafc2a6912ec10763399e720e30c4ace94f7cc4a09127111935d7edb3f907472139d23ced25289349e1252ebc4132c484f4ad24a18e3a6841f38234ad61d07cb22cd9c35a9d5a2450b3aba91b90bd247140aedad06ef3f9bbca9192125bfe676dc92d0984a82e767a33ebace913443bce65840dc56dd12f5572b303b0106a6a7b884b2341263ad21fb9479f5e91e7e6809bd3992f7007e5f1ecddd0d4f031e9677bc4cdfbbd214470e8d9673d772ef6c6886d794a0df45b006f3f2d9f6bcbf425daef3339f25b92dcfa1113c059f4648e09b56fe13d7dfa448c0f23246d0bc90909a82bd5a77b8c83c3e3e948a7f3f0d9868e794889c4fc4535c2e4304540dd96ea9283d7bf710f8164722e36ba7aa2ba65befb907646b58fcad88ae445578647ac239943c030159696e663642dd01e5c16634ecae7cea34d87b7e24a97429682b3285b7964291bb3c4f6f7bf4d0b2053cf9a04c747d0902c2af853c70392683177f49891f7f5b38b4a15cb993176c5195499ea694870745138f909aa0d7002fdcf10291e7859c47ce2bd7153e569bafbaa000717ab53144cb4f736a41630de86ef6c4c3e26db0cd2f81596ab3204029bfd47a70eb0a95f52ef53c97931d455bf8d1ac6929e4d73f10c19a06250c08c0419d88d34e54feaa0b176395467e4bfb0ba81bf8cbf59eb3a28d75cc6eda1640c1312f61dd26fc3f58e752dafb3bb4fac2607fce82139788f357e8a0cbd9b8f1e6a284c089c9fa778d5a0d0124ac22292a12114887bb52abec3c2ec02b164d1cc04cf3de36b495a29241ce51aabc66a0aebf310e4fc9f69617cf497269cd72618fe1c10a925b813bbc760c076a12136d016763b23885f43d9baacf6849ba08ba7be3ca539c9091ee95337c9b4a078a7fefb81771f81ebba657657a55aecc204f7aaf3c1a748e09bc7ff176ae334521be7d56d5a9471cfb3d7e86e12d7614aa22f35ba3cab322096d7648a27f2999971cbb906cc4f2d2723933e9c3cdcbd7d92cb438ae02473bd92f6a40fc9b0dcbb4c145f4d19b37fb76f93e840d4cb4c5e654b9453b12f94a55bc817f9ac5d08d708dfc0d10eb34f26d0accee5a2a4deaa81c8099f520aec8c49d7ce531de5c8a1b169fd9d523e542f7c9199e9713a06af502c48011242067609b6bdf6e7590e7a7ddb743094d56ef7cd2e0d1d659d0e9cafe099554b9aa9e8e4af245124ec776a6e10ab71e3d01a2539783df5a78af153eb9c8f0206a17a3ddf0ea245814bec11e837db47706579deafa5dfc69bf784cec4be623a4c5eee3539421d68a23cad7354c81ff67d25d0649460cef6c6a7ee54a5eb71da34a27511ebded04c251679d97c1a23de5c24a0e5abe0ed202359796ea2c655a36014cfa1785c8c48363a5cb06b61eb7ca9588e482a75b41563af1a87b6f6145654b5169404149b2ef4fafc1ae544b7d091d80aa17843ddbe94de510b63062767efcf6cae79c000885ee489346a0ee2c031e048608d45e16eb56eb654b5db327ad2377e3ec02e17c34dd91eb6600abdf79dc1abe1b0328e1acdd4fa627680fe6a4e773522ed5b933acd19484e38c5f8863d7cd412781a2dae6de277f678d838f77a707fc1ae1f190e07e24d23e68ccda39a8266a4fca2d19e4832b0bdddfcf7093aebbed3f7d3c2b4d137bdeec9b0b1732f48fe4796a646b49f4f13d38c52d430afa2dde4105bd18f6d77c91534bc51acfdbd01b8fba67bd6c0b0b6f5812a46c918153dbfdf0f18b6e4c3d2115d9e57dcc2f1f07a06feb42193230c61b80665ad23e2391a10298d1f0897f1366f8c537eead674ca6bfc72adf65635ae4a2b0ee48bc3f89178dcce05a13e67d2d71c1ce3b71cf68031b85c4d651c522bffbd99c2f4a5addb572145ab1f822a026915184c3e41feedd2b87eec8e8a377402046e6f273266f7b9c83c3a67c6ac034247620d2d9d9e05dfbc3145ef9bc3ca1642554a9129f91dfa366d3b942684396066758b25deafec6348088a480e919d503e9ddfe5a0f8705baaa9c8e746bd2e99422d9bde99d38bf204e12851efd46ddf5305fd1dc931d2f6cb076b9116b971e437c4c800c9d8175c4e41790a6ecbb4b1c3ce684e67fad0c7adfbfd12bcc2af2d5c71c73e91f3ed65aec5a4ae6982a6dfcfd8a43ba12729cc2467666e40966129c80ce2c2f456dd8adf1053b6f6fc9711d15688216ff860a94c3897b4602fb1c86df96b193cb9a482560ce16f2a9d1a993ccf7cf876be7edcbe009287c1cccd8deb2a332b82edd8410b46b94a3a19e0f88d6b7cf144d5f2f26dd773d78aa51cc8b9d4f04721d3ef3b9786c118b8d21f1969af41cc8a3c17d5e044902a68c03dd90912973ad98a7653db9522aa5a7b4a0492e147c2a41d701a8b0b466356b501a81e362ba19182a8a2e9b5779de1b923bf87bc7c0313bcc0d7854fae419a3e1d23d7e94369e1eba9fd2469654e191d325a2d3f4f48809b8626755c496b5782a2318f6768fab50ce783993c343fd37aa0ac2465acb2fd65ebb13863a6ec6c585c579132f7ed29f8cdc002d8f6a5721422b40e08ac95a0e867396c5e8ddb800c2153638e54452318e417151309587b55a0dc0f37118046ec88b39b0ce1b5313bfab8f109826ef8f0c56d90ef93c5942374c3f3884e2564ad0df1de2a4f414b60897d5c0c5643760f41ef750bcdda1d38ef37d79e60c44fc34ccc099d280f709ba93b264d665ec30a6dc0323db9ac7c84cfeb62cc173ce8b4e1a7a976b4b4c45ce45f1cdf1f99c181f028996799c09acac706167d5d5e08893c70df141d4e49f4fb6b1184da0991299c8d18cb2f4a0564445f89227a6d62ffd5d06a500d8bd2427d98cfb8652de86d0ece2f0f94580cf4d2d0cf5f5d09f32568923d52238aecf203f2c9b04436967957f0a250b586b0ca37bf5d8e40c12f0cef88d77e7a1d5ef4086a88d619766dc844b57ae568ec9734cdf521cbdcbc4003d082031235b62b2a830d5dd675a374345237794fbb5b47e81bba91a535239612bcf9d4f74dd45bf55d4cd0e65b427c4227dd1231e1363de2726ac3e42db63be6b89e281cc03df9cef15d3132b79d7df445a2c8fafc42ac9b34d5faa345dd1d31e72bc0c4b57b693a12ab15a5f79a2ab105fcfe52c0feceb55561ca89d0647fb4845e000d4f2465b79370eb06c48f31e7c4c407a02cd610591e551a53516435a8ff7cc1a8e5880a333d4d62105d53e7e943a1758cfa58072c47008a177b194b587789d97562eb1d0e9ce106faf0ee9c9bc84257b4f0053410a19bbf35b357f35740ed3050a24fb4cdfe0fa890f832bcc8fa03f23cbc832a814e2599c81e9a01e3feba01c440b07f49764d5c9ac681c9279779ce47420930cbc6a772fa9963196fe58a9b202c17b3943facfd99926f1c63e2cfd2dbacbff88eb96b558d7c0c2ae37b942b900d61426f35e5e9282940cf2ffddda121653b93aaab009452b2fe7a06a7e0afbab03d8e974425ef8d123eddd2af780b649a59aeee0e163363cb6c3728a2e4174da40c5f4822b17e10dd4673c1a3f969ddd75c5d54ff6b1f4bdb04528eb3de612fafad61b99434a270b2146ea37921aa7b45621cca2ea019795d3608c980fd283a41ceb4fb8b53efa9b13c9b3b8110f163360db5d404a36e64590977c91ca76664f34a0a3f8bb310994f54818fe459a85f9aa7b4092d7722130e5b2292a964640fc89ec5982a0dddfef606f700b22db9a61c5da5522a35aca994b9a731c9c4cbf1c23f0b34ce8067b7312fec615097db40a6ece1eb539d3b4e5ab16c0becba3e4ce8fba3f0e932416ef3d9d47f98e679948ca4a6105467b1c5e46954afb200efe6e7805616b7f8e709f62732cc3e21205b05f815aa51e5cb24a0a8518acc747f5948e65efc3aeefc9eb647ae6f05b515f873e1eed1b2f6959bc7192d2c5fcc062a0bd12b4eb230adc6d948f898217cc95d724c48969f8ee7f85ddf5645df49f66fe6be9c3f754446111387e71eb67f4fe92900841a6d45edb00e20f12f99811e3097abb54954efba32e38af14c9d1447934b03a31884961671fd850d710ca6029de794eae1568f978f76e63476442ef16e57dfbb1ca8b4255908315f7e8a8b932c91395c42333130ad9821557f841189cc07064facd07dc62b1f34872d4e90e87d906bbadffafc3e2371177a661feef6fad0038cf21682fa5ff8f5cdc329aabaca450bfe2c5db0f27847ad90ec29704831e0185c2cce2af3707d1f972856c9414c72b99c45475f7f5d83cd0c345aaf401c0941750867806c689ad12b19f321552369c64114b79c1ebeec96392afa00fd6b559f8bc65f468350c5534fa088d127798b00e39ccc7f1bfa372bb205cdeabe80b985acaa45a8a8117d4ab099f2ddbcf3e58858a6cbdb56baf671f2a518f35ef59ce4f0a4b4643b85373609a51afe43f740bcbd375d3716d8966c3886a2b72157f0046f09917008e4c58fbfc5636c59333d1ccb4670885dd695a37ce08f7bfed92a470d60f5a19589a71ffa6216ea867d160135cb6ff107157f90c46b86f6e073254474d8571d1f3c8ea3aa23ca83eebf89a5abb70ff481f056fff68fe0e340d717fa5e1851fa6a8721eeef5ab0f5721a70eb5d1aad25e234905970f7b02219f83954a4efe2829dda1effd8f8fe88ec3917bd326e3aa8ef50426f40b4007cc5e1d81fd6a57c7951f3183145eb2be9e7d4fbbbb633cf36508987f82f8dc1a92c3d7190bb45729793bca288b67e7a3d33f7770881d78942375e591ba9b65f18c630d5d46a0b9d51672dc4239e42712f1d6ac6b833a2d5523b14de3fde3b21e45bc64399535cc6353f74a7fca207c0a91708069c33d44dd7811c7cbc9e7634b3557243b137288c5e385bf796d30671adbc8674ef905240afd48914a86c97865e8dc170b919ca618663049a8d11c1019984d8180035cb67eeac8622c319ee42bbe2468f44b2446b254d9a31b67e810b840fd200743c81498297f2b8775e636c3ab17910b0982d887340f1691786cf88a8afaa53e4349fdc10b61ee18955e8d7e573bc3c94bf58f134f8e85610227a5ecb370aedc63c34567ee1a9a0b91d6f6b642bd7fd47d8746ec2a6dd992f10764702f5aef70de5f294e1f52789becd012dca594d48fc10f967e5aad23f7435ace7a44c200716e921a7bc1053b40d4e88436e9a62fa428e92f968b300682dd0570c596de6d727261fdbd23f66a059f27ff27f39d09da336898cf5e8fe672d468143f1a74b0a9c6802f3e3193ecdea3bfbf9d093496b759454c68c351bcf1e4d8795da45de8e3de06701785f0960d303c48822e184dc8719c73b70d36215e2988d4a9bff1f635a8b22dcb8fbe34daea6fe0cfa5d2a291dd53232ef1c4f12b2e9655de2a7c77a467bf81e9f98c0922d831dc6792bd4eed8cc9bbceb4d44b28bbd206cc6a50d61e84bbf4d73255fd85c90135daf925f053bee9e3ec0f603988003de54dd7e9cc34a6285aa40f747271a16d0a850fb2f039bedc88532bc041752a7cb9a09f3610a7b5a4b925745fd3180384619ad96143fedcc659b09af3894f9f86a723b43862eb0864dc949e24b0897ab91f03886df87827c98b76f9ed1ff66d87cbd2676b0e92f8acfcbc454421a10d3a5aa0a227d1f64a7f5546b00ed526c3cbd1b173b5", 0x1000}, {&(0x7f0000001700)="879b70191035b9d497f6bf1908967d18ab6ac30fd06f612eac47daf3ae821106b67aecc9d402ea458cd40a01e32d09a8317810504f37a10b5189bb970c219c97025e2077820e77f5a6fc3ebb418809410dd7e8194334da3fe84a75b4143e52494348a69717007cc79ffec5f0d3452142ca6d49b1d571646ddab976d81a2c341cd3820d6b3be8ae6e3700916569f4d5b77eb08fb42606ebdd99f79580b5f13383bc9e93b419d9d7d4b8fb11dc63ff5b9c44b709b3fac1d640a970150b873ea6c1222e47ca34fe1a26963de9e0330ddf734f51070177b6a290df2a4f5d77ddd7d85118aac871880cc67f6370673bfacfa18e", 0xf1}, {&(0x7f0000001800)="683c65fcdbb59e63a299408865fa174ceb4ea90f4801ba58a35ac803211d26a1209213bf445c8d9d877b08df15688dba79d50e882dd43a77fd89b5799e85d97baf47d7535accef7eb18df389d76faaa33d2edb60cbee93f02ec47ae2e36a21713374f34f6e04a19ba4256710b1255dd8b0506417886b798d02dcafefbdfa55dcb8752a059c49bdb7e608eed46f96fd08e5b05bd44da95e497aab09873f0273d25d671645c4162a0edc0e5c953868a91bbe49de1cba008a53cfa27efc3f8a5267ff4294a9db846561b2818417911cea5fb17f8ad87684693bfbdbfd8fa50e3ea803bdff580be415d2ac67b308cdf4607b74e8570f9b643a014db19cb360a4436a0ae7b388802003a678e3b0745bb3a0b63d8140e95e758e00a7a07607e115950ad53bed30b66bb6f3ba8e632de0b5bb4a51a90ccddf47e4fa96ffa3d26a8c627bd96f439553003ba686908262765aca1d9d515411adfb6e174fa8d873df1e20b87964f1a6327c61489049b5017d548332a6ed498b462d1da931213e127a75342d47117e105e625f270f13e26669a9c32adfa3bbb6d9a64aa1e4f0b01f4d80e64c3f87bcac5e09416b6a17420be56079f5e1d45cbd4202d26c96e54f696c2182ed509889c6672fb59e9121ecc144e5226a687c0a34a8a07539a6d4c44f85dbcdc0d016ed6492ec5c84672ff7d111b27a7990b22c36589c497ec6821f32b85da9878160c6f00731e5f0f381355851f4585d44e1bc6c8491fd67a6d37ff52c65679a7814c1e9597380153f4d62993529dfca08f061836e9f4ce9019a01b27ee8b73301f33aebf72ea55cd86dd7f4ea1555d404e536c3f9c46777a15631108dcdc4335a024d2fc64c5e11b08f313d6ef66b0b06237339a8ecd405a3594dd61ea3f5a3c4b9ac8de7d3cba4253a01537b082fae035599ace599da5cb1c58d81eb43257371b6f61683c824fc2ed879888ff724247a1be7879bf1f96f2fe4f9267606d1ac6ad424cbc1e39d7692fdf5018fc9f9323db4b01132e0bdb77a4110aabb9ac2dae09281a67d66575c4294a934e582e3b3712beb3b0ef035d62f71b637d38585d7e1a6f8f04c83aa258c2217579b627867d15f7c81f09184b493717e74e3a45b58a0d98b97f1e9f3b0e82aeb111216c4181902ec376dc3ae7cf03ddd08a773d1e38707486d678372f851b5a2cfa6df632c1c5803d5503130f30d752138982e805fbbb76eb6e3fc6adf5a51ca8dc42d8401b49aecaba5544c05b22796125303004047f4542aa55ee08e9306862d8cdaee464dd1868cd5cbce61a4c80d6ce0dd83081d46ebedac203f61ec332803dcb660c2c4c6c7a411f1df73a4064b59a7afaf9d886cc11904fc3a8ab9e5e5767af9387899b35f6af9df8dcf98d00f7076c4f74043bcc50f739208cdcb5da77a537fc5a17d9b495b4cc7073c4cf2b4f7b5cccf223a2dd849444f5ca0ee727c9c974c7b66ac3d643af21fef410bdc8c84781d4fc8ff5a26e4b0a63015d57f32c259050fc4d4aa0d333766229985ad7a70ecdfd6942f07677e23ca4716abe80eefbb22ec6295b33ea009b001387b70e75b2c4f67e58ce3490b073521237442cd732cf18cc4407724f248e16311b3da47f7f22bc8fc157584451f266a8c5315c0cb3c32cd0931a877c2caf147e12995b90415440ef03a87bd7ebb7b28a7cf7bbdf78135b187ee530ae4b11498e1b71e44b5d0a0e9bbc512f68df070039003d543b94f13bbb6c1fca56a06d802dde306bc041a6f9dfd324641473ec483b30a99248b78a572fa96dd68aaa84eeeba9358df93bd78f2375774b2cc2471c33514c67b44eed9f0493d21b5733b3ebf8c84e798f2a369f9e53bd008251d9095813e01dd1b4e724f8d7db06b59c56e5daa57e629ed5d1ce0ef5656508a9a8fc3652e2ee25ff2cf9248c01a42756f59a077876220e17540face098ea48b23b4d68e5b92c882bda5b6384509643a9d8beab494f2b7b118874a2c9dcc0f15dc3b914c3c9eeb590db644e2ff02adf209cea25ac9311d683e0e1655117915df453cea9996cb655fe479702a483e5d0eb0eb6e361cf0b3562601956d3f5d0aeee01cf3f33282ab08e355a29d55b1be9be23d76b6b899e896bc505303aa15264bc8e76795e4693349de09b6eacfb9d317130c26287c17060468fcae8f4181cb15cbe8afdbeebb5bbb491e3bb7fd1e18c3be04e4683c601f23f39e7779b5ff3bb97076c878726a5e12ecdce193999a3a0204ab5f2d524e7154e045b2934a42bfdfebce3b2808fe607d6c22bd5e8ba0b19d51a1cc1058e225972bc1f2cc76986487c5ccf98fe904feb72ef0a6a60b6dc896aa13f5e16ae81641a00d6eb6926ced15e0cda1bf34c7b510b7274c1fd7aa00467cffd516fab60ed839e44b73e96681d1bc51e44e43d721d88b2b70ac094f1a1f90477465097e2791af4b5ffc0e91496444d20fe278ea63df48b2c6d6e5634f53cf442da7cd7a799d34ab51b813d9f7ddc24cc9cacb796425c98a5984ac21d7f03c10c8902b9d6e498decf9f1728c378e923bb4f5a3390f873a1a849de34b657c2963c967fa32712c5c32d901caf3ac0934c294e73e7f196f36af5439755b6942927254ab7e2e6e78828ad914dadae279c6885e6ac776d9eaf952404970b3ed672eda88ce81e7911ef65f5914d33d6dd50e15d7e1d6d32614711b0b30ee2b0ca0c584597e7681f7a12027d6e1771493e627409534e2470465b3f09beb67fec6b3833d78f8a65eb4122c9816a37528349ad63f640345dc1501a8cc2d0b8e2bdcf12a5dc86bb063b9961885f97a3aadda3dd467d5d0f8d101e5376683a40673cbe7ef2e87a4d5309b7b6792df63a2f4782b8e61906946b9d38754788d51bbc0cb01ab64a793fbe9e1a333dfdf6afec2011d2c27a95f5c90fd53c3fe17422fcf9be87a0171d0e6578f3589d088c3faee3946991d56fce9a63a5482ffd02eb3888e8e46aa784d812616d6bf8ab2fe4e9ca73229fa083815b2784c813975a8cdadf1f585edb0da81cd7a41e6a8e181ca3bc8b850ddb6778adca2da3c32175733eb012bd9f37e1341f6f71ab2e995c12f2ae57d168efccbe8d494e37d02ba6f7cb2169791866ee782549ce4aa6683e52e26ddb182bf6680f706db2135eaf6a24327c5863ba34fbce66b7440c39a99a3a4f2b3a2bd24ecb170af1be786bf2b05e702448551ca4940b80f12a1f2a61d1511f488abb491eebb6b8a4052a3b3b1b60ea23bf52b63778a1f54920d6c9fec77b73c91885290b2ea6a1dc26ccfa48ce9b918e19264a18cb3dd8322ad9e22fb25d37933dfba8ae3eabb4a37d7e84fa66d264941098ac6c4247663446f00d4b7e408ab6651da107444c6e64ce060180f5f20258de342f28a33d683fc05397b2ae735053c84303ae354149055b55c6a45c5cd30b8f21c1944b0a9fb09ff0d1533e14ae0f435ed6edabc935a662eca07220a1d996c78ef6a397bfa574d166e571694495e2bdd20f0f0355d5b3e9636eaaff4981b8e0c8b0b8de7678824d1818fffc9dfb0fdd39c138426900d80e65cceca87ceb192792616a3623367513b0e5da0a31a7be96bc5e6fe2c88bc74c6918d918414d7a70ce92c89941a209d6deaba5727de433d12358f67bd6734563ad999ab7aa3942dbce51afc634e23b3dbf2c81ec6969456b6f93a718485df69591322c701989f60230e412eb81a56c59e6ac7b249629f75d06a1a300ade4aeb98e78e2572a5d4ac12b581a3702da8897fc040830d212243b90aec52e7c4d3d6bf0350bd5ab6d0edb785a10ac9aba3c6de85e42e40b30776510f73162e56e44f8bfede44e76ad96e3bdf66bb5ce3a93125b87d0570a7c4cb9672f8a34f2e72a4cf4fe300e4423b53b1cad1cb7203d89d253e176c7a2f61d3dee9428218c40963610399e632b5e0dcd7c61a26c61d882833d0f18ffab2b42ea80723e18c37c74ace3ec8cc1c5530137bf133ce818024a01e2c1573c0abf28929cb4fac819bf641d258e15c9a4ea3ca78b5854c4e28dc7519d5723c4f6c5636ebe1d1cc6c12690b3a9a1ece06c8da1aa781427b2a9397815bff3138d8f5214b15b5fcfd99435ba969521b7ec1ec9d95a134e2a5505f70575737d305ddaf375cfea2686c0e8df01458234c2a3d2503b4a85b97a0306be68075e1fe7691d3eab0a841698cc613e27baf2d2c52558af5100018d3978c929a53505fb5c24d92d02a494b54aa82422f89923ec7dc269634a70e89fd2b79d22a77dd4a7aca36e97fbf83ebad25df03598dfa8f84dd3aabe853f0f82ef22b13ce097176377a3013aa16ca45a1d7b92084b6f33af2fcac931f2c1d13419fdce384deb826545d167b800e336be2692bddbfbad609dc090bdb39fe153459371409bfc8c36257ab3c4b4b77668c3aabdc5ba8c3d1e7a0fa0b00ffcf5d018433ffd363a519973bc1e881b145e08e806e03e6075d12e991b64cb09d2d34423f9018b9e0c89423a9435c0429afca309b9f0d84b6aa31f1e24ea871ddf341199fcbba3241cb07214212c0d17bb9aee3cd1c250fd4409497a9000e30340ebeea6f21a61cd981e576e075b4f4ffc57b1b49de76d77e333bde852868223ee3dfcaeec5d82acbaf4ad3c1d4fd48d9eeb2fbdbe4ef4da9e97b2e07d48007d7364525f677d183ca3713debdc49041213a62630e5d4910635a074fbb1ee50981e5f53001febb6252a96e704063a3715fb59f15b790cd4e87532e9c26389f51ce31d90436556d047be4f9ee7557396daf18e857b771fc1e6d21cb5c488a611d27223e81b200c96484dc93c2779aacbf2ea8d780e3106bc71e32e3e264581619942c37135d01ef2886268a285c51623e39c7f884efc02b0efbb3217680449100cea2654f7deac8eafacf7fa32d32baffa8c8d513e50bde243d7b6525ef49da9bec233bf15ef7b0bd90303fc6cf81f5307b4ac3bae8096501c642d401f5a162518aa1f95dc1993ee62ed56a0fe462d79f7e3c864837fc52c83f24d396fdfefa00fd82494a9b0b50d6cd1ecb7aa498a86bb78078aeb1bc8ab4fe79654030134e8552225336fb9bf0e463b3babd1208b1b634ca304adb8440ebece4e8364d66fad7196d3f9c413063f7c6659da8665d221e11521c872a1558c69275747dcbaf0221c09f11164ae284ca27de9703d7799d0b33f268e0596b214d1a771686be242ecbec4cbb1920bff4efa6d759383f7ad39627c8981a7d89dfafe25d2f6631682d9c3c4efc52bc03c9ebd6bf157821bc90dd78352e9ffb594571adcbb7209e3933bacf05ca5a47e5df42c95613a0e6d7cb8ce1ccb2bb6062deb81ba319d17d1b32935db08c024b00c345ca5a667e4452a58b0154d195fccf1df49160c74d5d8cd3b493c0552514f22f9493464516a8bdd076baab651666c01a241662b6747ab3c9dd79766ae8d058d96435e4f045b5e4084e4bcd3e9c1571726e179e923fe57a2bef9914951f0fb3ae0c9a36b7a90b4baed4c6cb681a81317e0de14293a57de764fa55567813fefb9923fea55432425cf1245c22031f7493f2e7242e2d5322bc831ef029226ade14ce73f789e856ea62958d818b6273aaed0e7b43d4738070dfcba2c801cdce70ea8d5a93db4ba5bd6bd5ddb424a5b3c3b821370ca21b5d0282dab800b6b6e09fc5beca4d408e2eba4af86162a686ad6bb2adfd74ad3877f8fcf060b919e00fbd4f8a64dea5cb7623df596c5a56347cc3770fbef8ebd0e6c3d652742d67a34e7fc4b918c41104f47f188b7c7d68d43b30f2166c0ff96b345f8358bc9af59cc30e167eab54552885f670e4", 0x1000}], 0x7, 0xfffffffffffffffd}, 0x80c0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000200)={r3, 0x1, 0x6, @broadcast}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in6=@mcast2}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000140)={r6, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000200)={r6, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="700100001b00020027bd7000fcdbdf25ff010000000000000000000000000001200100000000000000000000000000014e2400094e20ff800200402000000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="57af7742993bd0133751f08772654d22ebd2ac4bf57a13fbeb818d6097734826feb9933f3bd1a2ff396a7c988b6b4d7947fcdfca75ff98286465f78cef018066320361c57c8cf719b4a5ffd3717e9f"], 0x170}}, 0x40000) 18:00:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x7}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 670.916219][ C0] sd 0:0:1:0: tag#2140 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 670.926107][ C0] sd 0:0:1:0: tag#2140 CDB: opcode=0xe5 (vendor) [ 670.932473][ C0] sd 0:0:1:0: tag#2140 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 670.941504][ C0] sd 0:0:1:0: tag#2140 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 670.950563][ C0] sd 0:0:1:0: tag#2140 CDB[20]: ba 18:00:27 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000600)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f0000000640)=0x10) recvmsg(r0, &(0x7f0000000380)={&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)=""/227, 0xe3}], 0x1, &(0x7f0000000340)=""/17, 0x11}, 0x40002003) read(r1, &(0x7f0000000440)=""/75, 0x4b) connect$unix(r1, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x1000, 0x24040) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={0x0, 0x1, r0, 0x8}) r3 = signalfd(r0, &(0x7f00000004c0)={[0x98e]}, 0x8) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000500)={0xd5, 0xe337, 0x4, "7ce3c2df10037d56974fda3c1b305191c2ee7674ffc8f60cabc7cc1ffdf834f0abe53a131430a53f9f489771b2d4a38c749a6bd61922f7157e1e51a53964d45e0c9f0a5d77b8cdab6f849abef0c3a594b0ffc5c7fa7bd971f7ffff28795f9786ce8c8bd333331f0b0d338306e44960055d41615a634f86e75412f27a9af5047e3479911389c644616883e6b12b90554078d888b0a41fcb7eb9b124b47315a5da3005fe3e1bd983bb163008cfc011f2991c08f1b79605bb575b8defb75a9e5941412e032a201dabe36e580071abd2d5dd519207d700"}) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r4, 0x800080804524, &(0x7f0000000180)) 18:00:27 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0xfbffffff}, &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x0) r5 = syz_io_uring_setup(0x15e6, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000400)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r6}}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)="f63cf3bb724f240094650b23e61119b082b2933709fdc31b92790bafc45f06228aca7f", 0x23}], 0x1, &(0x7f00000003c0)=[{0x28, 0x112, 0x3, "45572968215ea6d456b03cdfaf500b513a99659b"}, {0x1010, 0x196, 0x2, "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"}, {0x1010, 0x110, 0x0, "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"}], 0x2048}, 0x0, 0x20000000, 0x0, {0x0, r6}}, 0x40) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r7, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) [ 671.000388][T14818] device Y­4`Ò˜ entered promiscuous mode [ 671.014112][T14815] device Y­4`Ò˜ left promiscuous mode [ 671.029945][T14821] device Y­4`Ò˜ entered promiscuous mode 18:00:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x8}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 671.044003][ C0] sd 0:0:1:0: tag#2141 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 671.053857][ C0] sd 0:0:1:0: tag#2141 CDB: opcode=0xe5 (vendor) [ 671.060201][ C0] sd 0:0:1:0: tag#2141 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 671.069389][ C0] sd 0:0:1:0: tag#2141 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 671.078623][ C0] sd 0:0:1:0: tag#2141 CDB[20]: ba 18:00:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000001c0)=""/220) [ 671.108667][T14815] device Y­4`Ò˜ left promiscuous mode 18:00:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x9}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0008011}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="840100001e00000426bd7000fddbdf25fc010000000000000000000000000000000004d502003300ac1414aa000000000000000000000000c0ffffffff34000008000c0008000000ac000700fc0200000000000000000000000000000a0101010000000000000000000000004e230fff4e2400010a00a0a02e000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x1}, 0x40044090) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) 18:00:28 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) r4 = io_uring_setup(0x400b, &(0x7f0000000000)={0x0, 0x68a1, 0x20, 0x0, 0x1b4}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x7, 0x0, 0x3f, 0x0, 0x0, 0xffffffffffffff04, 0x80000, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xaed}, 0x8200, 0xffffffff00000001, 0x1000, 0x2, 0xffffffffffffffc0, 0xb9, 0x4, 0x0, 0x9, 0x0, 0xff}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffb000/0x3000)=nil) getsockopt$inet6_int(r6, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd=r6, 0x5e, 0x0, 0x3, 0x3, 0x0, {0x0, r7}}, 0x5a1cd6ec) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000240)={r0, 0x3, 0x3, 0x1}) connect$inet6(r8, &(0x7f0000000280)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) 18:00:28 executing program 1: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x400, 0x8, 0x9, 0x0, 0x3f, "ab3613d37ee4043a26aeeb82093d3457971c15"}) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:28 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$int_out(r1, 0x0, &(0x7f0000000180)) 18:00:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@remote}}]}, 0x154}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002bc0)={&(0x7f00000006c0)={0x30, r2, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x6f}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xfe}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x400}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x20008004) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@updpolicy={0x200, 0x19, 0x29686e32cd657d40, 0x70bd2b, 0x25dfdbfc, {{@in6=@remote, @in6=@private1, 0x4e24, 0x401, 0x4e22, 0x0, 0x2, 0x1a0, 0xa0, 0x0, 0x0, r3}, {0x3, 0x418, 0x3f, 0xffff, 0x32, 0xfffffffffffffffa, 0x45, 0x6}, {0x3f, 0x8, 0x5, 0x4}, 0x2, 0x0, 0x1, 0x1, 0x2, 0x1}, [@algo_auth={0xd2, 0x1, {{'blake2s-160-generic\x00'}, 0x450, "afff3795e7d323e7a38520e750183517518eb01162607bfb91843329506242e350cb1f193518036bc8baa66800a5c6c4dea13fe849a13acb413eec56b2c62899008aa20e7a1aea773dedf5afb08ba80bbb800ea1b76174fdb1d5d6f18edf4a43bcf63177ac784a60a85d2bd884547e9d31c1f0fc0520edcdd13493b8f4faffbfd59e82db7af3f28f94a8"}}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd26, 0x70bd2d, 0x70bd2c, 0x70bd26, 0x5, [0x4, 0x6]}}, @mark={0xc, 0x15, {0x35075b, 0x3}}, @tmpl={0x44, 0x5, [{{@in=@empty, 0x4d5, 0x33}, 0xa, @in6=@empty, 0x3502, 0x1, 0x0, 0x0, 0x6d4, 0xdf, 0x800}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x8804}, 0x800) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) sendmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="eca0958cc4d4012637ca96079098a9780c6c70390da1d783e2793a40f1a5f148779d0fa2a53c6fa526a023ed1459105d295551ffbab5e8ead3a553c792df4677551cfe992c6f6866a16673058752389955abe5c8b98ab1f4ad011b247148328e2c13642c485ff72039d6a5371a3eba04558f9102320a13f8eb0b5c25278cb6f43ff5f6daf2cc36eb0c73768b751db6a4a97fc7a7f203ad1436fbec6d32d814edc3cb4cce4ae9ae75a8c3ff826638865610886a737e5b86e56eb7ee7c37fe49", 0xbf}, {&(0x7f0000000380)="370cc0ffdc18aa2c0f0c", 0xa}], 0x2, &(0x7f0000000880)=[{0x1010, 0x108, 0x0, "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"}], 0x1010}}, {{&(0x7f0000000500)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000018c0)="ee3b93cc56c678b898adfdd4f554d32fd231d2f306ca0811d8e57cbdeeecc945fba760b103895631e72501ea178bec722b61d29a21ef1e7589b8e8157e1d5675df28c00a757ca123bb87fb5e8438d8e08fc42755e65567415bfd55ccf4f78eb6bf216bf4921d6e5897f66023f3bef3a90cfd010778279c90f01058df61d4ccf9fe1b5fc4ff91041e0ff78f193ae0a4f76f3332a5d4e9cae5cbde71cb4da6776c74b3ffc7b16b89ed1f93fa9175eeb71714d25a737c740d67a31c5d366429ba8694424ae5b1c9d2d6231ea15d170bac44f49595e02080c9b56cc7b69ce8560347813f33e6982ddba1a3a3d0c915a7fd18ca723d4e886f99ff260357009af97a190523c215947de1da69531dbe57596190cfa998724ec5a47ffa8de022747586e0d1512cc92b777e0de8924d67a657304a08df4906a4e23f7b5e4130f69f617361906580c0044555bc1fc9af0f537f34591028f66243348f20b3a4f4a717662a29e5e2976eaafcff00f461c3c1403fe4aac9882c50de09af22677840ac2082f49ce7f52f291095a814013997fbda4551d5a95c4c6125f8c4b55ab55b661d0ca105afda5b8b9bfcf2c2c1dba9ba463a1a0f7fc6836f5189462e134703eeb47d8867848c178971bc89177ff932ba6660291f99ab5eeb54233a99dd0863681a0b945c93611e620de8f7451e65bee6a01cdc9d247fbc60c6af18e631822c30935e73bb10c66a5f84e6add4f7a5c56d476d97da8ca7b2cd40242e1f143527ee2a06d99dab4178c381ab532a8718dc1564b76836f13fdb865972b743aea0f61ff7d2b2ed2bfcbc153cf64900a06c026b7aa2144e152865f2811b085ac83fdcbb9dff2c2395a4f54d28bced27cdb179e9fcea96fd5ab7d69e38b30dd7e5701eb1ad0984df52293930d9343b9748686357370cf520fdba8f51182e0a31ccea4e161931bb30fe6a66c2dec71b7f3d5514df9ef5ed30cad63041e0033e4dbf17a89db1d4f1da30eaba158dbfe2de24736af7ada8279465869490b00e4c7928d7d8938f3259283af86f5e7c584149906c229e48bf020390c507f34bd7cec32490300c8c1789505024466ecc4f9d387a2b14a11e4a75878d6b39e6d3924e50f155db2a9602f32c1dd68c649713fa523eb5923efad74bce33402298444a60c0f13eb5c56c68feea76252674b335135ae77f690cc6f5eb7c60694a4585d5f66f03f76d9c65f5bb1971d83dfa6f63f572aee5fd3314ff8ffbcc2d164312cd3be8b5aed3ed5f82ca684e87800115b7c0f56a33d8c509de548dbf9b30de1218b099d9785e03b9ab6e85867e7a94966eeb2afb7cf9a2954e8bcb58f5cdaaf76de7cf2331fd2c46c91fd2136145da3ddf0333ae82d8e8dd967fba635d3b981f3ce2495765208b7aa1440e8a94b0a42559224eb3c0d2b2d9e0080384875a9556410e9bffebd33fabe9c4b1deeb51a2f03d998f9fce4a7647a7260816d49498f7137db17f7e1ac91fa7b2f914a4f5aaa25daacd4a230f428ac0218dd77cc2e087d2acd75aa21dad498f33de3051a22f803c907f25b02555e1490523693286ed24cc1c45dd13affc6a39b0fc42cac8cf2b32a9ee15c965b50afccf48c023a67d1e9d830aa7d5d42839ee9c3a3d44f197ee66f7c30091c437a4c7b8bca72a0ed974ccfb6e956152cf97bbcc80897cb16cd55b195006dbe4d8a6cdf984adeb70fbaf9fc8b369d73797a1c27120704d42f566e495b5809c1af916dcc77a89ea007e8e4bb7e9a4cd3486f26276d2e39d8d15cd5ad42ab1bbbd58976fc242c91ae5c9d3308bee3801d6ebe49411066eea49385d72c04bf114cb7235981a8e880e2c31a52e8b58a6476cfc4b388156f3d0ea2158d9f1a225ea76c771463b1780a835a6b9efd6d2a422b79f74e4e85c8547da3e39c91c3d447d40656c4c93c3a33745ee064e00b40f55bcb16c6a995647b0a0533cc2049670f2b4cd47e0c13e687cb19c617a839b43f1f4fbb7fe29ed1e4c883d9118efc1bf3a14cfff84bdcf7b5fdc35e24f26e802b556319fa2b12ee1ce9fc10f8727e2eeff6d18c583382ce9d4c13642cccb1d4873784acd62e76a5ceae6e05fa5117698670b4c9631be3d4d869154c3a2cd4b63538a797be14416010aeb15364e40211c7c923d6446ef356d147b9f2d7df4ada310be760306f448c143ae7c37be5a876b32a46c396f6069fb3b9441a64541e47cee40113c556b2df0cee96a11a96239db7f304992cbf2e5b32e69095e3a2248074575f069b655c6ab304c5a00db3d8a9377d4917f7de86ce3e0dd318047651b2917bdeb4e31fd71aff4da352ba0de9f825acc03599272b02bdc489766b97383158bbbd474f9dad5e25e2753f90b47cdbe53337fbcd98b0069e02d10103df04a64dde75e5e3363ed211e8e5d7272ce4b98270a387aa5c61a6167bbc48e2bcd05f69dfcd85275807bf6b2a3ed68ecbae0e6ad2883469daaa78e0368047ee2afb94c6d8f443b336cfb823f1e7fbbba65cddc278b2f41349dec400fe45fe231bdd6836f4b2af931c678b11f8151fb47cefa8988e96444fd8aa134313f5d1bff71c45fa2c9462eab90d0b73e31fb253cfac28197e757ed03cff417f04c77b5c9920607100523ab089dd682414337643365d403c49d0d5f2bf81ee091f9208b8cca768b6963b925908356572d183aa341925630f48af38469c0867fdb268064b7f985e7ee56173bdbe9658015fda071585c986e8b532c1ab0105a7d1804e043d0deecef76f2a863a5351047441f66d92c7a35c8a44254aaf2f70725660d95ac7226dea155d977a314fc0dca01baf88692c23ef7ab6b43b913b3e8f7a74e0567ec87fdd2dba9e0816f8bc8f41641f91d6da46ef3603c8fc9f803e85b5f7500cfe1a3688333592bd2f2627fbbe0d1f3e70a14abd5f08711ae325db04c7355c31dc764176e02d2b6c62b67e78b1a129e022d760a2b6aef6077ece9de574893f49df2875e150c1063383219d0ff030683c5f6ebae829a4e6a699a3e0beafee071b558e008e4c23ba1135374b9618e0d30dee51335a930d59d2985fa7f92ec6ebf7fe5250f457106c648ef96b05468463829c6f1d4041837e9e32ec09d94ea1e5cdb94a164dee37bbce26f76bc8aca7204bb815a7163c40772254b1219f124769fae3f48a34d85909185a863a6fcff9c39358a11a9396d59320916c427ea139921b2fa16d7c9b27fe03d93e896461efb4811afba4650055a65b90c70f5a9222651360eb8084bdbbe9bc22ce52407eabde7729e2d3c8f8d6cd3d1980dc4e777a45f1fb40f0a49d1c9da872ead5362f060beafd7a84ac49685195470d3f6eaf31e9081b1e7c277baaf2a94e4e86b1d76c84eaf03c06485a13b5297d61e5ae0e363e8b483cc6e1dcec4489b3013ef2a6b4fdcb883536a91cd267f9e9ef4a8eba1ec293050a972d873760448b956b1bec3e794fc7aa7a7a62dc8f3c917e4aea1a1e0fb01bcccf8e50a3be3f2800442ded821838f4068a5287cf1dae8db8d574d83eafd9086f8e6dbc67e2d03a9a269470a5f1ae040967897d77915fa452ee382228000f02e10f9979085950ef37c453de8b40b790e9384631cdf99914ded66af4bff3e19ef9ba9bc43aebe0bef1db839c989007db04380ac8e2f698db9340b8b14806959997ccf9169040fe7cda6d7c5a16f2bf2e1f206b5b41582ed3a17a5fbb1f5c8ab36d47a256d770689df39c70d2bec3bfd2520da23b449782397cc44cb9276972f526b4398dfcc0d44fa55d93ab1d74bf2c82fa25ea5df727af8e05f627f2f6ca31c9ac16c6384edaa068580c2fd40ee57a65bd5dcc8d3edf03297adfa51b8848783d8bdb3b7900125e3e8e3b2a824a6f2ec6b4f923375a47d308bee40bf49d6db6f494c67631d042e5c95efe65bb4c9e3a4bca116b064a7b3fe293455b5c9dfff0650dbe99e9dc10491f6824cc85ba9c6e1031411cf7968c3ce90102f5c448f9f1a727168ded8c108070978302150bbc07361fe6ec4b5d30a1d090edcb0693740c55490063d20b411f15f300a274db5f46b42b53cea9c0e26acf590ea5fc3212508b9bcb934955215d6d15ec4f6f90677657d257f80d33113f9d5e3ea337c2349b62d6cb6e24f0ca509bcd32e8879e9355d8ffad104b29da652be3c50df11f60002d27874288066a1284c4250c33edf444b675f57f27cd95e7dfc7074e18ec1a03e69d2908bf267d1d99eb523c29f688747e85e5fef0927d8443ec8c71591d829be5b881d567b10d49020b55a909c015a2edada1a8ee3bca223048191d284e4198d1694148cb5ac6109b0e7f83d49c559a7adf608b29167d9e93f98232cc45d6592d9e81f4cb26be9c7116fe851dfd3d007bf9bed59b9c09d965f57fc1b1fe141b85a3cc5ecf2b97dac8750183cca4978d63eec677f521afa3fd4e2538a273de40464da46c27faa02a2f132789f6b3d30b98d1cd898ce26a0033d80a9c33513f6120f39682d3ede2130b10fad7334fad48d37dafae54bddc5d91447e7aef2d382b22c2064d6149a6b4c2984dec00a03d7f209882d89aa6ea1b8cd47f4468be91619c58dcdcef905b99745099b611c8ce6c1198d87d90415ff9e1d69479a5acfbaf28b803d2bfd4e212d1d797a9e6083a15861ba2efdc9f509b4f082358afc3f1ef5ef463e9e7b8dc228a3c67fd1c1dc8b7462f35de87aa5def9b7aa38b1c1d149316461ad98b4b74ac1ccf24048d2b64ad0e16c1b94f1309b74b6522f3228bb42195427ff0b5ee71c328645b2b0e40385fd5970ed2993a5b7a6e1dc06e21bc950c8b2288a044157acf0c221abae34ed1fe71975aabf2b427893b2218fbc2e0a57a22af5fbb15ad62ea97b6da2f97ef58658117dfe1e0148fc2a3f8ebf16ab74c0281d3d171a9a5cce250a1e6f3564e73fc568690b00e53a4661dd14e3a1e1300b91afc2bcc2dcc0447316913eee4d024e933e450da0000cff8e7b2f3d18856642132dd06fd7e6a91fbb714cf2c184902c49ed5d85efc9a3a0df6a6e588b95608674d1d5e2ae646a1d56f740467469418a86544739ba78da0abe9918a70d92621bf547f37e4f4f4c7f7caedb6dd81949193190c350b7c08cfc898a9407d120fc75a559ffc397a5c5c0bb2a11e2cb3383e91df46eb5e2c7010a21b417183795fe909b926dfda2d6f4af678eda1a4fa77470febebbdb1c6b1a40eb89e64d6f0b9a80f8d039c25c2b140a8a029b736e8ffe12173e184eb472f76d8d017889c2dbbfade194d669f0d87ef5837b57ca8960234bfe1585bd6a35959ca3075da9967248eba49fae2b8aaae7dd389455b34fde11e998ad875a8ae87cc381f4c054730144145dcda7734c7f213db19d28a3721359f379ed28b5bbb4ab83330359fae5950743596a51349a8a35efca63482e628e6d538ffcfe5f8d1d0622eb9eeb87d15d7f5a5013221632c0317150c83579c49978233482cfcd82654eea9ce6f576c8a7d43ca4b1cdef4d06e1ba1a0204336855c254d65f88fc8c8caf7ab13e609bdf0a5278d963320d316f8929aee733e8d9132073f38eef567748b5ed6712c78bdc21f1a6d55f6c538fd4b6dc0ddec92e2026566b6165ecceb38dc689c0dc32cd9b29d218663e3d24ac9c8f2af3d3b3286dc560bd07518200fd968f25d6608139e553b0ebfd269f89fec2e1855ec4b20cdd84913005194a6e57cd237a905a2312e25936b4148ea839b56116263fef97bad269889c25dbcbc674947c4b7c3f5c3e4ee6d38211b70543501783d18d51728e5eccd4ccabc2755219d4d197ccdf47ea10929afe0251b9c13b4d617a397cdc", 0x1000}], 0x1, &(0x7f00000028c0)=[{0x90, 0x109, 0x8001, "064dfe2bdb8c5004f2a6b32c840a5ce8d8b7fa59d41e2a0237bdb9f0a6c124885a90c8c9db3626ac423761f7aa0672f285d4052095d8cd219ded850b7a48c2c68f407b3b2e15bae60d3fa5c3c7329c42809fa4253a223699b024141cd03f66a2e69b4f1c9bfbc460288373794e82b3d2bffd011e13ef0cd5f41febaea6b0de"}, {0x60, 0x29, 0x8, "25d6f245f7b3b07ad1e15ac4afaab802bbf51903cd0e4412221877048a003edca7996bd8ad7d2bcd92a2e16b4ef22cdd5dacaccfa427b779599592166931fc45bc9ef389ffc6d40ae69f7131d29796"}, {0xb8, 0x29, 0x1ff, "b8786c5aee00fc01b2092b229396c9227c33ab8aac44aab811e36ef9d050da18e80ae040096d42377c715d15227861581f557979baad5a5fb0b80db5e3be4c019c2e887c36d147efe071246db7bd1f351d6a33250ccf54671a95a45e795632857be6ebef37cfaeb77dcb11f74054d9f45e63988ab390a5f4ae641892b848477862dfd40389fe2af6d6ea416bd54ef01171725a4d5db51023f4ffc1146d9e085497ec533ee3258f"}, {0x50, 0x113, 0xa7c, "cbc66d8be0ac097a3b56f2d200990f170c9190acf511abd87232486ee266efec0c8f3460f4998aaff969bb74f9d28c30508af93cd7c377dbe0e71ff5501dbab3"}, {0x60, 0x116, 0x7f, "5d2ff8372073325a6b12ea8cf7d88e92d7bd92b6c846cd207c42644f3476ef00d690c254c461a6c1de50d306b3a3b962b40ee5ac077e01bf83f8b1b954705f34da300c7fbc0bc5de303d097f44428a"}, {0x98, 0x105, 0x5, "ad506c57c750b93320bbece6481cb6e1531181374e2bde98147c0db24e0e6e766a4a17453f80b580af688b3066bc2afe0a4cf149b3a11c968ce10bc143efd1b7fb739cfb9d18cc47971f9d85beacba2966f147e973bf9d2c650ef02c68300abe9a1c28526f002df49a30987f708a35bd7cef891ae07c2cf53633bf3b20ae60ec5cb39173c14e"}], 0x2f0}}], 0x2, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x0) 18:00:28 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) mmap(&(0x7f0000ee8000/0x3000)=nil, 0x3000, 0x0, 0x8010, r0, 0x6d781000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@timestamp], 0x18835372) setsockopt$sock_int(r4, 0x1, 0x26, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x7}, "d3075f31c8e829fa", "950e99bc18bbebc886bca74d9f1d18689670a5f493ec5b56f522644243fa2372", "820b2cca", "a01b1d479bcfb686"}, 0x38) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:28 executing program 1: syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) ioctl$int_out(r0, 0x2, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000000)='net/hci\x00') 18:00:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0xa}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:28 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ee9000/0x1000)=nil, 0x1000}, 0xfffffffc) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x20000000}, 0x1) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_open_dev$usbmon(&(0x7f0000000140), 0x6a, 0x40000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r7, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x1, 0x0, 0x1}, 0x400) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r8, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x492f, &(0x7f0000000400)={0x0, 0x8d0, 0x10, 0x1, 0x3ab, 0x0, r3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000340)) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r10, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) syz_io_uring_submit(r9, r8, &(0x7f0000000540)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r10, &(0x7f0000000480)=0x80, &(0x7f00000004c0)=@x25, 0x0, 0x80000, 0x1}, 0x3ff) 18:00:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0xb}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 671.405235][ C1] sd 0:0:1:0: tag#2154 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 671.415104][ C1] sd 0:0:1:0: tag#2154 CDB: opcode=0xe5 (vendor) [ 671.421444][ C1] sd 0:0:1:0: tag#2154 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 671.430503][ C1] sd 0:0:1:0: tag#2154 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 671.439690][ C1] sd 0:0:1:0: tag#2154 CDB[20]: ba 18:00:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000038c) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000000)={0x17, 0x1000, &(0x7f00000001c0)="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"}) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x10}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:28 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={r2, 0x1, 0x6, @local}, 0x10) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000200)={r5, 0x1, 0x6, @broadcast}, 0x10) r6 = socket(0x11, 0x800000003, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000140)={r8, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000200)={r8, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x420000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="640200001500020027bd7000fcdbdf25fc010000000000000000000000000001ac141435000000000000000000000000040103ff4e2100070200a020d4000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000010000008c0002006c72772874776f6669736829000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002002000068b72926d0826a2d84f99bdf64f014828d38ac1381415522b579320401514cf99d08daa784dcf03d5b4a6f525b577f358d1e695e77ac4e84b4187edd1027da95c2fbd5a608001e00080000001c000400ffff4e224e200000ffffffff0000000000000000000000000800160055000000e4000600fe80000000000000000000000000003bac1414320000000000000000000000004e2300044e200000020020002c000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="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"], 0x264}, 0x1, 0x0, 0x0, 0x4882}, 0x4004800) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001c00010e5df20000000000002b0c0000000000007fff000000000002"], 0x20}}, 0x0) 18:00:28 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee9000/0x4000)=nil, 0x4000, 0x9, 0x50, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_WRITE={0x17, 0x3, 0x2007, @fd=r0, 0x5, &(0x7f0000000000)="72032be201248ded7a5969a85450552532e7f80d7ebbbad837abc7369c8bd84c4c8ea46052ec6a616228718100facabafd274e4c5fac2422775ee7d67270608edec93781e71cc470e23670e27bf328f265bf8cfec5ec17985b0b18264de2f28380cf042b0f7edde87c4e227c094123fd1da5e0fe84bf4ff1512d489fc66d7f4504284b160036e5e1ff5cbc2e7d6ebdf7063e19a98d1f367afba9a87aba49ec6e72bb88259a8697469db380eec11a4750623de119", 0xb4, 0x10}, 0xffff) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:28 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$int_out(r1, 0x0, &(0x7f0000000180)) 18:00:28 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ee8000/0x3000)=nil, 0x3000, 0x9, 0x810, r0, 0x8000000) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x80000) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x0) r8 = syz_io_uring_setup(0x15e6, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000400)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r9}}, 0x9) syz_io_uring_submit(r4, 0x0, &(0x7f00000007c0)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r5, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@llc={0x1a, 0x302, 0x7, 0xff, 0x6, 0xff, @broadcast}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000080)="fe0abde4fca3cd42fe7e7e696473a89af716cbb624be2c8d42ec041e051d62c5540ca78a734fbbbf", 0x28}, {&(0x7f0000000240)="4941a7db72dc9f48691a4c877dbce70b8fad70712fd909d6ca17f160785ef2ad15226f38a9a89e5d824c09d7154e5fa6f0f0b56b7bbf1dbb598db12fd86e198a221c2b66378b5874d671617b6b1b39dba2e17d384bf6b5a3393a7cf854d16662", 0x60}, {&(0x7f00000003c0)="55e3e32c7fc23de3ff0bef74b2357ec5a7791ae2bd6c3594dc2ccf1c3d828faea6cdd7dfb38fa1e8cffbd55d09442f58192c9b190a148ac5779975002b4a2d722ef3b0a131a9e1c78e817ff954fb548bb2f589c4e015cfa12f3fad2a09904385c4775a02ee9e890c6ba13b163bdd903ef1529f6a4eeea3d9c92f75525773bb4a83b05198aa715600ceaf44230b6be4bedd50ef476bf1e80bb73a0bfda7dd56b0e59861dfe4f3d602f31c11b01cc1ac69185c73d66a0266429bd4dc690b2d060c5748a14a6a64a9e129e2607ab71df858df1b259cc64fe80c96d5db3a773e4cfbce91c9", 0xe3}, {&(0x7f00000001c0)="d95cb65ae8ecf6739e6b4de241cd7c71f416427aefda89cdf40ec6d7116335e93d62c80e55074b43eebaa0846051e977c97bfca9990eab2c30286e213363cf", 0x3f}, {&(0x7f00000004c0)="1c01c655b4841f432f958ef12704f1decae830512b3e40818de74bfcaa3954978ac6b2d5a941d0126d2f7d03d92ede0adb5015305e9076239c331ff1aeb79712e66a5f50657a56bd7c023a657b1ab363f6720ec66c4c310441b4dac88abbf9e60f4c017bb399aca45fb15214dbadc475b510c27866e66fc410aaf9577198e01640b2f5e918575e69b5671eee9aecf02635e6eb80080de08ae3f018b3599883e8cb23e0fdfff8650a3455525e2f660776232860dee41c91a1f3d632f052eb0e1599d8c2e0597c5caec1229d702c838e951c790d4936371a79dd2982893696be7c94fe61fa69363d663da0e1e82e4cda9eda", 0xf1}, {&(0x7f0000000340)="1d6d", 0x2}, {&(0x7f00000005c0)="4822bed43581a1914b083ffe9be29ca32d3fefbd5cde0fc98a1b5077d0af867bbaed02c899656d4ae5220bf40dbc78cd839cef35e4b64ceb5c2c14c3072426f5505bfcc61711de15cac4c765dd551d9cb716dd5ee44b743eb6879dd3f528fc8a54e2eef4", 0x64}, {&(0x7f0000000640)="5ecbcf170b9ca44b30ddcde4dd14807080854d2dc6e10bdb98105384bebc7553f635091774ba7221ba996ed96d403a0f55edddfe7a5cdd23e10f690c8d24f85bc871fc265e994cd1dd835a66a1fc724d1741753771bb42e8ba85eefcd08567d626674b6c4ac8da6ef2e21e9de23bf7c54fa4d669bdaf2d414722018264038582b22e", 0x82}], 0x8}, 0x0, 0x20018000, 0x1, {0x0, r9}}, 0x4) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x11}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080), 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001c00010000000000001f0100002b001500000000000000000000000091a4d4ac6be708985168259d77eadd106d1998dbadb1d9eb4b420f60fe"], 0x20}}, 0x0) [ 671.659770][T14872] device Y­4`Ò˜ entered promiscuous mode [ 671.673047][T14870] device Y­4`Ò˜ left promiscuous mode [ 671.679881][T14872] device Y­4`Ò˜ entered promiscuous mode [ 671.694738][T14870] device Y­4`Ò˜ left promiscuous mode 18:00:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x21b}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:28 executing program 3: r0 = syz_io_uring_complete(0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x0) 18:00:28 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) syz_io_uring_setup(0x7a47, &(0x7f0000000000)={0x0, 0x55f7, 0x20, 0x3, 0x1be, 0x0, r0}, &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000140)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x10000000) [ 671.772133][ C1] sd 0:0:1:0: tag#2153 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 671.781999][ C1] sd 0:0:1:0: tag#2153 CDB: opcode=0xe5 (vendor) [ 671.788336][ C1] sd 0:0:1:0: tag#2153 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 671.797402][ C1] sd 0:0:1:0: tag#2153 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 671.806442][ C1] sd 0:0:1:0: tag#2153 CDB[20]: ba 18:00:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x300}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:28 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000000)={0x55, 0x6, 0x7, {0x0, 0xd0c3}, {0x200, 0x97}, @const={0x0, {0x7fff, 0x6efb, 0x5, 0x8001}}}) 18:00:28 executing program 3: r0 = dup(0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}}, 0x4000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x0) 18:00:28 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$int_out(r1, 0x800080804526, 0x0) 18:00:28 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_setup(0x34, &(0x7f0000000000)={0x0, 0xb5a4, 0x3, 0x2, 0x284, 0x0, r0}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)) syz_io_uring_setup(0x49c5, &(0x7f0000000180)={0x0, 0x9427, 0x8, 0x2, 0x3b6, 0x0, r0}, &(0x7f0000eec000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x0) r9 = syz_io_uring_setup(0x15e6, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000400)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_setup(0x7d67, &(0x7f0000000440)={0x0, 0xdde6, 0x4, 0x3, 0x10b, 0x0, r9}, &(0x7f0000ea9000/0x4000)=nil, &(0x7f0000c1e000/0x3000)=nil, &(0x7f00000003c0), &(0x7f00000004c0)) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r10}}, 0x9) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd=r6, 0x10001, 0x0, 0xffe00000, 0x5, 0x0, {0x0, r10}}, 0x5) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x500}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:29 executing program 1: r0 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000038c) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000540)='comm\x00') sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x15c, r2, 0x6cf216ffee9d94c0, 0x70bd27, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffffffff}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xe187}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4c2c}, {0x6, 0x11, 0xfff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2d4}, {0x6, 0x11, 0x8800}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x9}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x8000038c) sendmsg$DEVLINK_CMD_SB_POOL_SET(r6, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x144, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x800}, {0x8, 0x13, 0x100}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x488a}, {0x8, 0x13, 0xaf}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3f}, {0x6, 0x11, 0x5bd}, {0x8, 0x13, 0x401}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xcd45}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0xdf}, {0x5, 0x14, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x400c002}, 0x10) ioctl$int_out(r4, 0x800080804524, &(0x7f0000000180)) [ 672.004939][T14911] __nla_validate_parse: 18 callbacks suppressed [ 672.004954][T14911] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001c00000300000000000000002b7dff15000000006ab93728cffd9072d483b64fe81bdd9bb3ab292b7b5b8cd399b3c5cd09169d434048acf81deedf517f403c8dfc4739e08b7d681e8b12317991054c3df6a83151255e7f6c89f27388b0153a105bdf99bb5f29097e696d443e47bc45c5b197668543b43b75421eee6b13620d787da7abd3b1256e40196681"], 0x20}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/llc/core\x00') sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000e0601010000000000ae8b570000001200000705000100070019000900020073797a310000000005000100070000000500050007000000090002007379006601d535ccae7b6e7a3000000000090002cdf6d28944d3953300d8d23b62da5a140e09"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x8) 18:00:29 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = dup3(r0, r0, 0x80000) io_uring_enter(r3, 0x6f0f, 0x4352, 0x3, &(0x7f0000000040)={[0x100]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ee9000/0x1000)=nil, 0x1000}, 0xfffffffc) syz_io_uring_submit(r6, r7, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r5, 0x10000000) syz_io_uring_submit(r6, r8, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x20000000}, 0x1) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x2, 0x1, {0x0, r9, r0}}, 0x1f) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x100000d, 0x110, r0, 0x8000000) syz_io_uring_submit(r10, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x101) 18:00:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x600}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 672.080386][ C0] sd 0:0:1:0: tag#2169 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 672.090249][ C0] sd 0:0:1:0: tag#2169 CDB: opcode=0xe5 (vendor) [ 672.096603][ C0] sd 0:0:1:0: tag#2169 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 672.105683][ C0] sd 0:0:1:0: tag#2169 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 672.114725][ C0] sd 0:0:1:0: tag#2169 CDB[20]: ba 18:00:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x700}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:29 executing program 3: fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r1, r3, 0xee00) r4 = gettid() r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000440)=0xc) fchown(r5, r7, 0x0) stat(&(0x7f0000008a80)='./file0\x00', &(0x7f0000008ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000008b40), 0x0, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r10, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) r11 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r11, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) r12 = syz_mount_image$vfat(&(0x7f0000008b80), &(0x7f0000008bc0)='./file0\x00', 0x0, 0xa, &(0x7f000000b000)=[{&(0x7f0000008c00)="8503e54b6f664f3832a7cd6e77eb79a0c7", 0x11, 0x401}, {&(0x7f0000008c40)="f689f9c51c42145f02442dae9e3fe42dcc317b6e7e1b9337c4923ba550804aded790e5971b17bb505b18b76a898cc34871b235673de3e5e2d2eb7dfa3fb450ae5ab074826ceb3b4f93ea24d309748910397722048ad83bf71dfa859fe851b471dea06f454945fefbb7cc3bcab3a2f14fcf52d9580261c3e32904369a51002940", 0x80, 0xfffffffffffff1fd}, {&(0x7f0000008cc0)="5695c92d52db8df42627dfef3e73dc0d7a838ddb5822737befa96964da29561f00344c5558b3bca68735be134e1a0d5204576a62ea39013dfc4391ca97681780c9ce33b7872cc3383fed740a77e1b4947c929e15105b0737fd19", 0x5a, 0x9}, {&(0x7f0000008d40)="8a7e", 0x2, 0x8}, {&(0x7f0000008d80)="412972b1de7a4a57c3266d184966d84da54b0de0fc052a320957d97e373ba505f95327d1138d980d797d42ef2712c5f0ebdb6b9deeda717c95226c9c84224d20775603a04708c4547d66678dd2c273287569", 0x52, 0xb65}, {&(0x7f0000008e00)="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", 0x1000, 0x1}, {&(0x7f0000009e00)="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", 0x1000, 0x100}, {&(0x7f000000ae00)="a0733bd96680f3dd892aa82a61435c0fda2da7cb58503c13426708fe28d4d468c07a7fcd46d3d22f7bfbe51b58c0990324f466475097df0f6a71143fac5d9206012a49e162f8e8652f52371b007ed35f1c363028c08de0ba9ab49046891af6469052dfd8598b52bb42586748a2d5b64213db28a6f192517823fed6f924d829fd6c078e1dcb26a326fbaa2c55ccd7a05b4571d8138b3298f64b6522b13e80d51c8dd5cfdd8bc935a8df29ca2452c4252a469178c8462f272a260d95f35b39e22ed20f4bd032aee7117f895a315207140945d8cec6dc1af382572a3b", 0xdb, 0xffffffffffff7fff}, {&(0x7f000000af00), 0x0, 0x8ef}, {&(0x7f000000af40)="de03b7851716949fccb494a97196bb4be49a7433611b6c92191f979bbb6129d1db475815ada9411bcba5fcff0257fdd5a04c0afbc04027b4d07a310e02c08865d106df7a58531eeb106bc7fe124794d59e35a32840682598f9734ae7ab8bcef970f2d8245447926b6561c98f7a1163277dfc1cf3cf5a48aa6b33d6893a34c8ba7a271ff76d0e54f66bdb6f2de87440f23d9d57ae1519f8f141960792410b9bcb848787", 0xa3, 0x3ff}], 0x801800, &(0x7f000000b100)={[{@shortname_winnt}, {@rodir}], [{@fowner_gt={'fowner>', r0}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fowner_gt={'fowner>', r2}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@pcr={'pcr', 0x3d, 0x32}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0x1d}}, {@smackfsroot={'smackfsroot', 0x3d, '^'}}]}) r13 = syz_open_dev$char_usb(0xc, 0xb4, 0x7ff) r14 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f000000b200), 0x80800) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b340)=[{{&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000280)="479c42be9d26e1a5beac5b64260639d9ec7d6116b6c7df9f23cc4361c36fe0ce7473a2351a658dd3fb2a0375ab3b19c8c6735aed89ce71514c7a304133ed30d62e8530f4d7f3a404467e5f0caab8e26fba231737259e7be4113ca8fc39894ddcc1ae57ac81a4cff3a330a83435ad2eb81b8153bec2f2c944610fa148b66c36a970db44264823d134f58ef4e3d5d38f0d53630bf4eace42e856d1572385cc5c843da9c48869efc135e57e6b7c526a3296ddb9141fcb0a97e9033769a6ed334ddb15a416ec4eead1c2fec6dd7ea21be37f25155d5b2f10594db971fb563c9045329a2526bdf7f4ba942cf1a5458b17659403db5a35fea74e49154491839c71", 0xfe}, {&(0x7f0000000380)="bdad11893738a690dce3f8a1f5e3c50006988c29b886ceb3e25fd95cb768e8bfb700ea609939e1b7f59c8df42449c14f9a0b5edf7314286d35030d85c4774d3384b57f931fb170ebe19edc64480a9ae943059372f39b83616e90b0319dbe6b691c6f2ea2e8accca42ba588cf28b2e06f6f41e2944126a706", 0x78}, {&(0x7f0000000440)="0e375821df260d8cf8a28e6afc44c19377ad00f657f204d8b5692e6ab0497395529413e6bacfba8448f5266ceb1e48290168018496841ad6e692833f11f724c54d784a4de77cc2de989fbd5781db4417569181bbc85dea9a33ce3d00aafc62e67e1ca8f81e447e41e919bbc70af6a4471549e6dd166aef6c56a4fc7ae4b943df29e192daf1cda5ab352e", 0x8a}, {&(0x7f0000000500)="b388dc520eff7744bdb5cf39a79a07950f832b51b489eff0781e2cb07ab4d03d619c844274be784c82ccce36fe1fbc4cbfd65b56014a0d66c0196911f159f71616a7cabc4ec6676092ac7a61cf3e1318cd7ce2eb884751362b02a3ba54995a30bcd2b6b76a76abe8cb3325f58287cf98e78d68f7b0f7275312a55b48211522", 0x7f}, {&(0x7f0000000580)="8ac527001f953a13975a69f3dae52d85f580a7832f7b88e6dbcb5a6e75e810561e4e3403cd0ad107df22c3d937a9941a82b34f45c232ee309b7bb685276fb92b59727c3165ce3a3a85d062e41e662323fa848c3af2970c8433bd0502328f9edf37b90d29fc5b2a3968102b0212996219291472ce2387dbf3595c17d9e2f95035964a5b786f9405ec71b5cc1835dee9597510a0ea141c5aa903b90a6a98cd738d26473434af054ed44e3d09c76e4238b7d81587a6589d7340c3c2f1934cadf20462", 0xc1}, {&(0x7f0000000680)="4de8c0f517105f3b6e3ca899443c358f3f250da435b29975ceeffbc61dd7ce4d4857ceb72b5c40224c3c90962f6e1f533563e8b594bf2f643ec53475818d407146c15f7084ce5d4a8257d417464f3d7534a34bb9a6b70cdadfbb8309e93e8b426c72811c59cf66ddcfe378c187bb0d9f6dea7900a9c8ce907d634e1ceaaa662fb43274d0c5dca15d8b734f443a91cb9e108cdcc63327", 0x96}, {&(0x7f0000000740)="6228b69aa8848392e49be43a9dec6fb37c033431cbccf4e4cc16ae815e3698ed30e18c1b9215f665a7a1b1daebe056ead91d15830e94a960eb57e38511722499112300b007925cb27207f5ddd2f70b15952f590b42ef2d53f48390be68f8d1d164e780cd21fb65bdc38de09667bf6b7706f1d12e430496871b8e6b2b464306bb22c585ec523badd4fcdadcdddd4da10bdd732717d261be3ec076fb68a510115faed814d9a32c98a0b82fb6eb92dfebb0fe9c8fcb83d74ed806dac8827628556198ff9fd49515a5d5c650c61a76f520f2ac3765f57185dc78987424d6ad68c10e", 0xe0}, {}], 0x8, &(0x7f0000000d00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60, 0x200000c0}}, {{&(0x7f0000000d80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000e00)="2b6cb512b680482458828a27e5d7b084e1a2b6f71daff5ba63b46e37de2949b393f1e3aacd091815eb4527bc4b5a26cb", 0x30}], 0x1, &(0x7f0000006680)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2}}}, @cred={{0xffffffffffffff4b, 0x1, 0x2, {0x0, r2, r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r0}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r1}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r2}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r0, r3}}}], 0x118, 0x801}}, {{&(0x7f00000067c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000006dc0)=[{&(0x7f0000006840)="e19791c24545ed18c70ed703e4cf4a9c6581528ab656b3faba08fc9de6a37ecee3f9963e51cfc04007b01b6e5a041ab3767cd9fe92ca357f67dc532211f58ec1792722bdaa641b985c8a2f3dc26d33b9ad959792cfc2cd54cc21d16e713beed4d6590ddab340ab979bf8a6faff065ae94d9f7669a9bb3834c092bcaac9a779ef886fce4d901eaeb1bc042cdedb6a1490a13789100c953a494f74cc96c8f4481f94e000a321f05fac0e71a92bf6729765e7ec2053e76dc27fef78c8a894fe3ec8424ff53bab38306b0c47de6ab9b223e5030db5908e03fda935380183c9aa7f38fbc28fcb09a46e926c43fd372a9d6a3d1995983a6def88", 0xf7}, {&(0x7f0000006940)="aab05e5c0d0c0c2bbc51ec170c28a27c55b18b302eea8c7cd2822158dcf47d10d4343aefdf5248c8f7252991db032c97249f62dda117969968c1914eda5535a422d3e1f4cd3be2425d6662ecf8f76f077ee19ee1513bf781d05b81a36c2630775e9aeda02c81e0a07b1b3d5a327760356d410cae2fa424f7c51a256269ce0e240b8f628db7741497ef049b4683992b3d7f3990705483734ae752eb1400ac4eb5914649f5ebaf2741f32bbf039d87db88a2163fadb660d468e5ec0c6e454b4f507c78b5f4929a72c6074dd57d90cc669ba13b82364c0696516f587d0714ae77", 0xdf}, {&(0x7f0000006a40)="be4384ca0bc124fff49b5ed70c27328252d243fbd4bebdd59b0abab1f3c5d1f122a57447d22beafb57d519ad0d230242d2470812e350b1475ee9657e08672f837cb3f5815a0c4f42f67a9512f7768fde73f24d33ae10de188c6b3dea2ea61ff9b0957ccf9dea556d6c285d6548722b6b867ff98c5e491b4f844e618136aa1172dca4d933d2894316a16ebc3435077a4269373d9102322a3272f054ed805cd354e48b7d129dbb", 0xa6}, {&(0x7f0000006b00)="e5a2717e2a9265937d412df0ee9681cfd0c5eb767f5f902e1e31cdaa960792b707ad5c367ef353b37daf9944bfd4c2ee8c576aa9adf713512e828db9e142982cb706e043f54b7c7e0fdee03ae830b1080db1505e22456ae3fb25d575659eff772cb9d0b2a3930010d3d4260295d131952fe5ad4bd9bdfb769bf2d8dbd562dfc6fbb6c9229cf1c864ba0a5c34f27fd1681a550826d6cc9740110f4b61d98c5c7f8f5571c6e7d1e8359f98f98f0f9cde46f324ca4af9fa5989f22a48f63ddbe7bcfbfeaa2d2bdd49961ad395643625c35cf4ec8645f22289c8948b05b81a9a0767907704fd8c5b9ca20b8e", 0xea}, {&(0x7f0000006c00)="0c656e7d633944093cb532498a8659fa5854c34df48185a4fc353185a213ac067dc765c53ad815a0fd745961b8236f4d54f86ec7c735f2f561fd728059294e7af28836232eddd49518e0f4dffe8f39c0da121d2004b8a016ee04c280d2a7857ffc67fa958614044f84ad093684f37729edccf88ca6dd8ede5bd6db377f991f5db88a1377d8078644e9dcf5fc82fb67f6c1913432b7c035edeffda82dfbc640c1c16e4d0b47", 0xa5}, {&(0x7f0000006cc0)}, {&(0x7f0000006d00)="f6547c233c3f544ff9e6bba3c7114ecd8d18a69cd0310a64943dcc27eb8d902cb96aa4bab30f917aa4ca30f17d7b4c2bccedff07b31276f277acf170ff1d00ef0b62a5c14f317c9875a2faaa4835f5d1d0a76f556962f9f1cc0f806b2d0fd74f988ce971ffe802e003905ab0d4e8afa77f7d38963812e5c001372327a59daccbad5540fe0273e9f0c32a834a410c84f352ed166d8b9dd847d049fedf04673da24bb32cb3929194f6f25763e54ed88218317100c264f24c02720d841573", 0xbd}], 0x7, 0x0, 0x0, 0x20000}}, {{0x0, 0x0, &(0x7f0000008200)=[{&(0x7f0000006e40)="3f97b4182b", 0x5}, {&(0x7f0000006e80)="e10eabbc9cbe771d5ced6f8af40d04293027f06f92c0d40f8579979d59a495c6bb3cb9af1d8c9d606d2d01402b2abab5a78359ed2654ec8bfb651b93b69bd68e6553ee4861004a45dde932f44af3638e0b3bd0a8361d64f070baec9d6300df6d3a8ce4a4c05f51160aae78f2e81da4c9d46992d8", 0x74}, {&(0x7f0000000a00)="ce8d62c882bafa67969740219a97ee7ec9d076df7606e11c0948e2c6e289463ed6673d154477e8911bf90edd2ef604cedb54aa2d71a2d2c873757120cfe0beab65340e9f2deaff4315c6ded2dc1c3df7a1c338a9bcd3e0e5c6fec9596e42907168008f505d0ccb857564773b2ea6b71b19bf3437c2306b47c34a11526e9ef52ec45f0b332ef320a4a649bf48f6c17b7cf26eb070913580c4669c7e84abe930a7009ee2d5e1e6e47081978b61cbe504e934ca20f65ee16f9bf006eaaa979ec34667ac83cc7b5868b6", 0x41}, {&(0x7f0000006f80)="34c69e43b97724c5d0dedd4970766dcad4197f57a63107930469bed4478a3ba1094831b162d2bff7ff125a2b9c6d22040acba3b7cbfa1bb8b59af7f3922811a99c5832534076df83fcac88751ca63c0c0e79e36ed3c235061a8464f36a12beeae10a4e3653a422af2692c09ea8a49e5a8b7d5834ce86964ed6d022443e775b31c4c1fed23f35a3eb5483ad69f0da801325c93a8e4eb8531fe6d508ded82339bf0d2bc98d83ebc4c5e3200f25ea345a97e19ae5fc4763fb1d19d777208703f9ab2120e3e4e58a95d8e0e4b9ae5b6ea20985790f778ad2d79470937da92290e2c4ad041e87b8da7aec2a76c61365c1", 0xee}, {&(0x7f0000007080)="fde18c4ccf089f58d2c035bf58d0f7593e90d1d02788e812468cb01c656d05de3f29430408a9a05e4581d7f3b8ac629ca5c0eead0f940184d0793f40749912f0a1d41a2262bac1d703a2b5dc7055d1ac8a49db4d030d0079b6d21a1a37c6be744aad725242eac974c0d60bc05db3c1006167fadb5f5f0e4eeacd62d36e79fb8d2dbd7be9e535b6a619ea2383f77d2073bdee58f73379e35148dea759b1e22ec003556f34fbcc8a39f289b2a8888f983e6f2daf705c640fbca44c253bc593c3b41a30f2bdaadc3357a4f41fab64ccf7f0862facb8831cab3ba575d88db4053ad74cda998c68e483ff34d045aac18935bf204f9ddcdec020f671ddc3870cc3d70ea168ac93f4aa222348dbb7831fae923142dc4ec6d8b4ad5fb724d63f6ed0c3df77e359a53aba615abb875b3e7e2defc0d9a6bfdb452a43384cc44ba86a9822697dc1c93790d6768acb0f4fa67d8ade89d933f013303fe8b7dbd17d09869ec7747e53bc51be23dce0386237692026fb85128d67ea7608baa8510a46822d2888da7fb90d2ce3f264780cbe15ed0e108343bede204da9dd35c800458790a6fb88ec1674ba5313ec2e7d483c71d06b5b7f86f25695e5137fc936c168a659e4949e1222de0171a5637e942197b737f9b074cd03518396e05a03c518429cc349bf577448bbfe334ed1f27c5de9b34fe9e6c9fbd61e1ace2f543906ac9dc11f2bd4affffaaf9e5630fea6f5fe4fb6e7c1ccd003d82eeb9858b98e42336dc5ebdeb7902d163f23b2c2f6cd84d7d7abda3819f1e3c25bc8e43b129b46146ae3c9e088b268cf503092b3da9ad7b5f6e6db8b2f452688057aa4b17d00ed51de74119b4bccdb6b657fbf1bd098ba781091d5d97df705045023e4d9a636236de87f9cd626053aae569270931766002928feff2e8fc42e9b6e671dc0e57635f14cff898721012518d80182076bb4386bb521f8e677a71235f1c2be601365e54f6357a99629cfc93465a9d7cfddf3890dcd28040ca694ff791cb961d1b4b16862846b26b1f43da28b7e3b68cb96011cb03cc693416a331563a1b331ac31223b5a0543653217a6cd504552159bba8d2c8f5e4649afc3131e2da91ffbba3fba4b42238a7c7a8480eb33caeb96758b11323752182ab7d5a8175cc3f7a7ce6d3272faaf6560e072f13dbd5ce731c9be11d0165914a4531647d3b86d2d0f52d3d00bb5797ef29e623ee68f34996e4ed3a148c8086294bf2e7c0fb8ba2b5873c8304fde4f4fffa69c5c6ee95df65d9f3b01f1abc827fec9c5e6dee16d32d89ad64fb3c475d1689750f842ef65a5f7f3376f424440f27c1465abda5808eb31c2ef22900ae8bea796adec2666f24381e13df49d4887cc77d091aee2579b501fdf8a854593544f552c948014b886489c53352cbe2777717a363437fb80accbe446015f016137cc6c8fc957498a1df5c61ddbae6b77ccd5aec0b19e9924e52b669464f14e9436b82bde4dd635fc2f1bc55f38d3dce3fa5b842cef52833cb761cbf178512a75d31662ea0f4af1d25bf74678c1ea905cadfe4e46aa6ec75bd82a178603c4bd6ed8793f790216428256c35d0df9c8cf5b6b603fbe6f6616157acdf128dc16d4b58ef4404b4f5b934fdc6ced4e414d07278a2a8819977f1fc9b24231703a82165b8e9108867c2eb62e1200e5b234ad04aaaa505c97dd7780476a095674f324c121b8518dc7e141163fd8c706025aaa9ba19bbe98248db3f07689d71d2818606186c724a39dd6cc5d39e90ce336468aaf6e91537de4f1c21b821fa40981ca6a1d0a2601f89b375a4fd3812fd24ffa39cab7822fb2e436dc8d3b4ddb55da83c1fececf756bd8907ad2ffcdbdfb4388eeff1bbc3ac4d1724d4f52b690ec7910a035604e200c786a91de0177202d62f29401663c6757cc1d24ae92868ca4779bfc45959f123166ed77bf0caeedc5d1132f541cb42228038c2144eca1527d9cc8450bf3e5e7dbc43f5a9ae00011427c3a0f4e27ceb9ab16f366b75647833b5b80b447b68dea0afb0ad53d7bb1e40cf0810b996f7033e51ece4fe6235c2153b98240637e289defbfd5c306b5e0d9572a153cedca834d11bb44f1fad16a303bcf32aa88eaf19b643581fc9c4e6ce676582a090b29aec5ee6984b4adca6bc1a6ba85fa4e243ffaebcedd33b28127179740f10cae5efda3155e4611b258beb3f1c1728b44b37629c660d05d427f7ecebd93ce2109859b4646fd8773d16e4fec9d85c9cd81536b116759518706d69b52e422a5cfc7add1c85741b065128bcd5c662ec2f4f63933a9f6202466afcc874caa7f260774116a4ed3e204879ba43714822ac362c38bd5df0075dac21e740766b1b570a428054e6914ca17c3975142cc02bbcd6484223d30a3ba61e439124e8dfcfc451110f4b5dc31b569d13116a6c86a0fb53f7971e8b0ace73510d13de7b92e4d82519bcede685c5f25ebd88183d2023441eaf27bbec4986017d740d63e587f7d1c3ad2131579b4fcb5a0c64e909e56b1da40659abbb64b6a973ae3bfcb5174db688aa4f9759b92c8465e7b1d8a7d8b8b64b32d67af8b6af79f5d518a20c5b64c6b0e2de0710e4e5413c1d3cb579bf7d6f32fa8d0a93ee41cc9e4acbb7a3322e40f783b13a6e8f6591b6d09267aa4d4ae8cc3daeeaeca648f9b003994ba9fac61688dab7869e58d2dfdb1a2fca8dd272d4024d54386d527635dd787686233580a18c27e7fc599b173c32914d405f3e0c256a60476265be27e5cf5c50e716f2ef550cfcbc18995fcc0df0f77bf9ff20498f98ba6b007e7421e2c28dedf036b9a7e3e095c2e9311b439087afc738f6456f6928d4481b6b92d9cb9bfccd993c64e3c438f11c0346adb8cc7ce2e875a79b4003164f060fd2074bed1f31b77329d8ed8bc73b0d5cda0d519b97d5e3fe01e0af61bcb08cd97655a678c4d145cf6e2a8a1c7517db1b4c146afe8992fbcbb5b94e9f7f4f81e7bd644cf50af0f3fb2cef421dffe59569597a768d076af187d21eda8de5e9d7b0e91b7d48cceef303d12e5c5bb3b21d791c429aba14e58f848ac601fedac4021a22f455e8a3f3121ca6570f54f4aa9708acdd2afd72f45d65500b821d89a15e9912df302fac900b027e91586911e53d63f7d9c92e36e81926bd89ef1e94609fe6a80b621278edcff0c4a722a9f6e9c10ffdaca47a5c8cd16f486955de00294310d94878efb26ef03da401ac79aba9293eaca83445f50100fa696821ca1c8b14ff1d8253c7100e17c155775fa114259a63c2fd5de900309c23f9dac431836e599867a870b2a8bbb45f90e6b8d48b699e636f4c47f5365cf982ef817e98bbacd3c754d225e8629706d153ad8b123c9070e982fd2f96f16fea0dd097fcf614599150ce1023fa3b4357a6af1fc553283581216a05afe3308eb79aec99d4a79e8a3d162fcbbc809f3d878bdfef8cc2d1a8db230f084591f5e0b88bdc23b6425f71a53af6ee99c9384ebc00a77e4c89a14aebcd288860e7003ef7b55fb98a2496c0c02a1a40d38931d033b311839067e94bf72e4f8adb3d2c98a84dc3378b34f75b223e5273e271e2c312f494c91ad205f825acbbe074ab80ffbf4f7ba02706e9f30b8eecd48e03a255f827ed48bd2eb6c8a3ae5ee98044ce8c0816f19f06e85b7f2608d7e4d01066fe20d2dd91beb4d756478aa3ab3908526fe4aa94f05fd1a8d374fa063907d3f203e625f7c355a789d7b02a651dae92cb4b1cbe6c93a0a151429052e0deea4ed8b8d303d6ce23c43121b66b5e1fabbbd01f4169875e818203a50ef777108e64b4864e15c566a659bf6995892a9aba36238af94d452e7f0c02639088875bfd4082f9dbd56b1e31b637f4dafeb57d7b913439c69e1f720c326378fbc4e8a5c13dc60342c8d3ac153de6a439dc6ca4faf86eb154be7923726b3bfb661a22a5738f303ea55ea4d29c7fdf8e63cf0b8d6155764038630026e694736481387bec10113b8c022de0d40948ec27570368b602c4ebbb7cb5a1dc67419f46bf4bb9b0fbf9329e8cdcce1448fdc21c7f23b57c6f3cad385d793c337fcede2a7720d32c8aeb7742ad98bc3179fb7ad20221a24a7f0ce502fe4f8e198d6232aed6cdacb8d4bea0e31c6235bc34c4c6eba663403eb7ea7f64dcdcde9affa7328aba1e13dec24477846ed24040230ceba2187e33cf15b4b1ae092da7340f61f69320fa6b40731cdd3a5c4cead040bbac834d1385b6e2fea06cf7bc7d6814561fc945a90ed967a6e48be065add4d52467e4aa65ca888901bc8dae3f52b843a3c823ba69a829359a25f64d34ae05e64414071e75226837696fe8ba71725b14ebf174c95abd9556a9942240dfe14ca097df5f21b9b0ecd32050234151d76b089009bc4171544c4f34951f6e9e394234409d8674fed684fe1891eadc500449593058e45ad1a797fe420fb03cf242471575b703c7331147c81beb26922948e34853ee8660ff06204e1152ed2aeb983b38443ae65d25a72cfda34aa90a1e013ca48033fcf48e48205f2ed8a037ba6e9d5fc70d8a155dc94ce724b46c3f03d2a011cbd060ac2ea74ba307b8a7c3f0f0fceb8949b6bd860809d34e67e9f8c8e09b7191fe4cd63df26005bbb78370ce7a913c5577c63493c8ba9537b625f567b43f56e8d976ec217658ed3d87fa9363960902031d5dacd504526f59151f3382532d01f8b7a48fa5c12fb8ba534bce259fb4114cd0dc737ec829368ad36ab05051ed7f0400cb240a5f821aa923a2fc250dfca8ff444398be165f34bdf5e9dde7c1abad603bf390a7944a142e473739712290c938cebcb3566f08ed648248133d1928eb98da483c431f31690397ed44730d422c247b4599d9b508e539dcdf92dcb80f7cc79aea2206d693263031c775c8324a3a76acb320aa0aa75cfc67362963edee5c3de174aae87a54385e7761f4eb454c9b9cade2924e691648880ab6f7520a8e6f2e2810746a3eecb87431844c3e851550488d94a0166cba5a852094505f697a486ee021e448729b0f0ccc24f845b7e74c429ae1e51fe09c0daeeb81184a97a57b08964e580825877f3c93716c2e5293d8be7bf4b8055ca41e69274b083b8db40a2116167582483fc01b16b3d06e352701d6f8bb30fe92e883c726c1d25edd41906112febd30d74be95ab4331e7bfda7ffb1675a68c31fcbb3740701b8bbdc478cbabd880770ebb5b28196c3280489b9b0bae80bf1fd2ff261c936e94f2bee05e235e0bcb6ee15f44d7a494b7dcc1eec400a5e0fe8f88bc4bbb81b1e278a018b8a836af784c83208f96cbca4286bbb03641331b8a7cc3042601385099b3dce8d908a130ed1987ea737ab6535929f8d42c2aa0475361b973c90032d3b924d6b29a584358222f836cbd93325585eceecb93145e8f58fad9569cfc368fb28cae5c9b32cb337108c5b8393c646bf821937832eb4bf53c4501208c5e7169c3a4cc9d435c6fb5222ba75626fd5ec981982dcba0981f74aba4e4cdd7786310c2b84ad9c0feb5dd4dca74780160bb1ca357857df54bdcecfd3b19336a50e79f7b571990fa0a755f6f029e2c88606cfc527586fed945d8720f6df9a224085ec472379e1f8cdc1861c16518f3a9b956c230e4d1886f53679797add3d4aa2336427233f77cc5c7c0dfeb77d429ff2f2ff548f4a2acab449302e5df3c12f6d8ba4dfe13194969c3e5b7dfbc6fd99460800d97c988ffab20bdfacd886a163e1148b08025a9f0a1a5d94367c1cbebd6cd1daa303c497a5a05247562c3daf93c840695ecc3cad48e722ca93ee09f1cdb837256de", 0x1000}, {&(0x7f0000008080)="156510f558579a2a41bae7d4e019c97a6a156c533be034cda7d076b52cacf621a1cc36b9b789f64cfe7806a3ce772fd1528e9a3db833cd94bea33ab2941d37be9ee9add32f4cd33552f019cda04dd1dc2e7fafc16d809390263487fd616180561be1cac1dfc5cde0121ad51c800b50c7a1eaa740cb34f0", 0x77}, {&(0x7f0000008100)="749bcb558a0f3dfb68cb70aa93a1301c2574e71db9eb8e8183536aa421916a55666829320e7777db3c666b1c748f613fa04b8005b91a78561d1479f39b983b1044eccd46afb5541844a5d6b2bb95f627ce14ff56a9e722092c8969afe8aeede2a5ff8c41136df14686d7d3f07e16a7587eff22d155012291b49cc2e6e3698f074e491ba7740015c28db62502e4c51e14d30b0abb4fba80b796fe0fe0420ea4f70e41fdd9edf6a40a5dc0b5f554fdcddaa430da025f907ae42458e83af6b4df31ce8c90bd43c2e6b01ef33892896990f533ec3f427a", 0xd5}], 0x7, &(0x7f00000008c0)=[@cred={{0xfffffffffffffe6e, 0x1, 0x2, {0xffffffffffffffff, r0, r3}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [r13, 0xffffffffffffffff, r6, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, r7, r8}}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r10, r11]}}, @rights={{0x2c, 0x1, 0x1, [r12, 0xffffffffffffffff, r13, 0xffffffffffffffff, r14, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100, 0x4000001}}], 0x4, 0x40001) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001c00010000000000000000002b0c0015a241b67a0000000000000000"], 0x20}}, 0x0) 18:00:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) write$evdev(r1, &(0x7f0000000000)=[{{0x0, 0xea60}, 0x0, 0xd3a, 0x3}, {{}, 0x1f, 0xa1, 0x4}], 0x30) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:29 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f00006d5000/0x1000)=nil, 0x1000, 0x0, 0x50, r0, 0x10000000) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) r5 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x0) r8 = syz_io_uring_setup(0x15e6, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000400)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r9}}, 0x9) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x1, &(0x7f0000000000)=[r0, r4], 0x2, 0x0, 0x1, {0x0, r9}}, 0x2) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) r10 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ee9000/0x1000)=nil, 0x1000}, 0xfffffffc) syz_io_uring_submit(r11, r12, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r13 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r10, 0x10000000) syz_io_uring_submit(r11, r13, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x20000000}, 0x1) syz_io_uring_submit(r11, r13, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r13, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd=r5, 0x4, 0x0, 0x6, 0x0, 0x1, {0x0, r9}}, 0x8) 18:00:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x900}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:29 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_setup(0x64bd, &(0x7f0000000040)={0x0, 0x4c7, 0x20, 0x0, 0xa7}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ee9000/0x1000)=nil, 0x1000}, 0xfffffffc) r4 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000038c) faccessat2(r5, &(0x7f0000000240)='./file0\x00', 0x28, 0x1200) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f00000013c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x0, 0x1, 0x4, 0x0, {0xa, 0x4e24, 0x8000000, @private1, 0x4}}}, 0x80) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x3) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000000)=0x4) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(0xffffffffffffffff, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0xa00}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="20fcfffffffffffffffaffffff00"/30], 0x20}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x200000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@remote}}]}, 0x154}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=@newae={0x2f4, 0x1e, 0x1, 0x70bd2d, 0x25dfdbfd, {{@in=@multicast2, 0x4d6, 0x0, 0x6c}, @in6=@remote, 0x7f, 0x3506}, [@policy={0xac, 0x7, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@empty, 0x4e20, 0x9, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x1d}, {0x0, 0xffffffffffffaa8e, 0x1ff, 0x101, 0x9, 0xee, 0x8, 0xa7}, {0x4, 0x8, 0x5, 0x1}, 0x1f, 0x4, 0x2, 0x0, 0x1, 0x3}}, @replay_thresh={0x8, 0xb, 0x5}, @migrate={0x134, 0x11, [{@in=@remote, @in=@local, @in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3c, 0xf1ff44e6bc95ccc5, 0x0, 0x3506, 0xa, 0xa}, {@in6=@private1, @in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0xc}, @in=@private=0xa010102, 0x2b, 0x3, 0x0, 0x3503, 0xa, 0xa}, {@in6=@mcast2, @in6=@private2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0xff, 0x2, 0x0, 0x3502, 0x2, 0x2}, {@in=@remote, @in6=@local, @in=@loopback, @in6=@local, 0xff, 0x1, 0x0, 0x3506, 0xa, 0xa}]}, @algo_auth_trunc={0xc9, 0x14, {{'sha224-generic\x00'}, 0x3e8, 0x0, "280cc4b3565d02196d5700cd3b5cea537f2f6ed152b8013dcf4f2ddf5b30fc238d4f2eb0c12ba72fab3577cd3faf735f3ce74ca6291bdbfc7097a4faedd869b063a306b4da2d3a5d861a110cb73c103e368dcd7fc90b0f7106f3315148cab08d4a04d067fa1a00c9c919bd20b76bdaf8d0b50664ed109f4689c4c61d97"}}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 18:00:29 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000038c) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x20000000}, 0x1) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x2}, 0x8) r8 = syz_io_uring_setup(0x15e6, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000400)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r9}}, 0x9) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x7fffffff, 0x2, &(0x7f0000000240)="e3e493df3c41419d30ab291c3f23dac61431335a9d4dd37535d988", 0x80000001, 0x0, 0x1, {0x3, r9}}, 0x5) io_uring_enter(r4, 0x2343, 0xb4ce, 0x2, &(0x7f0000000000)={[0x26]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x2010, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x3}, 0x0) syz_io_uring_setup(0x3457, &(0x7f0000000140)={0x0, 0x5c79, 0x1, 0x1, 0x1be}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ee9000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000001c0)) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r10, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) [ 672.370942][T14948] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x800000, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x20) 18:00:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0xb00}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0) socketpair(0x9, 0xa, 0x7, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6e}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x880) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000440)=0xc) fchown(r3, r5, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0xd4, 0xfff, 0x13, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7, 0x8040, 0x1000, 0x7881}}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@mcast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@initdev}}, &(0x7f00000004c0)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000500)=@newpolicy={0x3b0, 0x13, 0x200, 0x70bd2c, 0x25dfdbfb, {{@in=@rand_addr=0x64010101, @in6=@mcast1, 0x4e20, 0x24f, 0x4e22, 0x0, 0x2, 0x0, 0x90, 0x5c, 0x0, r5}, {0x0, 0x0, 0xa02, 0x5, 0x1, 0x0, 0x40, 0xfffffffffffff800}, {0xffffffffffffffe0, 0x0, 0xff, 0xf36f}, 0x5, 0x6e6bba, 0x1, 0x1, 0x2}, [@replay_val={0x10, 0xa, {0x70bd2c, 0x70bd25, 0x3}}, @address_filter={0x28, 0x1a, {@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2, 0x80, 0x7}}, @algo_aead={0x64, 0x12, {{'rfc4106-gcm-aesni\x00'}, 0xc0, 0xc0, "bf22ba22b7cd78f39de5999d892d918143a1c4c5ce9977c9"}}, @algo_aead={0xcc, 0x12, {{'aegis256-generic\x00'}, 0x400, 0x180, "e52e9de119029e413292d9f6b7bb00ad9da629f5b6a6dcd87559f9146ec6cd13aca5bf7b509016f9da40d2a0a7d0825e0cf4e5b152389f653701650dda7721fbebbce8d8e9d432b84d309a32f9d08c5aade30c52ab901aba787ab450c3bed9ceff043f37216be5ac553309c5603b6ed8e28f70bed1f939bb6b2238b39f65f066"}}, @sa={0xe4, 0x6, {{@in6=@loopback, @in=@rand_addr=0x64010100, 0x4e24, 0x0, 0x4e24, 0x401, 0x2, 0xa0, 0xa0, 0x4, 0x0, 0xffffffffffffffff}, {@in=@loopback, 0x4d5, 0x3c}, @in=@private=0xa010100, {0x2a5f, 0x5e, 0xffffffffffffff01, 0x1, 0xd254, 0x5, 0x87d}, {0x100, 0x5, 0x1c23, 0x2}, {0xba93, 0xffffffff, 0x40}, 0x70bd2a, 0x3503, 0xa, 0x2, 0x8, 0x1}}, @policy={0xac, 0x7, {{@in=@loopback, @in6=@mcast1, 0x4e21, 0x3, 0x4e21, 0x9, 0x0, 0x20, 0x80, 0x4, r6, r7}, {0xfa6, 0x3, 0x1bad, 0xf23, 0x7, 0x2, 0x9, 0xffffffffffffff80}, {0x8001, 0x3, 0x9, 0x7f}, 0x9, 0x6e6bb8, 0x1, 0x1, 0x0, 0x2}}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x2004c001}, 0x51) 18:00:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) dup2(r0, r1) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) [ 672.453553][ C1] sd 0:0:1:0: tag#2119 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 672.463423][ C1] sd 0:0:1:0: tag#2119 CDB: opcode=0xe5 (vendor) [ 672.469760][ C1] sd 0:0:1:0: tag#2119 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 672.478871][ C1] sd 0:0:1:0: tag#2119 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 672.487923][ C1] sd 0:0:1:0: tag#2119 CDB[20]: ba [ 672.513940][T14969] ================================================================== [ 672.522050][T14969] BUG: KCSAN: data-race in __ext4_update_other_inode_time / writeback_single_inode [ 672.531347][T14969] [ 672.533677][T14969] write to 0xffff888133d74660 of 8 bytes by task 14968 on cpu 1: [ 672.541732][T14969] writeback_single_inode+0x148/0x3e0 [ 672.547120][T14969] sync_inode_metadata+0x57/0x80 [ 672.552066][T14969] ext4_sync_file+0x359/0x670 [ 672.556747][T14969] vfs_fsync_range+0x107/0x120 [ 672.561520][T14969] iomap_dio_complete+0x2d5/0x3c0 [ 672.566550][T14969] iomap_dio_rw+0x4e/0x70 [ 672.570889][T14969] ext4_file_write_iter+0xaa9/0x11f0 [ 672.576185][T14969] do_iter_readv_writev+0x2de/0x380 [ 672.581395][T14969] do_iter_write+0x192/0x5c0 [ 672.585994][T14969] vfs_iter_write+0x4c/0x70 [ 672.590500][T14969] iter_file_splice_write+0x43a/0x790 [ 672.595961][T14969] direct_splice_actor+0x80/0xa0 [ 672.600991][T14969] splice_direct_to_actor+0x345/0x650 [ 672.606367][T14969] do_splice_direct+0x106/0x190 [ 672.611216][T14969] do_sendfile+0x63e/0xbb0 [ 672.615646][T14969] __x64_sys_sendfile64+0x102/0x140 [ 672.620844][T14969] do_syscall_64+0x44/0xa0 [ 672.625262][T14969] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 672.631162][T14969] [ 672.633474][T14969] read to 0xffff888133d74660 of 8 bytes by task 14969 on cpu 0: [ 672.641093][T14969] __ext4_update_other_inode_time+0x48/0x5c0 [ 672.647074][T14969] ext4_mark_iloc_dirty+0x1286/0x1700 [ 672.652543][T14969] __ext4_mark_inode_dirty+0x4ec/0x5c0 [ 672.658012][T14969] ext4_ext_tree_init+0x94/0xa0 [ 672.662884][T14969] __ext4_new_inode+0x2a4d/0x2fd0 [ 672.667914][T14969] ext4_symlink+0x2cc/0x700 [ 672.672428][T14969] vfs_symlink+0x23f/0x350 [ 672.676856][T14969] do_symlinkat+0x104/0x380 [ 672.681369][T14969] __x64_sys_symlink+0x52/0x60 [ 672.686149][T14969] do_syscall_64+0x44/0xa0 [ 672.690586][T14969] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 672.696496][T14969] [ 672.698819][T14969] value changed: 0x0000000000000007 -> 0x0000000000000080 [ 672.705926][T14969] [ 672.708253][T14969] Reported by Kernel Concurrency Sanitizer on: [ 672.714398][T14969] CPU: 0 PID: 14969 Comm: syz-executor.4 Not tainted 5.15.0-rc2-syzkaller #0 [ 672.723158][T14969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 672.733295][T14969] ================================================================== 18:00:29 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:29 executing program 0: r0 = eventfd(0xfffffffa) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000040)=0x4) read$eventfd(r0, &(0x7f0000000080), 0x8) r1 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4007, @fd_index=0x8, 0x80000001, 0x5b3, 0xa67, 0x8ba3173dc42c7aaa, 0x1, {0x1}}, 0x8) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x0) r6 = syz_io_uring_setup(0x6653, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x3}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000400)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r8}}, 0x9) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000038c) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r7, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5, 0x0, 0xffffffffffffffff, 0x0, r10, 0x2, 0x0, 0x1, {0x0, r8}}, 0x7e) getsockopt$inet6_int(r9, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r9, 0x0, 0x0, 0x0, 0x40, 0x0, {0x0, r8}}, 0xa) io_uring_enter(r1, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug', 0x20000, 0x180) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@getspdinfo={0x14, 0x25, 0x58bf12cdd21c4485, 0x70bd27, 0x25dfdbfe, 0x520, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4805) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000001280)=ANY=[], 0x6e2226) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)=ANY=[@ANYBLOB="000000018200"/21, @ANYRES16, @ANYBLOB="010800010000", @ANYRES32, @ANYBLOB="1f"], 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0xa}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x6d}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x47}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040004}, 0x20000041) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r3, @ANYBLOB="00022bbd7000fedbdf253b003b8b3ff8fcc9a9000008002300e848a426de3300"/47, @ANYRES32=r7, @ANYBLOB="0c009900000001002800000008005700800800001600cd000101060004000900000000000700030008000000040087000800cd00a50b59000800a00005000000080026006c090000050018010e000000080026006c0900000500180116000000080026006c090000050019010500000008009f00010000000500180119000000"], 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0xc845) r8 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x8000038c) sendmsg$NL80211_CMD_SET_STATION(r9, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x3c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x7, 0x13, [{0xc}, {0x60, 0x1}, {0x30}]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x457}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x1, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x0) 18:00:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1100}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) write$evdev(r1, &(0x7f00000000c0)=[{{}, 0x14, 0x2, 0xfffffff9}], 0x18) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) r2 = syz_io_uring_complete(0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(r2, &(0x7f00000001c0)=[{{0x77359400}, 0x3, 0x5, 0x1}, {{0x0, 0xea60}, 0x11, 0x100, 0x5}, {{r3, r4/1000+60000}, 0x1b, 0x6, 0x8}], 0x48) 18:00:29 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1b02}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:29 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) r4 = dup2(r0, r0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)={0x10}) 18:00:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x2000}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1000000}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 672.964192][ C1] sd 0:0:1:0: tag#2135 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 672.974071][ C1] sd 0:0:1:0: tag#2135 CDB: opcode=0xe5 (vendor) [ 672.980416][ C1] sd 0:0:1:0: tag#2135 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 672.989490][ C1] sd 0:0:1:0: tag#2135 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 672.998544][ C1] sd 0:0:1:0: tag#2135 CDB[20]: ba [ 673.003514][T14997] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x2000000}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x3000000}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:30 executing program 0: r0 = syz_io_uring_setup(0x44aa, &(0x7f00000002c0)={0x0, 0x2403, 0x4}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_setup(0x495a, &(0x7f0000000680)={0x0, 0x0, 0x1, 0x2, 0x1a4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ee9000/0x1000)=nil, 0x1000}, 0xfffffffc) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) utime(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x8, 0x8}) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=0x80, &(0x7f0000000040)=@isdn, 0x0, 0xc0800, 0x1}, 0x100) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3585, &(0x7f0000000240)={0x0, 0x5f05, 0x2, 0x0, 0x2de, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000400)=0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='freezer.state\x00', 0x0, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x0) r10 = syz_io_uring_setup(0x15e6, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000400)) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r11}}, 0x9) syz_io_uring_submit(0x0, r6, &(0x7f00000005c0)=@IORING_OP_STATX={0x15, 0x5, 0x0, r7, &(0x7f0000000480), &(0x7f0000000580)='./file0\x00', 0x4, 0x0, 0x1, {0x0, r11}}, 0xa8) 18:00:30 executing program 3: setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000080)={0xaa, {{0xa, 0x4e21, 0x627, @loopback, 0x100}}}, 0x88) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001c0000020000000000000000290c0015000000c32090bd591d337d00"], 0x20}}, 0x0) 18:00:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x4000000}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:30 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) 18:00:30 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) ioctl$FICLONE(r0, 0x40049409, r0) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) [ 673.429478][ C0] sd 0:0:1:0: tag#2158 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 673.439353][ C0] sd 0:0:1:0: tag#2158 CDB: opcode=0xe5 (vendor) [ 673.445716][ C0] sd 0:0:1:0: tag#2158 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 673.454764][ C0] sd 0:0:1:0: tag#2158 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 673.463839][ C0] sd 0:0:1:0: tag#2158 CDB[20]: ba 18:00:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000017d72c2f49ba59ff30f0001c00010000000000000000002b0c00150000"], 0x20}}, 0x0) 18:00:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x5000000}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:30 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_setup(0xf4b, &(0x7f0000000000)={0x0, 0xd137, 0x20, 0x2, 0x22a, 0x0, r0}, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}, 0x1}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x6000000}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:31 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in6=@remote}}]}, 0x154}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES64], 0x20}, 0x1, 0x0, 0x0, 0x10000010}, 0x4000084) 18:00:31 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x7000000}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:31 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x8000000}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@flushsa={0x20, 0x1c, 0x1, 0x0, 0x0, {0x2b}, [@mark={0xc}]}, 0x20}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000080)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=@allocspi={0x194, 0x16, 0x2, 0x70bd2c, 0x25dfdbfe, {{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@remote, 0x4e24, 0x100, 0x4e22, 0x0, 0x2, 0x20, 0x0, 0x21, 0x0, r1}, {@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, 0x4d4, 0x32}, @in6=@empty, {0x200, 0x4, 0x5, 0x5, 0xbb, 0x5, 0x568c946c, 0x1ff}, {0x9, 0x4, 0x101, 0x1}, {0x3, 0x1, 0x80}, 0x70bd25, 0x0, 0x2, 0x1, 0x8, 0x18}, 0xfffffffb, 0x5}, [@replay_val={0x10, 0xa, {0x70bd2c, 0x70bd26, 0x1}}, @user_kmaddress={0x2c, 0x13, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x0, 0x2}}, @offload={0xc, 0x1c, {0x0, 0x2}}, @XFRMA_SET_MARK={0x8}, @address_filter={0x28, 0x1a, {@in=@local, @in=@local, 0x2, 0x0, 0x3}}, @tfcpad={0x8, 0x16, 0x8}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e21, @in6=@private1}}]}, 0x194}, 0x1, 0x0, 0x0, 0x4}, 0x41) r2 = openat2(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x119, 0xc}, 0x18) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0xe, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000840}, 0x40) 18:00:31 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r3, 0x0, &(0x7f0000000000)="febc70cca57e10052721254e433c17db628856d7d1181fe17e892a3cac29c8c2c8120bd64ebf685e9574ff37ae12680fafeaf673e417827dd8f7a2c0c0ebbe12dda5870fd3a82833f4c83ea17029d262bb0f99fcc24d8cef65ac841ce38be43c48dd788a006bc22c346aa9e1a3599d7323307c92ee90626419655a5c3e7e358632ba110cf78c7aa712ddd2374a95f9e3babe2c3988ba4f51651cc4e0a5cd7f59a957", 0xa2, 0x10, 0x0, {0x0, r4}}, 0x8) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x9000000}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:31 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0xa000000}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:31 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001c000000012b0cd5a836ee14f1819d7f00465b8dddf8383e8d50ad28fd001500"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 674.170353][T15058] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 674.197998][T15058] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 18:00:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0xb000000}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:31 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = inotify_init() r4 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r3, r4], 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000040)) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:31 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x6, 0x0, 0x0) timer_create(0x0, &(0x7f0000003b80)={0x0, 0xd, 0x6}, &(0x7f0000000280)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000380)={{0x77359400}, {r1, r2+10000000}}, &(0x7f00000003c0)) timer_settime(r0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x9, 0x0, &(0x7f0000000080)) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x9b53}, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) recvmmsg(r4, &(0x7f00000039c0)=[{{&(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000004c0)=""/171, 0xab}, {&(0x7f0000000580)=""/79, 0x4f}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000880)=""/113, 0x71}, {&(0x7f0000000900)=""/161, 0xa1}, {&(0x7f00000009c0)=""/210, 0xd2}, {&(0x7f0000000ac0)=""/250, 0xfa}], 0x9, &(0x7f0000000c80)=""/39, 0x27}, 0x9}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000cc0)=""/142, 0x8e}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/21, 0x15}, {&(0x7f0000001dc0)=""/14, 0xe}, {&(0x7f0000001e00)=""/76, 0x4c}, {&(0x7f0000001e80)=""/88, 0x58}], 0x6}}, {{&(0x7f0000001f80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000002000)=""/151, 0x97}], 0x1}, 0x5}, {{&(0x7f0000002100)=@ethernet={0x0, @random}, 0x80, &(0x7f0000003380)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/116, 0x74}, {&(0x7f0000003200)=""/235, 0xeb}, {&(0x7f0000003300)=""/66, 0x42}], 0x4}}, {{&(0x7f00000033c0)=@generic, 0x80, &(0x7f0000003580)=[{&(0x7f0000003440)=""/39, 0x27}, {&(0x7f0000003480)=""/200, 0xc8}], 0x2}, 0x9}, {{&(0x7f00000035c0)=@nfc, 0x80, &(0x7f0000003940)=[{&(0x7f0000003640)=""/232, 0xe8}, {&(0x7f0000003740)=""/253, 0xfd}, {&(0x7f0000003840)=""/71, 0x47}, {&(0x7f00000038c0)=""/123, 0x7b}], 0x4, &(0x7f0000003980)=""/21, 0x15}, 0x887e}], 0x6, 0x40000002, &(0x7f0000003b40)={0x0, 0x3938700}) 18:00:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000064040)={0x0, [], 0x49, "0e6aacb3cc3178"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000054d00)={0x80000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x49, "07455d2c3624b5"}) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000062040)={r6, r4, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000063040)={{0x0, 0x0, 0x3, 0x0, 0x200, 0x8001, 0x200, 0xca, 0x1, 0x0, 0x7, 0x8, 0x80, 0x7ff, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000064040)={0x0, [{r5, r6}, {r5}, {r4, r6}, {0x0, r6}, {0x0, r6}, {}, {}, {}, {r4}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {}, {r5}, {r5, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {r4, r6}, {0x0, r6}, {}, {r4}, {r5}, {r5}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {r4, r6}, {0x0, r6}, {}, {}, {}, {}, {0x0, r6}, {}, {r4, r6}, {}, {}, {}, {}, {0x0, r6}, {r4}, {r4}, {0x0, r6}, {r4}, {r4}, {r4, r6}, {0x0, r6}, {r5}, {r5, r6}, {r5, r6}, {}, {}, {0x0, r6}, {r4, r6}, {r5}, {}, {}, {}, {}, {r4}, {}, {r4}, {}, {}, {}, {r4}, {}, {r5, r6}, {}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {r4}, {}, {r5, r6}, {r5}, {r4}, {}, {r4}, {}, {}, {}, {0x0, r6}, {0x0, r6}, {r5}, {r5}, {0x0, r6}, {}, {}, {}, {r5, r6}, {}, {r4, r6}, {r4, r6}, {}, {}, {0x0, r6}, {r4}, {r4}, {}, {r4}, {r4}, {0x0, r6}, {r4}, {0x0, r6}, {r5}, {r5}, {0x0, r6}, {r4}, {}, {r5}, {r5, r6}, {}, {}, {r5, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {r5, r6}, {r5}, {0x0, r6}, {r4}, {r5, r6}, {}, {r5}, {r4}, {r5, r6}, {0x0, r6}, {r5}, {}, {r4}, {}, {0x0, r6}, {}, {}, {}, {}, {r4}, {0x0, r6}, {}, {r4}, {r4, r6}, {}, {r5}, {}, {}, {}, {}, {r4}, {r4, r6}, {0x0, r6}, {}, {}, {}, {r5}, {}, {}, {r5, r6}, {0x0, r6}, {}, {r4}, {}, {0x0, r6}, {0x0, r6}, {r5}, {0x0, r6}, {}, {r5}, {0x0, r6}, {r4}, {}, {r5}, {}, {r5}, {r4, r6}, {0x0, r6}, {}, {}, {r4, r6}, {0x0, r6}, {}, {r5, r6}, {r4}, {0x0, r6}, {r5, r6}, {r4, r6}, {0x0, r6}, {r5, r6}, {}, {r5}, {0x0, r6}, {r5}, {}, {}, {r4}, {r5}, {0x0, r6}, {0x0, r6}, {r4}, {0x0, r6}, {}, {r4, r6}, {r5, r6}, {r5}, {r5}, {}, {0x0, r6}, {}, {}, {}, {r5, r6}, {0x0, r6}, {r5, r6}, {r4}, {}, {}, {}, {r5}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {0x0, r6}, {}, {r4, r6}, {0x0, r6}, {r4, r6}, {r4}, {0x0, r6}, {r5, r6}, {0x0, r6}, {r5}, {0x0, r7}, {r8, r6}, {0x0, r6}], 0x49, "0e6aacb3cc3178"}) r9 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0xd000943e, &(0x7f0000062040)={r13, r11, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000063040)={{0x0, 0x0, 0x3, 0x0, 0x200, 0x8001, 0x200, 0xca, 0x1, 0x0, 0x7, 0x8, 0x80, 0x7ff, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000064040)={0x0, [{r12, r13}, {r12}, {r11, r13}, {0x0, r13}, {0x0, r13}, {}, {}, {}, {r11}, {0x0, r13}, {r11, r13}, {0x0, r13}, {r12}, {0x0, r13}, {}, {}, {r12}, {r12, r13}, {0x0, r13}, {r11, r13}, {0x0, r13}, {r11, r13}, {0x0, r13}, {}, {r11}, {r12}, {r12}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {r11, r13}, {0x0, r13}, {}, {}, {}, {}, {0x0, r13}, {}, {r11, r13}, {}, {}, {}, {}, {0x0, r13}, {r11}, {r11}, {0x0, r13}, {r11}, {r11}, {r11, r13}, {0x0, r13}, {r12}, {r12, r13}, {r12, r13}, {}, {}, {0x0, r13}, {r11, r13}, {r12}, {}, {}, {}, {}, {r11}, {}, {r11}, {}, {}, {}, {r11}, {}, {r12, r13}, {}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {}, {r11}, {}, {r12, r13}, {r12}, {r11}, {}, {r11}, {}, {}, {}, {0x0, r13}, {0x0, r13}, {r12}, {r12}, {0x0, r13}, {}, {}, {}, {r12, r13}, {}, {r11, r13}, {r11, r13}, {}, {}, {0x0, r13}, {r11}, {r11}, {}, {r11}, {r11}, {0x0, r13}, {r11}, {0x0, r13}, {r12}, {r12}, {0x0, r13}, {r11}, {}, {r12}, {r12, r13}, {}, {}, {r12, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {0x0, r13}, {}, {0x0, r13}, {r12, r13}, {r12}, {0x0, r13}, {r11}, {r12, r13}, {}, {r12}, {r11}, {r12, r13}, {0x0, r13}, {r12}, {}, {r11}, {}, {0x0, r13}, {}, {}, {}, {}, {r11}, {0x0, r13}, {}, {r11}, {r11, r13}, {}, {r12}, {}, {}, {}, {}, {r11}, {r11, r13}, {0x0, r13}, {}, {}, {}, {r12}, {}, {}, {r12, r13}, {0x0, r13}, {}, {r11}, {}, {0x0, r13}, {0x0, r13}, {r12}, {0x0, r13}, {}, {r12}, {0x0, r13}, {r11}, {}, {r12}, {}, {r12}, {r11, r13}, {0x0, r13}, {}, {}, {r11, r13}, {0x0, r13}, {}, {r12, r13}, {r11}, {0x0, r13}, {r12, r13}, {r11, r13}, {0x0, r13}, {r12, r13}, {}, {r12}, {0x0, r13}, {r12}, {}, {}, {r11}, {r12}, {0x0, r13}, {0x0, r13}, {r11}, {0x0, r13}, {}, {r11, r13}, {r12, r13}, {r12}, {r12}, {}, {0x0, r13}, {}, {}, {}, {r12, r13}, {0x0, r13}, {r12, r13}, {r11}, {}, {}, {}, {r12}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {0x0, r13}, {}, {r11, r13}, {0x0, r13}, {r11, r13}, {r11}, {0x0, r13}, {r12, r13}, {0x0, r13}, {r12}, {0x0, r14}, {r15, r13}, {0x0, r13}], 0x49, "0e6aacb3cc3178"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000055d00)={{0x0, 0x100, 0x5, 0x10000, 0xfffffffffffffff8, 0x6, 0x1, 0x1, 0x4b3, 0x7, 0x6, 0x4, 0x9, 0xb1, 0x7}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000056d00)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {0x0, r6}, {0x0, r13}, {r16}], 0x4, "e4641913c5f49d"}) 18:00:31 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:31 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r5) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000440)=0xc) fchown(r7, r9, 0x0) fchown(r4, r9, r6) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xad56, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000140)="54e362a25818828062af7853421226b1ab29347e0ee09a5ef8bd7f1a9e557f524b2d469f728c0635f8faedf841ee267801198459cd630c3de9c733beefc22c7c48458c67d7f4375e4988a92390956b7416988f34d1c954d104", 0x59, 0x9}, {&(0x7f0000000240)="ef4e2412bda5fd168b07e59472528d6ad3b61ad93b36b0676dd56306cd96b69c271b553e4f9e57f64d89b110de745011186e720d3ddbcf26cf979c402fe773d3806a513fadfdee11b39b63bc8b9ecab521b508dbb5ac32eeaf65b7f6d22f8124cb427331ea4a78c7984cdb86434b1b1b4a6607", 0x73, 0x8}, {&(0x7f0000000080)="43caba3c5e7402c17e567b6e2719bcdeae39233753ce6e32b0babb", 0x1b, 0x3}, {&(0x7f00000003c0)="90b8a60e4d88023f5be32a2237cae45913b63994dfe943c1ecc8417dcaca1dfefa84356d79ed10cde8434cd9135f53311b719c233961efacfffdcbc7cf05931e864508d432a41841c99a088a4defee54e43d05699323a715beafc6507e2b06324dcc42953cd960a140a718133a637b2135fc8c24dcfefe0e093189159909dfdd3633127928e693c0614b095890a1ca2c456f07df6e8ad664d84c60a4833def5e94fa58dbf554b65086c8dc3ae8fbcc06ea118bcc70f38e81bc40eb7f7318b4c916e8dd49eaa7e7c2edc1a3be68577794c90a79161daefc325d24d33317eab2f74b24f1e89ba30f5fa0cbcf7db2cf", 0xee, 0x7}], 0x1024000, &(0x7f0000000540)={[{@utf8}, {@utf8no}, {@nonumtail}, {@numtail}, {@shortname_winnt}, {@shortname_lower}, {@shortname_win95}], [{@fsname={'fsname', 0x3d, '*^\''}}, {@uid_lt={'uid<', r5}}, {@hash}, {@obj_role={'obj_role', 0x3d, '\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@obj_role={'obj_role', 0x3d, '!$-{'}}, {@context={'context', 0x3d, 'user_u'}}, {@subj_type={'subj_type', 0x3d, '\x00'}}]}) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x7, 0xff, &(0x7f00000001c0)="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"}) syz_open_dev$evdev(&(0x7f0000000040), 0x6, 0x20000) 18:00:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x10000000}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x11000000}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:31 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x0) r3 = syz_io_uring_setup(0x15e6, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000400)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r4}}, 0x9) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x4, 0x4004, @fd, 0x8001, &(0x7f0000000100)="eab8a66f77014f372deef8cb631b5d55e23a911e781d1440031b764f1d5b0244f8b47b7bb5f4016df0c2b0ece0bdf49cbfb4632d67fd6f32efe5787b37b6c1c1a71961d75cdd0a532cd0e2823ae13097d246d991e3ab1912c7c97bac5e2254d3580514f6aaf260e5978264bffdd842f93deff1f45a602380808494e1ca47d3bb1e7cab6d7aea373fb970985784937a540606c344bc29316555b229553dc6278a2ade299411fc9a90c1ecf082ce0dc73a7936f2a2036d2c5439362d9744940f5f24988784578af0a1ac54edf8f6896e51916a85bc47", 0xd5, 0x10, 0x0, {0x0, r4}}, 0x2) io_uring_enter(0xffffffffffffffff, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x224000, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, &(0x7f00000001c0)) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000100)) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) r2 = signalfd(r0, &(0x7f0000000040)={[0x100000001]}, 0x8) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x12, r2, 0x4976d000) io_uring_setup(0x7531, &(0x7f0000000080)={0x0, 0x3280, 0xfa270cc648883b88, 0x1, 0x227}) 18:00:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:32 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd_index=0x7, 0x8001, 0xfffffffffffffffb, 0xfbc0, 0x8, 0x1, {0x2, r3}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) r5 = dup(r0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index=0x7, 0xfffffffffffffffa, 0x0, 0x52d, 0x1, 0x1}, 0x6) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1b020000}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:32 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001280)=ANY=[], 0x6e2226) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010800010000", @ANYRES32, @ANYBLOB="1f"], 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x62, r4, 0x1, 0x70bd25, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x0, 0x92, 0x1}]}, 0x24}}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x9c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10000, 0x28}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x880}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0x101, 0x6, 0x4, 0x9, 0x0, 0x0, 0x7, 0x3, 0x8]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0xba5, 0x59]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}]]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0xc845) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x120, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x79}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 18:00:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x40002) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) 18:00:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x20000000}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$evdev(0xffffffffffffffff, &(0x7f0000000280)=[{{}, 0x1f, 0x4, 0xee0}, {{r1, r2/1000+10000}, 0x4, 0x3, 0x7}], 0x30) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x130800, 0x12) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000040)={0x0, 0x14, 0x9, 0x1, "50f01360183e67e4ea44db22f2b6a492851c4fa983887e5040a83151de030f77"}) r4 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000038c) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000207010200000000000000000c00000508000540000000020c000240000000000000000608000540000000020900010073797a31000000000c000340ffffffff800000010c00078008000240000000060900010073797a30000000003bbcf732c61cf75ca6c660bb2947d77a8c69cee48d5c27c668cc336216ac334dbffc1914cf16a0b97b9c64a4cdc5d86e67fb3bf195b088a7ba2480783ef73784ba173d56adc259d4541d6e904263ba987a86"], 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000044) 18:00:32 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}, 0x1}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x9effffff}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:32 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) io_uring_enter(0xffffffffffffffff, 0x1a9c, 0xffc2, 0x2, &(0x7f0000000040)={[0x2]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) [ 675.277254][ C0] scsi_io_completion_action: 8 callbacks suppressed [ 675.277297][ C0] sd 0:0:1:0: tag#2175 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 675.293772][ C0] sd 0:0:1:0: tag#2175 CDB: opcode=0xe5 (vendor) [ 675.300218][ C0] sd 0:0:1:0: tag#2175 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 675.309362][ C0] sd 0:0:1:0: tag#2175 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 675.318421][ C0] sd 0:0:1:0: tag#2175 CDB[20]: ba 18:00:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0xeaffffff}, [@policy_type={0xa}]}, 0xc4}}, 0x0) [ 675.526382][ C0] sd 0:0:1:0: tag#2171 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 675.536274][ C0] sd 0:0:1:0: tag#2171 CDB: opcode=0xe5 (vendor) [ 675.542639][ C0] sd 0:0:1:0: tag#2171 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 675.551673][ C0] sd 0:0:1:0: tag#2171 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 675.560715][ C0] sd 0:0:1:0: tag#2171 CDB[20]: ba 18:00:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x341000) ioctl$int_out(r0, 0x800080804524, &(0x7f0000000180)) r1 = open(&(0x7f0000000080)='./bus\x00', 0x14d842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000038c) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000000)={0x400, 0xfffffffb, 0x7fff, 0x5, 0x8, 0x4}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000280)={[0x3f]}, &(0x7f00000002c0), &(0x7f0000000340)={0x0, 0x989680}, 0x8) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000380)=0x100) write$evdev(r2, &(0x7f00000001c0)=[{{r3, r4/1000+60000}, 0x0, 0x0, 0x81}, {{r5, r6/1000+60000}, 0x2, 0x9, 0x3}, {{0x0, 0x2710}, 0x11, 0xcba3, 0xfffffffd}, {{r7, r8/1000+10000}, 0x14, 0x0, 0x2}, {{0x77359400}, 0x15, 0x7f, 0xf7}, {{}, 0x1f, 0x0, 0xe6}, {{r9, r10/1000+60000}, 0x14, 0x4029, 0x7}], 0xa8) 18:00:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0xefffffff}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:32 executing program 3: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000001240)='<', 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c3549b712f00c51c638e6aea4a8d9b825286b31a260e60482bb0b4179b314a", 0xff7c}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f00000001c0)=@abs={0x1}, 0x6e) ioctl$sock_SIOCADDRT(r1, 0x89e0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000140)={"8b2a26958d2a6f5930ecbbc7740baa9b", 0x0, 0x0, {0x3e51, 0x30321861}, {0x2, 0x5}, 0x7fffffff, [0x2, 0x3, 0x3, 0x7, 0x200, 0x40, 0x2, 0x1, 0xb1b6, 0x9, 0x7, 0x4, 0x92c4, 0x62164516, 0x100000000, 0x7f]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001cc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f00000018c0)={r3, 0x8, 0x80000001, 0x1}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000480)={{}, r2, 0x2, @unused=[0x6, 0x100000001, 0x6, 0x6], @devid=r3}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000080)={r3, 0xfffffffffffffffa, 0x9}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000020c0)={0x0, "93ef00"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000080)={{}, 0x0, 0x0, @inherit={0x60, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"]}, @devid=r3}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000000)={{}, {@val={r3}, @actul_num={@val=0x2b, 0xffff, 0x70}}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001c00010000000000000000002b0c00150000000000000000000000004ae0fcadcf9f5402ebf6082c36bfb46c6d18d9668fa67f40b4c8b2ee34adb74bd88b4357f2dc2089f5a4eea7ba59f86a7234c2ce8d2db91e5e24e5aa8d8ffee1a2c3e67edd29bd5df8b4dfeedbca635aab239ae6e40a3b4197ca8a8a709096592dc068a573d8bafcd2e1b286f33517f8580d566e60c800f89933def91ebb34d9607e8b0a20459e458eaa76e1cb69015e627f677d153d4a8f9069ef2e5c0bc9e35700617c3933f50b7a18e358fca1ce6b707af59957f63427aeacfb58bc00c8dc5c1972ee68d34ffcf3fbbe757af462d693914286014570cefa"], 0x20}}, 0x0) 18:00:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:32 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x2) ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f0000001980)={0x0, @ethernet={0x6}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, @tipc=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x2}}, 0x9, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001940)='geneve1\x00', 0x4, 0x5, 0xa42}) getsockopt$inet6_int(r3, 0x29, 0x3c, 0x0, &(0x7f00000001c0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000013c0)="d3cd89920de4570a188432dc97457c3295721079f150727a1a272c898c4940f5621ca4672867162a37c459d0aab6c10603a45d388e5b5657f4508c254d02e624918b6cb739b5d2968d7f7475b223a19cf3d3dadeba0072b25a3018e727e3bef7bb08abb6a338db99a1fd7909485638cae660679d4ab53e5ce118752920fe448b131979fc33a9c678e212a282f8", 0x8d}, {&(0x7f0000001480)="8fe2678a69090b745b3044cd4ccf564638d24bdced5c64dd8837330c8a5f03db910833b173f1a26deee5dcfc1edac4fbb32c5e63c30ad550b310d3cb215d9ef2c3c651d19017bf687700b8d25b6243e7361b0c348c3a7bd29789f9f6e50fbbde7c624e87df21c1c3b0c801ae6bc889bc57b5ecebf760c53da215f55262873f9884e71d975e37f3db7287ab580fa50249b8e463fa55a6369d20e3cb14d2d68b5dc893b6dc4c28a84460a443d286fceca9baa80a73f96a2f9d479b9dc7367b5ffa7d765fb816d86fbb6341edb0d8cb4401b5ea9f8cc42913f56abbf994ee2c3f86fad05acb4d072615de", 0xe9}, {&(0x7f0000001580)="2d5c42247a82dc392a54bc13dcaca8a0bb7543ab8dc4b4d281e62a14e542281750854dc0e62e542da22a85609be83011c15794a7f23cfe014bf21963c1f317cef739ba05fb4d741de6b6efa0fa19f773593ee5f91bc742bdc18e5d43996e1324c1efc64fac416f8157481dac3effb89ba61549a43404080888e215f9b55d1d6a1b477e6749666640307913d12cd4a6e44738cce09f8097d217ca67017f756cd4fc0384788fc2715d4f7f2a1cc97a8b49448de3d8fbd1ce93372554fd60", 0xbd}, {&(0x7f0000001640)="e85c914eee24b492835059aec67619862b442b1fa52921ccf93e5f982ef0010881180832c707086c9d6ee38740961e85f555feda74c56491dd36a32d1d974586dd2e22a2a29e37823263315eda37564574ef6345c9d8ba6a9481acb16368d2f5a2a299d437fa7ced87547db79459b7db3bf1224193c00d0e2e15dce091b3d058f4804f4faf9df2a139278cbb603afd60253003a16563eb", 0x97}, {&(0x7f00000001c0)="12d0b96f4217719dc9f81294c47566880640563cf10c4f4ed9563114cbd98b62bd78dd83cc", 0x25}, {&(0x7f0000001700)="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", 0xfd}, {&(0x7f0000001800)="0ebf8585416d0310c258610e948e5cfea44dbd76812de87e50819149b761e084231f5de49bfd902173e01bae7c2a03a4054e464fbca6ea3a30b5892577017df8eaa288af62eb4a92bb26a1d61df3fcf52daa1ffc0f8d3ee2acad4aa4c419d3250a8474177ddb0dc71640de1dac6cbd1b95a0036d642ce395c1fa771af83f661339404f8b42eee6cead13d09b3534bb0ed19a878d6bf7de8c1034cbb7", 0x9c}], 0x7, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x528}, 0x0, 0xa6518feee65ab3a0, 0x0, {0x0, r5}}, 0x10001) syz_io_uring_setup(0x7c81, &(0x7f0000000000)={0x0, 0x85ba, 0x20, 0x0, 0x1c2, 0x0, r0}, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r6, r2, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd_index=0x4, 0x1, &(0x7f00000003c0)="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", 0x1000}, 0x528) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r7, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}, 0x1}, 0x1) io_uring_enter(r0, 0x2078, 0x0, 0x0, 0x0, 0x0) 18:00:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd}, {0x0, 0x0, 0xfff}, {&(0x7f0000000440)="6bf5fb5690171db19af4609036c9bcfd829f57e603790010ced4fc977b6a29821a1448f42739bb113f3c3565af9334acda9bd400f4326ea61c9f4c1b419bf978701a48f8addca5b3168c8b9dfcd0534bfc9c30ae3b5db3f19fd53cb4bf54da7733aed461592ee917aa10b147cc0adccfaeeac9357f78d4b76f078f5bf3f90b3d3e7d7132c3012ab7043e22a6f8edc5e516ee833a4fdcf825d9da3fed17cac003d9dd022d", 0xa4, 0x7fffffff}], 0x10000, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,nodots,umask=00000000000000000000000,measure,appraise,fsmagic=0x0000000000000200,appraise_type=imasig,fowner>', @ANYBLOB, @ANYBLOB=',func=KEXEC_KERNEL_CHEC']) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x640902, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) mkdirat(r3, &(0x7f00000006c0)='./file0\x00', 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000340)={{}, {@void, @max}}) openat(r2, &(0x7f0000000a80)='./file0\x00', 0x80000, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000), 0x10) write(r6, &(0x7f0000000400)="1c0000001a005f0014f9f40700090400020000bc22e42528d3000000", 0x1c) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000700), &(0x7f0000000740), 0x2, 0x2) sendfile(r5, r4, 0x0, 0x100000002) 18:00:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0xf0ffffff}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:32 executing program 0: r0 = syz_io_uring_setup(0x4959, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x10001) r3 = syz_io_uring_setup(0x495a, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ee9000/0x1000)=nil, 0x1000}, 0xfffffffc) syz_io_uring_submit(r4, r5, &(0x7f00000003c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x20010001) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x3000006, 0x11, r3, 0x10000000) syz_io_uring_submit(r4, r6, &(0x7f0000000180)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x20000000}, 0x1) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000190000/0x2000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x4}, 0x0) r9 = syz_io_uring_setup(0x15e6, &(0x7f0000000140), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000400)) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="020429bd7000fcdbdf25100000000800080001000000080007000104000008000600ff000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, {0x0, r10}}, 0x9) syz_io_uring_submit(r1, r6, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r10}}, 0x5) io_uring_enter(r0, 0x5096, 0xe946, 0x1, &(0x7f0000000080)={[0xaaa]}, 0x8) r11 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r11, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x5004}}, 0x1) connect(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x4, {0xa, 0x4e23, 0x14c6, @dev={0xfe, 0x80, '\x00', 0x21}, 0x7f}}}, 0x80) [ 675.953226][ C1] sd 0:0:1:0: tag#2156 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 675.963183][ C1] sd 0:0:1:0: tag#2156 CDB: opcode=0xe5 (vendor) [ 675.969516][ C1] sd 0:0:1:0: tag#2156 CDB[00]: e5 f4 32 73 2f 4e 09 6d 26 e2 c7 35 d1 35 12 1c [ 675.978694][ C1] sd 0:0:1:0: tag#2156 CDB[10]: 92 1b da 40 b8 58 5b a8 d4 7d 34 f3 90 4c f1 2d [ 675.987749][ C1] sd 0:0:1:0: tag#2156 CDB[20]: ba 18:00:32 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0xfcffffff}, [@policy_type={0xa}]}, 0xc4}}, 0x0) 18:00:33 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="e5f432732f4e096d26e2c735d135121c921bda40b8585ba8d47d34f3904cf12dba", 0x0, 0x0, 0x0, 0x100, 0x0}) r2 = syz_mount_image$msdos(0x0, &(0x7f00000000c0)='./file0\x00', 0x3, 0x5, &(0x7f00000008c0)=[{&(0x7f0000000240)="1459edab2e423dd148774323d8bc00a2d8253096a6e5c310fae1db9727081311ec74f965790cb5f883b52371b53c9426d13a151fda172d0833d3b84d87699be2567bde59dbaf5e4c96aec90683489152bbc5c5fec5aa7836fda2786ce1c2f83bf5ef9426e8f545fa1c3549182b9a31ee479847d437b67ad2e23b46fd9b0e88462d1c2a2119a885f334e1236a607ebd8f5b3249e04ed516179abc970df9056760b144d35010f4b6c1ecfd4fd723275eea2c249e7e170d50441493d5783b8a18f6c21aeef17286c14d79889f9da606d63edc27c640f2", 0xd5}, {&(0x7f0000000100)="0742ddaa7cc41049626ab91bcec9573df69620c41245351201c534e6d1a0816b861a9c1dd2b2220dae14ee5de8a1d49d7692a5d0e70fa98f114ba55f8c832dc2e3d7aab7d6e14d3ed912a83baf74eb78e96ef1c3d8b04b3debeec648dc9a", 0x5e, 0x9}, {&(0x7f0000000180)="5030a6b9906c95e36ee1b07f9e569889", 0x10, 0xfffffffffffffffd