? lock_acquire+0x15e/0x2d0 [ 1336.444551] ? kernfs_root+0x23/0x2a0 [ 1336.444581] ? find_held_lock+0x2b/0x80 [ 1336.444610] ? kernfs_root+0xee/0x2a0 [ 1336.444640] ? lock_release+0xc8/0x270 [ 1336.444669] ? lock_is_held_type+0x9e/0x120 [ 1336.444737] kernfs_new_node+0x13c/0x1e0 [ 1336.444793] __kernfs_create_file+0x55/0x360 [ 1336.444850] sysfs_add_file_mode_ns+0x21c/0x430 [ 1336.444893] ? __pfx_dev_attr_store+0x10/0x10 [ 1336.444966] internal_create_group+0x662/0xeb0 [ 1336.445035] ? __pfx_internal_create_group+0x10/0x10 [ 1336.445062] ? kernfs_add_one+0x150/0x830 [ 1336.445121] ? kernfs_create_link+0x1be/0x240 [ 1336.445177] internal_create_groups.part.0+0x90/0x140 [ 1336.445225] sysfs_create_groups+0x29/0x50 [ 1336.445259] device_add+0x67e/0x1830 [ 1336.445317] ? __pfx_device_add+0x10/0x10 [ 1336.445362] ? lockdep_init_map_type+0x4b/0x220 [ 1336.445404] ? __init_waitqueue_head+0xca/0x150 [ 1336.445467] netdev_register_kobject+0x1a9/0x3e0 [ 1336.445522] register_netdevice+0x1302/0x1d90 [ 1336.445588] ? __pfx_register_netdevice+0x10/0x10 [ 1336.445634] ? dev_addr_mod+0x294/0x340 [ 1336.445698] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1336.445756] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1336.445782] ? __fget_files+0x34/0x3b0 [ 1336.445819] ? find_held_lock+0x2b/0x80 [ 1336.445848] ? __fget_files+0x203/0x3b0 [ 1336.445884] ? lock_release+0xc8/0x270 [ 1336.445953] ? selinux_file_ioctl+0xb9/0x280 [ 1336.445997] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1336.446038] __x64_sys_ioctl+0x18f/0x210 [ 1336.446083] do_syscall_64+0xbf/0x420 [ 1336.446120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.446147] RIP: 0033:0x7f9620ba8b19 [ 1336.446169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1336.446192] RSP: 002b:00007f961e11e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1336.446217] RAX: ffffffffffffffda RBX: 00007f9620cbbf60 RCX: 00007f9620ba8b19 [ 1336.446234] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1336.446251] RBP: 00007f961e11e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1336.446267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1336.446281] R13: 00007fff0461da0f R14: 00007f961e11e300 R15: 0000000000022000 [ 1336.446362] [ 1336.525730] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1336.526669] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1336.527930] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1336.529147] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1336.530389] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:26:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x95) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)=0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0xfff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000100)={0xfc, 0x5, 0x3f, 0x7, 0xd, "8e7d22a26a621455"}) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) syz_open_pts(r3, 0x4100) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 11:26:30 executing program 4: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = getgid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0xee00, 0x0, r1, 0x0, 0x7}, 0x0, 0x0, 0x8, 0x3, 0x17e, 0x1, 0x8, 0x2, 0xfffb, 0x401, 0xffffffffffffffff}) r2 = gettid() capset(&(0x7f00000000c0)={0x20071026, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) 11:26:30 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 81) 11:26:30 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x46040) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) fstatfs(r3, &(0x7f00000001c0)=""/91) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x2) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) 11:26:30 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) (fail_nth: 8) 11:26:30 executing program 6: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x2000) msgsnd(r0, &(0x7f00000000c0)={0x1}, 0x8, 0x0) msgsnd(r0, &(0x7f0000000080)={0x2, "48a14743209b5bd5ece4bf91b7bfeb174d5552b9769d6e85b2d03603aa407a753e2c08d7c05e166e897b2ef3f821745a7849a2974bbd6f52247cd89c23667195ceaecec9925773622fb2e5e8ed59ce628a2343542395dcc6209319"}, 0x63, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGREP(r1, 0x40284504, &(0x7f00000011c0)=""/219) 11:26:30 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x1800}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1336.738906] forcing mempool usage for bio_alloc_bioset+0x415/0x8d0 [ 1336.741719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1336.742929] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1336.744202] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1336.745382] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1336.746575] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:26:30 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) (fail_nth: 9) 11:26:30 executing program 4: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = getgid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0xee00, 0x0, r1, 0x0, 0x7}, 0x0, 0x0, 0x8, 0x3, 0x17e, 0x1, 0x8, 0x2, 0xfffb, 0x401, 0xffffffffffffffff}) r2 = gettid() capset(&(0x7f00000000c0)={0x20071026, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) 11:26:30 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x1e00}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:26:30 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00']) write$binfmt_misc(r1, &(0x7f0000000080)={'syz0', "19cd3400b44904"}, 0xb) ioctl$EVIOCGREP(r0, 0x40284504, &(0x7f00000011c0)=""/219) 11:26:30 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x36}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1336.932933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1336.934232] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1336.935833] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1336.937094] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1336.938312] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:26:39 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 82) 11:26:39 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) (fail_nth: 10) 11:26:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x12000000, 0x0}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:26:39 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) (fail_nth: 1) 11:26:39 executing program 4: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = getgid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0xee00, 0x0, r1, 0x0, 0x7}, 0x0, 0x0, 0x8, 0x3, 0x17e, 0x1, 0x8, 0x2, 0xfffb, 0x401, 0xffffffffffffffff}) r2 = gettid() capset(&(0x7f00000000c0)={0x20071026, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) 11:26:39 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x2400}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:26:39 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGREP(r0, 0x40284504, &(0x7f0000000080)=""/219) 11:26:39 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2600, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, r1], 0x2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000440)="2be06fc6760505ba35c39e1802b7c244bf5f6aea5f249da5c8894c987f2942a34e06b3082ffdb775c64c06bcaffb5ec389c0c32f1a2634bdc711ed87e6d724416b63c0e3fde091a9c0dee2992755f38b39bf9b3603c19baa6ccf2390d33ba4a7e0bb61b95912f4b55ab33ae05f662ec4bc4ff3b76c48a73924b22298bbc7fb78307902ac4fcbac705ea57f70eb3578273c92377958b8c1dc6f7b4839709013", 0x9f, r3}, 0x68) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000180)="43ac04d53d5c202fca51444deba0c7eda4e2bb4ce8ed2c5014f890f9e1006d55c55a4600735bf48cd91a48803c69aa8b1e6429a7a1d1beb429c15be2b636495bb257fc230ec9cbae2213077b6f9b5f1f9f0ee7a3433a4ad460a317058324ff7b85a99152e959b575ea6dd2e8442210a36b09e1342850bb5d2d894c47a42dde0eec39d6a43fae4570ac861638d6510e32e74e7d1f49e571fcfa9d686fdf95d45b518ebc15a1885abb3ba2b9b70536e981eef99d91f18613e15fae654385aefa48bf51b203fb3c3320a777f6595ada38de5a68e3316365f2f85191f464fb3efa8f97ade8") poll(&(0x7f0000000040)=[{r2}], 0x1, 0x0) [ 1345.779143] FAULT_INJECTION: forcing a failure. [ 1345.779143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1345.780993] CPU: 0 UID: 0 PID: 9999 Comm: syz-executor.0 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1345.781036] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1345.781049] Call Trace: [ 1345.781057] [ 1345.781066] dump_stack_lvl+0xfa/0x120 [ 1345.781112] should_fail_ex+0x4d7/0x5e0 [ 1345.781147] _copy_to_iter+0x1dc/0x1660 [ 1345.781179] ? __pfx_perf_trace_lock+0x10/0x10 [ 1345.781212] ? hrtimer_start_range_ns+0x3c4/0xf30 [ 1345.781242] ? __pfx__copy_to_iter+0x10/0x10 [ 1345.781265] ? alarm_restart+0x18b/0x210 [ 1345.781295] ? lock_release+0xc8/0x270 [ 1345.781332] ? find_held_lock+0x2b/0x80 [ 1345.781354] ? timerfd_read_iter+0x6f4/0x9a0 [ 1345.781400] timerfd_read_iter+0x777/0x9a0 [ 1345.781433] ? __pfx_timerfd_read_iter+0x10/0x10 [ 1345.781461] ? __might_fault+0xe0/0x190 [ 1345.781493] ? inode_has_perm+0x16e/0x1c0 [ 1345.781529] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1345.781561] ? file_has_perm+0x186/0x270 [ 1345.781595] ? perf_trace_lock+0xb5/0x5d0 [ 1345.781626] ? __pfx_file_has_perm+0x10/0x10 [ 1345.781669] do_iter_readv_writev+0x691/0x910 [ 1345.781701] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1345.781740] ? security_file_permission+0x22/0x90 [ 1345.781781] vfs_readv+0x42b/0x7f0 [ 1345.781808] ? perf_trace_lock+0xb5/0x5d0 [ 1345.781843] ? __pfx_vfs_readv+0x10/0x10 [ 1345.781868] ? __pfx_perf_trace_lock+0x10/0x10 [ 1345.781908] ? __fget_files+0x34/0x3b0 [ 1345.781939] ? find_held_lock+0x2b/0x80 [ 1345.781964] ? lock_release+0xc8/0x270 [ 1345.782000] ? __fget_files+0x20d/0x3b0 [ 1345.782045] do_readv+0x129/0x330 [ 1345.782071] ? __pfx_do_readv+0x10/0x10 [ 1345.782095] ? irqentry_exit+0xee/0x650 [ 1345.782130] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1345.782161] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1345.782203] do_syscall_64+0xbf/0x420 [ 1345.782229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.782253] RIP: 0033:0x7fd8f0f2db19 [ 1345.782270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1345.782292] RSP: 002b:00007fd8ee4a3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1345.782314] RAX: ffffffffffffffda RBX: 00007fd8f1040f60 RCX: 00007fd8f0f2db19 [ 1345.782329] RDX: 0000000000000001 RSI: 00000000200018c0 RDI: 0000000000000003 [ 1345.782343] RBP: 00007fd8ee4a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1345.782356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1345.782369] R13: 00007ffebcdfbdef R14: 00007fd8ee4a3300 R15: 0000000000022000 [ 1345.782407] 11:26:53 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x2a00}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:26:53 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGREP(r0, 0x40284504, &(0x7f00000011c0)=""/219) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x4) 11:26:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x18000000, 0x0}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:26:53 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 83) 11:26:53 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) (fail_nth: 2) 11:26:53 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:26:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x4) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x80202, 0x80) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x81) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 11:26:53 executing program 4: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = getgid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0xee00, 0x0, r1, 0x0, 0x7}, 0x0, 0x0, 0x8, 0x3, 0x17e, 0x1, 0x8, 0x2, 0xfffb, 0x401, 0xffffffffffffffff}) r2 = gettid() capset(&(0x7f00000000c0)={0x20071026, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r4) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) [ 1360.364231] FAULT_INJECTION: forcing a failure. [ 1360.364231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1360.365366] CPU: 0 UID: 0 PID: 10017 Comm: syz-executor.0 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1360.365383] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1360.365390] Call Trace: [ 1360.365395] [ 1360.365399] dump_stack_lvl+0xfa/0x120 [ 1360.365428] should_fail_ex+0x4d7/0x5e0 [ 1360.365448] _copy_to_user+0x32/0xd0 [ 1360.365465] simple_read_from_buffer+0xe0/0x180 [ 1360.365484] proc_fail_nth_read+0x18a/0x240 [ 1360.365505] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1360.365525] ? security_file_permission+0x22/0x90 [ 1360.365546] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1360.365564] vfs_read+0x1eb/0xc70 [ 1360.365583] ? __pfx___mutex_lock+0x10/0x10 [ 1360.365594] ? __fget_files+0x34/0x3b0 [ 1360.365611] ? __pfx_vfs_read+0x10/0x10 [ 1360.365626] ? lock_release+0xc8/0x270 [ 1360.365648] ? __fget_files+0x20d/0x3b0 [ 1360.365671] ksys_read+0x121/0x240 [ 1360.365685] ? __pfx_ksys_read+0x10/0x10 [ 1360.365706] do_syscall_64+0xbf/0x420 [ 1360.365722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.365735] RIP: 0033:0x7fd8f0ee069c [ 1360.365745] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1360.365757] RSP: 002b:00007fd8ee4a3170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1360.365768] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007fd8f0ee069c [ 1360.365776] RDX: 000000000000000f RSI: 00007fd8ee4a31e0 RDI: 0000000000000004 [ 1360.365783] RBP: 00007fd8ee4a31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1360.365790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1360.365797] R13: 00007ffebcdfbdef R14: 00007fd8ee4a3300 R15: 0000000000022000 [ 1360.365817] 11:26:54 executing program 4: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = getgid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0xee00, 0x0, r1, 0x0, 0x7}, 0x0, 0x0, 0x8, 0x3, 0x17e, 0x1, 0x8, 0x2, 0xfffb, 0x401, 0xffffffffffffffff}) gettid() r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) 11:26:54 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) [ 1360.440950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1360.441758] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1360.442695] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1360.443638] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1360.444278] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:26:54 executing program 4: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = getgid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0xee00, 0x0, r1, 0x0, 0x7}, 0x0, 0x0, 0x8, 0x3, 0x17e, 0x1, 0x8, 0x2, 0xfffb, 0x401, 0xffffffffffffffff}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) 11:26:54 executing program 6: setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r0, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGREP(r1, 0x40284504, &(0x7f00000011c0)=""/219) 11:26:54 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0x7}], 0x1) 11:26:54 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r1, &(0x7f0000003c00)=[{{&(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000100)=""/94, 0x5e}, {&(0x7f00000002c0)=""/138, 0x8a}, {&(0x7f0000000180)=""/45, 0x2d}, {&(0x7f0000000380)=""/247, 0xf7}, {&(0x7f0000000480)=""/59, 0x3b}, {&(0x7f00000004c0)=""/195, 0xc3}, {&(0x7f00000005c0)=""/38, 0x26}, {&(0x7f0000000600)=""/216, 0xd8}, {&(0x7f0000000700)=""/136, 0x88}, {&(0x7f00000007c0)}], 0xa, &(0x7f00000008c0)=""/163, 0xa3}, 0x2}, {{&(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000a00)=""/53, 0x35}, {&(0x7f0000000a40)=""/15, 0xf}], 0x2, &(0x7f0000000ac0)=""/219, 0xdb}, 0x2}, {{&(0x7f0000000bc0)=@hci, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c40)=""/197, 0xc5}], 0x1, &(0x7f0000000d80)=""/116, 0x74}, 0x1}, {{&(0x7f0000000e00)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000e80)}, 0xfd9}, {{&(0x7f0000000ec0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000f40)=""/42, 0x2a}, {&(0x7f0000000f80)=""/98, 0x62}, {&(0x7f0000001000)=""/150, 0x96}, {&(0x7f00000010c0)}, {&(0x7f0000001100)=""/186, 0xba}, {&(0x7f00000011c0)=""/186, 0xba}], 0x6, &(0x7f0000001300)=""/185, 0xb9}, 0x72b}, {{&(0x7f00000013c0)=@ax25={{}, [@remote, @netrom, @bcast, @remote, @rose, @remote, @null, @bcast]}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000001440)=""/200, 0xc8}, {&(0x7f0000001540)=""/68, 0x44}, {&(0x7f00000015c0)=""/188, 0xbc}, {&(0x7f0000001680)=""/157, 0x9d}, {&(0x7f0000001740)=""/236, 0xec}], 0x6, &(0x7f0000002900)=""/4096, 0x1000}, 0x101}, {{&(0x7f0000003900)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003980), 0x0, &(0x7f00000039c0)=""/210, 0xd2}, 0x9a2}, {{&(0x7f0000003ac0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003b40)=""/115, 0x73}], 0x1}, 0x1ffe00}], 0x8, 0x160, 0x0) recvmsg(r2, &(0x7f0000004240)={&(0x7f0000003e00)=@nfc_llcp, 0x80, &(0x7f0000004140)=[{&(0x7f00000010c0)=""/34, 0x22}, {&(0x7f0000003e80)=""/216, 0xd8}, {&(0x7f0000003f80)=""/90, 0x5a}, {&(0x7f0000003980)=""/36, 0x24}, {&(0x7f0000004000)=""/236, 0xec}, {&(0x7f0000004100)=""/16, 0x10}], 0x6, &(0x7f00000041c0)=""/82, 0x52}, 0x40000000) timerfd_gettime(r0, &(0x7f0000000000)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000e80), 0x600000, 0x0) flistxattr(r2, &(0x7f0000004280)=""/221, 0xdd) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r3) 11:26:54 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x3000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:26:54 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r1, &(0x7f00000000c0)=[{{}, 0x5, 0x2}, {{0x77359400}, 0x2, 0x89b, 0x3f}, {{}, 0x14, 0x40, 0x8}, {{}, 0x12, 0xfc00, 0xffffffff}, {{0x0, 0x2710}, 0x0, 0x3, 0x80000000}, {{0x0, 0xea60}, 0x0, 0x3a0a, 0x9}, {{r2, r3/1000+60000}, 0x5, 0x1000, 0x9}, {{r4, r5/1000+60000}, 0x17, 0x40, 0x2}, {{}, 0x14, 0x7}, {{0x0, 0x2710}, 0x3, 0x4, 0x8}], 0xf0) ioctl$EVIOCGREP(r0, 0x40284504, &(0x7f00000011c0)=""/219) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) recvmmsg(r6, &(0x7f00000034c0)=[{{&(0x7f00000001c0)=@phonet, 0x80, &(0x7f0000000240)=[{&(0x7f0000000340)=""/234, 0xea}], 0x1, &(0x7f0000000280)=""/87, 0x57}, 0x2}, {{&(0x7f0000000440)=@nfc, 0x80, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/200, 0xc8}, {&(0x7f00000005c0)=""/115, 0x73}, {&(0x7f0000000680)=""/201, 0xc9}, {&(0x7f0000000780)=""/189, 0xbd}], 0x4, &(0x7f0000000880)=""/23, 0x17}, 0x1}, {{&(0x7f00000008c0)=@isdn, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000940)=""/31, 0x1f}, {&(0x7f0000000980)=""/98, 0x62}, {&(0x7f0000000a00)=""/247, 0xf7}, {&(0x7f0000000b00)=""/24, 0x18}, {&(0x7f0000000b40)=""/86, 0x56}, {&(0x7f0000000bc0)=""/148, 0x94}, {&(0x7f0000000c80)=""/11, 0xb}, {&(0x7f0000000cc0)=""/125, 0x7d}, {&(0x7f0000000d40)=""/130, 0x82}, {&(0x7f0000000e00)=""/166, 0xa6}], 0xa}, 0xff}, {{&(0x7f0000000f80)=@ax25={{0x3, @bcast}, [@rose, @remote, @remote, @default, @rose, @netrom, @remote, @bcast]}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001000)=""/217, 0xd9}, {&(0x7f0000001100)=""/4, 0x4}, {&(0x7f0000001140)}, {&(0x7f0000001180)=""/31, 0x1f}], 0x4, &(0x7f0000001300)=""/248, 0xf8}, 0x3f}, {{&(0x7f0000001400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001480)=""/87, 0x57}], 0x1, &(0x7f0000001540)=""/21, 0x15}, 0xf8b}, {{&(0x7f0000001580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001600)=""/203, 0xcb}, {&(0x7f0000001700)=""/6, 0x6}], 0x2}, 0x2}, {{&(0x7f0000001780)=@generic, 0x80, &(0x7f0000002b40)=[{&(0x7f0000001800)=""/163, 0xa3}, {&(0x7f00000018c0)=""/216, 0xd8}, {&(0x7f00000019c0)=""/157, 0x9d}, {&(0x7f0000001a80)=""/90, 0x5a}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/59, 0x3b}], 0x6, &(0x7f0000002bc0)=""/155, 0x9b}, 0x80000001}, {{&(0x7f0000002c80)=@qipcrtr, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002d00)=""/29, 0x1d}], 0x1}, 0xfffffff8}, {{&(0x7f0000002d80)=@caif=@util, 0x80, &(0x7f0000003200)=[{&(0x7f0000002e00)=""/93, 0x5d}, {&(0x7f0000002e80)=""/193, 0xc1}, {&(0x7f0000002f80)=""/53, 0x35}, {&(0x7f0000002fc0)=""/167, 0xa7}, {&(0x7f0000003080)=""/122, 0x7a}, {&(0x7f0000003100)=""/211, 0xd3}], 0x6, &(0x7f0000003280)=""/162, 0xa2}, 0x1}, {{&(0x7f0000003340)=@ethernet={0x0, @local}, 0x80, &(0x7f0000003480)=[{&(0x7f00000033c0)=""/18, 0x12}, {&(0x7f0000003400)=""/121, 0x79}], 0x2}, 0xff}], 0xa, 0xc67abf109426a698, 0x0) 11:26:54 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x2, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:26:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000300)={{0x0, 0xd8, 0x80000001, 0xff, 0x3ff, 0x0, 0x0, 0x4, 0x10000, 0x8001, 0x7, 0x5, 0x7, 0x9, 0x6}}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000080)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x20, 0x0, 0x7, 0x7, 0xb, "3c3253cda4b608b81c57997664b247fcb84156"}) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) [ 1360.665652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1360.666677] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1360.668050] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1360.669370] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1360.670651] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1360.707999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1360.709244] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1360.710589] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1360.711883] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1360.713162] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:27:05 executing program 4: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getgid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) 11:27:05 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x3600}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:27:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 84) 11:27:05 executing program 0: r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)) timerfd_settime(r0, 0x0, &(0x7f0000000380), &(0x7f0000000080)) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) r1 = semget$private(0x0, 0x0, 0x415) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) semtimedop(r1, &(0x7f0000000100)=[{0x3, 0xd92, 0x1000}, {0x4, 0xfffd, 0x2800}, {0x0, 0xffff, 0x800}, {0x0, 0x5ca, 0x800}, {0x2, 0x1ff, 0x1000}], 0x5, &(0x7f0000000180)={r2, r3+10000000}) r4 = semget(0x3, 0x0, 0x92) semtimedop(r4, &(0x7f00000002c0)=[{0x0, 0xaa2, 0x831cef7fbe367af9}, {0x2, 0x59b, 0x1c00}, {0x0, 0x401, 0x1400}, {0x3, 0xd614, 0x1000}, {0x0, 0x4, 0x1800}, {0x1, 0x3f, 0x1800}, {0x0, 0x1f, 0x1000}], 0x7, &(0x7f0000000300)={0x0, 0x989680}) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000340)) 11:27:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0x8, 0x0, 0x5, 0x54d}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 11:27:05 executing program 6: msgsnd(0xffffffffffffffff, &(0x7f0000000080)={0x2, "4fa4557ee47f4d3737a573fa8d95401f59acba995e2337424026c31caa2416f2550d90737c47d4d1233943f928447d958e5f423c2c493aafa006074952b07c05248a93d774e095b7314fb93d5cf129afb68a80ac84df8ece3f7a42e3937c453f8496c6"}, 0x6b, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGREP(r0, 0x40284504, &(0x7f00000011c0)=""/219) 11:27:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x1e000000, 0x0}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:27:05 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:27:05 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x6, 0x56000) ioctl$EVIOCGREP(r0, 0x40284504, &(0x7f00000011c0)=""/219) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 11:27:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 85) [ 1371.541027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1371.541976] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1371.543268] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1371.544502] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1371.545676] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1371.578556] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1371.579053] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1371.579838] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1371.580585] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1371.581214] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:27:05 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000040)={{}, {r2, r3+10000000}}, &(0x7f0000000080)) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) timerfd_gettime(r0, &(0x7f0000000180)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r4, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0xffff, 0xf98, 0x0, 'queue1\x00'}) timerfd_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000140)) timerfd_gettime(r4, &(0x7f00000002c0)) 11:27:05 executing program 4: r0 = timerfd_create(0x9, 0x0) timerfd_settime(r0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) 11:27:05 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) dup(r0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000080)=""/226) ioctl$EVIOCGREP(r0, 0x40284504, &(0x7f0000000180)=""/234) 11:27:05 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x3c00}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:27:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 86) 11:27:05 executing program 3: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x0, 0xdcbb7a2227dc2698, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffff7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000080)=0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x2) 11:27:05 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x4, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1371.742965] FAULT_INJECTION: forcing a failure. [ 1371.742965] name failslab, interval 1, probability 0, space 0, times 0 [ 1371.744062] CPU: 1 UID: 0 PID: 10102 Comm: syz-executor.5 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1371.744079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1371.744086] Call Trace: [ 1371.744090] [ 1371.744095] dump_stack_lvl+0xfa/0x120 [ 1371.744123] should_fail_ex+0x4d7/0x5e0 [ 1371.744142] ? __kernfs_new_node+0xd3/0x930 [ 1371.744155] should_failslab+0xc2/0x120 [ 1371.744173] kmem_cache_alloc_noprof+0x80/0x710 [ 1371.744187] ? perf_trace_lock_acquire+0xc9/0x700 [ 1371.744210] ? __kernfs_new_node+0xd3/0x930 [ 1371.744222] __kernfs_new_node+0xd3/0x930 [ 1371.744237] ? __pfx___kernfs_new_node+0x10/0x10 [ 1371.744253] ? lock_acquire+0x15e/0x2d0 [ 1371.744268] ? kernfs_root+0x23/0x2a0 [ 1371.744281] ? find_held_lock+0x2b/0x80 [ 1371.744292] ? kernfs_root+0xee/0x2a0 [ 1371.744304] ? lock_release+0xc8/0x270 [ 1371.744322] ? lock_is_held_type+0x9e/0x120 [ 1371.744348] kernfs_new_node+0x13c/0x1e0 [ 1371.744366] __kernfs_create_file+0x55/0x360 [ 1371.744386] sysfs_add_file_mode_ns+0x21c/0x430 [ 1371.744400] ? __pfx_dev_attr_store+0x10/0x10 [ 1371.744423] internal_create_group+0x662/0xeb0 [ 1371.744443] ? __pfx_internal_create_group+0x10/0x10 [ 1371.744455] ? kernfs_add_one+0x150/0x830 [ 1371.744473] ? kernfs_create_link+0x1be/0x240 [ 1371.744493] internal_create_groups.part.0+0x90/0x140 [ 1371.744510] sysfs_create_groups+0x29/0x50 [ 1371.744524] device_add+0x67e/0x1830 [ 1371.744544] ? __pfx_device_add+0x10/0x10 [ 1371.744562] ? lockdep_init_map_type+0x4b/0x220 [ 1371.744578] ? __init_waitqueue_head+0xca/0x150 [ 1371.744599] netdev_register_kobject+0x1a9/0x3e0 [ 1371.744621] register_netdevice+0x1302/0x1d90 [ 1371.744643] ? __pfx_register_netdevice+0x10/0x10 [ 1371.744659] ? dev_addr_mod+0x294/0x340 [ 1371.744681] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1371.744700] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1371.744712] ? __fget_files+0x34/0x3b0 [ 1371.744728] ? find_held_lock+0x2b/0x80 [ 1371.744739] ? __fget_files+0x203/0x3b0 [ 1371.744754] ? lock_release+0xc8/0x270 [ 1371.744775] ? selinux_file_ioctl+0xb9/0x280 [ 1371.744792] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1371.744806] __x64_sys_ioctl+0x18f/0x210 [ 1371.744822] do_syscall_64+0xbf/0x420 [ 1371.744835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.744848] RIP: 0033:0x7f9620ba8b19 [ 1371.744858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1371.744869] RSP: 002b:00007f961e11e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1371.744883] RAX: ffffffffffffffda RBX: 00007f9620cbbf60 RCX: 00007f9620ba8b19 [ 1371.744894] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1371.744904] RBP: 00007f961e11e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1371.744915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1371.744924] R13: 00007fff0461da0f R14: 00007f961e11e300 R15: 0000000000022000 [ 1371.744944] [ 1371.797872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1371.798819] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1371.800093] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1371.801307] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1371.802545] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1371.841986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1371.842910] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1371.844185] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:27:14 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f0000000500)=""/256, 0x100}], 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) timerfd_gettime(r0, &(0x7f0000000280)) timerfd_gettime(r1, &(0x7f0000000100)) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = dup3(r0, r0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x72, @bearer=@udp='udp:syz0\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000090}, 0x804) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r4, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040001) clock_gettime(0x0, &(0x7f0000000000)) 11:27:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x4040, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x6) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r2, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) 11:27:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x24000000, 0x0}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:27:14 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 87) 11:27:14 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) io_pgetevents(r1, 0x4e, 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000100)={r2, r3+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0xfffffffffffffff8]}, 0x8}) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGREP(r4, 0x40284504, &(0x7f00000011c0)=""/219) 11:27:14 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x3f00}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:27:14 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x5, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:27:14 executing program 4: timerfd_create(0x9, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) 11:27:14 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 88) [ 1381.266705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1381.267220] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1381.267925] buffer_io_error: 2 callbacks suppressed [ 1381.267932] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1381.269000] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1381.269662] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1381.285157] FAULT_INJECTION: forcing a failure. [ 1381.285157] name failslab, interval 1, probability 0, space 0, times 0 [ 1381.286147] CPU: 0 UID: 0 PID: 10128 Comm: syz-executor.5 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1381.286163] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1381.286170] Call Trace: [ 1381.286176] [ 1381.286181] dump_stack_lvl+0xfa/0x120 [ 1381.286211] should_fail_ex+0x4d7/0x5e0 [ 1381.286235] ? __kernfs_new_node+0xd3/0x930 [ 1381.286248] should_failslab+0xc2/0x120 [ 1381.286268] kmem_cache_alloc_noprof+0x80/0x710 [ 1381.286286] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1381.286320] ? __kernfs_new_node+0xd3/0x930 [ 1381.286333] __kernfs_new_node+0xd3/0x930 [ 1381.286355] ? __pfx___kernfs_new_node+0x10/0x10 [ 1381.286377] ? lock_acquire+0x15e/0x2d0 [ 1381.286395] ? kernfs_root+0x23/0x2a0 [ 1381.286409] ? find_held_lock+0x2b/0x80 [ 1381.286422] ? kernfs_root+0xee/0x2a0 [ 1381.286436] ? lock_release+0xc8/0x270 [ 1381.286449] ? lock_is_held_type+0x9e/0x120 [ 1381.286480] kernfs_new_node+0x13c/0x1e0 [ 1381.286506] __kernfs_create_file+0x55/0x360 [ 1381.286532] sysfs_add_file_mode_ns+0x21c/0x430 [ 1381.286551] ? __pfx_dev_attr_store+0x10/0x10 [ 1381.286578] internal_create_group+0x662/0xeb0 [ 1381.286610] ? __pfx_internal_create_group+0x10/0x10 [ 1381.286623] ? kernfs_add_one+0x150/0x830 [ 1381.286649] ? kernfs_create_link+0x1be/0x240 [ 1381.286674] internal_create_groups.part.0+0x90/0x140 [ 1381.286696] sysfs_create_groups+0x29/0x50 [ 1381.286711] device_add+0x67e/0x1830 [ 1381.286737] ? __pfx_device_add+0x10/0x10 [ 1381.286757] ? lockdep_init_map_type+0x4b/0x220 [ 1381.286776] ? __init_waitqueue_head+0xca/0x150 [ 1381.286805] netdev_register_kobject+0x1a9/0x3e0 [ 1381.286834] register_netdevice+0x1302/0x1d90 [ 1381.286862] ? __pfx_register_netdevice+0x10/0x10 [ 1381.286883] ? dev_addr_mod+0x294/0x340 [ 1381.286912] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1381.286939] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1381.286951] ? __fget_files+0x34/0x3b0 [ 1381.286969] ? find_held_lock+0x2b/0x80 [ 1381.286981] ? __fget_files+0x203/0x3b0 [ 1381.286998] ? lock_release+0xc8/0x270 [ 1381.287029] ? selinux_file_ioctl+0xb9/0x280 [ 1381.287050] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1381.287068] __x64_sys_ioctl+0x18f/0x210 [ 1381.287089] do_syscall_64+0xbf/0x420 [ 1381.287106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.287119] RIP: 0033:0x7f9620ba8b19 [ 1381.287130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1381.287141] RSP: 002b:00007f961e11e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1381.287153] RAX: ffffffffffffffda RBX: 00007f9620cbbf60 RCX: 00007f9620ba8b19 [ 1381.287161] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1381.287168] RBP: 00007f961e11e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1381.287176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1381.287183] R13: 00007fff0461da0f R14: 00007f961e11e300 R15: 0000000000022000 [ 1381.287218] [ 1381.364840] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1381.365482] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1381.366140] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1381.366848] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1381.367487] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:27:15 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 89) [ 1381.378224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1381.379178] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1381.380467] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1381.381691] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1381.382895] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:27:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) [ 1381.403564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1381.404040] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1381.404755] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:27:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) syz_mount_image$nfs4(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x8, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000180)="479ac839fc68a5cd9785f3816ea566ede853eb4f33c47d396e224f2c053401f65c80984499fa0f2eafa06d14c8deaa0e515a5d3b8e8d53becfbce0e5f05786ab44d005c4c85352a9b2c1a373ef3190ccbba2380dd8898b5fa017ba24db7c7e1020d45cca1ea36773519b799c8921277b2aed7efd3cfb6972d70760f26fe45b2125", 0x81, 0x200}, {&(0x7f0000000300)="826e396e19b58b2389eda5bf068a7292b914a5cc782b16ebf512783f6fb90c3f352be26c99bb28bb041ceecb8a0944a97c29b238734a3507c5cb8006d82e66e2366c3298a8f89655829eeb34a711fbbacdc3009e7f67682204610ecb4d197b39bd1054673b71edf07c26b2c10d659fdbfca4d5a10629a59e3e155181d9dae403eda3e0546971318a18b10042e6d74052a4", 0x91, 0x71f}, {&(0x7f00000000c0)="f6feff76fb281feb630e1e0754b78c96efdf07e3275db6c555769b470e1ec95c04266e8bb9d4555ac785561c2aad8e788a12db2f083aba0a17b1489f85285c617e59cf3aaa791517fb5a97db9c8f09644ecfec646b694a5f14e81b054641", 0x5e, 0x9}, {&(0x7f0000000440)="dec8dbd3ba414a8454f42ab24f2a13efa611d3c023f1e563a9f61e58aa612389a85f7104999c8ad55b21dfb7c7f18ad77e4918f1b61874e12904747c7f8cd280312909223a766381d094154fc4900dfbce33617ffe1150491d487d5c02ebb6629543638cdf4f59a3e1a3cc6f78d840be6fc25f07dcd1de3407", 0x79, 0x100}], 0x10912c2, &(0x7f00000004c0)={[{'/\x1d\x01\x00\x00\x80\xd6\xd2;\xcc~\xda\x92\xba\x034\xa1\x06\x00\x00\x00x\x00\b,\xb1\xf4\xd1\xb0\xb8T'}, {'/dev/ptmx\x00'}, {'('}, {'%\''}, {'>]'}, {'['}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@smackfshat={'smackfshat', 0x3d, ',%-'}}]}) poll(&(0x7f0000000040), 0x200000000000007b, 0x0) 11:27:15 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x6, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:27:15 executing program 6: setpgid(0x0, 0xffffffffffffffff) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x74000) ioctl$EVIOCGREP(r0, 0x40284504, &(0x7f00000011c0)=""/219) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x0, 0x15, 0x0, 0x1000, "6720cbaf9a7c79b3ba2e7d3cdf2c63ba432d1c1b5108c9ec9e8280a43f1423ee"}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r2, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000000)={0x5, 0x1a, 0xff4b, 0xd54a, "6f69d1c008361c03f9061fa0fad0309e2d112b4137da8cb7b614e533c871f24f"}) 11:27:15 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) 11:27:15 executing program 0: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f00000002c0)={0x40, {{0xa, 0x4e22, 0x8000, @local, 0x1f}}, {{0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:27:15 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1381.610136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1381.611087] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1381.635085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1381.635969] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:27:24 executing program 0: r0 = timerfd_create(0x8, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) timerfd_settime(r1, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, &(0x7f0000000040)) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:27:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x2a000000, 0x0}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:27:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80001) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x8) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x5, 0xbea03) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f0000000100)) 11:27:24 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 90) 11:27:24 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x80000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:27:24 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) 11:27:24 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x7, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:27:24 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) write$evdev(r1, &(0x7f0000000080)=[{{}, 0x0, 0x101, 0x77}, {{0x77359400}, 0x12, 0x9, 0x6}, {{}, 0x12, 0x1}], 0x48) ioctl$EVIOCGREP(r0, 0x40284504, &(0x7f00000011c0)=""/219) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0x7, 0x271, 0x5, 0x6, 0x3ff, 0xcf}) [ 1391.018404] FAULT_INJECTION: forcing a failure. [ 1391.018404] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.019345] CPU: 1 UID: 0 PID: 10170 Comm: syz-executor.5 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1391.019366] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1391.019373] Call Trace: [ 1391.019377] [ 1391.019383] dump_stack_lvl+0xfa/0x120 [ 1391.019411] should_fail_ex+0x4d7/0x5e0 [ 1391.019433] ? __kernfs_new_node+0xd3/0x930 [ 1391.019447] should_failslab+0xc2/0x120 [ 1391.019466] kmem_cache_alloc_noprof+0x80/0x710 [ 1391.019480] ? perf_trace_lock_acquire+0xc9/0x700 [ 1391.019502] ? __kernfs_new_node+0xd3/0x930 [ 1391.019513] __kernfs_new_node+0xd3/0x930 [ 1391.019528] ? __pfx___kernfs_new_node+0x10/0x10 [ 1391.019544] ? lock_acquire+0x15e/0x2d0 [ 1391.019559] ? kernfs_root+0x23/0x2a0 [ 1391.019571] ? find_held_lock+0x2b/0x80 [ 1391.019582] ? kernfs_root+0xee/0x2a0 [ 1391.019594] ? lock_release+0xc8/0x270 [ 1391.019607] ? lock_is_held_type+0x9e/0x120 [ 1391.019630] kernfs_new_node+0x13c/0x1e0 [ 1391.019648] __kernfs_create_file+0x55/0x360 [ 1391.019668] sysfs_add_file_mode_ns+0x21c/0x430 [ 1391.019682] ? __pfx_dev_attr_store+0x10/0x10 [ 1391.019705] internal_create_group+0x662/0xeb0 [ 1391.019725] ? __pfx_internal_create_group+0x10/0x10 [ 1391.019736] ? kernfs_add_one+0x150/0x830 [ 1391.019755] ? kernfs_create_link+0x1be/0x240 [ 1391.019775] internal_create_groups.part.0+0x90/0x140 [ 1391.019791] sysfs_create_groups+0x29/0x50 [ 1391.019804] device_add+0x67e/0x1830 [ 1391.019825] ? __pfx_device_add+0x10/0x10 [ 1391.019843] ? lockdep_init_map_type+0x4b/0x220 [ 1391.019859] ? __init_waitqueue_head+0xca/0x150 [ 1391.019879] netdev_register_kobject+0x1a9/0x3e0 [ 1391.019899] register_netdevice+0x1302/0x1d90 [ 1391.019919] ? __pfx_register_netdevice+0x10/0x10 [ 1391.019936] ? dev_addr_mod+0x294/0x340 [ 1391.019957] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1391.019976] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1391.019987] ? __fget_files+0x34/0x3b0 [ 1391.020004] ? find_held_lock+0x2b/0x80 [ 1391.020014] ? __fget_files+0x203/0x3b0 [ 1391.020029] ? lock_release+0xc8/0x270 [ 1391.020050] ? selinux_file_ioctl+0xb9/0x280 [ 1391.020066] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1391.020081] __x64_sys_ioctl+0x18f/0x210 [ 1391.020096] do_syscall_64+0xbf/0x420 [ 1391.020109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.020122] RIP: 0033:0x7f9620ba8b19 [ 1391.020132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1391.020143] RSP: 002b:00007f961e11e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1391.020155] RAX: ffffffffffffffda RBX: 00007f9620cbbf60 RCX: 00007f9620ba8b19 [ 1391.020162] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1391.020169] RBP: 00007f961e11e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1391.020176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1391.020183] R13: 00007fff0461da0f R14: 00007f961e11e300 R15: 0000000000022000 [ 1391.020202] 11:27:24 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 91) 11:27:24 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:27:24 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) [ 1391.131245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1391.132229] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1391.133631] buffer_io_error: 8 callbacks suppressed [ 1391.133645] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1391.135698] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1391.136957] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1391.162834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1391.163402] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1391.164091] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1391.164761] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1391.165428] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:27:24 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:27:24 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGREP(r0, 0x40284504, &(0x7f00000011c0)=""/219) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f00000012c0)={{r0}, "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"}) write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x6) 11:27:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x402c0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 11:27:24 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 92) 11:27:34 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:27:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)) setuid(0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) 11:27:34 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) ioctl$EVIOCGREP(r1, 0x40284504, &(0x7f0000000200)=""/211) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, "78a0073c367a0cc5"}) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x1, 0x401, 0x8}) close_range(r0, r2, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x14, 0x41, &(0x7f0000000100)="3184e34830d02a5bd4f5050b0a7dc625ab3cb8e958d77208229202ef6bf3c5f1bbcd4c13cf59b77f758ad3673cdc3a0266a6a78f0ad6777d035d8223a06877f974"}) 11:27:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x30000000, 0x0}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:27:34 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) timerfd_gettime(r0, &(0x7f0000000000)) 11:27:34 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 93) 11:27:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 11:27:34 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:27:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)) setuid(0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) [ 1400.891686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1400.892223] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1400.893106] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1400.893926] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1400.894729] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:27:34 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 94) [ 1400.919963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1400.921016] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1400.922403] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1400.923659] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1400.924906] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:27:34 executing program 0: r0 = timerfd_create(0x8, 0x80800) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000080)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000002c0)={"b9c3e5ad13dc658c3e45ee9af22affb8", 0x0, 0x0, {0x1, 0xaf26}, {0x7, 0x879}, 0xffff, [0x48, 0x7ff, 0x9, 0x4, 0x7, 0x0, 0x8, 0x6, 0xc3, 0x5, 0x0, 0xfffffffffffffffd, 0x5, 0x3, 0x97, 0x6]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f00000003c0)={{r0}, r3, 0xb, @unused=[0x2, 0x200, 0x100000000, 0x1000], @name="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"}) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:27:34 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 95) 11:27:34 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x9, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:27:34 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x6000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:27:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000300)={0x1, "a0170e68f9b6fe37e92c7938e66904575b69bbe9a471aa64cf6c1ae9c6e7c91b51d094a569ba7e1defdad33c49f9af568709f30bd4806a1fe4a4e34c35df677bc53c564f75bcccaa18d15d6b2d7cb471860fb0aacd174b918391b076165350fbc25a887705041dc2c24c964bbb0cb9720150cadd5dc1278dd0a5c75f51eb6c50950400d78437c7739795d6ba27f89684a8137987b744e1794698789b95ffc382170dad4652bd1671773fa6da3183db50cff1387e5bf6f1795f0e52f428185e884683307c2cc41ef885a4d32200d29e2078519f341b48ec67e3349dc8202edc242813222088e0a1e0390d17616fa8d978a234f6f31688f3a9303cc44348fd27b447d930541cae8caca2361b07d4c5d9a03cdd0ebd407d66e6dfb13f68357a2efcab36d924f1d2eccc3e55e9870b8c3c397c997d042d1d49ab1257f8235629af7eee6ac9a8a805e89e31be886218818a8cd210c89d0ccb538223c014a36d7821e96bae163af5e93554b495e22a5f3f69c01c79fa0190f041ee838310f2c5365f6a8769ec600bcc64e14e86b052ddee489d3f259cfd9d41df2ed24aa38724aa228c9f0a7ffb0575e45e4badb10adec1691b5c8b566fdc2089308d718c3fa37f8ab3a57cf47755db06a22b30d090fc0420dc1cc639fe1a290bdf8db99da27b5dba645fa16b9812374a3a41bbb7fd427e06e2db55e0189dec0b3fc26a65ce5444af95"}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0xffffff81, 0x9, 0x34, 0x2d, 0x3f, "85647dbca9013ee3d3715beda1328a798c5c76", 0x6, 0x10000}) [ 1401.083194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1401.084387] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1401.085631] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1401.086815] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1401.087989] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:27:34 executing program 6: r0 = gettid() capset(&(0x7f00000000c0)={0x20071026, r0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) r1 = syz_open_procfs(r0, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000180)=[{0x36, 0x7f, 0x0, 0x0, @tick=0x7, {0x0, 0x75}, {}, @queue={0x2, {0x0, 0x9c}}}, {0x0, 0x7, 0x8, 0x3, @time={0x83, 0x8}, {0x80, 0x20}, {0x88, 0x8}, @time=@time={0x0, 0x6}}, {0x4, 0x0, 0x2, 0x20, @time={0x8c, 0x1}, {0x81, 0x3f}, {0xb3}, @result={0x7, 0x9}}, {0x80, 0x20, 0x0, 0xfa, @time={0x3, 0x7}, {0x3, 0x1}, {0x5, 0x80}, @ext={0x4, &(0x7f0000000140)="75fde215"}}, {0x2, 0x6, 0xe5, 0x81, @tick=0x3d92, {0x4, 0x7f}, {0xc, 0xbd}, @raw8={"b929e910f17e23a5df4911fa"}}], 0x8c) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f00000012c0)={{r2}, "7d9e395ab7dbcffaac11ff4053c0adad848e0da819cc3e66361307b27eb2d6cccecdf7a22b9c9682652fe7458db161428326ab44bec08589964aed259651f3716035482a18e111c8354dfb6a54c7a7a1f24343323994faf942c4d7f8f5704ce29762807526aeecb6501013b148614ded6fd7166d796d0a959a89141061e57fa5d504b3e6abf8be594c7ff47ba5871a3e6ef89247fe93611d8ce9df64d3613cfa35002fd13520bea78873a8fee83b450787b09a957bbeb19793d06cbb673ddd7cf3ef41d4747c58091bd24dc961201236f3f4f10101e173d23cdf8d773c4330bb92def70cc057cbc3442ac8050a3e1f32a86687ca6b4c833885b5dde09a7903f71c9832e8b4ca438ab77b4c292131af3f6cc4f57083907e0a1c0c6084d560a242284b87b9116287a45c988ce8ed5eca9fd4e9a0ba3a89ffc83099170d7a8e399f1303b52651fe643823a548188967de40ad1f3c26f1cc1c6169260007a0061f66a53e7ab6c162842662d27c89aa9d1cf156724958eb3ad475ef6ef8d959899b76701bb8ef5e31e7b74b507c5eb56147c5bd60ad822e14599a42d1ad1f80b3d0a339daa94f3aab5a608addf7ba46f2c4238f51ac11d456394fb823e29a6dc569eb08e4f868f0e484a7da641e5200851c1c08fd9165b703c41e16ccf693f2a643ade79b5fb144e8791330e46a8367bd48a5b874f405005ca9e9bec03896aae58780dfdaadbd96279de10bbacf6dbd5237d8fa2ef7cd5a5121c5bb46c6048b44cfc6526ba91050e847cb7fec4564445a19cb2c383c05dcb742d1b557f2b7c10a23990fd07ee0ec4617730dc4d8ab07180a01fd3b9c06351d94772f789bb06572fe5cdfe779f401c1c6c872686654c84eb4a3f5b2e69483ffc8bb3a6a84fa3c806aebbe4d1574f581bc39a4d7b3868abacc1f9d1b5f76b0e3bb7e02397512afa8d3a8fb058ac6633fdc8ee83d3b02e72754c2e67c0ce3e435a49c2561d5ec2b93d55b860fc7d2bfc10c8a5fccd42afcbbb2d9c21f5171d5fa7a1e31ee748037802bf220bce43d5d765c119d0a479b1a0de4b1a67ae35e44a50605fc0f483ee4a3b87ea5e8452926be04315d67be20d1efed0e307970287b48bf30b1787536aa9acf2bc83b036b4ab25b3c98081028249d7bc2bb446daaf2c4bb84aa0d6481a87415acaa2445fd5da77a87fb7e5cfcf6e03dccff979aea2d6f7e9c29eba472240a0f27992f2350d078a84cf27ba2bce114b26b20d457fd847fcbe3d5d3ed3bb46b91dcef7c6bf8f70ba42554c652715906203ed45e0850fdf44aedd3bbe52e14c45adf225242b074151cde234b52ff7a8ee980c7382b7c9280a146b4e844dc09068efa016133cd45695b066ea1eb7f8a47842ccecf68b30d9337fcf858a52db4983223f47a0fafa3bcb2c66fae4c2ae27f45e852ce3f1251b6109fe24b2ac84febb01e8b50ca1e099e0590e2f3ca8f31a8c747d051f91a7f600dbd543f012ce63bdaf6f228e1600dfff09995d0ca76bbc7b7d8285aa1ba6f0ed171098e9c03ce684b635e1bf5b1936bd7eb681590cb3ff11acd209e29455a06913847331407e27d601ca6ad543112ca518957f85961c55ce30a5690fc7da2f23d6393b97f2d01b0db04d7cae5a8e5cc4a4bd01a383196ce36be152c8248af39dc597c477e147c7ca0300f523ff596156758b1ab67ec471fc5571abf5977cd098c4c57bffbb77179eac867412c2d3d594914af1b3c0d2abdaa84ace8f6b7cd0e249671f29c2700f432437ae4445d34cacddbd4acde30e880b7cf3f53f0c0935e3bb500e4c1fcd3b62841eedd94a3522e45f9dc1e4e11f0a4ae979a9833af53ad3b2af1b8e0f52206044d579724b9dc8cea6d89286afee799159d15449ab75b871e21880a5101f7e6b9d7950c97fe31cb1f6e7c502ab610b319f1dd417939569971d4fbb153756ff76fc0b666c850045e37ee9f0653e6f6d08c919516d5d079d2fb0301cd2e04fc9588ac4559fc4730fe2fd56ca4e1a4cb7c7397484475d76ca050f558349ce0a5ab7be1e25a2adff029c0d7d8d94474f4b9489fc8aa3d6d6514b29043551e8cf757465f873e0f29f075567fc7fa7bddcc24e50b9dbf3eb1ac083c1ee79d57f178bc999a0018e0edc27133795dc464f52d213306a2823442517fb7a097b9dbf2f44260da22810465d5b03d5e0052e43b8bbc36f07919592723f375fae121fa57187e9eaff9ce657918afb4a9cbdd386b3ca732d21dbf4a324c1388e3c62f561f9619bc091725f43e740e4e8dcfd53434813dcf0ca6d41fe8b5426b02baa61979a2c0d1a542a85f82d85b2a54c8c540841d363e3f12b08048b0121c8c2ea1323a22d1c67fba7677e2d0696b91d4cb44eacbb36db006e6136b55016f386308a7af0c17e0d1b23df60843448cb90be900dbd2c0799b800c9f84e68161080aece027f254d5ef4c1cdb4f37b69d09899cb6e3e9db619cf084bbb21c2dd9e93847277d8ea828bcd68267247df7530d391fceedc0af7aaec683608f279fcbb0c0dbd8e171ce524259e178ca58b9d7684cffa62312b99a7b997bf9d26f62fc951dfc0a56b576849e31a54697806d0724151d2e2514c3024b98ef8632873d45269c6804385f6febadb7621c7ffc1aef5c90a4603ea04de9fb5d08e6889cafc34e7291d107eaa97ebde93b787117fb3b472009b8091e51586c3d7557b33013851c0ca9bb638b228495d736695dd59a80a5b599a01ad3376fdcc3542ed36aee8bf49b25cd3bd0858b02bd9de545377470ec898ebfb8632609bd132c774ca2b418886a5f5e6fd342803002495ca4e31d70010f5ed3d7f77ee66b0622ed552133ba9fd7b7a0b3797188a7f5eccbebb04b03468d19ecf3fa013f70014b5ad4c5ceedac41d60074993b915c09f06351b8e876a38a0550cd9aba6d1aed964edddf0a4a1abe6a8b9e7a581922b9a9a5e948c5e1c38f99dad67a9a81225d7057f39fbc8ceec16d0fa6e1ae5d036378dc49a4bbb7a3ea015d325a93768d2feba46efeb3ba86166b97548100270b7d626ebb38da0ec4a157cd5cc42199f7d743629b648cf51c691b60d188bc00513ba2ee6f62e5bd51f94514f80bbef5a2552269b6705d7d46d50bb8363390418702b893a2e1b87c5bc9d05a4f789f9132d7dd869b87a2772a93a207627934cc4b6673ae4fa7cc09e14daae47ca5128292e082920cb6ffaa9ea34198f5a9bdfda0e27d05bdbf8dc58e6b1ba16b67e6228e8e095821ed2083674e35c9f90adad3f1aef7549e185187f89541b2d23412d71169a87549d21af081906b2c432270a9ba37c8e686947d13d3b6754e747adcf509a7755bc11722af190bb716687fa25758a5c594d4ebf3cac60d905acf555b5d2486c40704e8706c777fc3e2cf00acd5cf6ea8b6fd28d61c0685bc8fa90e1c7bc0877634de1d346f2bc0acad82d249bfcb9d1edae2096cb10b3a974175948a079840c1d576ada80b5abafe7d7367f66bac0472a265d05fba0deb354a58831d8c9e8fe8402f51a507eeec9ad744f8f65d7b6d4f4e9e96c3ea97334bab25b3d1a009c0bd26df632de8168a090e709e29a759c949df67a736a55f37435c6c2c189ac1f510516fab4b8160b4395672f1f2e9e02c734f90965d0d0cf50ded2d1f1398e61d2543f65331daf258f3b08514b542d95bc64c5867421cffdf634223c108dbb0dd241e08ba4f1cea8b5628c7e50284ebf672610c0c1a683d33f7aa106abe1358a3009959a3d89f0b9c0d05f30be7b86615ea15c0ec5f13f67cd0907d8a6ec6c266bd86950772f0da70115a0902273f34692c607da3fff8ffc59b83281d546b1d3bf4117a9f955a73784a3e2224f28e6b111d0a7a32644bf55c1831d707dd839b97a9e0a1198ae6d079828acc59aa280900fea3780a5f69a946b9f79c6692ee34becfebb32b8cdf53b2941d33e2b422dcacaf2d88c4217fe25b9e01192e93ccfc7c320050c4257d7a6bf0798ffc6da09c7988b2322827a64b300e88cf128224c0bdb30ed6330d87a0aefd706761ec5efe59cc75ebc35c12289c3c6f56979647225cedd2035711e1c0417859ece1bfa8bd2de2e1dd967fdd88062dc28fad079012f54f934e2d8f82b672fdf0b5ea3db0c14ff79eb2ab2bd1344d4ee03a06e3f8210e8a33e8dbdce0a461a913b2ed3429fd8b4d431b121a46a74fbf85d4e6f831e6a9c5ee779f531803b6dc0302ca74ac10e2d0c9fd6e695b6804d31a947e8117152f1921f3ea9edccab93ee73284ddadf2444da6097735916b8c082c99e9d56bb08035ddc1ad798b2a55f33ccae5255e8b5299b2f420dc971aebf30ab2bee94d629d8226da30cf7b39e0d912690f9a40d06f1e98d0af7f3368b0b549fdad880c3084bab704d8301693e5085381c56ffd92100c51a5991ea4bbec5a22233802f51fbb80acd819ac729c31aaad0e803ff0116c3c557a3afd7118049de486057b809dcd7f518d2818df92c15c9fb38297e7bd8644df2aab3a9c77c4602a10c98323cde693eef1e3851d2a28fed4f4ef48bc54e85be29b2af8dcc008a4ccd4bac9e40622a955fe6a2e05d2fd78866bd66be327590ad2fa9207904cfa61ec6dc0decc50107c2a6dd60e75f87609c6257b37e72cff45da0d53fd95599a49bc72a04a9f14afcae3ad7c6710027de7122fc1280ad5dce1b281c0a57951c5d81b591f50429a806414528a7b5010652a162ea44d555e7fa8fc583f7bc5d75112b019469236d87a4fc0b15b954faceb3b81a2a8d5920c2e2833c26441d95d4cdda4ba14b4a4bc62fbbf7c3179725750098e05d75adea2cfe80870f9998fcd3b32c4dba24c3c6d436c8c1a9fb777dc087e2de0f3a517fa2580b17ab5cf6310a0492bb236a658a570951a133733da4b7434c78cfc28817d9a5c7fb24df6adba6797546b8b376b1942ba5f3aac0cb81e386191ae94628612e80387ec7d47b60bffc0073473677dd876ed59ff8a14be0249eb17d7ab709f1c47af2fd598a743c2465643cc097459f6b6332db5ea33a2f602adfca9a6ca482b61f3e5f5c8c20e60c102bcf927f20eb49bcb5851d4d9a92f2dc9dae6cdcc61256a496182bbe6e354e37fbe95b0bb628477a19ce6f71b467e16394435f6f4847a26205837e7ec01dcb518d46a78138612420be9e03bf06c2f5088a88adf723ff65514f0df59c9945e4b5bbb4dee24bd7c24f5c3393f75d26fa64e9bd376e21cab8cdc3d3b99d2202891527bda6900d59bb4dd848aaacc624919f4caf122333968b1c23ab431dbefc7a69757008ef2473cfd4634995ec092df6514a6d5ab7c48d855973599371d24bcbb1ce79629140054913a90b0045dd977689f748acb5b24041c56170439278c826374fce05ace3e86b036a0125bb5d26bc01a4b3215c5c8415299ce58adc7f4aa9bcf82b7738ad06ad5b7f14f23ce940cd8486e93640a1a67bf6dc6eb596425a4911a379bc49a1c72a294b6379031de595daaa53acc97e862ca51aeefe48c74e0c8d2ace47f9608334409ced49ef8ef7ec4c747969382e963f3f48caa86b54132076ce2c7da220cc05a6a677a5aa9daf9886289609a44823d24204e02b5054c24815767e265acba97fb4c8e98d1e87f0c6313f423b0fb0d04c4e79fe9cc8329af26beaedea5c6f09b64713f6c2ea4333fd0349c2f5a6d94172506b72e32ed8ece1129f04821e7e98c45e1b1d451aff92d3ae9fddb3c410e25d443b4457f676e7ac19351aa302300959937694e37147200b72b00f809dc4bd9e230e8ee08097039031586d76981de0bfcb1d37a6466e52c"}) write$sndseq(r2, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{0x6, 0xa}, 0x1f, &(0x7f0000000000)={0x40, 0x0, 0x80, 0x60, @time={0x4, 0x101}, {0x5, 0x7}, {0x6, 0x81}, @queue={0x20, {0x9, 0x5160}}}}}], 0x1c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) pwritev2(r3, &(0x7f0000000780)=[{&(0x7f0000000340)="dabf77972fc785a43742c8b4b0093185337d54c9d8042e6c6064b3eb4509ef41081b28e6ccc18804a9eb3d7218f06981c979116a117d641e87a84a609796c3032cf22d788bc454301544c699c0545722effaac53f64aa3f69a23649d97024ae575afa12b6b147524adcc0cab21ae334cf5e987090bb5690d5e61ef3ceb5960a7eaea451d4c4cf179f3ccf08ca90c20d218ee6fb8b421b317a6ee706193f5ad6d5f78d21a0f98acdc2ada04288780f26de652", 0xb2}, {&(0x7f0000000280)="5d5991ec37d82446e8be3401ae30b4dcdb6577e692dc26d25d871349a8142f5dad0d334200", 0x25}, {&(0x7f00000002c0)="690f89781b5fe5973bbf15a5a10ed762e52a4da2aa426204cb436682ae081c717383f0b68c47b5a512d13a42cc9406e47f979fe221", 0x35}, {&(0x7f0000000400)="afee38d8b58a711e173c2c16b918d89708603f59a43ab3f710ee36591592ba7884536d6f64cea614030354243eb1328d12ab3c707cc72ff36b1491aa8cb564f22dc2f9abfad839c5a7316df3e94300b1fb556a58cd478474d933621bd55aecbd4c61c460bbd1d12fc1ecf334aa3b47e4c2d9fd325b18337772c4a70a3f05e2020a59f7208225d999112d242f69068d67a911b796d905a07653f1456e976943e1ccb4ed341818cde2bdfd1e07045a3970e22c17b4770e72e12906fbac69795be679c88ccacd4c05c75af5a069d8b6c536050148906d7ce0cd9698d39118857b6a33c6bb1b4f72d5004b1034746c7c9cfed06640", 0xf3}, {&(0x7f0000000500)="3008e2216279304cdae1594ba1233b673afba18fe6520faff355b26cf9185a24969fc3c7ab6b3d567e5028de7861efcbc8d60b993ac2140161f48dcf555a278fead1bc851651b73505a9c23bfe4f79035551ab1def512224e42c77d1fa3c73af8943f62c65eb48b21c04e068b6ce0cb88c8d631b3b7d44bb27ad46500bb09d2eeac29842b66c46144cc448e161a67cbcafc93b76f09937b790a6573b6e3ce61ce52df1341d1fdbbcfcd80aa0abdbfa779ca3c03866f410c2d45856f062ba40c3397b150af3088f0e66eedaf08b78a3b3facc42d1f1e6f286c5", 0xd9}, {&(0x7f0000000680)="bb59ba59f512e72d0e8ed9906ae6e91ca83601ce0fd57b04f74c643294131610f0961f78f956f3b8f787c2a0a2fa57615377500a1f19c6162211a9e429b646d0313400613a9782b4d98f673e0ca162e5aff9aae159ffae4d40c7ca23edb9103d831a6fc62dad00593be50577052d38f351046244015d54ad3ba2986dda187bfc7ecbe47fe7d4e94a00101b6617941bb0aaafc6e5cda07f23421e04214a246520c25b08c0af9c7b99745110ff34ab00b3bf6f7e4342eec5ed67f41e78a25e708451de6dacaf1bdecd217c4f9ca9be6851e6691420e18c5f5f280663dc6ef82e75f978227eeb76d622533b4ffc8021ba1b501d", 0xf2}], 0x6, 0x6, 0x3, 0x3) capset(&(0x7f0000000040)={0x20080522, r0}, &(0x7f0000000240)={0xffffffff, 0x9, 0xfffff882, 0xc0, 0x7, 0x7f}) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f0000000080)=""/171) ioctl$EVIOCGREP(0xffffffffffffffff, 0x40284504, &(0x7f00000011c0)=""/219) [ 1401.125094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1401.126229] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1401.127488] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:27:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)) setuid(0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) 11:27:43 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 96) 11:27:43 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0xc000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:27:43 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0xa, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:27:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) poll(&(0x7f0000000000)=[{r0}, {r1, 0x1000}], 0x2, 0x0) 11:27:43 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) dup2(r1, r0) write$sndseq(r0, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)) r2 = socket$inet_icmp(0x2, 0x2, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xd0002001}) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGREP(r3, 0x40284504, &(0x7f00000011c0)=""/219) r4 = syz_open_dev$mouse(&(0x7f0000000080), 0x8, 0x800) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000012c0)={{0x0, 0x4, 0x4, 0x401, 0x7fff, 0x2, 0x0, 0xffffffff, 0x5, 0x101, 0x2, 0x1f, 0x9, 0x8}}) 11:27:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x36000000, 0x0}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:27:43 executing program 0: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) [ 1410.097606] FAULT_INJECTION: forcing a failure. [ 1410.097606] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.098687] CPU: 0 UID: 0 PID: 10261 Comm: syz-executor.5 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1410.098703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1410.098710] Call Trace: [ 1410.098715] [ 1410.098720] dump_stack_lvl+0xfa/0x120 [ 1410.098750] should_fail_ex+0x4d7/0x5e0 [ 1410.098773] ? __kernfs_new_node+0xd3/0x930 [ 1410.098787] should_failslab+0xc2/0x120 [ 1410.098807] kmem_cache_alloc_noprof+0x80/0x710 [ 1410.098823] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1410.098851] ? __kernfs_new_node+0xd3/0x930 [ 1410.098863] __kernfs_new_node+0xd3/0x930 [ 1410.098885] ? __pfx___kernfs_new_node+0x10/0x10 [ 1410.098907] ? lock_acquire+0x15e/0x2d0 [ 1410.098925] ? kernfs_root+0x23/0x2a0 [ 1410.098938] ? find_held_lock+0x2b/0x80 [ 1410.098952] ? kernfs_root+0xee/0x2a0 [ 1410.098965] ? lock_release+0xc8/0x270 [ 1410.098979] ? lock_is_held_type+0x9e/0x120 [ 1410.099010] kernfs_new_node+0x13c/0x1e0 [ 1410.099036] __kernfs_create_file+0x55/0x360 [ 1410.099062] sysfs_add_file_mode_ns+0x21c/0x430 [ 1410.099081] ? __pfx_dev_attr_store+0x10/0x10 [ 1410.099109] internal_create_group+0x662/0xeb0 [ 1410.099140] ? __pfx_internal_create_group+0x10/0x10 [ 1410.099153] ? kernfs_add_one+0x150/0x830 [ 1410.099179] ? kernfs_create_link+0x1be/0x240 [ 1410.099204] internal_create_groups.part.0+0x90/0x140 [ 1410.099225] sysfs_create_groups+0x29/0x50 [ 1410.099241] device_add+0x67e/0x1830 [ 1410.099267] ? __pfx_device_add+0x10/0x10 [ 1410.099287] ? lockdep_init_map_type+0x4b/0x220 [ 1410.099307] ? __init_waitqueue_head+0xca/0x150 [ 1410.099340] netdev_register_kobject+0x1a9/0x3e0 [ 1410.099371] register_netdevice+0x1302/0x1d90 [ 1410.099400] ? __pfx_register_netdevice+0x10/0x10 [ 1410.099420] ? dev_addr_mod+0x294/0x340 [ 1410.099450] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1410.099478] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1410.099490] ? __fget_files+0x34/0x3b0 [ 1410.099507] ? find_held_lock+0x2b/0x80 [ 1410.099520] ? __fget_files+0x203/0x3b0 [ 1410.099537] ? lock_release+0xc8/0x270 [ 1410.099568] ? selinux_file_ioctl+0xb9/0x280 [ 1410.099589] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1410.099607] __x64_sys_ioctl+0x18f/0x210 [ 1410.099628] do_syscall_64+0xbf/0x420 [ 1410.099645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.099658] RIP: 0033:0x7f9620ba8b19 [ 1410.099668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1410.099679] RSP: 002b:00007f961e11e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1410.099691] RAX: ffffffffffffffda RBX: 00007f9620cbbf60 RCX: 00007f9620ba8b19 [ 1410.099699] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1410.099707] RBP: 00007f961e11e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1410.099714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1410.099720] R13: 00007fff0461da0f R14: 00007f961e11e300 R15: 0000000000022000 [ 1410.099756] 11:27:43 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xa0800, 0x4) r3 = accept4$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x0) dup2(r3, r2) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) [ 1410.184552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1410.185844] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1410.187374] buffer_io_error: 2 callbacks suppressed [ 1410.187388] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1410.189405] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1410.190645] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:27:43 executing program 6: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r0, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000127bd7000faffffff09000000050033000200000044aec7c6e5a22a614cf22591ab7d56082e6fa81277625412c38c158a52a0ee1a746d101a41db2b32e06a371981eda4a84980c48bb89d91ecfa4b1d605b4b1885eff013160e95d9aa5b5eabb69454ae2081222937d7825b144b675eea989784f19847e2ef01545b03cc6ec09eed02015e2c082fd33c5031db1063c9cd68dd6f8a28570722e67184ccb36190866c63f8eed53c2ccbf02fea3537"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGREP(r1, 0x40284504, &(0x7f00000011c0)=""/219) r2 = pidfd_getfd(r0, r1, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0xbf131f3bea6618da, 0x0) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000240)={0x2, 0xf5, &(0x7f0000000340)="3e51073e0a6af7aada3044cb92003cac05dab9a4adb4605c1b1dce3062a73ce9df2ac6bdebebc82c5275e4c6731a8bc416ad351290943b4d5a9aced2fe9c85c2056699841f2dde8edf9e594560e098e6a9a45a7ec8f6238b8f90fca59acb4c74095f26d79f1dad3e4852785790e9f8a2f66b78cb9eb089580eaeb27cf96e27632ef6db0ac105ae155e26ff34768c9d7ad42eaafee4d947731ddd6aca03653315a9825ffd494ebb24d4eb71a8e83b5323fa6c005f70437ec32c7ac99059af419cc006a8fc8f5cf59ae59e5caf7feb091b30cb8ae0cdfb6fddcbcbcf5cc02963652f3c9c8243b6c5c13f29ec368583b24bc2a7a5dcb8"}) syz_genetlink_get_family_id$team(&(0x7f0000000140), r2) [ 1410.225199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1410.225812] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1410.226722] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1410.227452] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1410.228072] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:27:43 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 97) 11:27:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) 11:27:43 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x12000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:27:43 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:27:43 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0xc, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:27:44 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x18000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:27:44 executing program 0: r0 = timerfd_create(0x8, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300), 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000040)={{r2, r3+60000000}}, &(0x7f0000000080)) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x84) write$sndseq(r4, &(0x7f00000002c0)=[{0x4, 0xc1, 0xb2, 0x3, @tick=0x7, {0x20, 0x80}, {0x0, 0x81}, @ext={0x33, &(0x7f0000000140)="3c5b89ff8d13834c04b713480fbeb406f0b6c41f82f1519b6db2c45f8f0308b000a3a3c266f3d1b7c5cc75f36c39bb48db2a3d"}}, {0x3e, 0xa7, 0x6, 0x0, @tick=0x3f, {0x5, 0x38}, {0x0, 0x9}, @raw32={[0x80, 0x2, 0xbe28]}}, {0x20, 0x0, 0x42, 0x1, @time={0x234, 0x8}, {0x1, 0x2}, {0x0, 0x7}, @connect={{0x1f, 0x5}, {0x6, 0x40}}}, {0x2, 0x0, 0x7f, 0x64, @time={0x715, 0x8001}, {0x4, 0x9}, {0x6, 0x3f}, @control={0x33, 0x7cd, 0x10000000}}, {0x0, 0x4, 0x3, 0x5, @time={0x3, 0x3ff}, {0x3, 0xff}, {0x80, 0x20}, @queue={0xfd, {0xf6, 0x3e7}}}, {0xc5, 0x1, 0x20, 0x0, @time={0x6, 0x6}, {0xdb, 0x3f}, {0x5, 0x9}, @raw32={[0x8, 0x7, 0x4184]}}, {0xa4, 0x5, 0x2, 0x7f, @tick=0x9, {0x80, 0xf7}, {0x1, 0x2}, @connect={{0x1, 0xe0}, {0x8}}}, {0x9, 0x0, 0x5, 0x39, @tick=0xbc, {0x2, 0x4}, {0x5e, 0x80}, @addr={0x2, 0x2a}}, {0x0, 0x63, 0x81, 0x3, @tick=0x3, {0x16, 0x7}, {0x0, 0x7f}, @connect={{0x3}, {0x40, 0x5}}}, {0x82, 0x7, 0x3, 0x3, @time={0xfffff001}, {0x1, 0x7}, {0x1, 0x1f}, @connect={{0x1, 0xf8}, {0x5, 0x81}}}], 0x118) r5 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000680)={'#! ', './file0', [{0x20, '/-'}, {0x20, 'lQginuid\x00t\xbe\xec\x0e\xa6 O1XRfU\xa77\x90'}, {0x20, 'loginuid\x00'}, {0x20, 'loginuid\x00'}, {0x20, 'M,+\xd2\x92\xee\xc1\xc6\x01\x9a\xd0qH\xealg\xd1\xff!\xa7\xdf\x1b\xb9\xe5E\x17t\xbd74]U\xe5\xabB/\x03\xbe4\xb3\xd1\xa4wz\t&%\xcb\xf8\xccz\x85\x15h\xd5KW\xa5]\'1\xaa\":\xac_0\x8b\x11\x05}\xc2\x8b4\xea8\x87c\xcf\f\xb2\x89\x9b\xef\x11(|]\x8e\x18\xb8\x11\xbc\x92\xf4\x81\xddB\xbb\x8f\xfc?2\xed\xd7\xf0N\xdd\xa8\x11q\xf1\xe4U\xa6x\x9eb\x11\xeb\x17\xec\xdfJ\x10\xfaC\xf4h]\xbfQz\x7f\xaeM\xad\xa1\xba\xdb\f\x99\xafH\x9a\xc0\x0e\xf6\x0eW\xed\x0e/\x1cy\x14\x9d\"\xd3z\xc6\x16\xd7\x19\xf8y\xb7=e\xba\xca\x147xL\xf1|\xa7,\v\xeda\xaa\xb8Zi\bX\xa7Z\xaf\x00\x1b\xabra\x87\xa0\xbb\x96*\xf0\x05\x92:\b\x8a\xa4\x83\x8f\xf9\x04\xa54\x10W\xd9%\xa2\x0e\fb^\x1fb\b\xba'}, {0x20, 'loginuid\x00\xff\x9b\xd5\xf9.\xf5\xe99`qc\xd34\x13^d\xdd0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:27:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) 11:27:53 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x1e000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:27:53 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 99) 11:27:53 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x10, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:27:53 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x10000000005, 0x10041) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000180)=0x81) ioctl$EVIOCGREP(r0, 0x40284504, &(0x7f0000000080)=""/220) 11:27:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x3c000000, 0x0}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:27:53 executing program 0: ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc1}) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000400)=ANY=[@ANYBLOB="01007c8b00eebd904ef4e7392ee5ddf16ebc000000000000000025ce574c00005cceb1", @ANYRES32=r0, @ANYBLOB="00000000000000082e2f66696c8b983d4f720065300099557800000000c4e7d6bb80d4c8d17225a6d7ebdfb7a5d07f2bf9e18e8fc36e1e05388a486b0400"/84]) timerfd_gettime(r1, &(0x7f0000000180)) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/238, 0xee}], 0x1) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6e725f626c6f636b6dedc1cb2c00"]) timerfd_gettime(r0, &(0x7f0000000300)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x400, 0x80) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{r3, r4+60000000}, {0x77359400}}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0/file0\x00'}) timerfd_gettime(r5, &(0x7f00000003c0)) [ 1419.808256] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1419.808919] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1419.809837] buffer_io_error: 5 callbacks suppressed [ 1419.809844] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1419.811000] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1419.812437] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:27:53 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x24000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:27:53 executing program 6: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x6}, 0x4) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGREP(r0, 0x40284504, &(0x7f00000011c0)=""/219) [ 1419.853583] tmpfs: Unknown parameter 'nr_blockmíÁË' [ 1419.858124] FAULT_INJECTION: forcing a failure. [ 1419.858124] name failslab, interval 1, probability 0, space 0, times 0 [ 1419.859896] CPU: 1 UID: 0 PID: 10318 Comm: syz-executor.5 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1419.859927] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1419.859940] Call Trace: [ 1419.859948] [ 1419.859957] dump_stack_lvl+0xfa/0x120 [ 1419.860002] should_fail_ex+0x4d7/0x5e0 [ 1419.860035] ? __kernfs_new_node+0xd3/0x930 [ 1419.860058] should_failslab+0xc2/0x120 [ 1419.860091] kmem_cache_alloc_noprof+0x80/0x710 [ 1419.860119] ? perf_trace_lock_acquire+0xc9/0x700 [ 1419.860160] ? __kernfs_new_node+0xd3/0x930 [ 1419.860183] __kernfs_new_node+0xd3/0x930 [ 1419.860214] ? __pfx___kernfs_new_node+0x10/0x10 [ 1419.860245] ? lock_acquire+0x15e/0x2d0 [ 1419.860274] ? kernfs_root+0x23/0x2a0 [ 1419.860297] ? find_held_lock+0x2b/0x80 [ 1419.860327] ? kernfs_root+0xee/0x2a0 [ 1419.860350] ? lock_release+0xc8/0x270 [ 1419.860377] ? lock_is_held_type+0x9e/0x120 [ 1419.860421] kernfs_new_node+0x13c/0x1e0 [ 1419.860457] __kernfs_create_file+0x55/0x360 [ 1419.860496] sysfs_add_file_mode_ns+0x21c/0x430 [ 1419.860524] ? __pfx_dev_attr_store+0x10/0x10 [ 1419.860567] internal_create_group+0x662/0xeb0 [ 1419.860606] ? __pfx_internal_create_group+0x10/0x10 [ 1419.860630] ? kernfs_add_one+0x150/0x830 [ 1419.860666] ? kernfs_create_link+0x1be/0x240 [ 1419.860706] internal_create_groups.part.0+0x90/0x140 [ 1419.860739] sysfs_create_groups+0x29/0x50 [ 1419.860765] device_add+0x67e/0x1830 [ 1419.860805] ? __pfx_device_add+0x10/0x10 [ 1419.860840] ? lockdep_init_map_type+0x4b/0x220 [ 1419.860873] ? __init_waitqueue_head+0xca/0x150 [ 1419.860912] netdev_register_kobject+0x1a9/0x3e0 [ 1419.860950] register_netdevice+0x1302/0x1d90 [ 1419.860989] ? __pfx_register_netdevice+0x10/0x10 [ 1419.861022] ? dev_addr_mod+0x294/0x340 [ 1419.861065] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1419.861101] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1419.861124] ? __fget_files+0x34/0x3b0 [ 1419.861154] ? find_held_lock+0x2b/0x80 [ 1419.861176] ? __fget_files+0x203/0x3b0 [ 1419.861205] ? lock_release+0xc8/0x270 [ 1419.861246] ? selinux_file_ioctl+0xb9/0x280 [ 1419.861277] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1419.861306] __x64_sys_ioctl+0x18f/0x210 [ 1419.861336] do_syscall_64+0xbf/0x420 [ 1419.861362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.861386] RIP: 0033:0x7f9620ba8b19 [ 1419.861404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1419.861425] RSP: 002b:00007f961e11e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1419.861447] RAX: ffffffffffffffda RBX: 00007f9620cbbf60 RCX: 00007f9620ba8b19 [ 1419.861462] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1419.861476] RBP: 00007f961e11e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1419.861489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1419.861502] R13: 00007fff0461da0f R14: 00007f961e11e300 R15: 0000000000022000 [ 1419.861540] [ 1419.918196] tmpfs: Unknown parameter 'nr_blockmíÁË' [ 1419.923023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1419.923563] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1419.924228] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1419.924866] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1419.925498] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1419.940755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1419.941202] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1419.942034] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1419.942798] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1419.943550] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:27:53 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x23, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:27:53 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 100) 11:27:53 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {r2, r3+60000000}}, &(0x7f0000000080)) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:27:53 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:27:53 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) [ 1420.013645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1420.014118] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1420.014811] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1420.036056] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1420.036794] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:27:53 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x25, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1420.114014] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1420.115231] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1420.140099] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1420.140682] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1420.178138] FAULT_INJECTION: forcing a failure. [ 1420.178138] name failslab, interval 1, probability 0, space 0, times 0 [ 1420.180383] CPU: 1 UID: 0 PID: 10356 Comm: syz-executor.5 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1420.180414] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1420.180428] Call Trace: [ 1420.180435] [ 1420.180444] dump_stack_lvl+0xfa/0x120 [ 1420.180498] should_fail_ex+0x4d7/0x5e0 [ 1420.180531] ? __kernfs_new_node+0xd3/0x930 [ 1420.180554] should_failslab+0xc2/0x120 [ 1420.180588] kmem_cache_alloc_noprof+0x80/0x710 [ 1420.180615] ? perf_trace_lock_acquire+0xc9/0x700 [ 1420.180656] ? __kernfs_new_node+0xd3/0x930 [ 1420.180679] __kernfs_new_node+0xd3/0x930 [ 1420.180711] ? __pfx___kernfs_new_node+0x10/0x10 [ 1420.180743] ? lock_acquire+0x15e/0x2d0 [ 1420.180772] ? kernfs_root+0x23/0x2a0 [ 1420.180795] ? find_held_lock+0x2b/0x80 [ 1420.180818] ? kernfs_root+0xee/0x2a0 [ 1420.180841] ? lock_release+0xc8/0x270 [ 1420.180867] ? lock_is_held_type+0x9e/0x120 [ 1420.180913] kernfs_new_node+0x13c/0x1e0 [ 1420.180949] __kernfs_create_file+0x55/0x360 [ 1420.180989] sysfs_add_file_mode_ns+0x21c/0x430 [ 1420.181016] ? __pfx_dev_attr_store+0x10/0x10 [ 1420.181059] internal_create_group+0x662/0xeb0 [ 1420.181099] ? __pfx_internal_create_group+0x10/0x10 [ 1420.181122] ? kernfs_add_one+0x150/0x830 [ 1420.181159] ? kernfs_create_link+0x1be/0x240 [ 1420.181198] internal_create_groups.part.0+0x90/0x140 [ 1420.181232] sysfs_create_groups+0x29/0x50 [ 1420.181259] device_add+0x67e/0x1830 [ 1420.181298] ? __pfx_device_add+0x10/0x10 [ 1420.181341] ? lockdep_init_map_type+0x4b/0x220 [ 1420.181373] ? __init_waitqueue_head+0xca/0x150 [ 1420.181412] netdev_register_kobject+0x1a9/0x3e0 [ 1420.181451] register_netdevice+0x1302/0x1d90 [ 1420.181490] ? __pfx_register_netdevice+0x10/0x10 [ 1420.181523] ? dev_addr_mod+0x294/0x340 [ 1420.181566] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1420.181602] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1420.181625] ? __fget_files+0x34/0x3b0 [ 1420.181657] ? find_held_lock+0x2b/0x80 [ 1420.181680] ? __fget_files+0x203/0x3b0 [ 1420.181709] ? lock_release+0xc8/0x270 [ 1420.181751] ? selinux_file_ioctl+0xb9/0x280 [ 1420.181782] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1420.181811] __x64_sys_ioctl+0x18f/0x210 [ 1420.181841] do_syscall_64+0xbf/0x420 [ 1420.181879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1420.181903] RIP: 0033:0x7f9620ba8b19 [ 1420.181921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1420.181943] RSP: 002b:00007f961e11e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1420.181965] RAX: ffffffffffffffda RBX: 00007f9620cbbf60 RCX: 00007f9620ba8b19 [ 1420.181980] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1420.181994] RBP: 00007f961e11e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1420.182007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1420.182020] R13: 00007fff0461da0f R14: 00007f961e11e300 R15: 0000000000022000 [ 1420.182058] [ 1420.271000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1420.271993] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:28:02 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x2a, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:28:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x3f000000, 0x0}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:28:02 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_submit(0x0, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:28:02 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x2a000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:28:02 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) setuid(0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) 11:28:02 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:28:02 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) r1 = getpid() r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) lstat(&(0x7f00000063c0)='./file0\x00', &(0x7f0000006400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = gettid() capset(&(0x7f00000000c0)={0x20071026, r5}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r7) r8 = getuid() r9 = getuid() r10 = getgid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x0, r9, 0xee00, r8, r10, 0x0, 0x7}, 0x0, 0x0, 0x8, 0x3, 0x17e, 0x1, 0x8, 0x2, 0xfffb, 0x401, 0xffffffffffffffff}) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r11, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008940)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="c07fb7c26f3014629e508b6d99bab217662b025c483b838bfc5d069e1d47cc330b9b6c484e0af706577493c6a2879a050e76212479d1ffa34e2d2ee48feb5d70187ff5ee8d8722a49fba0b4aabdf76dd3d76363b9f8123810d26c295e39795e471be6be78299796ebeb169dfbe6635b2edc4d25d92dfa41aa55307d31094ffb27dbea57bda766ad7ef9a97003093f49fb4fafe2f4ad2ab11b5e979a85b1106f1", 0xa0}, {&(0x7f00000002c0)="5e4e3b3f2fb0ee1552b332cf0f096a86743a4290acb9028c0a1afd9369c7da3e802280ab5d440aded391e45e3f6c24e401b403be4c110256f544e3db62c2b397b816ac17d5977c838f8919218d9f70d18ee06e6d429fe5102de770292ddf48cf9ba0996f59438ba86c9458a6cfba0d5e8b557f89e558f10fbdc6460399f0d106385012037bbeb709de65d3ad53279dde947a6697a04176036da1a4a2b72125f7d772d01772347e3f52a5bb", 0xab}], 0x2, &(0x7f0000001640)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}], 0x80, 0x20000080}}, {{&(0x7f00000016c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001780)=[{&(0x7f0000001740)="2485", 0x2}], 0x1, &(0x7f0000001900)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70, 0x4800}}, {{&(0x7f0000001980)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000001a00)="8d4092d25c24a902bf3b896c04ac200efb75d5f9340ec10bedf4c1d59483b61d3fbdccd586c1da8d3466b957b5d81f6d9d732209776f988990d777d49e3bb4dc93933c25448c3ed14e420aa55b44d3c1e9a50a101faaa071190b496099cb9ad2efcab8d1a8f933cf06206f4bde1c4b73470af4e963e77cb12caa41a4659cdafca43bad5296847685fe061fa11c229eb0", 0x90}, {&(0x7f0000001ac0)="87cd51194385902185b5cdeac22d318918073dd9d6cd022a55d6d30e16d21d9fdf15dda9d00cb0144ce1dcb536fd3bed31482612a77169b0fc45bac4c50afcc5fd8517899cd42227ae939ee81a04633075", 0x51}, {&(0x7f0000001b40)="ab4e539aab14b5423cc0869fcc806c3371d0d93682b6fb77a4d7b9fc40687ba081d6cb491b74f849461466bc556ee6e34ca87448e1a87951e335b6030d21f3d41ee91f1cd13e7cfccc4f2acd06cdace1928b1dd0b3f2f784f10855e8c447d5020e05040742b63ccd84475767ec83cf2365db443d1d176d71ceb4df6afd7ae92d87ff2c2f5b4c6187cb31473e02321d8a13bc53473953a25dcfc461af58a1bbf6091ec69ee81e4e289e8e78d60646997737613b93c620f1a745ace059fd0ecd84529ab1e1bd143414299505a1ea88565184faa5a9f3939f3c279a10a7348f4ad7283b022f91130e00e7", 0xe9}, {&(0x7f0000001880)="f093e8095ea7004b02be2d24fbc2", 0xe}, {&(0x7f0000001c40)="71b96d486386c4038074bb37857033d2d8a3d5330873fbd4e203b3872fe0ba2abb9a676da127c47eedd89df32ba3f588a0ae17355d049a4f3a", 0x39}, {&(0x7f0000001c80)="2ffd43cf5d20760de0286bcecc37e2f641e5613baabcb685ac97df9d8f829fc2add7af7b17533c4034a3f38767dab73abd6db81f302e26e9bcde2ab6dbc9cc5ac5d929c4112cd2e2a064b042c9377c6c4389d99e0c3cf51a7cc102c3de027fc789fe1dc4c40daabf7a76abfc127310fb43e76b26c7394486e1969a3c24d32abb32cb9e1a92846ac6796ce1ee0bf4b390ebb7f079a7af3f", 0x97}, {&(0x7f0000001d40)="117a89af0703f34dd74ae3bb2658a56af08710df1383328efa0a1b0bfb04d37da7942eed0aa522f6eba474096e0764c7a268255cde6a2c143f4e8b8afdf2d9840b7ad06a37e9680e893b0fb27aa33532c8d2a8f11986a4cebfcf08656a741db573a65ba20f9a2f18d43eaeb256899f0d00e00affcd7193f4fbc9e6e7bd4a3008d6fe6db552e65a715a2919946805d84742f353d1bf5f494ca330e84bc50d196a25a982df7f8ef3b9ad209ad0affdb406fa9eae2510e1c0812f98aaf4787b57e94658bb1b1ab1224797fa92e05ade3998934140dacfcff15704ea70a69f35dc4a299df3", 0xe3}, {&(0x7f0000001e40)="502cabb2fcca474a8be8d85078f157711399b721e9b6ea45", 0x18}, {&(0x7f0000001e80)="f85c7cc2677055b56b62d5363eca8d3f5edb107a384a315009676ecfe2aceca4442a6dafd8e5e1e79bc612141aca7166c6e3568c991df8fc323dec41d043f88dc35acda28b4b85114d1c10dd97a3ba4120aee493ccef0af9119161377448de265c72e419b4964b034e1ae08ea6764c4687b45b8957343d086826b710fe89eb10bf0e2ffa9029142e6c", 0x89}], 0x9, &(0x7f0000002080)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}], 0x30, 0x20008000}}, {{&(0x7f00000020c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003140)=[{&(0x7f0000002140)="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", 0x1000}], 0x1, 0x0, 0x0, 0x20000040}}, {{&(0x7f0000003180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003500)=[{&(0x7f0000003200)="ffe6db2d3ed81d9ef46863fe8f6c4118203429b6c70ceeecc3bb631fb86f6d5c8571d34933efd94a7a71152bf155ab3c7b998fab600cc400f852809ba7968936d51f7e8d41c1fe11dc1fe800ad4cea66f43faecee16e5d19c5ba3e25840fe49bf29adb82977fbb52e738ff68a2fa5ef6681714f03e7bfa37908f4135d000d47cdce303fcc0ba60ac8713ae97f6ed2b1795f96bb710ebefacf77f5db19c9327231b1378fde7626f2886d8eb54e81890", 0xaf}, {&(0x7f00000032c0)="da360ccb552f277e07e636b5bb5770029a25a6f8d85af63ba924b08221bdb9cb9198d39f8ab0f2a4369c5a91698ac70b408db8b0db7fbe9107d7a8b46ea0875440e129b2ccd73641db64", 0x4a}, {&(0x7f0000003340)="8c14682325bff85a889704b9d3aef4f3493e95f650c83257d1f9714d6a275beeab0fbdc3b8", 0x25}, {&(0x7f0000003380)="26ba42fb4f3c399fd4364e9ec9bbede4192d91ca64c2aa2dd341428df5108e662284cac87cecf5ec5c919ffe2506d7800f04be0a5559b88519469ebde585cb8c9bb468235b1e21397d173c066d56ecad1bc1eca04b0aa0b1104fdc7df41204a898e0edf7dbd5d260a1e5b20b234290f73f3de90897ada313f4aded41", 0x7c}, {&(0x7f0000003400)="9e00a7a496f896a757a4e418b173c9d3f2110d2ee882782e4a3469dd350f1e9a3e75277742f1216982b22a12c941b97cbc32fc1be99802ed49a84285bce875d3a15324cef2afa138d6f02b6ab7cf22d57f98ec38353014285555e30adba0c0c8f17e9c3d12ef25e96c8fb476f0c0d002a2a151554d8fa4364aff42e323a46e62385980634cbc7c54959599e0bdda63fb745bf9349330819b4fa94aedbf17490edb015a3cbfcf5a72cf2a0e7b4f8aaa25a2874f7497e0de0aa4eb436ccd3cfe2376757768bc9ac19bd1a54d705584f274b750571787dbca8c7dbfeeea85395d2f37288cd71892a0b5dc2da9de88dd", 0xee}], 0x5, &(0x7f0000004bc0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0xc0, 0x40000}}, {{&(0x7f0000004c80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000004dc0)=[{&(0x7f0000004d00)="a50b9ddc4de2ed5fece42c688adc9e05d7d3ad9b3f92600bfaceb57d9cc19a", 0x1f}, {&(0x7f0000004d40)="3c3a99a720d55d8d8caeaaadb475e802f9e7055078c017178be111f38d419e7ea63622279be40c2ecd8df06828c5a63700a7b8324e4360edb3c321dfc1e891fb2b5615b4d18c01f6bcdf89b95567c05d793898b5acceae95938c9e58c8497ae38d5a4208985fcca2", 0x68}], 0x2, 0x0, 0x0, 0x80000}}, {{&(0x7f0000004e00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000004e80)="dd606175b9c3c61ade98725a394664532d1ab88fa2b16a8b34dacc369743bc", 0x1f}, {&(0x7f0000004ec0)="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", 0x1000}, {&(0x7f0000005ec0)="5ab99b8f377c19c285630445eaa1d59151c98db8cecbb93dda5b428c34fe94e8907bf2a7c30e2e361280ee7101ee1b85bb2358b5f8aac29eeb99fd4c86fae655ee0eb3aec209adce1a460b254fd3ef85c8001f94266a24aed98982ad03d65d7e7b0a15afbb9f9ab5bd78fe058e4401ae89565819b193b32d06cb3a10dc953179c0e96616fd0511638fff4151a3d6c88c171b53d18a7468025fcc0f0bb13e76e6bc5d776c8416fb7b33da3d0e10b62ca5acb0e0ea14a143fb1a05fd5e4cb8edc45d0e241cd09ffe2cd67fb1c2fd7657f0d5c86d4b0d53a5e62e5ea3d47d", 0xdd}, {&(0x7f0000005fc0)="ff82962eb7c5f26325a0a5c9727938ba9259871d2205369fa3c47dfe1f19892f4e605adfca5b38d486ad7e3953b922439c6fd06ab5bdbcbe1b64a88d33e8bdb0a2a9be17b5b8fe046914a0f7b486356a9da6d4c24ef9de5371fa08923f5c4544e4ed5a9e393c15a1183dab6db76517eeb28e4cae1dfd5e9feaeda4deadeb0a52c9fff65c70b7228b279d90adfd047576349915bdc3e60303df851479c52c6b2761096de7bbd881b02d37477fd32488a317757b527c07c57b6da898821774f24c67d0107e5c76faee43b05cbe97225ae5cf4739eb47be11071c13", 0xda}, {&(0x7f00000060c0)="137eef6196d3754454f8482d0191d2e4ef71f42b2ba39e9d4833d0869a76cbe759430066ff8ae4e349accde2b64add387591424ea8614ff80ba8e88eb41b02dfbc1fec5c3d6645c0e988d15bddf57a67b3e233a98502a2424c0c567f822adfc18ac61ad6d69b18515afaa833977a67acf6f8de97044d658a13e43478a9e7b3bbe9abc3c972dda191d3393777bb3ff6592c6e5dbb079f704afaecba49ef4f3d56a24271a84e1d842b36bfe302ee328f80827d5b1b57b7c4282af5fde7692ac4ac91ed06f12741d8ccf21c1684cef71668e1b2274ab9bf66927d766d492b", 0xdd}, {&(0x7f00000061c0)="b97a76b1ca233e5c2ad6dfc279cee75607f9bb4c876537e98025d377c55e5f94f5a0d5efe5f7f58ae273ce801a18d6f2dec10746baaf8409f782ff1467116d67156932de9242a1a4aeabc2cfc7ec19a2b0e65b1cbad015594b4c0c99f2c1fc1cae5c4ea0c615e565f486dcc3ccc32cb80c61cc9d3d287be704", 0x79}, {&(0x7f0000006240)="583c423254773f41cea2d2414179e2d631442856197a9ce24422a96bf6402907d66cf7c3ebd1f8612d33052a7c770ad41d72592df4a43d1c518f00a7c872dcfbf5ba5e10e35cbcbd16e66acc82cf7267c828a2f778e6dfe178b8d342e8f4db48aa7c66783e331f04d96f6d7d262e5e128761de4be1fc8badc6e98fd2aa468d108c613772ae259615a558f8a2a71f8faaf5983b3391a82c04fe79413bbac9c1cc67577cd36059c3bb42e4d5ef0b0c4c7107735c640a6bd56f04a3bbdb8ee553549494dd035e052211b4a16a5d8ba8af375be7e592f0b8", 0xd6}], 0x7, &(0x7f0000006480)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r3, r4}}}], 0x38, 0x4}}, {{&(0x7f00000064c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000007540)=[{&(0x7f0000006540)="87c03256e0f7dba4e3199dc40fb3cd79a6865a4183080f77425dfe346e6910086a7bdcada04023b78ffe612af9cf7b697b698bcfadee9766d17d4cb6640af593c89fadeecb02be6ff13ab51bd00ddd88d4269834663c64f48fb99c63c3b6ebf406246cc88d7b6977d2378ae1817ab1f138a2d64482f0a3b90d450dd5cd4c706887f33c71c128467019d91d554197403dc8cd1f91854fa82dd139426ba23385ab54aa84655c33754f971c56b0c56090028abcd111bd599216c806622231fa97f7ef0d3a6e8d14e566a9a022488ab3f9248e0d2a2123d0d37d2a59d3478e41b3e9f320224f58da5a9a6477fcf3fe9033b70d0bee3620f17e8a3c54c7d1f5c9236dea6ea4dd34c4783c899c6f7f8796b436034b986b1b910977a096dd23ea89eb26be1297def693130bd20729fe2c4094a2552c80b5d757c3cf40f1d80cda928e75c7364154a29abfbef3c1879e9c04c54973c0342267e2e86cc4a3454dd8a319a72c88c193829cacf8ac73d5cb865ad918f8b5d0ae4c61488e2f789421b716040282030f6da406ee19b9e72876afec96131da571875ded738715aed6e780164fac28a68419814b5c182b422c46708e81827881f941d05bc07257c5964d3daf963a5b29007665ef13c1687afc321666c0c2e21a429c016af2058846c41604c8d3d129710df3bdc85e7a8ec66051955bf04668efb06b7520adeb99865873e1efe6b7ddd2ae0cb78ad01c8ae287c4c3b86298d4c148cc61272b5cdd46a7069e30deccfa39fb4ab65a1b9a21de7074a67a4162f65267bd08b724e0f753729b09c40468cc37f061c5a804d5907f9d3dec28a5778b963d2888dd85e72327d32dea1c214d0aa616141a4287cc8561685401a51cc02e87ca459c9213ef56aba7443496634394d46270ef7019d78d90a28df03380806b0ed3bc5b3c6dc096059e8c80a4805fb2cb943d8a1b5c64c2cacaa6f55e9f23d3c1daeb56e640ecd1c7a5f0fc5c8287a7e54a86bd39d292a9e1a718c7eea0cfdd326d836608a921067550c97f87cf47b61f8b04c548da0bdfa59b05ad44069c9e4903934366f630b4d13202841b0644f0ec540c9feb704408ef361ed372f17174afe46c6649a09823ed04b9be5ab052a50e30d6e0468dd5fcff8e32ba97546dda245a1e1a89d846f4f425feb65963348319a1bf9763518857f447712c3c7b1273bb6d105243334029585093070f968fe6307471ec00190e8493a65ac49e532498a21231a523ba2762628553deedcbdbd2c566c0d9af9de6f67faad484c838b96f148a3ac8b24059c9669c7d1f7fa848b6ad6275561bfa60811da33b9046eef320e7edfb20738720080718a2490e05ccab95555c8802deed5fa7922b4ad6757b3d779497e805c8020b3d025f2ecbf123d2ec9f128a542162082fecffb6169bedec28a7e9f138cfefbab58d1c1cfdf12f42236285dea07f2172e118a291069d7fc6ea2e2568605dc80a9f3c74cd6aac4d9a7525495b7a0b09131f201b1f7e1d926de8ab3141d24c151bc01593fb8e697ddee81818e67904670c5446bb5aa69fcc24348517e0444fea0eb067286113f459e522c7259b235fbd22b11c134b6aa86a512ffcd599185cf6552c99448aa26b4d5e93ecc88cc1bddc06d3d72bcd1f50c22d39836e77fd90953a691bb498893105f05f754fe3cd87d0d966a389a5c4f734dff3d6ea52dc031d88544b8d57b293f99a36fb073ea73f0d82715c1a4766cf335376daf2ef9bf1359807ebc7c2ae19094fa0e8830801dd5693adcbf392af4c5d31a5a9fb4ef714b767a7bc6da436764eb8816531044d9d92ba845c837abb20c4f11c0eb86b1f8d51e818d114fe148d45641170eb5f3af307a9b2b703636d398a7f08f88c52049b127f63e99fa3efc6d4b2f8ec70791cde2cbbb7c6c3d7012a07c6e27b5b7edca9b9383e57cad661eb90b978412402518957da45ce3b9a52856909c98e2d6f3bbc83aa276adb6efcbc4d798205dc1c26ee59f6e45f54dcde0f4571b9b107526407b1d02cd28e843154d3dccff91ad2c986e88981db48f0149ca5c05e70c893160db12829faaa993c54dd645365c3eb6beb87b12eae0f2caad72c9bac68a12bf8cfa27007c43a071341a1f8ba36b4a28d82e8b543db708ffb67881ddadbb035485ba6bc302bea733bf7020b931b0016495896d50ae24db3932a9635a67c85a48c6da699d326a5927f87cc59467996bb4a0cedf87a431ceb748fcbbcf9a859f1273cfe45ac11e6cf54910c771e1a83e17366a3416b63a0b63eddb3fc59e2dea9490c99e149d4e3c1c9316d2a296759fcfefe1b9a50e1e8d074e0b17ae79ea985601994f716b99ca647a020de2f13e9a77a45d0a3cb438a598b8e2a3624b347af693c091a0c775ae2455cee2d89d1988057cc140616e82c3523fd780761e6d95f21b39598f1aa3c5be56d81c788830becf3d43062453d461441a6a60c6129fedb486240b44a7339b298f736bf8875f562e8d4d6754832925a58d56edb7c28aeb23222bd52d0f774fac10057e89329be7ebd19340d5fb9d0af6a70d6f6e17e6ddc1a66e0eb219839ff478cc4cd31aeba2de49af017f6ed6e0b61b2db4234386832ac7fa5f5e44106ca047ddf6ca57cb15bce7dd0ac10a0a4951bb2c2b2201a697af62bce4afdd808d62d8c9534618ae62b47dbc61e3dcc4e9ee18d228938e1d3798a4fe6336c65e0fc5eb945c2ebd3fde47867c347ae1a1c0ae0d21f28d7bb65ee438cc4348c6ae67a205f402223952d638e95f7c1e0d04f5c0c4d22d1a9e55075291004535de1be8d20b4b6f14886e92be9788dda672d448fe04f774a56b5f247a8767f58cd20ab42d18f1f28123d4525c9a25824139f5017c2dd69ef718fc75a6a9aa50348d6b7c3af2cb23dd496fb77381aac3e2d18e8889666c1b6585cbcd58b6e425e070a520c0347d4295ca46ad9c8a2180e9a31c5e4d773287136d2d9b3fd860af7dc31f5814d03ab9579e8dbf6b59535e8d054d102318d9bb94756b2f9b6753900d7fa13e08d1ebd55cd2031b2d38c01d82d4a8c9b00c4c23cb0e72f7399ed759945e35ece26aee66903cf9c1d85774860778850548c29763e6b45c5252176ac6f5895ea719bec493e435a9dd955e6ce2f972d212457d35c9a05013e766f27764095c391188e79774b3902e24e7345ab553446b1336ed22e9e90f20b49447e70a49403d38c2f012da65d405d6d8c78194a9b587a37d1fbc544dc5aedaf61d3bc659c6e819674b10bf3c00a101f267fa1bceb740bdbc028341324aef61c2bcdb39ee86974cdf6172d493a6448afa9bcd1879b4d1f93b3aa5436525b80b23c09566282d3e35ddb0d33b0e62c35c288d3fc522a6e8b4d57bbde27be279a0d1972e705df454e920289752fe306d46f12eb8299b9a8aa7d5063149fd43bfd4b19b4782271664ad327c591f3ea6b15130d8a056b87b3efbf8102f11aa26c02499d2a6c2ca27e5255d16b951bbb1ca093a3f122bc10fd2a06235d9e6958acd593042331cb08a0034fb1ed07be24ec2d85523645b40de46272a5b003b02d0c7c6c9e597917bb154310ecb3951a728ed683b007c51ebfb00db35e4e290562c32ea0f951ada6b582d29a97121ee8d909bd7b4459959c35ebca8de39682b4d9117f3a302bd3fe9daa022b8f77197d9a0dd9df95b8a81acb2df9551d6d6283ff2cabf12628149ea84790f123d3d3677498804a55952d6a01d2eba63b45fca540ae86a05c2dd74428e1313b7909f9b3beb99fd228c6b1151ec7cde4f9c43fce8b9fdb5fdd54498aa30cb5aec5258c71443e15c6ed31c31254364a21474f37c8c6c31e12991781e19c7c353cc32c986b037d62b8ded2133d81748084e26d24dd716d165609ddf1f9b723ddb724e1b36c8a8a5fa91f06fc5e16943b0413732ab8a6535fc672c7d08a986bb289218c190680ca2a01e3e6baf19f0c69cf3a62f2005f37b3f7fa5c771eb4a921a89fa88c6d60ff9c8387c78144d3d6a72a6ef3ac23ea17802da2bb9a2a60c60359075ae2bbb7bb5ff27fdb8108454fdd70fdbe15a96fa6561e5d055d3c1e9eba28564b14c0c45d9a386a3f72aff7227f61ede817afc16147e21e11facad883685f574638bdaf50cead20fdeac2b933bcf263ae1d1d61b4d6caa0dc649a7f9395c4fc260d7933d44f841bafdce5d8c39f68581a5bdfccc4f151cf449445e53794262f7b001df4fb85a6e6966aac5028c98cf7a15456939d8b7c2ac6d8f282cf06830d589c07e445dd29428b77aaa161a12e1b398187a888d5785d97296dc5606863caa4671423bb676d507733573e872b338b13a7bb738213c82c50125d6ff2613b3ad07dad1dffcb57e81d19881bdfaf45063e12e5193592a1a7b99389e4d725581875b2d110179dd363e870a70fc239a9090b0a0fc83327fd4cf9f33c1d885fca2392d88837452a062523241cec2c51197780507683f2fe948917e62731cabd17730cd1f1b97edc8c3cb3ad2fb5a3114bf6d9fb11ce2e8afed8f3fc876cbb5f4c6a7d2bb82a3b946c8348f62fc778e8b2325eaa0da6dec575ad304e842d68b4c33b2b81cf784d0e46e6fdae9617d1ddcf6b2c2040cc7a9ce2d4beda928e81644396f15513103270b442dbdbf7ba50b4ff474d2728a7bfa5bb7e8b161bb757106753a8aac5c6bd4ec3a920aa7da41082afb2016d2dd841ce0184d259d0d373c3ee60237eaa39d53af29b3f8e93d1f07644a95fadef1a3456d434da17d1abf997d427b9ab9c6f78deb2a7a318aa1d20db38cc422d58256fde109b33730813c14c5a3623118adaf3350be406eb934987579a2c169338bfeb3d24639d41d8c60ed4f1c103edb0762076865c0a5cb9fed9f42b0b2030bb093aac7f47d6de0ef5b8fc18a6d895b3cd2e210ada59fb41d74a2b5d0a80279a5e8159f271e08415cd82a13ffd461e6e6a40172fb520e045a7adcaa1ab53db4231bf2f2c58e1c7861980303516a4e9cf919a27bce0be8094c64b74c7f1b40eb7c8e7fc1090a6755a8a5015b12655c75afcf744c06a5a71eede57bf6881af877689b80f1e083d658fb43837b12ab21f61295ee8b597ee7fa9f99d00bb90b47a1148c45165b973321163d873849d45679134f75d9860ab85b9334d28b20da841532545f13c4ad110de0a8583a6dd345650148cdc2f87ce8ab18f3ef4d76ddddf850dedbb615cf6635b86abc3926aaac3b1388a4225417d255db87654db30d3e907e608c11d3fef93419024310ca1bdf140d3a60d0f67b87eedd12f620624b0e85de7f42c6d04ce9618ca37144ff0e3085ee088877f1696fd71411f9b18c04ebda26168d4a0479b48120f64c43eae7d4495c10d4c6be006107c2a2acc270e12b6b8fe1b9900afdd46ed4f2597de441d6c39f25c537f5987d53dd37302470fd1626d39c16df2f1b8de9f57931afb94037f00c398fff61bb6d47d619208a2de4bf3ecdcc540bc7372810d2b5de197ace5c88b43b8789441946aed6218d7bbd1c46d0f51d9b3dc2476c63c1043b57c5ab86d081074099b5cf44eb4ee8d3536a74a612f92e28d6102e19f5e25532c54fbeb88185a48e056a1ea8a354bfcef6cf21899dee68f5f77ff584ed1574f4a7b95db705880c5bb69c15899b1616c5dfe4ecf1516afb1b6a943dbc091ae1d899829363bc2511c001074ef61e0a021d14165841cc74a1dadeb1c576fc37f16105d1cadfe33c2d8ee30aba35546eb0390cf5ede384dcf6d8d9342be140635264372ffa4c583e71f26745aaa1e1e387a83a25e6bb7cbba4b4fc560de9ca3bf74b3008d2e40", 0x1000}], 0x1, 0x0, 0x0, 0xc4}}, {{&(0x7f0000007580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008780)=[{&(0x7f0000007600)="c71e47c71a84860481217bf40648589f24d34bbb9c90733fc9093ab7eff53d77c9fe10991f6906969a1d369565a593cfab362be22ff7c01f9211d9c18403ed253f60e9c7ac8a8d7a982550818a98fb250fbc0976fdd1ddacad99cad4fbee0dbf818cb259a9ced64427c0238511811f7f015823d62e959e7101053ad136a437e4123b32a51f2aa28ce13e78ce8c50d0a3f5f7", 0x92}, {&(0x7f00000076c0)="49b00c7e5c07d84ae78b63b43bec293554528d43ef6842b5273ad3f1403005b4e53c83f52e203fe4e66b1d10318c4f1e0cf4dd7df54bc1abe535982c6723e702ac78138d2a42f0c2e8554cca738567ca975342ca655c5e4fddc25b8c734e4ad0a13583f138be5ae30deb1060e342930408be0b5fa55de75f6717cab9d630fd8019a0200430fec2e2556df07e69f0b8f58eedc7bf23900ff4c2683fbed9d07307582b74888bd51535bc38adcb403aabe2f28fbf15adc8ad3fe596f5", 0xbb}, {&(0x7f0000007780)="dcb38850ce370c97d28fb5f5dcbcbca2d101408a5640ee2e35c15d06e57a53512069fba789204c36eac121c5d4fb5c1191de3e0aa70c5df9888625316d1bba8694d4b20d30eee31f172cb1a3fcf7f0e3ff22159190631f47920d96e47bd0a65386071be3b2054348b7140d76854f861ba05d35aaf7edb687baf04553c91b5e01a266cebeaa86c1d00c535a03bf30569d5faa53c97824011aa3d1630a268e2ff8a12f15b4012ee7bdcb21cff4d2b8a8204d7e927924b49cdb14a1ce117be0bfc17be1d4764b9fa26371ed948e5b3db97af6806839c6945eda1de01ad0f192ddd5a783b0da3c8c20012cb2b4371c404c071040b5a91d979a5cd39b81de6d721ab0805ba2e65417ec90059a3d775d140fe5c6613a8cd1efb3009e1ae8551ab008783e627580535f7aa61d2afed4d0e38bec7089709141a656e29c8f54f1710b273f40889f5e9cb9e51f7d8c744b70cd0481321f612ca5553e65aab028d7b3b90166e0d0ffc23e2a2ef342801a5565088200fd54dd5f0b7228c85a39338c78dd735d4a36fca6abfd2788bd5e282a66044e0420cc085a9fe9fe8f5c5c23fdf8b6a76058a85a5f47d52cd9658b5cc6bf617a592df681a2f8f0962a73f35ca2e513e9aed532ba166f53d5dcc0fb0deb21ad6c0ee088d6b1f440eb630f57222dbbc261a17ca2f87bc6f1d64f9d0536679a651845a03fd7f2a5a2e97e500a7410c38f8f97d7b275399b5556f53fe186923e50b5aeb5891aae45f974d4f06db2083134440d65df015a9102ed76e3f488d9d484a0c16dcd4f3c4076ef8a9ae0933e93a9b4fef3c9b5e419cd7c6c1758c701bcb145d32233175f744a81935e632269138e78e034bb6f2f64b1ec10f560a505946f5cd368215a55032d5863b5a08700d0b859a26af8fb668057a913897bfe0788d5ef043c8940a3b309f6b00fe3909545208ae2d8d3d93848830816bc0e0020f5e89aa6826e39ebc3671cbee7fb6fd89666b5006049da34a83b384e3e806ae1f26c2f8a0b0addb20326da8fcc054ed60680ae0f75ae468038b510f8b66a5be15d1160c04bd06b71a0c70b7a2000105cf5ca5dba74b5f4d8208c60b5a01ffe47c86cb0dc156a2c9aee38316a970df20272fd12318f89ff654ee85ce6c285fb0d45eaaf3b8dcd19c8eff0dd0b57fdc4796bb25948441da78cc960771c3d4f17af7edfb0c43ea872d27bb429500898373574d662c62fc5196b7661db872d9cda807d23733f426f48401f17b28b2addb5c0b59ce79a35dda1adb47ed3768eb37557e45ba4ca2cda893d0dd63945a3dd6d6f12b0152f8cdbe7dd5c9928743c832e01624aa2bc0139007f8d87e8b3c6e4e5b4d9f74f7a7681317815f25a5e3e0251d5e01867b2543ea9e5a6d1039287710de2bf65c979c007b188af2baf97eef530b4da5584cfdc7e09e56a36456d55da6853980471b869a530b346cca170067dc7cfbe6f238bb1f658ecc9b7b7d3a8fcc2e45bb11a850fd0809bedc314f165a4f913b0de0cf2b9663bf3a63a4b6c3de4b2b6d0a68b2bde8649dfb9c63f7b108d645fde84f7f9871c104d2fb2dec827b260db3f0e778876b4e20e28d1aa69318f2a76862a85174f49745f65ea35cbf4e0a40cb4c230d91f44c9d9420d8e957fb3b68a44555d54688519e124a4086e5722f2080098599793e1bea30b8943509d6bde2a2058833762a43a5c28dd2d87d75fed418fdb2bd777706964317a98dd136ce9792335cbb79bd0d734a66e5510fec502218e3abbd1aa50a52a3c4fe48c0e857995b8ae69050201ab6591a6dcbe7b7f8a76d564385ca2b6b65268724d017b56fa5e3c32abf427a290f31a628a896b76565d35737084d58b2a00270106f55312ddb4518b3b2690ec8284c2c853e1f7b47a00945eee82a1ffe673a8b63202d698c60fc83067d7fb4af7eaa7c440607b21ea592a3c3f6baf7cf531da8f677fe726fa2948efeb8cf2a24ed046593c417723919c74985b15a14fafc347c2d0f750f0edeaf663fdbea7380cb8c91f18e593432c223d9e9ea2721012e3429cc046be6fd271e8b15c974006b4395834da4be9d5a05201821eb2fd7c10b0bd03645a23b1df6b65031b6d46bfb1887ce305c3bbc92c9f160ad000953d7e8cb279e5e4c3741ce67c3304e7ab348eb2007594876a7cf58b46cddef6e1eadf07ffba1a1942a981edc077213996a23544da512513e6600ad4558cad2175581ba6e575c1c98bbd4b36769c25c4c27f70d0d22a948d6760f49c191b05fc2e427531af716042d628685555182eca00abe550aaed2487dd3fec5f143ae9d07d2bfd3eb7483547de43f1a8c94ec7f0610868bee991620f7baa0b55db6274fa5c733e3c945b4ba2e57037417b818b157bdd4255fd932e0edc02a6be91828fdb45f017c67f099a2972f7a30ba7349826be835d41952065e8f81e4b117f5f39d34b2314dc0b029e0bda134b267c869a6efc71dc759af2cf593ac8be932d95dc3ab11099f3950a798576725371f4735f3886af1ea330bbe83c06b57c1d7ed6cb97c969d8993c44c632f348a615e4ca04419b1b4607e52c41f17830eb11c8eb4f99aa000766bf722f397fcfda2d09204449f14c8cc1143b85c08e8ddeda71316ed01567a9ac20b7b7a213e0f6ac4b832008fed9a807d78c30dbc2609e3eba8d75d080b6fe4ec3f8ef9fded79d2992c02e10730e1f17a042d2a1bd34a1271b39d29c7b8c098fbfef87b522595f5ce1178905e7def70004e73c42566070cba06a032d156251eb0c309605a7a3126feef8598b253ddbbe8bbf6a164a5c51ce47e6a047a2b3b437d0fda04d0ef24793006aeb2c769af45b364843152f6cb0bfbfd89b3bbeab3423376bea1f4928b2b5f72b548372bdc96213aeef0cc9a394900f9316d2489992613ff101a7acd82765cedb6d0c9d7da330cd168faf08939ba798037c01bdabcc030b4a8765a3589b5014e35995595b89834ac536ea02ac6ef038da21d98770d83f3bfa204934ab745b0d75191905a319aa22b43f211e096c3d7a297902f2dde1a7c1f1a57284434e5fb6dbc70c73b6fbd9a0e90bd500e8abf3b540e1a4688eb4058c620b5d5e086b17c441fe941ceb5cdbba537dee1616f67877e613b7475c10a772642a126abfb5c6e4ce3403d9fab2fbd930b87344930327a9d7c9d6b6237b9207c00648593c041a1c0fd6024f0a719dc8330c1bf7194822f67465489fb4d788b681ea298666ae2c414aed1618000132b76679c622f0e64337860799748a83486caed762036cae3bc5a7b9d555a6da2881a5d9f9c5f7eaa6c408aeb92fb25aaf326c2269c353ba182d33727973992167f6daa4c22e61ebc9e6f11e0aa5f24f1e8ec34aac5c551e63649813a888a61309fb243626ffb0c9f231d80de282dd3c56eee8e7326ac41e50077e6a141d39e5c7d403e31da36f54174b0575710c7b1dbb4ccf228ba5da16b513f98ad3f0f550c94012229aeb3ce2dd49321213fcc5987c9272f691cf0dc341fc98ee1291f063e833a23fec7309fd6f545a9fb5bad84976f3c8d0964be2bd95e7d8e83ce5d63a1cd4d961c47dfb632054eeac528e589a318d4fe92e74567529397f7a4c2797b5db70f2c44089f7324e964478037869ec0d624d6c206a3460d53c91112cd650490e08d6c521be553af62266ef5b890addab2522f2e7ec0d8bea10b0352454230d91f7768251d6731379f1c86e3024a8bd59d2e0faeeeae116e3f43a7491c86f5563cd7dd0134ff1e62df77a6a5c411b0753fafccbe3ff261598ce9fe4ab60260e0a6d7d98efc5066cb753848028c0ea3df0125b6986753ec069faa49bcecd95ff678082ba243714cb4e8f35d31143c9358bc3605b56455f98f052634b17b6156fbb31d194149a3b4a3e6a769ae1ef739825dad915c430c169b34b1b66136cb6b1e960ff9ed17ef6d572d5c87c50cb99dbc77edf37bfcce91327625283c83deb3355850a3eff456acfec0f4d37c2a9373f27409a052f003fbd161dcb4751fe2b65c53e1ac1b0b46d5c0aad0568c85052e251cf0e1f1e5dc36f5606f9683e66fba7a6df323de9013430815f75f8d5d92bacc413e19f08b7849f54c4dfde873025da75bf4ca71cded1254e69fbd4e91b4cb7c211a4e0d480fe2dabd5b050c0021c4389f8d3f691dae9ccdaa07c59135dbbd541768fe75b427f1f99eac6fdf4c2e15133cbb61e97e76107a65a19ae41c11db48d2bcb2f177a55782fe6a3dd5cb757d330affa875b070f52c9c86046cef5f36c5da41803fed9b98c51bcd58bb81bd53a6c29bdf7b83484d8b4b9c08d738e8971fdb9838a43ac94ace96c609c6d461b631cdaa17a22fcafc65c5a74657f8ed667c6c77b9b0d0c09accb85fe5fc9b20d2073ca80877938fdaf1271bc80012947a1598e0eb10c93710343e295424d9f8b6eb72b30d39d1ac1e4c445b34bf797002c34f6c860b240765d6a01d9c21f6d8e071cb7d72228ffe9d336983ce256f11d333cc32b6c12513fa761df7b28aa39655bbf98d6c69e29baf54f12c40cd9cae0c869abeabbe29e66d3dd8ad6a0ad376b4dccb7f8e0bdce56f9106159f6219c7f3b2414c5a40978fe45fce1cfaa77b01680810bfbde7f0861836faa51ff1f77beabcd2c7add87811da72069ac0ba6f503fdd9db3c07c9044570e0d53dfd4ba258c54cc892446cf7f4eed358548e5b098df0f28073a8c25777e33b1e3f71e0367ba6267d35f8c082949f19c0a68b1c95fd9198975b8f3549574716421fe04f3c4a32fa4cdf44b73ba1b1fa2dd8cfedb8db3102592cdf2f0368e4d90c5ee50de77a52ed9662f0a0862de94616c97b89e2cb55b13f34c8a61d10636db7399b6b57acb647b7bd062268bd00f001e08de08157e2715784dc217fad495467484478fc1bb72aceb8f524629911fc497a0372d47186a79be8d4bd16cfe7335383ab7ad9e32f60ae560197426eabbdef40e1264776f5fa70bce183db9d4caef8b5b8c6c367d99226ebcf5f7e350c591ffa11013cbb47a4a1230cb8714ef8489cc2c06862ca457468c3974a4924de5ba6d231bf2df38c9003e72a2ccefe9a48ed07965078bd1b1bbdaf8a2318cfa7c9defc9b283709ab5621049000cfd45e68790674810f025b35b19b5a69eed5a804eccdd7fb2477b75bb84398783c14566bbabb4b5e7629d9ea85e3708bc4af515139a8cb2c284a972c8e1185ed4f4c8943ba7c48095f4a911d2dda42d5b0c9dce86b17024e78771f80c83e363f2017cf72ac82e2b72823b0718008916f9382f02be9a995e3036bd2e25ba1550fe5475d57af94729b7301a67c70fc9b15337339e90c15a31808e0ffe638d17f008115a544f9d297d2437bb3b826ddce32c282ff2c2a205ff12c1e267168ec8af91973851f1e2cd4dbe10424f28e5d05ab1e442b831e3d70f8d4af97fc6d498166a1423440b59cf4ce3f6817a155a7f0a32a13fb7b17987f4667f93f26179c2f92849c3f511bde1c13e7e3d7d8d0ff8c121d76f5c81584ad6a850ddb3771b9645fae5fb67d42e9197954eac480eefcb08f6d2ae8afbf491655eb661c595d2ea6c803a7eb7090aa8802a7cf71146287d10882ef654ae94699de07f1e32979bc108b2cf8e01e084c673f99aa726c5f0df572e1d211fd4a7c6f9a935926099e603895d8785bfc8aceb67d5d565969454c41db3cce8d73202a1e5466c9b3e5b138a2b92597e0f122a880fbc5be28b7a33ff4e7be8205a62487b2192926ed0a3d02fe4edf0bd666746e995c0de349f5295e10ed922b70cf9a229ea94d68acbfdb631a1c7a06787e06cab749", 0x1000}], 0x3, 0x0, 0x0, 0x1}}, {{&(0x7f00000087c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000088c0)=[{&(0x7f0000008840)="372acb4177c2f330d05e42ae408b6612e7fbadc891f55f4c2cdf58ce2f8779fcddb7fd6016be928ad5ed0f34ca8244fa0904ae838dbb5c5073a9476de07bc76718287f8e0772d5b756998f120782d909e751bf98aa71ca6c2cd3c00c5325", 0x5e}], 0x1, &(0x7f0000008900)=ANY=[@ANYBLOB="1c32ac2c034837a0e000000102000000", @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r10, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r11, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x40, 0x20040040}}], 0xa, 0x4000001) 11:28:02 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x7fff8000000000) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) ioctl$EVIOCGREP(r1, 0x40284504, &(0x7f00000011c0)=""/219) [ 1429.199677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.200661] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1429.202008] buffer_io_error: 14 callbacks suppressed [ 1429.202022] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1429.204056] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1429.205293] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:28:02 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) setuid(0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) [ 1429.236842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.237635] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1429.238429] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1429.239136] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1429.239852] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:28:02 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_submit(0x0, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:28:02 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x30000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:28:02 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:28:02 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x16, 0x55e, 0x5}, {{}, 0x15, 0x8, 0x4678}, {{}, 0x4, 0x6, 0x65}, {{0x77359400}, 0x5}, {{0x0, 0x2710}, 0x4, 0x6, 0x8}, {{r1, r2/1000+60000}, 0x12, 0x4, 0x40}, {{}, 0x36, 0x7, 0x2}, {{0x0, 0x2710}, 0x4, 0x40, 0x80000001}, {{0x0, 0xea60}, 0x1, 0x4, 0x1}, {{}, 0x17, 0x401, 0xfffffc01}], 0xf0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000180)=""/33) ioctl$EVIOCGREP(r0, 0x40284504, &(0x7f00000011c0)=""/219) r3 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.pending_reads\x00', 0x80100, 0x44) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000200)=""/221) 11:28:02 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x2b, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1429.374964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.375764] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1429.376779] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1429.377606] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1429.378273] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1429.407990] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1429.408991] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1429.410393] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:28:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x2}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:28:11 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_submit(0x0, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:28:11 executing program 6: syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xb8ad, 0x80) ioctl$EVIOCGREP(r0, 0x40284504, &(0x7f00000011c0)=""/203) 11:28:11 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8, 0x80000) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x0, 0x102, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x50}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000d0) r1 = timerfd_create(0x8, 0x0) timerfd_settime(r1, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:28:11 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x2, &(0x7f0000000040)={'vcan0\x00'}) 11:28:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) setuid(0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) 11:28:11 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x36000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:28:11 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x30, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:28:11 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4b47, &(0x7f0000000040)={'vcan0\x00'}) 11:28:11 executing program 3: io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="fa", 0x600}]) [ 1437.460930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1437.461761] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1437.462612] buffer_io_error: 2 callbacks suppressed [ 1437.462619] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1437.463815] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1437.464568] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:28:11 executing program 6: syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r0, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) ioctl$EVIOCGREP(r0, 0x40284504, &(0x7f0000000180)=""/220) [ 1437.505024] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1437.506228] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1437.506924] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1437.507569] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1437.508178] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:28:11 executing program 3: io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="fa", 0x600}]) 11:28:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) 11:28:11 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4b49, &(0x7f0000000040)={'vcan0\x00'}) 11:28:11 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x298000, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$EVIOCGREP(r0, 0x40284504, &(0x7f00000011c0)=""/219) 11:28:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:28:11 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x75, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:28:11 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x3c000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1437.704941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1437.705915] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1437.707243] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1437.708481] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1437.709713] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1437.730913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1437.731388] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1437.732035] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:28:20 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x3f000000, 0x0}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:28:20 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:28:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x6}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:28:20 executing program 3: io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="fa", 0x600}]) 11:28:20 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x541b, &(0x7f0000000040)={'vcan0\x00'}) 11:28:20 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/psched\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) timerfd_gettime(r2, &(0x7f0000000140)) splice(r1, &(0x7f0000000040)=0xff, r0, &(0x7f0000000080)=0xb4, 0xb7d, 0x3) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) vmsplice(r3, &(0x7f0000000180)=[{&(0x7f00000002c0)="dbd48d6df9a998cc745fba204d8eb0d93bd1702d6dcd3c47e2d3dacce2ee43ba72cf85666ff56f8c029edde24e1e9dec23d907838fc0542bb3c43a6fcd5758b45174c2562ea6a6af60e0a9b9f2fca94e534f39eeb84f57f02460dd5a328dadade15a256917db1ff83a49d3b50b6a0b61bc13c318e6cb38d3149380a4497270d3a328f18b6946a9d0ca48d2f71738095f54d8d5861fd2417479bbc88b486485e48ea42f1c550cd3dd9ebee1b0363509b5e5cca0b76b8d054bfa9d9076ec1f6adb154b229fe6836eb4e20f1bc595185059394201b9841907549ad96fe4678f967f735c48a1ae0f94cfceb4d84bb1a43711d497123b875583d3399f36daa187548ab09893b537968135374574b2f3be6664fcd3df9c865b5a721d509cdc938ec7027648a3a008cb6ff1a49bcef91ff98ced1f170e2670fe93697fb09a6d3425efd4e546dc99125abce04344a9c41616697b88d2fc7171bcc77fa69a24c14095eda0efc3ec91b86cc8f20ccc5fa5a6b02be309a3b0d7605a7a42ecb42176122f455329153f159d3c1e25b47d424ce2fccc151f8eea31c62964406a01fb77741c11eaeac5e800013586d14aabf251ae873a0fd084822b7adc2ca19f02beedb336d377771944fa9ef5b8b48f7e70504e90d2f493b8349eb6271aa614c106d43a885c11ab84c8969efd822f4b0b96968922d90c52c3a894d0967e1c45e93b7fa0bf6549f9bf0d0756452f08578f1ca716cf2dc5a35b42bbc5078824d3342bc9cd6d59a11f364b46b3e49c62cc301e2a23ecb5eff839834e61056c0ade8d1190691086f3caa34f49caa842597610098c7cb2ee99e4bbd9edbe4e19fb5d7aa7b7388d9544501540f51a0a893cdf61ba714ff16f29715ff1595ff4b4aac5e7994194e96b9eb28e0a1fccd0e77ce0ca966f94af1c682c3199cfd5f167d2eaeeed0fa33bb11d8ae1e519d86cd8c42014baed741d6b653923b3a04f5926aa32270625de5c351b69f5ee9a0699d466eb72b7ca57be98908a3b322bc5d7c9cd471022bac3be64761d85439ee45ff8e5efe7b81d0c43e7b1e9810ae869e071fbea1496defa0f0668b081e0fda0a4731cda269a71b5aa744a15997779955b9029a5e70609c781ab4211c6fa283e33bb6b34eff9c1e21ec692e321efd05fbb39363b3c1586bab96c284c41da325df5d43bbfb7d9c335a0225a8bdddfd79e4e7b7cf8acebaa14d13d9f327871118340835040d12c9a759ff191182fb1c750757ca78d7b3e4e0016f3e5711400f925cee5584694e0b83b20d78ab6c1b57a1e603a672d7b37cb95848402ae09caab2992d1ab1694b303260cb639f0865256d6a0ec7f5f45d5fb8361bd5a2926b46b0d184b337791cdacd60a403ebf1acc4ff481dcc11b0ce8cafa9d11c2a6ca50cf67e4fd7d4a895c05b68fd4830408b70ac849a063e6ea5e2c3a1e2dd277d1810c1eefb1bba7dd664465341ed6ec33ac5adacd46121f99144da88821ec645a94166f4d101fa81638549999753efb4665b15059d9d02c3ac3334a3f2f7216acb88ecde2ea8542d1d29ea893c5beecf4d6abc8dc121a24fa377a829aea1b1998e5351ccd56d20b1454017a4297e1fa743336180c6557846c9bfa08cf4011c7637565abecd749d8aca6613ab506ec1ff56261fe92d9c4e658254ac8c113a12d060a802260b9b0773708b47e841e69be88f788fa428d2f25bd4ceb90bb50064f307c6d605fdccbe019b624edf28a2fba1a80135fc1c2111a10d3619641a9f2cdc93a991fdbfdbd8bb17b7c7a16053ef3409925c1cfb7e76c3799ff4068ad5e64ea218f77a10ec177a1d8d349a58367f62a72d065449ae4e3ad0344a19b5088ccdbcdb3f4ae333184d7636c0c4119ab2796855aed381b572fcbd0fc12fe1093c43fe44911483ec8b7e458d07732f119f32194216f3fddd599d8b0cdadaefb763fccf2764f3bf9ed40be6cec24f7e500b591127a91acf7fcba111e1b832585a9a7f49c726ad37799467d2e7e18cf612432b734d521e4231386ed32601aa6de522efa27c057d3cd987cbf1b5aebeb1b9f7e0cdda9ce9edcb15d63e11c86bb2350e22f997ac97d93ce015258c18a824d683601f7cce3dd066a471f68b73be0d8fc44ba13a5e2451a09a5fbc80e816dcc5fb4824459f959422b38c37d1101ff19b448bdecc3b7937ace7c1f3ac00bf7a29ee5b740f73064206d064c9c5b340700ac8eab957fe9b1771175b059d94fe1d90fa3982ac234d0704e3d6ca15d091e03bf757766ed3feab565e18bd0878ce781149b7b49ac93b1ab24b3161093efa40468ea742eb31020fb84b3ff1d1601cc84e8a9ec27cd43954e1886550c157545e34a5b49a781c8a1cba012f365b8b5f96480ef0ca5eccb43a3a4d40ab178bd484178d0ea4601b70c6965e4588cdbf4e064cb4704a5f09d69edf193b33a9df4d50635386442f9772571e8c5b1655c5f1d9c1dc41566b1872ed5183a9c4d6091cb9414ccac67a3b9ba27df16ed80a26d41cdf7f2a71c1237bc090061ca4591d0950ff966be0367b9b30aba624177fb951f69d73d3f46e60645c2a08bc80bcb7c5cfdf1cf6125a1570d2f0187bd708a4ebf36bbc70ebff541abc292224812f01bf8d4a6d9dd32499d328dfc00b9e91c740f5cf6ff0f9d27bcf6d2229c7b8b10ef3a46e6ffbd0bc14da27222c58be95a39720cfa925d4594f7ab04de32b644beb1515551c3779f1b7b77c7d2efe9c118568ef10ae0e0a494b9e4f9fb6be2f078b6c58c28c0d456b635090c5b882dda28aaaf61359a650bb54195e1033d95253989f056a4983a7bf42c96562eb000a05f94dad6bbc64aded4a66f212cf9e4cde882e4c744126188d185fec81b96691a662ff3efc7cc00818888ddcdadcc494e9b494c94fcf11a6773e5055585c07c25317cec348e064468d2069664671d445efdb6b96f4b07d6b910649a13c3f2e48a964ec9c534f3c62e087f5e777720ef74ac6a26bc7a76dbb4a23a5bb4688eea57935de75888291d362ca3e05dc6bf7dcbeb1b8dc4a4b4ebd255ba36c44f42d73b970792d82b9d40b43b256e10796e62e71e61391f9aa528dd2e466fbc7a8f8c9093a08b61f9eaed39d3ececc6053f9147cb36594d668247cee37f6f49db873c6a7c5f37da28a40980ea68e02ebf7199c0c9cdaf174caac9181cd63c1995035bab27060ed80090c007bf8a7aafdd83bd1515a4772431056dcba776720f33205e9c82e1e765b651b84e531528a39c2647e1d8ae716bbfb212023894f243b2065824437cae18dc00960a05ddd3f7e839fa1a190683216cf2493edff7777e2a1982a0bd1b52d634616d87413e39b24e603f441b61e2de92e05a6ae8c3a73d8d65a192e2ed381dae2192edec5e435c1633d47c27296de1be472d85f0dfad9bbf073778610a846401e3fbd1d99a7dd650184ea2b7f40584a78dc3e10b4855709736dfed36dd97f5e6a9651e1fda0902dfc3a17cab8c74313ad61c37d6067ae8c6be29adbbda93504d761f6e8ada5291e556124c59b6a51dd9e5afcbce8cdb03f34b5bf4f93cdaa9aaaaef5e10c7db1b4c4c48195c795c5f9c772fdb8336514d9ec644d56ba496820512a902848c706d7b1610d752476d0f258aa86f835c21842bca01708c8710a60625bec844ce76f681472c92ae33d352b0167c8b379b3401a7e8d959aef4dc3ee8b7d11de44e19a3780ee66a22a2e297e995e93f0c40065548b77aa5740e51aaaa9261e2f2c6905509d7b33ddc2e82340fc88906d3f1b3c91c925805f8135efbe703b0ff8b874315b80366342f1a7ad06bd89d0b3673ae40c934a2e4f081b939776ebccb6169bfcc9087ab8b585c99126bc15d07587b8f7190c91a35da93e4fd5b570d49dab76340a7448a15c9489f370438497529c09ea1d4bd92aa54ec8fd1bb1999eaf13d9c547156337955335c754fd2871ea47f8455aad8dcdcb9e7da55498ab103c76ffc568d300e0f0bc4f1fc044ce08c82f4d54bf5b7808c368a2295b42f0b92d7638ae1f5c58bca3e3b9e5c50cf3ddb9e80e80bf9dcf25498bc0cd3e2711d3b16b14a118464fdeffe26180d4356827994575e4dc3d6aa694c090899e8a1e33c5435e3a37b90985354e57a115cbd959a77e509435b61fbf6b98a465e35a6d38ee3a6e89b0317ac720b7b35cbee304190f702066e2f3ba4235082f1ae32d95fdf4a6f25fca00979be46d35f4b19d1d9a58e08a64d31321a8d79907a4834feaf4a659cd7a5a56445425e4774a34588dcfe2988522348debdeb1f4eaca11bff0a2210a697efb9225f4a9e5a70375f7efba53246ad348a51446956ed28421eb4f1a7f9ad8263194b5488682e19142c66c187094257c315b6dec9ea9f153f7224bb6a66d586bba20704da43dca7fb7b63fbda1fb2667e2d50b9840719e54907402d4da2799b345842f64fcef51ca84b124ca07268ffe9d8c83a699394a91e20ed59070504c4d963d4adfdb1b9192d249010669975ba0f6e7c0025da648c81361a85d968eddb8a8b88f4a9298cddf774b1320a2a18a89084dc715b66e8ba1d82bf4e26de10a67e7c16a6c7c53319db441b186c1f51c56eb31bafeecd977d09de7bb4cc6b1f5db024e56ff6bcfcc58a10be04833b1866f437fe693e56bd435ca6f58868866d9e0b27ae13ec069a1e1879b90b4196bee660245c0750cb5793e7a61b4a5c0ff2133ebc36dc9cc5f00094047cbc4922881f122d34812e1b4c2c756c39b09c3f6d82ff08a0cba71289d61978bb9ae42b05765a7834b158c6d3ad6315144dec18bc07d8d560c90fb8638e351c8e5fd2cd27cf460c341eaf37a84a6632fc1614106fbe8c19e6d8462e8591ad6b0079dbfbda4fb991e461e487d34fcd5d3022e8ca2357afd4f9473f6079c1dd5073f5235a50f9d5667edd8d663660c06892ed48bc74292cf482cc70817ff6fe740438e27d3d5d6a55267ff2d0cdcd017c28586ca202f540fe4c6f03d347a8dac774162bb17463b91220db2981035afa30e44ce82a23b4690ce47075ba8b88318de7857f6a8cdbcd47cbd2646ff84951f1d99855b0bcba87699e1a4d242ba3adb97fc0d865b63f4470d7c3562c40383492b4c621e6f92dc4767376e07590ef71fe4938d9249190cbddc58bebf6bf2bf21983deaa8ac2f4307dd87f50b2370b0de210ba8032c5f1912919c920fde1a6acea0d35587f4f8be89260bc86de51bd76cdf4841f566733d443f7b0c3e543c404d2266ae0b18196f1c195bfa5c12fcfca30580b429b31a284008e7e4e5846c2c81d7ec1989df68451175ccdab8283deacd2b53360b0bb5e02f52feb5f052a9d16ebcd0c3ee74117c13e032331aceafbf1928d8ff1e25c1163bdff71496860c8def54c4e7f198cffee4106c905b55efbcfac62ee7700d2b439467d3fd75e74a90af0db0d6490100b57e4ed92989788d38e6c0a45b7a6752a6ea3198ce7e4a23482296d4b2cf8c266642ae0ce8052f2ca49f29737013a4cee65c2e0b1cd9db8ec956786b1be47c39cb77af1b2928615d7a4ab25c475687123198d84294ba7461eb1282c6dc9724504adc706b58e11fd75aa28a65758e19e62b81c138ed8d20bc62ab07d90c48cd9663b750f9fc24cbb5d3dc06c0b96e527dc0e2673ed86786f92e4df7e4423fea20977e4ca9d36b1e77bde577c508ec06c3c9086350c0554cde911a9e9ca43d06f4877e8ce751ae596d8091665a9081836fba8a69fe8ab05fbb85922b47659153a0ce65c053fd2c3293d1952eb70a8cf1262656c1e93303b161e64629aaaabeb2affa8bb12eec15754721e0f", 0x1000}, {&(0x7f00000012c0)="a2ee7b617e64e06366658a50b6c577e8ba9bb629ba121c602f8c7cfcf63f99fda05b7c788405094f83adedfa2d3f7f6225eeb6fa4a33556b5926e9797ced051c4b2291e3834d55218ad066c97d437a743123f98db7a7d14d764bf3d731e905d37fb18a75858b5ce2cf4932085fefc83d510e63d92b93f40468c27cc474e857b5551da5440001fb958178", 0x8a}, {&(0x7f0000001900)="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", 0x1000}], 0x3, 0x4) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:28:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) 11:28:20 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x300, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1446.871869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1446.873300] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1446.874012] buffer_io_error: 2 callbacks suppressed [ 1446.874019] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1446.875069] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1446.875706] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:28:20 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5421, &(0x7f0000000040)={'vcan0\x00'}) 11:28:20 executing program 3: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1446.906590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1446.907123] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1446.907867] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1446.908514] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1446.909140] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:28:20 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x80000, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:28:20 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5450, &(0x7f0000000040)={'vcan0\x00'}) [ 1446.980356] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1446.980855] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1446.982363] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1446.982994] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1446.983745] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:28:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) [ 1447.014626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1447.015955] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1447.017560] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:28:29 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x4000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:28:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x8}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:28:29 executing program 3: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:28:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) 11:28:29 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:28:29 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1ffffd, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:28:29 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5451, &(0x7f0000000040)={'vcan0\x00'}) 11:28:29 executing program 6: ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc1}) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000400)=ANY=[@ANYBLOB="01007c8b00eebd904ef4e7392ee5ddf16ebc000000000000000025ce574c00005cceb1", @ANYRES32=r0, @ANYBLOB="00000000000000082e2f66696c8b983d4f720065300099557800000000c4e7d6bb80d4c8d17225a6d7ebdfb7a5d07f2bf9e18e8fc36e1e05388a486b0400"/84]) timerfd_gettime(r1, &(0x7f0000000180)) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/238, 0xee}], 0x1) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6e725f626c6f636b6dedc1cb2c00"]) timerfd_gettime(r0, &(0x7f0000000300)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x400, 0x80) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{r3, r4+60000000}, {0x77359400}}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0/file0\x00'}) timerfd_gettime(r5, &(0x7f00000003c0)) 11:28:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) [ 1455.738864] tmpfs: Unknown parameter 'nr_blockmíÁË' [ 1455.767022] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1455.767706] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1455.768383] buffer_io_error: 2 callbacks suppressed [ 1455.768390] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1455.769402] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1455.770013] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1455.796178] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1455.797130] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1455.798502] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1455.799721] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1455.800961] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:28:29 executing program 6: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xa0800, 0x4) r3 = accept4$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14, 0x0) dup2(r3, r2) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:28:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0xc}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:28:29 executing program 3: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:28:29 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 1) 11:28:29 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1ffffe, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:28:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) 11:28:29 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000140)={{r2, r3+60000000}, {r4, r5+60000000}}, &(0x7f0000000180)) 11:28:29 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x8000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:28:29 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000040)={'vcan0\x00'}) [ 1455.952588] FAULT_INJECTION: forcing a failure. [ 1455.952588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1455.953751] CPU: 0 UID: 0 PID: 10520 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1455.953767] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1455.953774] Call Trace: [ 1455.953779] [ 1455.953785] dump_stack_lvl+0xfa/0x120 [ 1455.953814] should_fail_ex+0x4d7/0x5e0 [ 1455.953840] _copy_from_user+0x30/0xd0 [ 1455.953861] __tun_chr_ioctl+0x198/0x43d0 [ 1455.953889] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1455.953901] ? __fget_files+0x34/0x3b0 [ 1455.953921] ? find_held_lock+0x2b/0x80 [ 1455.953936] ? __fget_files+0x203/0x3b0 [ 1455.953953] ? lock_release+0xc8/0x270 [ 1455.953985] ? selinux_file_ioctl+0xb9/0x280 [ 1455.954008] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1455.954026] __x64_sys_ioctl+0x18f/0x210 [ 1455.954048] do_syscall_64+0xbf/0x420 [ 1455.954065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.954079] RIP: 0033:0x7f998c284b19 [ 1455.954089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1455.954100] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1455.954112] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1455.954120] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1455.954127] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1455.954134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1455.954141] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1455.954177] 11:28:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x12}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:28:29 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, 0x0) [ 1456.044630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1456.045638] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1456.046971] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1456.048230] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1456.049455] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1456.089880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1456.090681] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1456.092109] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:28:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:28:38 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1fffff, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:28:38 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5460, &(0x7f0000000040)={'vcan0\x00'}) 11:28:38 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x1, 0x1, 0x5930, 0x0, 0x1, "cfd8af71a4b6fd90cb4830a876f8bc17fda78a", 0x9, 0x80000000}) r1 = timerfd_create(0x8, 0x0) timerfd_settime(r1, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000000)=0x152) 11:28:38 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 2) 11:28:38 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x100000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:28:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, 0x0) 11:28:38 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:28:38 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x200000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:28:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x1e}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:28:39 executing program 0: r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000040)) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) [ 1465.369649] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1465.370638] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1465.371981] buffer_io_error: 2 callbacks suppressed [ 1465.371994] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1465.374018] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1465.375265] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:28:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, 0x0) [ 1465.409137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1465.409904] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1465.410748] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1465.411490] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1465.412111] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:28:39 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x894c, &(0x7f0000000040)={'vcan0\x00'}) 11:28:39 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:28:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x24}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:28:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:28:48 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454d9, &(0x7f0000000040)={'vcan0\x00'}) 11:28:48 executing program 0: r0 = timerfd_create(0x6, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) dup2(r1, r2) timerfd_gettime(r0, &(0x7f0000000000)) fsetxattr$security_evm(r0, &(0x7f0000000300), &(0x7f0000000340)=@sha1={0x1, "ee6b0b398a9efb27f5ad62a3cb2a31862e94f1d4"}, 0x15, 0x3) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x5, 0x0, 0xff, 0xff, 0x0, 0x9, 0x80018, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x3, 0x9}, 0x81c0, 0xfffffffffffffffd, 0xb7, 0x1, 0xffffffffffff45b4, 0x8000, 0x3, 0x0, 0x7ff, 0x0, 0x5}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) io_setup(0x10001, &(0x7f0000000100)) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000003c0)) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000400)={0x0, 0x3, 0x1, [0x1948000000, 0x100000000, 0x3, 0x7, 0x4], [0xf0e0, 0x7, 0x7fffffff, 0xd0, 0x84, 0x7, 0x6, 0x7, 0x2, 0x9, 0x0, 0x80000001, 0x80000001, 0x1ff, 0x8f21, 0x0, 0x400, 0x9, 0x1, 0xfffffffffffffffb, 0x1, 0x6, 0xbd, 0x7ff, 0x1, 0xfff, 0x8, 0x8, 0x101, 0x1f, 0x2, 0x100000000, 0x81, 0x3f, 0xcd3, 0xc3, 0x1, 0x4, 0xfef, 0x2, 0x8, 0xfff, 0x5, 0x10001, 0x8, 0x6, 0x7, 0x10000, 0xfffffffffffffff8, 0x80000000, 0x3, 0xffffffff80000000, 0x9, 0x6, 0x100000000, 0x100000000, 0x200, 0x1, 0x9, 0x100000001, 0xae, 0x2, 0x3, 0x3, 0xba, 0x2, 0x7, 0x149, 0xff, 0x8, 0x4, 0x991, 0x1f, 0x1000, 0x9, 0x3f, 0x4, 0x0, 0x1, 0x6, 0x0, 0x5, 0x1, 0x1, 0x2, 0x9, 0x401, 0xe0550, 0x7, 0x6, 0xb272, 0x7, 0xfffffffffffffff9, 0x800, 0x6, 0x2, 0x9, 0x8, 0x6, 0x940, 0x100000001, 0xfff, 0x9, 0xfffffffffffffffa, 0x1, 0xf2a, 0x7, 0xffffffff7fffffff, 0x3, 0x1, 0xa, 0x800, 0x5, 0xfff, 0x4, 0x3, 0x3, 0x5, 0x14, 0x9, 0x7fff]}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="7472616e733d6664030000006e6f3d", @ANYRESHEX, @ANYBLOB="2c9a66646e6f3d", @ANYRESHEX, @ANYBLOB=',uname=!]D-,fscache,cachetag=security.evm\x00,cache=fscache,appraise,seclabel,euid=', @ANYRESDEC=r6, @ANYBLOB=',\x00']) ioctl$int_out(r0, 0x5460, &(0x7f0000000380)) readv(r3, &(0x7f00000018c0), 0x0) 11:28:48 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 3) 11:28:48 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:28:48 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x7ffffff2, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:28:48 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x600000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1474.451970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1474.452596] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1474.453481] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1474.454131] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1474.454858] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:28:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:28:48 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0xc00000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1474.493937] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1474.494973] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1474.496583] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1474.497993] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1474.499275] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:28:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x2a}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:28:48 executing program 0: r0 = timerfd_create(0x8, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f0000000080)={{r2, r3+60000000}, {r4, r5+10000000}}, &(0x7f0000000100)) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mq_timedsend(r1, &(0x7f0000000340)="3204b63a9dafe5706ff0e6c0f5df5ab86e7f505188f74a5e1f06fc4a59202e80e14c6e2657be6b5d41146a37e4b887b036827488272f55bebabf1dd7ad0dbea3a45a7ad645ae1213a1b1d59cec42bb92dbc6b099d76d1772c10a9edff01dc6d22569efffef4abc71f8c56f0e7a77086693af742f17ab6bf3007792ac76d686e9a3b19ffa72585940666b01bdc8a95a98db33b1fc4fb2935913d69a000ea3e6144981204f28ea12ef6684", 0xaa, 0x3, &(0x7f0000000140)) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x82a00, 0x0) mq_timedsend(r6, &(0x7f0000000480)="b2214d822f0ff9cda8357c918e6a82b3f977aaf3e0c9019228cc04267b1d9d6cc6274f1baf41f7eb6c4bd2d971afa62810071c1f0f40c20b813b5a50ccd50fd8bcb693ccb86fb3a21dcc1b27ab7e5487d6155563acf138fa882ffdf612fa0c202ca6e296fd3fd06914e8711ef2f9e2bf927ba26c82b06245c18e9ce2b8c4761b9af1", 0x82, 0x5, &(0x7f0000000540)={0x0, 0x3938700}) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r8, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) timerfd_gettime(r0, &(0x7f0000000580)) ppoll(&(0x7f0000000180)=[{r7, 0x2601}, {r8, 0xa040}, {r1, 0x1420}, {r1}], 0x4, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000400)={[0x1000]}, 0x8) 11:28:48 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x0, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:28:48 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x7ffffff9, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:28:48 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 4) 11:28:48 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40049409, &(0x7f0000000040)={'vcan0\x00'}) 11:28:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:28:48 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x1200000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1474.673244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1474.673780] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1474.674479] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1474.675130] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1474.675784] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1474.696873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1474.697856] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1474.699409] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:28:58 executing program 0: r0 = timerfd_create(0x8, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)={0x2, 0xfffffffffffffff9}) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:28:58 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x0, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:28:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:28:58 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0xfffffff5, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:28:58 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x1800000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:28:58 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 5) 11:28:58 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40086602, &(0x7f0000000040)={'vcan0\x00'}) 11:28:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x30}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1484.422068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1484.423209] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1484.424763] buffer_io_error: 2 callbacks suppressed [ 1484.424780] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1484.427110] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1484.428511] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:28:58 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x0, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:28:58 executing program 0: r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) timerfd_settime(r3, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {r1, r2+60000000}}, 0x0) semtimedop(0xffffffffffffffff, &(0x7f0000000100), 0x0, &(0x7f0000000140)={0x77359400}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) close_range(r6, r7, 0x2) clone3(&(0x7f00000003c0)={0x20000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x18}, &(0x7f0000000300)=""/177, 0xb1, &(0x7f0000000240)=""/7, &(0x7f0000000280)=[0x0], 0x1}, 0x58) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{r4, r5+60000000}, {0x77359400}}, &(0x7f0000000040)) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r8, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) timerfd_settime(r8, 0x1, &(0x7f0000000480)={{0x77359400}, {r9, r10+60000000}}, &(0x7f00000004c0)) [ 1484.469172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1484.470419] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1484.471795] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1484.473068] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1484.474310] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1484.514933] FAULT_INJECTION: forcing a failure. [ 1484.514933] name failslab, interval 1, probability 0, space 0, times 0 [ 1484.515930] CPU: 1 UID: 0 PID: 10655 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1484.515946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1484.515953] Call Trace: [ 1484.515958] [ 1484.515962] dump_stack_lvl+0xfa/0x120 [ 1484.515990] should_fail_ex+0x4d7/0x5e0 [ 1484.516008] ? __hw_addr_add_ex+0x228/0x7a0 [ 1484.516026] should_failslab+0xc2/0x120 [ 1484.516045] __kmalloc_cache_noprof+0x80/0x730 [ 1484.516068] ? __pfx_perf_trace_lock+0x10/0x10 [ 1484.516091] ? __hw_addr_add_ex+0x228/0x7a0 [ 1484.516107] __hw_addr_add_ex+0x228/0x7a0 [ 1484.516127] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 1484.516144] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1484.516159] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1484.516183] dev_addr_init+0x13d/0x230 [ 1484.516203] ? __pfx_dev_addr_init+0x10/0x10 [ 1484.516229] alloc_netdev_mqs+0x171/0x1360 [ 1484.516243] ? __pfx_tun_setup+0x10/0x10 [ 1484.516254] ? security_capable+0x2f/0x90 [ 1484.516272] __tun_chr_ioctl+0x1a2c/0x43d0 [ 1484.516290] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1484.516301] ? __fget_files+0x34/0x3b0 [ 1484.516322] ? find_held_lock+0x2b/0x80 [ 1484.516333] ? __fget_files+0x203/0x3b0 [ 1484.516348] ? lock_release+0xc8/0x270 [ 1484.516373] ? selinux_file_ioctl+0xb9/0x280 [ 1484.516390] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1484.516404] __x64_sys_ioctl+0x18f/0x210 [ 1484.516420] do_syscall_64+0xbf/0x420 [ 1484.516434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1484.516447] RIP: 0033:0x7f998c284b19 [ 1484.516457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1484.516468] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1484.516480] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1484.516488] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1484.516495] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1484.516502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1484.516509] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1484.516529] 11:28:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:28:58 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) r1 = timerfd_create(0x8, 0x0) timerfd_settime(r1, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f00000018c0)=[{&(0x7f0000000300)=""/252, 0xfc}], 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, "78a0073c367a0cc5"}) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/78}) 11:28:58 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0xffff88800bf5b360, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:28:58 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 6) 11:28:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x36}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:28:58 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40087602, &(0x7f0000000040)={'vcan0\x00'}) 11:28:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:28:58 executing program 0: r0 = timerfd_create(0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f0000000080)={{r2, r3+10000000}}, &(0x7f0000000100)) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:28:58 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x1e00000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:29:07 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 7) 11:29:07 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, 0x0) io_submit(0x0, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:29:07 executing program 0: r0 = timerfd_create(0x2, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:29:07 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x2, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:29:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:29:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x3c}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:29:07 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x401c5820, &(0x7f0000000040)={'vcan0\x00'}) 11:29:07 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x2400000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1493.418394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1493.419374] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1493.420650] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1493.421848] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1493.423055] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:29:07 executing program 0: r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, @in_args={0x4}}, './file0\x00'}) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) [ 1493.458814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1493.459998] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1493.461561] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1493.462877] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1493.464082] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1493.472308] FAULT_INJECTION: forcing a failure. [ 1493.472308] name failslab, interval 1, probability 0, space 0, times 0 11:29:07 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, 0x0) io_submit(0x0, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1493.474092] CPU: 1 UID: 0 PID: 10705 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1493.474121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1493.474133] Call Trace: [ 1493.474140] [ 1493.474148] dump_stack_lvl+0xfa/0x120 [ 1493.474193] should_fail_ex+0x4d7/0x5e0 [ 1493.474226] should_failslab+0xc2/0x120 [ 1493.474258] __kvmalloc_node_noprof+0x11f/0x900 [ 1493.474284] ? __pfx_dev_addr_init+0x10/0x10 [ 1493.474328] ? alloc_netdev_mqs+0x945/0x1360 [ 1493.474365] ? alloc_netdev_mqs+0x945/0x1360 [ 1493.474390] alloc_netdev_mqs+0x945/0x1360 [ 1493.474414] ? __pfx_tun_setup+0x10/0x10 [ 1493.474444] __tun_chr_ioctl+0x1a2c/0x43d0 [ 1493.474477] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1493.474498] ? __fget_files+0x34/0x3b0 [ 1493.474527] ? find_held_lock+0x2b/0x80 [ 1493.474549] ? __fget_files+0x203/0x3b0 [ 1493.474576] ? lock_release+0xc8/0x270 [ 1493.474617] ? selinux_file_ioctl+0xb9/0x280 [ 1493.474647] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1493.474674] __x64_sys_ioctl+0x18f/0x210 [ 1493.474702] do_syscall_64+0xbf/0x420 [ 1493.474741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.474763] RIP: 0033:0x7f998c284b19 [ 1493.474781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1493.474802] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1493.474822] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1493.474837] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1493.474850] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1493.474863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1493.474876] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1493.474912] 11:29:07 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) setuid(0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:29:07 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) setuid(0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:29:07 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4020940d, &(0x7f0000000040)={'vcan0\x00'}) 11:29:07 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, 0x0) io_submit(0x0, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:29:07 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x2a00000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:29:07 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x3, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:29:07 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 8) [ 1493.805718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1493.806637] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1493.807911] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1493.809087] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1493.810255] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1493.860090] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1493.861402] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1493.862724] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:29:17 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x800454cf, &(0x7f0000000040)={'vcan0\x00'}) 11:29:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x600}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:29:17 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 9) 11:29:17 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x4, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:29:17 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x3000000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:29:17 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)) io_submit(0x0, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:29:17 executing program 0: r0 = timerfd_create(0x8, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000006c0)=ANY=[]) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040)) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000100)=0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000000)) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000180)={0x1, 0x81, 0x732, 0x551, 0x7, "6aa1a0be17c1b4ed8f8792850c6cfe3c5529f1", 0x0, 0x6}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x3) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{r3, r4+10000000}, {0x0, 0x989680}}, 0x0) 11:29:17 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) setuid(0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:29:17 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) [ 1504.341197] FAULT_INJECTION: forcing a failure. [ 1504.341197] name failslab, interval 1, probability 0, space 0, times 0 [ 1504.342996] CPU: 1 UID: 0 PID: 10749 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1504.343027] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1504.343041] Call Trace: [ 1504.343049] [ 1504.343058] dump_stack_lvl+0xfa/0x120 [ 1504.343106] should_fail_ex+0x4d7/0x5e0 [ 1504.343141] should_failslab+0xc2/0x120 [ 1504.343175] __kvmalloc_node_noprof+0x11f/0x900 [ 1504.343202] ? lockdep_init_map_type+0x4b/0x220 [ 1504.343238] ? alloc_netdev_mqs+0xaf1/0x1360 [ 1504.343279] ? alloc_netdev_mqs+0xaf1/0x1360 [ 1504.343307] alloc_netdev_mqs+0xaf1/0x1360 [ 1504.343354] __tun_chr_ioctl+0x1a2c/0x43d0 [ 1504.343391] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1504.343414] ? __fget_files+0x34/0x3b0 [ 1504.343445] ? find_held_lock+0x2b/0x80 [ 1504.343469] ? __fget_files+0x203/0x3b0 [ 1504.343499] ? lock_release+0xc8/0x270 [ 1504.343540] ? selinux_file_ioctl+0xb9/0x280 [ 1504.343572] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1504.343600] __x64_sys_ioctl+0x18f/0x210 [ 1504.343631] do_syscall_64+0xbf/0x420 [ 1504.343658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.343683] RIP: 0033:0x7f998c284b19 [ 1504.343701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1504.343723] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1504.343746] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1504.343762] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1504.343776] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1504.343790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1504.343804] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1504.343843] 11:29:18 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x80086601, &(0x7f0000000040)={'vcan0\x00'}) [ 1504.434211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.435246] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1504.436623] buffer_io_error: 2 callbacks suppressed [ 1504.436638] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1504.438775] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1504.440102] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:29:18 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:29:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0xc00}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:29:18 executing program 0: r0 = timerfd_create(0x8, 0x0) r1 = timerfd_create(0x5, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000080), &(0x7f0000000100)={'L+', 0x6}, 0x16, 0x6) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) fcntl$dupfd(r1, 0x406, r2) 11:29:18 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)) io_submit(0x0, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:29:28 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x5, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:29:28 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 10) 11:29:28 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)) io_submit(0x0, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:29:28 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r2, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)={0x7d4, r3, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_SAE_PASSWORD={0x17, 0x115, "4a16d5b5acd822fe07cf1549a4f83991b9b6e6"}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0x1f, 0xfac14]}], @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @beacon=[@NL80211_ATTR_IE_PROBE_RESP={0xf, 0x7f, [@mesh_id={0x72, 0x6}, @dsss={0x3, 0x1, 0xd}]}, @NL80211_ATTR_PROBE_RESP={0x54d, 0x91, "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"}], @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}]}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x7d4}, 0x1, 0x0, 0x0, 0x20008085}, 0x10) write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) timerfd_gettime(r1, &(0x7f0000000040)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) readv(r4, &(0x7f0000000000)=[{&(0x7f0000000300)=""/222, 0xde}], 0x1) 11:29:28 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x3600000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:29:28 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x80087601, &(0x7f0000000040)={'vcan0\x00'}) 11:29:28 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:29:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x1200}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1514.904286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1514.905091] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1514.906352] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1514.907524] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1514.908537] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:29:28 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x3c00000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1514.936867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1514.937760] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1514.938753] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1514.939705] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1514.940640] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:29:37 executing program 3: openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x0, 0x0) 11:29:37 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:29:37 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {r1, r2+10000000}}, &(0x7f0000000100)) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) timerfd_gettime(r0, &(0x7f0000000040)) 11:29:37 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x3f00000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:29:37 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x7, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:29:37 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x80111500, &(0x7f0000000040)={'vcan0\x00'}) 11:29:37 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 11) 11:29:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x1800}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:29:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x1e00}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1524.267900] FAULT_INJECTION: forcing a failure. [ 1524.267900] name failslab, interval 1, probability 0, space 0, times 0 [ 1524.270149] CPU: 1 UID: 0 PID: 10819 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1524.270185] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1524.270200] Call Trace: [ 1524.270209] [ 1524.270220] dump_stack_lvl+0xfa/0x120 [ 1524.270270] should_fail_ex+0x4d7/0x5e0 [ 1524.270307] ? alloc_netdev_mqs+0xbe5/0x1360 [ 1524.270346] should_failslab+0xc2/0x120 [ 1524.270383] __kmalloc_cache_noprof+0x80/0x730 [ 1524.270427] ? alloc_netdev_mqs+0xaf1/0x1360 [ 1524.270460] ? __asan_memset+0x24/0x50 [ 1524.270500] ? alloc_netdev_mqs+0xbe5/0x1360 [ 1524.270530] alloc_netdev_mqs+0xbe5/0x1360 [ 1524.270573] __tun_chr_ioctl+0x1a2c/0x43d0 [ 1524.270614] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1524.270640] ? __fget_files+0x34/0x3b0 [ 1524.270674] ? find_held_lock+0x2b/0x80 [ 1524.270701] ? __fget_files+0x203/0x3b0 [ 1524.270734] ? lock_release+0xc8/0x270 [ 1524.270781] ? selinux_file_ioctl+0xb9/0x280 [ 1524.270817] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1524.270849] __x64_sys_ioctl+0x18f/0x210 [ 1524.270883] do_syscall_64+0xbf/0x420 11:29:37 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1524.270913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1524.270941] RIP: 0033:0x7f998c284b19 [ 1524.270960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1524.270985] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1524.271010] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1524.271028] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1524.271043] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1524.271073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1524.271089] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1524.271132] [ 1524.312727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1524.313202] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1524.313972] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1524.314794] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1524.315653] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:29:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x2400}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1524.339104] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1524.339960] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1524.340685] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1524.341347] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1524.341984] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:29:38 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:29:38 executing program 3: openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x0, 0x0) 11:29:38 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x801c581f, &(0x7f0000000040)={'vcan0\x00'}) 11:29:38 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x8, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:29:38 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 12) 11:29:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x2a00}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1524.499145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 11:29:38 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) [ 1524.500120] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1524.502677] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1524.504223] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1524.505724] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1524.534251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1524.535415] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1524.536951] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:29:46 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:29:46 executing program 0: r0 = timerfd_create(0x8, 0x80000) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000080), 0x0) 11:29:46 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x9, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:29:46 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x80811501, &(0x7f0000000040)={'vcan0\x00'}) 11:29:46 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 13) 11:29:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)) setuid(0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:29:46 executing program 3: openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x0, 0x0) 11:29:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x3000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:29:46 executing program 0: r0 = timerfd_create(0x8, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2fe6696c6530002b4a78b46adf92734821a24a0416c387006dbabec80680b18fc5d093a568e5ab4ecd78788c488b4091f7d6ab201910ef5fc17bcf41de9c34b17524ef33c7eac9325edafa7a85379d44c8a08225a070f1142c11200f0a3528b5db38679812c5a72986937ea94acb09fa8ce114d847ddfcb18cc387649c8f0a8ceb8c2945b56ab8a5dc29c15cb46ce61b026f3ecd3ce4001d3d367cb6800c71d8d4e48ea9e06e4ebb7201571384692721c95350e7ceae6efef6c83d9e18c8cf7cbce1bbc0a192566269b1477db8f435598233d8c3fab0a4c4b907d3412473361ab1a38eec"]) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r1, 0x9068c688d41dd444, &(0x7f0000000100)={{}, {r2, r3+60000000}}, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000000)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f00000003c0)={{}, 0x80, 0x0, 0x6ee}) sendto(0xffffffffffffffff, &(0x7f00000002c0)="9118466d7f7345a5f99c8413bf0f6e35e84cd6cfdf7069f64a465f560dce1bf8ba285871cc11fcaa63bae204760626095bf96532664a5762110a09bea627e47e5657704b2d47014faa73035095f083c65eb16a772b1918b6fc9b5cc8b0c5c625b5f5d4ac", 0x64, 0x8040, &(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @multicast2}, 0x1, 0x0, 0x4}}, 0x80) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000005c0), 0x400400, 0x0) writev(r6, &(0x7f0000000ac0)=[{&(0x7f0000000680)="1c23577ba93601f17d38778a6c4da2b5e76426245164f38edec7547d1b4ec30665088cca47525237de42efb7feab28a118085828c5cccf41f82e85764bb45aa11c3f58f53cfc91f1bb297ecb0a2531b2d1359e7fc1ca90c93e652dbd856bcc6a2c98db6052156d059a35eac0c6680e2293791d8b21480e0e87637ede1d4a5038ee685076110b2cdad3b1f87c5f1a8a14bd612383", 0x94}, {&(0x7f0000000740)="11e7d13dd4146b21a220cb2c3d850d24b35c85436c105ab7d2c8f6784e4be94fa8f2d18635d5bf34a172a40a6df9393721cdff0065d133cc586be5953c4c15f6d38929327b9a2a2db0846de19e275638b3d2bfab85412f503d17c7aa3db73deb3820972b8b3c6566c82c1f431b65de3a55bef8a2ae13672f90f41e6b8d9b06f7106c659a3003242c806fb5", 0x8b}, {&(0x7f0000000600)="5ac4b4b93d26a33547993bbbcfe81e3e9074f582e359", 0x16}, {&(0x7f0000000800)="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", 0xfe}, {&(0x7f0000000900)}, {&(0x7f0000000940)="5617abf498e9be6d37de96d1da462de346bb423d832f696c80b808bb2f9ef57125311a36be71a01466aedc5d1fce10a83866a0a7021d7c0df048674abe2fb0f072666550cebc507778d405da7cad", 0x4e}, {&(0x7f00000009c0)="491f83181d75fb96c1f8dfe8ed230f8def1810fd53376d7703fbaac378833aa0bf7c1e8abb7d68e90d13592473e33fddd2ad92a6abc9dbe988917b502b676c0a98cdcd314596b57acf3ed4ca219e49fb397ec1f5d63b6a312dc95de5e6f6b98c32ef97dab8aacb1edf30f3a0b4aa233fabe3f83434f2cf02cab5e1d8b14d89a73707c27ae1604d41c6a1b2377e6e7d2e814bd7ec46e5f72d3261386d52ee14c5e248f9752657a42d46d64b45156f3cb08a55bea13c1dfe9705259ba426f9748b0d54962db980eaf97343fc", 0xcb}], 0x7) clock_settime(0x1, &(0x7f0000000180)={0x0, 0x989680}) write$sndseq(r4, &(0x7f0000000300), 0x0) timerfd_settime(r4, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) futex(&(0x7f0000000040)=0x1, 0xd, 0x2, &(0x7f0000000540)={r7, r8+10000000}, &(0x7f0000000580)=0x2, 0x1) [ 1533.279666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1533.280895] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1533.282293] buffer_io_error: 2 callbacks suppressed [ 1533.282307] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1533.284220] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1533.285367] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1533.306651] FAULT_INJECTION: forcing a failure. [ 1533.306651] name failslab, interval 1, probability 0, space 0, times 0 [ 1533.308435] CPU: 0 UID: 0 PID: 10875 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1533.308469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1533.308483] Call Trace: [ 1533.308492] [ 1533.308503] dump_stack_lvl+0xfa/0x120 [ 1533.308552] should_fail_ex+0x4d7/0x5e0 [ 1533.308593] ? alloc_netdev_mqs+0xc53/0x1360 [ 1533.308619] should_failslab+0xc2/0x120 [ 1533.308655] __kmalloc_cache_noprof+0x80/0x730 [ 1533.308697] ? alloc_netdev_mqs+0xaf1/0x1360 [ 1533.308751] ? alloc_netdev_mqs+0xc53/0x1360 [ 1533.308778] alloc_netdev_mqs+0xc53/0x1360 [ 1533.308830] __tun_chr_ioctl+0x1a2c/0x43d0 [ 1533.308883] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1533.308904] ? __fget_files+0x34/0x3b0 [ 1533.308937] ? find_held_lock+0x2b/0x80 [ 1533.308962] ? __fget_files+0x203/0x3b0 [ 1533.308992] ? lock_release+0xc8/0x270 [ 1533.309051] ? selinux_file_ioctl+0xb9/0x280 [ 1533.309088] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1533.309121] __x64_sys_ioctl+0x18f/0x210 [ 1533.309160] do_syscall_64+0xbf/0x420 [ 1533.309193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1533.309216] RIP: 0033:0x7f998c284b19 [ 1533.309234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1533.309255] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1533.309276] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1533.309291] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1533.309305] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1533.309326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1533.309339] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1533.309406] [ 1533.317565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1533.335388] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1533.336692] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1533.337927] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1533.339200] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:29:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0045878, &(0x7f0000000040)={'vcan0\x00'}) 11:29:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)) setuid(0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:29:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x3600}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:29:47 executing program 3: openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x0, &(0x7f00000003c0)) 11:29:47 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 14) 11:29:47 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0xa, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:29:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0045878, &(0x7f0000000040)={'vcan0\x00'}) [ 1533.637917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1533.639456] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1533.641017] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1533.642625] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1533.644104] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1533.667844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1533.668788] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1533.670032] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:29:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000040)) setuid(0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:29:57 executing program 3: openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x0, &(0x7f00000003c0)) 11:29:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x3c00}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:29:57 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0189436, &(0x7f0000000040)={'vcan0\x00'}) 11:29:57 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 15) 11:29:57 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0xc, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:29:57 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:29:57 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) write$binfmt_elf64(r2, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x1f, 0x20, 0x20, 0x3, 0xffff, 0x3, 0x3e, 0x8, 0x1eb, 0x40, 0x2e7, 0x4, 0x800, 0x38, 0x2, 0x20, 0x1, 0x81}, [{0x1, 0x2, 0x400, 0x80000001, 0x947, 0x5, 0x7, 0xffffffffffff8614}, {0x4, 0x3f, 0x3aa9, 0x3, 0x7ff, 0xfffffffffffffff7, 0x4, 0x7c0000000}], "5d56fcdc09a7ea39da374adc493730d37894c0cdb48c12497fbd7a7f540a4d17d23dcc5465f7903042143ea8bd420b70c47664906ae5be335afc19993048ef8ce4da5bdb0de7eddbaaa112d1b00b5b019bc1c11223fd390c9a8dd808c9fe618282b95e7b07f930b6fe7bb7b8fe1fcbf65cc96454e18ccc"}, 0x127) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{0x77359400}, {r3, r4+60000000}}, &(0x7f0000000080)) socketpair(0x27, 0x2, 0xa2c8, &(0x7f0000000240)) [ 1543.394252] FAULT_INJECTION: forcing a failure. [ 1543.394252] name failslab, interval 1, probability 0, space 0, times 0 [ 1543.395300] CPU: 0 UID: 0 PID: 10914 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1543.395319] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1543.395327] Call Trace: [ 1543.395332] [ 1543.395338] dump_stack_lvl+0xfa/0x120 [ 1543.395368] should_fail_ex+0x4d7/0x5e0 [ 1543.395393] should_failslab+0xc2/0x120 [ 1543.395415] __kvmalloc_node_noprof+0x11f/0x900 [ 1543.395431] ? __kmalloc_cache_noprof+0x4ae/0x730 [ 1543.395453] ? alloc_netdev_mqs+0xd0e/0x1360 [ 1543.395485] ? alloc_netdev_mqs+0xd0e/0x1360 [ 1543.395500] alloc_netdev_mqs+0xd0e/0x1360 [ 1543.395528] __tun_chr_ioctl+0x1a2c/0x43d0 [ 1543.395556] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1543.395568] ? __fget_files+0x34/0x3b0 [ 1543.395587] ? find_held_lock+0x2b/0x80 [ 1543.395603] ? __fget_files+0x203/0x3b0 [ 1543.395619] ? lock_release+0xc8/0x270 [ 1543.395651] ? selinux_file_ioctl+0xb9/0x280 [ 1543.395674] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1543.395692] __x64_sys_ioctl+0x18f/0x210 [ 1543.395715] do_syscall_64+0xbf/0x420 [ 1543.395734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.395747] RIP: 0033:0x7f998c284b19 [ 1543.395757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1543.395769] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1543.395781] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1543.395789] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1543.395797] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1543.395804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1543.395811] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1543.395847] 11:29:57 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc020660b, &(0x7f0000000040)={'vcan0\x00'}) 11:29:57 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 16) [ 1543.460800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1543.461761] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1543.463121] buffer_io_error: 2 callbacks suppressed [ 1543.463135] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1543.465169] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1543.466411] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1543.496010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1543.496974] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1543.498284] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1543.499533] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1543.500759] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:29:57 executing program 3: openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x0, &(0x7f00000003c0)) 11:29:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x3f00}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:29:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:29:57 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0xe, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:29:57 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x24000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:29:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) [ 1543.664614] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1543.665142] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1543.666033] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1543.666822] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1543.667493] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1543.703155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1543.703930] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1543.704764] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:30:07 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:30:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:30:07 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:30:07 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000080)=""/106) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:30:07 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 17) 11:30:07 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0xf, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:30:07 executing program 3: openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[0x0]) 11:30:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, 0x0) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) [ 1554.112210] FAULT_INJECTION: forcing a failure. [ 1554.112210] name failslab, interval 1, probability 0, space 0, times 0 [ 1554.113940] CPU: 0 UID: 0 PID: 10972 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1554.113969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1554.113983] Call Trace: [ 1554.113992] [ 1554.114002] dump_stack_lvl+0xfa/0x120 [ 1554.114051] should_fail_ex+0x4d7/0x5e0 [ 1554.114091] ? register_netdevice+0x4c4/0x1d90 [ 1554.114120] should_failslab+0xc2/0x120 [ 1554.114155] __kmalloc_cache_noprof+0x80/0x730 [ 1554.114195] ? lockdep_init_map_type+0x4b/0x220 [ 1554.114256] ? register_netdevice+0x4c4/0x1d90 [ 1554.114284] register_netdevice+0x4c4/0x1d90 [ 1554.114341] ? __pfx_register_netdevice+0x10/0x10 [ 1554.114380] ? dev_addr_mod+0x294/0x340 [ 1554.114433] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1554.114482] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1554.114504] ? __fget_files+0x34/0x3b0 [ 1554.114536] ? find_held_lock+0x2b/0x80 [ 1554.114561] ? __fget_files+0x203/0x3b0 [ 1554.114591] ? lock_release+0xc8/0x270 [ 1554.114655] ? selinux_file_ioctl+0xb9/0x280 [ 1554.114692] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1554.114727] __x64_sys_ioctl+0x18f/0x210 [ 1554.114765] do_syscall_64+0xbf/0x420 11:30:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) setuid(0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) [ 1554.114797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.114820] RIP: 0033:0x7f998c284b19 [ 1554.114838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1554.114859] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1554.114881] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1554.114895] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1554.114908] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1554.114921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1554.114933] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1554.115001] 11:30:07 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) [ 1554.158548] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1554.160102] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1554.161364] buffer_io_error: 2 callbacks suppressed [ 1554.161377] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1554.163255] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1554.164423] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:30:07 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f0000000100), 0x6e, &(0x7f0000002500)=[{0xfffffffffffffffe}, {&(0x7f0000000180)=""/170, 0xaa}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000000300)}, {&(0x7f00000013c0)}, {&(0x7f0000001400)=""/240, 0xf0}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x8, &(0x7f0000002580)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x140}, 0x40) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x9, 0x6, 0x2e, 0x1, 0x0, 0x80000001, 0x28200, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x72, 0x4, @perf_config_ext={0x2, 0x400}, 0x1061, 0x3ff, 0x7de, 0x8, 0x1, 0xe1, 0x0, 0x0, 0x8001, 0x0, 0x9}, r1, 0x9, 0xffffffffffffffff, 0x1) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000300)=0xfffff000) [ 1554.197909] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1554.198831] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1554.200086] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1554.201276] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1554.202444] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:30:07 executing program 3: openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[0x0]) 11:30:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x80000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:30:07 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 18) 11:30:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) setuid(0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:30:07 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:30:08 executing program 0: r0 = timerfd_create(0x8, 0x1800) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000300)={{}, {r1, r2+10000000}}, &(0x7f0000000340)) timerfd_gettime(r0, &(0x7f0000000200)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_size', 0x40181, 0x0) write$cgroup_pid(r3, &(0x7f0000000040)=0xffffffffffffffff, 0xd) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/100, 0x64}, {&(0x7f0000000100)=""/106, 0x6a}], 0x2) timerfd_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f00000002c0)) 11:30:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) setuid(0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) [ 1554.366971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1554.367689] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1554.368524] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1554.369204] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1554.370055] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1554.407179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1554.408560] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1554.410072] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:30:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(0x0, &(0x7f0000000100)) 11:30:18 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 19) 11:30:18 executing program 3: openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[0x0]) 11:30:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:30:18 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x35, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:30:18 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:30:18 executing program 0: r0 = timerfd_create(0x8, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000001040), 0x4) creat(&(0x7f0000000000)='./file0\x00', 0x1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000080)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r2, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) timerfd_gettime(r2, &(0x7f0000000040)) 11:30:18 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) [ 1564.832873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1564.833821] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1564.834665] buffer_io_error: 2 callbacks suppressed [ 1564.834673] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1564.835848] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1564.836658] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:30:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1564.868583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1564.869142] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1564.869971] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1564.870724] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1564.871405] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1564.876243] FAULT_INJECTION: forcing a failure. [ 1564.876243] name failslab, interval 1, probability 0, space 0, times 0 [ 1564.877546] CPU: 0 UID: 0 PID: 11018 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1564.877562] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1564.877569] Call Trace: [ 1564.877574] [ 1564.877580] dump_stack_lvl+0xfa/0x120 [ 1564.877608] should_fail_ex+0x4d7/0x5e0 [ 1564.877633] should_failslab+0xc2/0x120 [ 1564.877653] __kmalloc_noprof+0xd6/0x830 [ 1564.877673] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1564.877694] ? __create_object+0x59/0x80 [ 1564.877704] ? security_tun_dev_alloc_security+0x163/0x1f0 [ 1564.877731] ? security_tun_dev_alloc_security+0x163/0x1f0 [ 1564.877743] security_tun_dev_alloc_security+0x163/0x1f0 [ 1564.877759] ? __pfx_tun_net_init+0x10/0x10 [ 1564.877772] tun_net_init+0x71/0x560 [ 1564.877783] ? kasan_save_track+0x14/0x30 [ 1564.877802] ? __pfx_tun_net_init+0x10/0x10 [ 1564.877817] register_netdevice+0x630/0x1d90 [ 1564.877846] ? __pfx_register_netdevice+0x10/0x10 [ 1564.877866] ? dev_addr_mod+0x294/0x340 [ 1564.877895] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1564.877921] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1564.877933] ? __fget_files+0x34/0x3b0 [ 1564.877951] ? find_held_lock+0x2b/0x80 [ 1564.877965] ? __fget_files+0x203/0x3b0 [ 1564.877982] ? lock_release+0xc8/0x270 [ 1564.878014] ? selinux_file_ioctl+0xb9/0x280 [ 1564.878034] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1564.878053] __x64_sys_ioctl+0x18f/0x210 [ 1564.878073] do_syscall_64+0xbf/0x420 [ 1564.878091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.878105] RIP: 0033:0x7f998c284b19 [ 1564.878115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1564.878126] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1564.878138] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1564.878146] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1564.878153] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1564.878160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1564.878167] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1564.878203] 11:30:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x6000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:30:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(0x0, &(0x7f0000000100)) 11:30:18 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 20) 11:30:18 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x7a, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1565.000045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1565.000731] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1565.001561] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1565.002225] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1565.003033] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1565.031474] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1565.031978] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1565.032707] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:30:28 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x18b) timerfd_gettime(r1, &(0x7f0000000040)) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:30:28 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x12}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:30:28 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 21) 11:30:28 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) write(r0, &(0x7f0000000080)="646078f690bdaedd95ce2cb5f9704663a970a80a572d7289234aec7a2dd45fd261eaacee621763a0284e584b2f67aefc74286a51126fd0b259494cc8a076c64020fe130713422b447f2b8f0ec534d767802bb93edff9a825073da8136ae73c4b74866d7cb23704a960ba09539599dba965169013a152523985d53c4585b5c4247e", 0x81) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:30:28 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x90, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:30:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(0x0, &(0x7f0000000100)) 11:30:28 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:30:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0xc000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1574.607203] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1574.609270] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1574.610745] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1574.612177] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 1574.613736] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 2 [ 1574.615414] buffer_io_error: 2 callbacks suppressed [ 1574.615433] Buffer I/O error on dev sr0, logical block 0, async page read [ 1574.617998] Buffer I/O error on dev sr0, logical block 1, async page read [ 1574.619510] Buffer I/O error on dev sr0, logical block 2, async page read [ 1574.621023] Buffer I/O error on dev sr0, logical block 3, async page read [ 1574.622408] Buffer I/O error on dev sr0, logical block 4, async page read [ 1574.623769] Buffer I/O error on dev sr0, logical block 5, async page read [ 1574.625105] Buffer I/O error on dev sr0, logical block 6, async page read [ 1574.626449] Buffer I/O error on dev sr0, logical block 7, async page read [ 1574.651842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1574.652983] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1574.654558] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1574.656064] Buffer I/O error on dev sr0, logical block 1, lost async page write 11:30:28 executing program 0: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) readv(0xffffffffffffffff, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:30:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0), &(0x7f0000000100)) 11:30:28 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:30:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x12000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:30:28 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 22) 11:30:28 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{}, {0x0, 0x989680}}, &(0x7f0000000040)) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) io_setup(0x4a96, &(0x7f0000000080)) [ 1574.781534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1574.782465] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:30:28 executing program 5: ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000080)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:30:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0), &(0x7f0000000100)) 11:30:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x18000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1574.837871] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1574.839279] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1574.840368] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1574.841360] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 1574.842592] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 2 11:30:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0), &(0x7f0000000100)) 11:30:37 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:30:37 executing program 0: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/134, 0x86}, {&(0x7f00000002c0)=""/219, 0xdb}], 0x2) r0 = syz_io_uring_setup(0x2ef, &(0x7f0000000140)={0x0, 0x7be7, 0x20, 0x100, 0x33a}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) close_range(0xffffffffffffffff, r0, 0x2) 11:30:37 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x1ffffe, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:30:37 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 23) 11:30:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x1e000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:30:37 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'veth1_to_bridge\x00'}) 11:30:37 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1583.842154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1583.842862] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1583.843643] buffer_io_error: 12 callbacks suppressed [ 1583.843650] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1583.844795] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1583.845466] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:30:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x24000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1583.884557] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1583.885377] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1583.885942] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1583.886582] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 1583.887280] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 2 [ 1583.888126] Buffer I/O error on dev sr0, logical block 0, async page read [ 1583.888872] Buffer I/O error on dev sr0, logical block 1, async page read [ 1583.889593] Buffer I/O error on dev sr0, logical block 2, async page read [ 1583.890167] Buffer I/O error on dev sr0, logical block 3, async page read [ 1583.891597] Buffer I/O error on dev sr0, logical block 4, async page read [ 1583.892182] Buffer I/O error on dev sr0, logical block 5, async page read [ 1583.892956] Buffer I/O error on dev sr0, logical block 6, async page read 11:30:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, 0x0) [ 1583.901932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1583.903064] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:30:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x2a000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:30:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, 0x0) 11:30:37 executing program 0: r0 = timerfd_create(0x8, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) timerfd_gettime(r1, &(0x7f0000000000)) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:30:37 executing program 3: openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="fa", 0x600}]) 11:30:46 executing program 5: perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x7a, 0x0, 0x0, 0x95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:30:46 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:30:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, 0x0) 11:30:46 executing program 0: r0 = timerfd_create(0x7, 0x100800) signalfd4(r0, &(0x7f0000000000)={[0x585b]}, 0x8, 0x80800) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:30:46 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:30:46 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 24) 11:30:46 executing program 3: openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="fa", 0x600}]) 11:30:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x30000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:30:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x36000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:30:46 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {r1, r2+60000000}}, &(0x7f0000000080)) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:30:46 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1592.928902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.929953] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1592.931304] buffer_io_error: 4 callbacks suppressed [ 1592.932146] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1592.933514] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1592.934784] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:30:46 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 25) [ 1592.962872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1592.963623] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1592.964568] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1592.965213] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1592.965882] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:30:46 executing program 3: openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r0, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="fa", 0x600}]) 11:30:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x3c000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:30:46 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x2, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1593.096527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1593.097078] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1593.097781] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1593.098449] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1593.099081] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:30:46 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 26) [ 1593.136140] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1593.136804] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1593.137638] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:30:56 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) timerfd_gettime(r0, &(0x7f0000000000)) 11:30:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:30:56 executing program 5: shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f00000003c0)=""/4096) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:30:56 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x3, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:30:56 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 11:30:56 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 27) 11:30:56 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x24}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:30:56 executing program 4: r0 = timerfd_create(0x8, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) [ 1602.924421] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1602.925417] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1602.926743] buffer_io_error: 2 callbacks suppressed [ 1602.926757] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1602.928786] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1602.930017] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:30:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x4000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:30:56 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x800454cf, &(0x7f0000000040)={'vcan0\x00'}) [ 1602.961174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1602.961759] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1602.962454] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1602.963098] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1602.963756] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:30:56 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000080)) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000040)) 11:30:56 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 11:30:56 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:30:56 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 28) 11:30:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x8000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:30:56 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvlan1\x00'}) 11:30:56 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x800454cf, &(0x7f0000000040)={'vcan0\x00'}) 11:30:56 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 11:30:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x100000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1603.184000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1603.184536] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1603.185226] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1603.185905] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1603.186570] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1603.227941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1603.228699] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1603.229891] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:31:05 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x1800000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:31:05 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 29) 11:31:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x200000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:31:05 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x5, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:31:05 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0}]) 11:31:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:31:05 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) timerfd_gettime(r1, &(0x7f0000000000)) 11:31:05 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2a}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1611.896849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1611.897388] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1611.898087] buffer_io_error: 2 callbacks suppressed [ 1611.898094] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1611.899291] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1611.899980] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:31:05 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x24}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1611.936824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1611.937398] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1611.938076] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1611.938900] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1611.939554] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:31:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x600000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:31:05 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x6, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:31:05 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0}]) 11:31:05 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) readv(r1, &(0x7f0000000000), 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x240502, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xc6001, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000100)=0x1) splice(r1, &(0x7f0000000040)=0x80000000, r2, &(0x7f0000000080)=0x200, 0x200, 0x0) fcntl$dupfd(r2, 0x0, r3) [ 1612.043581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1612.044084] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1612.044878] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1612.045613] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1612.046230] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:31:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000400)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0x2, 0x0, 0x0, @loopback}, 0x1c) close(0xffffffffffffffff) write$tun(0xffffffffffffffff, &(0x7f0000001480)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be505b90910e4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r3, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) sendmsg$unix(r3, &(0x7f0000000280)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)="338ddbbeca1ba0fe811ce03e2136084c3e9ea5b9508075d87213538f9280dce47c8dd54f56ac1553fa5f297a8df0e1fa7ededcd8329fe61205c1510339de2bb26c7adcb7268d1c91c23b225161944362a9c9a524f5e98a860349d3d9e093de7da6365420c08bab3a6a7c6194ea4ce278f0181d7d4558", 0x76}, {&(0x7f0000000080)="6a211eff036d96887c0060cc3c4d6b5c6f1c728f9f8e6838", 0x18}, {&(0x7f0000000200)="e9e427a39beee01291dd46bac8efc020c5bba519404d6d047d3c928358b95754fe9c7f361fc6783a3ad1505af3f858544acb5f70", 0x34}, {&(0x7f00000013c0)="3825e58db3875461ac057d4e47145358c9e54f01851290eea811a37f97b02fc08dd3340554ef09b2b52e68e859e215518f05ac15cbb132ae4f8ce0374b00b598d233d47f39c27b96aa5d78624be87183e2c1e4521995ceea743a2bc5e7e0070306ab81d0d587a45b082093abfe792d12f9dcb96698977c2db588aee10fabf4395dc1290c63c8de8b8dbd0c09312e1cb2f638004c97294caf68db0eb26bc8", 0x9e}], 0x4, 0x0, 0x0, 0x8040}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f00000003c0)={{r4}, "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"}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) [ 1612.079627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1612.080732] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1612.082227] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:31:05 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 30) 11:31:05 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0}]) 11:31:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74f964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e00"/81], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x8, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) close(r2) r3 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x8, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r5, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) fsmount(r5, 0x0, 0x80) r6 = fsmount(r3, 0x0, 0x0) close(r6) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000000c0)='\x00', 0x0, r6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='\x00', &(0x7f0000000100)='tmpfs\x00', 0x0) 11:31:15 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x3d0}}, 0x0) io_uring_register$IORING_REGISTER_PROBE(r1, 0xf, &(0x7f0000001240)=ANY=[], 0x20) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{r2, r3+60000000}}, &(0x7f0000000080)) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) r4 = dup(r0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ppoll(&(0x7f0000000100)=[{r0, 0xa464}, {r4, 0x1}, {r0, 0x8400}, {r5}, {r6}], 0x5, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180)={[0x7]}, 0x8) 11:31:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) (fail_nth: 1) 11:31:15 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:31:15 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) (fail_nth: 1) 11:31:15 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x7, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:31:15 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) fcntl$setstatus(r0, 0x4, 0x800) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:31:15 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 31) 11:31:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0xc00000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:31:15 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 32) [ 1621.825242] FAULT_INJECTION: forcing a failure. [ 1621.825242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1621.827124] CPU: 0 UID: 0 PID: 11292 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1621.827155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1621.827169] Call Trace: [ 1621.827176] [ 1621.827185] dump_stack_lvl+0xfa/0x120 [ 1621.827231] should_fail_ex+0x4d7/0x5e0 [ 1621.827265] _copy_from_user+0x30/0xd0 [ 1621.827296] io_submit_one+0x8e/0x1a90 [ 1621.827330] ? perf_trace_lock+0xb5/0x5d0 [ 1621.827373] ? __pfx_io_submit_one+0x10/0x10 [ 1621.827400] ? lock_acquire+0x15e/0x2d0 [ 1621.827429] ? __might_fault+0xe0/0x190 [ 1621.827458] ? find_held_lock+0x2b/0x80 [ 1621.827480] ? __might_fault+0x138/0x190 [ 1621.827507] ? lock_release+0xc8/0x270 [ 1621.827538] ? __might_fault+0xe0/0x190 [ 1621.827572] __x64_sys_io_submit+0x182/0x2e0 [ 1621.827599] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 1621.827622] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1621.827665] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1621.827696] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1621.827737] do_syscall_64+0xbf/0x420 [ 1621.827765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.827789] RIP: 0033:0x7f56ea423b19 [ 1621.827808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1621.827830] RSP: 002b:00007f56e7999188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1621.827852] RAX: ffffffffffffffda RBX: 00007f56ea536f60 RCX: 00007f56ea423b19 [ 1621.827868] RDX: 00000000200003c0 RSI: 0000000000000003 RDI: 00007f56ea512000 [ 1621.827883] RBP: 00007f56e79991d0 R08: 0000000000000000 R09: 0000000000000000 [ 1621.827897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1621.827911] R13: 00007fffd5ecc03f R14: 00007f56e7999300 R15: 0000000000022000 [ 1621.827949] [ 1621.829841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1621.843985] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1621.844739] buffer_io_error: 2 callbacks suppressed [ 1621.844747] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1621.845860] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1621.846523] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:31:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x1200000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1621.888938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1621.890088] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1621.891531] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1621.892954] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1621.894264] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:31:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:31:26 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x8, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:31:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x1800000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:31:26 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) (fail_nth: 2) 11:31:26 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x101080, 0x10a) write$binfmt_aout(r1, &(0x7f00000002c0)={{0xcc, 0x20, 0x0, 0x322, 0x2c2, 0xffffffff, 0x11d, 0x1}, "f7db4e01171a931b433dfe3b0b9de16924df38deb7c608dac4bbe50760599b5389885312c41fcb44afbe6ff32f416e0ab9e52ac6b4ad85a9c142479ae78a8b6dc2966f58cce4276b93d090f4f328b3fbe30e458be7012f41196ab24082c28e9eda49ed7d2207496424a02bb808a743ecd349bcc49bdd5cb19783a79ac929605b0e061f29eb1c4b22831656fd2403ff13dbebbfcc900b1833371cb22c73c44dc37402f29e55169f14e88ce2", ['\x00', '\x00']}, 0x2cb) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:31:26 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x36}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:31:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)) 11:31:26 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 33) 11:31:26 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r2 = gettid() capset(&(0x7f00000000c0)={0x20071026, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x9, 0x0, 0x97, 0x2, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000080)}, 0x401, 0x3, 0x2, 0x1, 0xbf14, 0x100, 0x3, 0x0, 0x1, 0x0, 0x4}, r2, 0xd, r0, 0x3) [ 1632.724094] FAULT_INJECTION: forcing a failure. [ 1632.724094] name failslab, interval 1, probability 0, space 0, times 0 [ 1632.725077] CPU: 1 UID: 0 PID: 11326 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1632.725094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1632.725101] Call Trace: [ 1632.725106] [ 1632.725110] dump_stack_lvl+0xfa/0x120 [ 1632.725138] should_fail_ex+0x4d7/0x5e0 [ 1632.725156] ? io_submit_one+0xfa/0x1a90 [ 1632.725167] should_failslab+0xc2/0x120 [ 1632.725185] kmem_cache_alloc_noprof+0x80/0x710 [ 1632.725204] ? io_submit_one+0xfa/0x1a90 [ 1632.725214] io_submit_one+0xfa/0x1a90 [ 1632.725226] ? perf_trace_lock+0xb5/0x5d0 [ 1632.725248] ? __pfx_io_submit_one+0x10/0x10 [ 1632.725262] ? lock_acquire+0x15e/0x2d0 [ 1632.725277] ? __might_fault+0xe0/0x190 [ 1632.725295] ? lock_release+0xc8/0x270 [ 1632.725314] ? __might_fault+0xe0/0x190 [ 1632.725331] __x64_sys_io_submit+0x182/0x2e0 [ 1632.725344] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 1632.725356] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1632.725378] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1632.725394] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1632.725414] do_syscall_64+0xbf/0x420 [ 1632.725429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1632.725441] RIP: 0033:0x7f56ea423b19 [ 1632.725451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1632.725462] RSP: 002b:00007f56e7999188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1632.725474] RAX: ffffffffffffffda RBX: 00007f56ea536f60 RCX: 00007f56ea423b19 [ 1632.725482] RDX: 00000000200003c0 RSI: 0000000000000003 RDI: 00007f56ea512000 [ 1632.725489] RBP: 00007f56e79991d0 R08: 0000000000000000 R09: 0000000000000000 [ 1632.725496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1632.725503] R13: 00007fffd5ecc03f R14: 00007f56e7999300 R15: 0000000000022000 [ 1632.725522] 11:31:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x1e00000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1632.770799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1632.771808] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1632.773144] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1632.774465] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1632.775737] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:31:26 executing program 0: r0 = timerfd_create(0x8, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x9, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r2 = signalfd4(r1, &(0x7f00000001c0)={[0x9]}, 0x8, 0x80000) fallocate(r2, 0x4, 0x401, 0x3f) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r3, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) sendfile(r3, r4, 0x0, 0xfdef) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:31:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x2400000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1632.825391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1632.825909] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1632.826613] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1632.827224] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1632.827885] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:31:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x2a00000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:31:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) 11:31:26 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) (fail_nth: 3) [ 1632.919676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1632.920178] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1632.921033] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1632.921685] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1632.922265] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:31:26 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xa, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:31:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:31:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x8}) 11:31:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x80000}) 11:31:26 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) (fail_nth: 4) 11:31:26 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 34) [ 1633.080293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1633.081862] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1633.083075] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1633.100207] FAULT_INJECTION: forcing a failure. [ 1633.100207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1633.101199] CPU: 1 UID: 0 PID: 11369 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1633.101215] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1633.101222] Call Trace: [ 1633.101227] [ 1633.101232] dump_stack_lvl+0xfa/0x120 [ 1633.101258] should_fail_ex+0x4d7/0x5e0 [ 1633.101273] ? page_copy_sane+0xce/0x2b0 [ 1633.101288] copy_folio_from_iter_atomic+0x383/0x1820 [ 1633.101317] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 1633.101331] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1633.101345] ? fault_in_readable+0x172/0x1d0 [ 1633.101363] ? __pfx_fault_in_readable+0x10/0x10 [ 1633.101389] iomap_file_buffered_write+0x4fa/0xa40 [ 1633.101417] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1633.101433] ? __lock_acquire+0x453/0x2150 [ 1633.101472] ? __pfx_down_read+0x10/0x10 [ 1633.101483] ? generic_update_time+0xcb/0xf0 [ 1633.101501] ? mnt_put_write_access_file+0xb7/0xe0 [ 1633.101517] ? file_update_time_flags+0x24c/0x4f0 [ 1633.101539] blkdev_write_iter+0x7a0/0xd00 [ 1633.101560] aio_write+0x340/0x7f0 [ 1633.101581] ? __pfx_aio_write+0x10/0x10 [ 1633.101600] ? perf_trace_lock+0xb5/0x5d0 [ 1633.101620] ? __pfx_perf_trace_lock+0x10/0x10 [ 1633.101639] ? lock_acquire+0x15e/0x2d0 [ 1633.101654] ? __might_fault+0xe0/0x190 [ 1633.101667] ? find_held_lock+0x2b/0x80 [ 1633.101678] ? __might_fault+0x138/0x190 [ 1633.101692] ? lock_release+0xc8/0x270 [ 1633.101707] ? __might_fault+0xe0/0x190 [ 1633.101725] io_submit_one+0xf6b/0x1a90 [ 1633.101743] ? __pfx_io_submit_one+0x10/0x10 [ 1633.101757] ? lock_acquire+0x15e/0x2d0 [ 1633.101771] ? __might_fault+0xe0/0x190 [ 1633.101788] ? lock_release+0xc8/0x270 [ 1633.101803] ? __might_fault+0xe0/0x190 [ 1633.101821] __x64_sys_io_submit+0x182/0x2e0 [ 1633.101834] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 1633.101846] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1633.101868] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1633.101884] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1633.101905] do_syscall_64+0xbf/0x420 [ 1633.101919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1633.101932] RIP: 0033:0x7f56ea423b19 [ 1633.101941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1633.101953] RSP: 002b:00007f56e7999188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1633.101965] RAX: ffffffffffffffda RBX: 00007f56ea536f60 RCX: 00007f56ea423b19 [ 1633.101973] RDX: 00000000200003c0 RSI: 0000000000000003 RDI: 00007f56ea512000 [ 1633.101980] RBP: 00007f56e79991d0 R08: 0000000000000000 R09: 0000000000000000 [ 1633.101987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1633.101994] R13: 00007fffd5ecc03f R14: 00007f56e7999300 R15: 0000000000022000 [ 1633.102013] [ 1633.163964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1633.165196] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:31:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x3000000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:31:36 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:31:36 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xc, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:31:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:31:36 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b57a0f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308781f1fc2c2cf47288f8895eba6e8681f1f06000000035828c45f0bca329e6f5397d6f11c63d16e7ca17d2452c2c907c51931474e2882be689134823c896d5f5d20ecae472a89c276276316226e47f2652ae1c02726ed0a07cbb6ca18afa220724801bb8bc347cfa066011f3448ec8e4a9865e2a34812ba8943a9e1efff000000000000000bbd499163c0a7dbc3cac790b077e231ce92dd6e000000000000000000"], 0x51) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) syncfs(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000080)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r2, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r3, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x3f, 0x2, 0x5, 0x80, 0x0, 0x2, 0x20, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, @perf_config_ext, 0x10080, 0x4, 0x10000, 0x0, 0x7ffd, 0x9, 0x5, 0x0, 0x5, 0x0, 0x7}, r2, 0x1, r3, 0x3) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:31:36 executing program 0: r0 = timerfd_create(0x8, 0x0) clock_gettime(0x1, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000080)) r1 = dup(0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000005140)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000005180)={{0x77359400}, {r2, r3+60000000}}, &(0x7f00000051c0)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000180)={{}, {r4, r5+60000000}}, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) clock_gettime(0x0, &(0x7f00000054c0)={0x0, 0x0}) recvmmsg(r8, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000340)=""/150, 0x96}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/113, 0x71}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000001480)=""/227, 0xe3}, {&(0x7f0000001580)=""/161, 0xa1}, {&(0x7f0000001640)=""/79, 0x4f}, {&(0x7f00000016c0)=""/41, 0x29}, {&(0x7f0000001700)=""/153, 0x99}], 0x9, &(0x7f0000001880)=""/41, 0x29}, 0x8}, {{&(0x7f0000002900)=@caif, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002980)=""/226, 0xe2}], 0x1, &(0x7f0000002ac0)=""/160, 0xa0}}, {{&(0x7f0000002b80)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002c00)=""/138, 0x8a}, {&(0x7f0000002cc0)=""/72, 0x48}, {&(0x7f0000002d40)=""/40, 0x28}, {&(0x7f0000002d80)=""/41, 0x29}], 0x4}, 0x1000}, {{&(0x7f0000002e00)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f00000042c0)=[{&(0x7f0000002e80)=""/4, 0x4}, {&(0x7f0000002ec0)=""/141, 0x8d}, {&(0x7f0000002f80)=""/117, 0x75}, {&(0x7f0000003000)=""/46, 0x2e}, {&(0x7f0000003040)=""/63, 0x3f}, {&(0x7f0000003080)=""/195, 0xc3}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000004180)=""/149, 0x95}, {&(0x7f0000004240)=""/67, 0x43}], 0x9}, 0x7}, {{&(0x7f0000004380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000004740)=[{&(0x7f0000004400)=""/50, 0x32}, {&(0x7f0000004440)=""/211, 0xd3}, {&(0x7f0000004540)=""/98, 0x62}, {&(0x7f00000045c0)=""/210, 0xd2}, {&(0x7f00000046c0)=""/92, 0x5c}], 0x5, &(0x7f00000047c0)=""/106, 0x6a}, 0x38f7}, {{&(0x7f0000004840)=@x25, 0x80, &(0x7f0000004940)=[{&(0x7f00000048c0)=""/103, 0x67}], 0x1, &(0x7f0000004980)=""/65, 0x41}, 0x4}, {{&(0x7f0000004a00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000005600)=[{&(0x7f0000004a80)=""/175, 0xaf}, {&(0x7f0000004b40)=""/137, 0x89}, {&(0x7f0000004c00)=""/159, 0x9f}, {&(0x7f0000004cc0)=""/137, 0x89}, {&(0x7f0000004d80)=""/29, 0x1d}, {&(0x7f0000004dc0)=""/248, 0xf8}, {&(0x7f0000004ec0)=""/123, 0x7b}, {&(0x7f0000004f40)=""/118, 0x76}, {&(0x7f0000004fc0)=""/174, 0xae}, {&(0x7f0000005080)=""/154, 0x9a}, {&(0x7f0000005540)=""/81, 0x51}, {&(0x7f00000055c0)=""/6, 0x6}], 0xc, &(0x7f0000005200)=""/214, 0xd6}, 0x90000000}], 0x7, 0x20, &(0x7f0000005500)={r9, r10+10000000}) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{r6, r7+60000000}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) timerfd_gettime(r0, &(0x7f0000000300)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp6\x00') 11:31:36 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 35) 11:31:36 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) (fail_nth: 5) [ 1643.230235] forcing mempool usage for bio_alloc_bioset+0x415/0x8d0 [ 1643.235245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1643.236494] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1643.237573] buffer_io_error: 5 callbacks suppressed [ 1643.237585] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1643.239202] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1643.240225] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:31:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x8}) [ 1643.273628] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1643.275172] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1643.276476] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1643.277699] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1643.278914] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:31:36 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={{r0}, 0x6, 0x6, 0x3}) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:31:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x3600000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1643.293090] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1643.294234] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1643.295344] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1643.296410] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1643.297489] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:31:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x80000}) 11:31:37 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) (fail_nth: 6) 11:31:37 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 36) 11:31:37 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xe, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1643.457007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1643.457760] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1643.458781] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:31:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:31:37 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) (fail_nth: 7) [ 1643.561243] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1643.562102] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1643.590920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1643.591744] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1643.613236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1643.614130] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:31:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e95408d0010a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f02e3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x515c00, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'batadv_slave_1\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:31:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x3c00000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:31:47 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000200), 0x0) 11:31:47 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x600}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:31:47 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 37) 11:31:47 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) (fail_nth: 8) 11:31:47 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x10, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:31:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x8}) [ 1653.391591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1653.392114] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1653.392919] buffer_io_error: 11 callbacks suppressed [ 1653.392926] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1653.393994] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1653.394639] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1653.429589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1653.430659] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1653.431990] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1653.433244] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1653.434480] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:31:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x3f00000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1653.447571] forcing mempool usage for bio_alloc_bioset+0x415/0x8d0 [ 1653.454973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1653.456236] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1653.457769] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1653.459079] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1653.460262] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:31:47 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/246, 0xffffffffffffff4d}, {&(0x7f0000000180)=""/103, 0x72}, {&(0x7f00000003c0)=""/4096}, {&(0x7f0000000000)=""/77, 0xfffffca2}], 0xfffffffffffff7b) 11:31:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x80000}) 11:31:47 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) (fail_nth: 9) 11:31:47 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xf5, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1653.694525] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1653.695692] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1653.697183] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1653.714676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1653.715773] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1653.747116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1653.748046] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:31:56 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xfff, 0x3fb}, 0x0, 0x3ff, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113df65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e47d8ba40b3fb8b8c9c2d7dbf576b25b16af20454cfc2813b385fd9ef73911e4786deada489e0d7a8e6490a7d115d58c245f59ea5075fa69ae23d8b371b3743f781159342ff922bdf13d31ce6bfff25028ef182a85c83687cf5e42f53fb544acd4f56f840a5b08044aae4573f6dedf01db499f9ece16fd189d3651bb981e7824eaabd91694cf0e76f5b"], 0x51) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x8000) ppoll(&(0x7f0000000080)=[{r0, 0x5011}, {r1, 0x403}], 0x2, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x8]}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'gretap0\x00'}) 11:31:56 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:31:56 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x300, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:31:56 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) poll(&(0x7f0000000000)=[{r0, 0x100}, {r0, 0x1000}], 0x2, 0xfffffffa) 11:31:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:31:56 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) (fail_nth: 10) 11:31:56 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 38) 11:31:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1662.848411] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1662.848937] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1662.849648] buffer_io_error: 8 callbacks suppressed [ 1662.849656] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1662.850692] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1662.851323] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:31:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8}) [ 1662.879900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1662.881002] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1662.882375] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1662.883680] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1662.884961] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:31:56 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) (fail_nth: 11) 11:31:56 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 39) [ 1662.932775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1662.933455] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1662.934175] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1662.934829] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1662.935485] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1662.939142] forcing mempool usage for bio_alloc_bioset+0x415/0x8d0 [ 1662.944959] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1662.945466] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1662.946153] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:31:56 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) (fail_nth: 12) 11:31:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000}) 11:31:56 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 40) 11:31:56 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x500, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1663.060684] FAULT_INJECTION: forcing a failure. [ 1663.060684] name failslab, interval 1, probability 0, space 0, times 0 [ 1663.061233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1663.062396] CPU: 0 UID: 0 PID: 11506 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1663.062426] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1663.062439] Call Trace: [ 1663.062449] [ 1663.062459] dump_stack_lvl+0xfa/0x120 [ 1663.062509] should_fail_ex+0x4d7/0x5e0 [ 1663.062550] ? __kernfs_new_node+0xd3/0x930 [ 1663.062574] should_failslab+0xc2/0x120 [ 1663.062609] kmem_cache_alloc_noprof+0x80/0x710 [ 1663.062634] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1663.062688] ? __kernfs_new_node+0xd3/0x930 [ 1663.062708] __kernfs_new_node+0xd3/0x930 [ 1663.062749] ? __pfx___kernfs_new_node+0x10/0x10 [ 1663.062792] ? lock_acquire+0x15e/0x2d0 [ 1663.062823] ? kernfs_root+0x23/0x2a0 [ 1663.062848] ? find_held_lock+0x2b/0x80 [ 1663.062873] ? kernfs_root+0xee/0x2a0 [ 1663.062898] ? lock_release+0xc8/0x270 [ 1663.062923] ? lock_is_held_type+0x9e/0x120 [ 1663.062979] kernfs_new_node+0x13c/0x1e0 [ 1663.063027] kernfs_create_link+0xcf/0x240 [ 1663.063073] sysfs_do_create_link_sd+0x90/0x140 [ 1663.063108] sysfs_create_link+0x63/0xc0 [ 1663.063139] device_add+0x4fc/0x1830 [ 1663.063191] ? __pfx_device_add+0x10/0x10 [ 1663.063228] ? lockdep_init_map_type+0x4b/0x220 [ 1663.063264] ? __init_waitqueue_head+0xca/0x150 [ 1663.063325] netdev_register_kobject+0x1a9/0x3e0 [ 1663.063374] register_netdevice+0x1302/0x1d90 [ 1663.063427] ? __pfx_register_netdevice+0x10/0x10 [ 1663.063468] ? dev_addr_mod+0x294/0x340 [ 1663.063521] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1663.063571] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1663.063593] ? __fget_files+0x34/0x3b0 [ 1663.063624] ? find_held_lock+0x2b/0x80 [ 1663.063648] ? __fget_files+0x203/0x3b0 [ 1663.063678] ? lock_release+0xc8/0x270 [ 1663.063736] ? selinux_file_ioctl+0xb9/0x280 [ 1663.063775] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1663.063809] __x64_sys_ioctl+0x18f/0x210 [ 1663.063847] do_syscall_64+0xbf/0x420 [ 1663.063878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.063902] RIP: 0033:0x7f998c284b19 [ 1663.063920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1663.063942] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1663.063963] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1663.063979] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1663.063992] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1663.064005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1663.064018] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1663.064086] [ 1663.082899] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1663.108905] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1663.109554] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1663.117820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1663.118367] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:32:06 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) (fail_nth: 13) 11:32:06 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() capset(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x7}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f00000001c0), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/5, 0x5}, {&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f0000000280)=""/100, 0x64}], 0x5, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/136, 0x88}, {&(0x7f0000000300)=""/50, 0x32}, {&(0x7f0000000900)=""/33, 0x21}, {&(0x7f0000000940)=""/91, 0x5b}, {&(0x7f00000009c0)=""/74, 0x4a}, {&(0x7f0000000a40)=""/25, 0x19}, {&(0x7f0000000a80)=""/163, 0xa3}], 0x7, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000b1b960f6eb9d35930002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x68}}], 0x2, 0x40002000, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0xcb, 0x6, 0x7, 0x0, 0x1, 0x20000, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xfffffffffffffff9, 0x2}, 0x10, 0xfffffffffffffffa, 0x37, 0x8, 0x10001, 0x920e, 0x1, 0x0, 0x2}, r1, 0xb, r4, 0x9) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) write(r0, &(0x7f0000000080)="7131566158c6832c576ef6031b518c3dc2a0751b7fbfeed3aba5190248875254f68630faa0d821be7a6adf432e22560bbd1da656c8a7d2c16c0c5e90fb3d32aeeafaf1d38a49a4e23bbd1ec03180f4e6e9db8dfaf1c075ca110224b8d68e2699d1f6e03d56223566f5cb859f369624088b347c2dea1194a85f7eedb5e8be90cf18cf8111ff6e73b93349144c9835aedcb0bdfa51019778fe7575dc266f6b1ac3cf38abaa2a61c54410a2deaa605319efdd70a9", 0xb3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000cc0)={'veth0_to_bridge\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) lseek(r8, 0x5, 0x7) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r9, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r10, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r12 = syz_open_dev$vcsu(&(0x7f0000000dc0), 0x1ff, 0xc02) poll(&(0x7f0000000e00)=[{r10, 0x10e}, {r11, 0x250}, {r5, 0x2000}, {r12, 0x1}, {r6, 0x10}], 0x5, 0x1f) ioctl$TUNGETVNETHDRSZ(r9, 0x800454d7, &(0x7f0000000d00)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000e80)={'vcan0\x00'}) 11:32:06 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xd0}], 0x1) 11:32:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:32:06 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 41) 11:32:06 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1200}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:32:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:32:06 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x5ff, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1672.994568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1672.995173] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1672.996034] buffer_io_error: 11 callbacks suppressed [ 1672.996043] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1672.997367] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1672.998146] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:32:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8}) [ 1673.021875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1673.022687] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1673.023739] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1673.024610] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1673.025409] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1673.055515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1673.056052] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1673.056877] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1673.057631] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1673.058376] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:32:06 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x600, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:32:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x80000}) [ 1673.123769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1673.124369] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1673.125121] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:32:06 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) (fail_nth: 14) 11:32:06 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000000)) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:32:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) [ 1673.146937] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1673.147522] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:32:06 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x700, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1673.243179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1673.243978] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1673.246057] FAULT_INJECTION: forcing a failure. [ 1673.246057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1673.247023] CPU: 1 UID: 0 PID: 11560 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1673.247038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1673.247045] Call Trace: [ 1673.247053] [ 1673.247057] dump_stack_lvl+0xfa/0x120 [ 1673.247082] should_fail_ex+0x4d7/0x5e0 [ 1673.247101] _copy_from_user+0x30/0xd0 [ 1673.247118] io_submit_one+0x8e/0x1a90 [ 1673.247132] ? perf_trace_lock+0xb5/0x5d0 [ 1673.247154] ? __pfx_io_submit_one+0x10/0x10 [ 1673.247168] ? lock_acquire+0x15e/0x2d0 [ 1673.247183] ? __might_fault+0xe0/0x190 [ 1673.247197] ? find_held_lock+0x2b/0x80 [ 1673.247208] ? __might_fault+0x138/0x190 [ 1673.247222] ? lock_release+0xc8/0x270 [ 1673.247237] ? __might_fault+0xe0/0x190 [ 1673.247254] __x64_sys_io_submit+0x182/0x2e0 [ 1673.247267] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 1673.247278] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1673.247300] ? trace_hardirqs_on_prepare+0xe3/0x110 [ 1673.247315] ? lockdep_hardirqs_on_prepare+0xdb/0x190 [ 1673.247336] do_syscall_64+0xbf/0x420 [ 1673.247350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1673.247363] RIP: 0033:0x7f56ea423b19 [ 1673.247372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1673.247384] RSP: 002b:00007f56e7999188 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1673.247395] RAX: ffffffffffffffda RBX: 00007f56ea536f60 RCX: 00007f56ea423b19 [ 1673.247403] RDX: 00000000200003c0 RSI: 0000000000000003 RDI: 00007f56ea512000 [ 1673.247410] RBP: 00007f56e79991d0 R08: 0000000000000000 R09: 0000000000000000 [ 1673.247417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1673.247423] R13: 00007fffd5ecc03f R14: 00007f56e7999300 R15: 0000000000022000 [ 1673.247442] [ 1673.272989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1673.273619] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1673.287173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1673.288838] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:32:17 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x1, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x8) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:32:17 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:32:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 11:32:17 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 42) 11:32:17 executing program 0: shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:32:17 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) (fail_nth: 15) 11:32:17 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x810, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:32:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1683.873759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1683.874744] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1683.876011] buffer_io_error: 14 callbacks suppressed [ 1683.876027] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1683.878004] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1683.879145] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1683.897052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1683.898136] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1683.899386] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1683.900555] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1683.901749] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1683.905573] FAULT_INJECTION: forcing a failure. [ 1683.905573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1683.907408] CPU: 0 UID: 0 PID: 11582 Comm: syz-executor.3 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1683.907438] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1683.907451] Call Trace: [ 1683.907459] [ 1683.907468] dump_stack_lvl+0xfa/0x120 [ 1683.907511] should_fail_ex+0x4d7/0x5e0 [ 1683.907544] _copy_to_user+0x32/0xd0 [ 1683.907575] simple_read_from_buffer+0xe0/0x180 [ 1683.907607] proc_fail_nth_read+0x18a/0x240 [ 1683.907663] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1683.907720] ? security_file_permission+0x22/0x90 [ 1683.907755] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1683.907790] vfs_read+0x1eb/0xc70 [ 1683.907820] ? __pfx___mutex_lock+0x10/0x10 [ 1683.907840] ? __fget_files+0x34/0x3b0 [ 1683.907869] ? __pfx_vfs_read+0x10/0x10 [ 1683.907897] ? lock_release+0xc8/0x270 [ 1683.907933] ? __fget_files+0x20d/0x3b0 [ 1683.907975] ksys_read+0x121/0x240 [ 1683.908001] ? __pfx_ksys_read+0x10/0x10 [ 1683.908042] do_syscall_64+0xbf/0x420 [ 1683.908067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.908089] RIP: 0033:0x7f56ea3d669c [ 1683.908106] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1683.908126] RSP: 002b:00007f56e7999170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1683.908147] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f56ea3d669c [ 1683.908162] RDX: 000000000000000f RSI: 00007f56e79991e0 RDI: 0000000000000004 [ 1683.908175] RBP: 00007f56e79991d0 R08: 0000000000000000 R09: 0000000000000000 [ 1683.908187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1683.908200] R13: 00007fffd5ecc03f R14: 00007f56e7999300 R15: 0000000000022000 [ 1683.908236] [ 1683.943503] FAULT_INJECTION: forcing a failure. [ 1683.943503] name failslab, interval 1, probability 0, space 0, times 0 [ 1683.945424] CPU: 1 UID: 0 PID: 11584 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1683.945455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1683.945468] Call Trace: [ 1683.945476] [ 1683.945490] dump_stack_lvl+0xfa/0x120 [ 1683.945537] should_fail_ex+0x4d7/0x5e0 [ 1683.945570] ? __kernfs_new_node+0xd3/0x930 [ 1683.945593] should_failslab+0xc2/0x120 [ 1683.945626] kmem_cache_alloc_noprof+0x80/0x710 [ 1683.945652] ? perf_trace_lock_acquire+0xc9/0x700 [ 1683.945693] ? __kernfs_new_node+0xd3/0x930 [ 1683.945714] __kernfs_new_node+0xd3/0x930 [ 1683.945744] ? __pfx___kernfs_new_node+0x10/0x10 [ 1683.945774] ? lock_acquire+0x15e/0x2d0 [ 1683.945802] ? kernfs_root+0x23/0x2a0 [ 1683.945825] ? find_held_lock+0x2b/0x80 [ 1683.945846] ? kernfs_root+0xee/0x2a0 [ 1683.945869] ? lock_release+0xc8/0x270 [ 1683.945895] ? lock_is_held_type+0x9e/0x120 [ 1683.945937] kernfs_new_node+0x13c/0x1e0 [ 1683.945971] __kernfs_create_file+0x55/0x360 [ 1683.946009] sysfs_add_file_mode_ns+0x21c/0x430 [ 1683.946036] ? __pfx_dev_attr_store+0x10/0x10 [ 1683.946076] internal_create_group+0x662/0xeb0 [ 1683.946115] ? __pfx_internal_create_group+0x10/0x10 [ 1683.946138] ? kernfs_add_one+0x150/0x830 [ 1683.946172] ? kernfs_create_link+0x1be/0x240 [ 1683.946209] internal_create_groups.part.0+0x90/0x140 [ 1683.946240] sysfs_create_groups+0x29/0x50 [ 1683.946266] device_add+0x67e/0x1830 [ 1683.946310] ? __pfx_device_add+0x10/0x10 [ 1683.946344] ? lockdep_init_map_type+0x4b/0x220 [ 1683.946375] ? __init_waitqueue_head+0xca/0x150 [ 1683.946412] netdev_register_kobject+0x1a9/0x3e0 [ 1683.946449] register_netdevice+0x1302/0x1d90 [ 1683.946486] ? __pfx_register_netdevice+0x10/0x10 [ 1683.946518] ? dev_addr_mod+0x294/0x340 [ 1683.946559] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1683.946594] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1683.946616] ? __fget_files+0x34/0x3b0 [ 1683.946645] ? find_held_lock+0x2b/0x80 [ 1683.946666] ? __fget_files+0x203/0x3b0 [ 1683.946693] ? lock_release+0xc8/0x270 [ 1683.946732] ? selinux_file_ioctl+0xb9/0x280 [ 1683.946763] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1683.946791] __x64_sys_ioctl+0x18f/0x210 [ 1683.946823] do_syscall_64+0xbf/0x420 [ 1683.946848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.946871] RIP: 0033:0x7f998c284b19 [ 1683.946888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1683.946910] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1683.946932] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1683.946947] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1683.946960] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1683.946974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1683.946987] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1683.947023] 11:32:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}) 11:32:17 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f0000000080)={{r2, r3+10000000}, {r4, r5+60000000}}, &(0x7f0000000100)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) r8 = accept4$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14, 0x180000) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r9, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r10, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ppoll(&(0x7f0000000340)=[{r1, 0x4}, {r6, 0x49}, {r7, 0x4d}, {r8, 0x1210}, {r9, 0x2258}, {r0, 0x40}, {r1, 0x2c}, {r0, 0x400}, {0xffffffffffffffff, 0xa101}, {r10, 0x4a0}], 0xa, &(0x7f00000002c0)={0x0, 0x3938700}, &(0x7f00000003c0)={[0x9]}, 0x8) [ 1684.007035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1684.008454] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1684.010908] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1684.012268] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1684.013484] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:32:17 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:32:17 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 43) 11:32:17 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xa00, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:32:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) dup2(r0, r1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) [ 1684.173662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1684.174737] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1684.176011] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1684.238907] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1684.239832] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:32:17 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x2, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:32:17 executing program 5: perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="01011e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae31f1fd6c2cf47287209617287a47dc329aca06d8f8895dca6e86c1f1f7d4666d7035828c45f0bca329e00"/93], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x1}]) r2 = signalfd(r0, &(0x7f0000000140), 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r3, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) r5 = eventfd(0x10001) io_submit(r1, 0x5, &(0x7f0000000580)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x3, r0, &(0x7f0000000080)="be586ddb51acaccd5b59bd7d11c5add8a162d7ab7c0c2292e3df6bcd59b5a641fe6036f0b8823ed0e06dbb5bb802d91cb621db44acccb18fee494f7776a874d77f91ffaf6bc25663dc27f6cd8d5f14872ceb83791f6041da5be1d9cc6005", 0x5e, 0x9, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f0000000180)="ac91648675cae4050f89fb9e7cd1d922253b22ed615b749f5f8bb73f3482b99b746c804dd0f5d5f7a9838375d9b01d755dd906209708c7c516b2d37214e31eef0426c408c6b72e8147e70308fdc2e7a24366b6f4", 0x54, 0x1000, 0x0, 0x2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x1, r0, &(0x7f0000000240)="28f5cab2bf26314597f0ec90e547372e361ce50c6e743f7a036791833cbda3c18e8c489c727043f57744bd83188c454db8263c539af120f82e10efc68856a099410a14a2c0f1230ca58ef0697343b7e0c49e7d6cf3db33a23e566310f3e5230a206f", 0x62, 0x401, 0x0, 0x0, r3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3f, 0xffffffffffffffff, &(0x7f00000003c0)="45d33592546ed81ea50b2e7a16abaa7486c72e8f43c6b0b1fb955039486ce8fa1aa28e09d7c3bc3aa433da309c1862d16acc3ebf433c72fa01518cd2b61163358a4fce2d8b9990867e03f7ad7adb291fa74906b555cb870a7a097fb711e579e7b92ea47c38ad73dbf658c648520d2615801d4a8d4789a414b46bebd24f38bf3413296d3fc2f3f94d711588e647079351bc207345f51c4893e244cd4bac6409bd906da8e3a0c7f4d48574a38ec5d93930caa3cdb7d7fe593d1e873d7d617e779800645441adbb2730d972465ec75ac5d36dfc", 0xd2, 0x9, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0xd637, r4, &(0x7f00000004c0)="aacab28c7db7a4af850477ddb548b88f3595684dc464537c4d0740ee06bbb774329f1db49182789f8114a6f499642f9774c0372d69b84901be212e9946d70158d31ba2fc87a1d53e00a7a6bc712f64ce62100482b5b3122b9a5e6c77cca7d9cb75509ec09c2d6395241c84e86cbaf6d55c323f1f981738", 0x77, 0x721c, 0x0, 0x2, r5}]) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) [ 1684.317242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1684.318162] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1684.320095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1684.321021] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:32:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f00000013c0)=0x8, 0x4) setuid(r1) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r4, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000)="fa", 0x600}]) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x0, 0xedd, 0xfff}) io_submit(r4, 0x2, &(0x7f0000001240)=[&(0x7f0000001140)={0x0, 0x0, 0x0, 0x3, 0x0, r5, &(0x7f0000000140)="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", 0x1000, 0x7fff, 0x0, 0x1, r6}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x5, 0xfff7, r0, &(0x7f0000001180)="2cd6dc785835c2d7af7f50d646f51bff2454ef6423f143492bb3a76ee67648a13f224214048bee7ea45175e29f083a7210d1084e7f1e749fd31390a6d10f4357a9178d7f2e55285ebf2345d97d22cac99801dc5c05fcf328cf4b750a7661cc9ff3acf6", 0x63, 0x8000, 0x0, 0x1}]) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000001400)={0x80, 0x4, 0x2, 0x0, 0x0, "4b2e18339111baf4ecc3879ac8d6cb59f87183", 0x4, 0x3}) sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x5c, 0x1, 0x7, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x200}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x81, 0x0, 0x8, 0x0, 0x79d}) [ 1684.352868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1684.353830] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:32:18 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xc00, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:32:18 executing program 0: r0 = timerfd_create(0x8, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) timerfd_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000040)) [ 1684.533042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1684.534078] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1684.564022] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1684.564975] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:32:28 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000000c0)=0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:32:28 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x5, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:32:28 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 44) 11:32:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x54}}, 0x50) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40a8000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={0x240, r1, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0x9, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0x140, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f8391f4f81f94d095713c7528d8b3c2cc3df2099f4c009c7b04776aa8ab87a46"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2e}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x9c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_SEC_KEY={0x9c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x0, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xba}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x800}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ee075fa5211f6982c78ae46a6bf972e3cc9cf6a1edc8f0e1eba65ea8024cf045"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "01f712ea1462b0bda2c816e6a4a487188c16b0f4c476692838a7a3cbe36f75fc"}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x800}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) preadv2(r11, &(0x7f0000000080)=[{&(0x7f0000000140)=""/128, 0x80}, {&(0x7f00000001c0)=""/168, 0xa8}], 0x2, 0x4, 0x4, 0x11) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setuid(r12) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:32:28 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xdcd, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:32:28 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/217, 0xd9}], 0x1) 11:32:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:32:28 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1694.831795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1694.832342] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1694.833037] buffer_io_error: 20 callbacks suppressed [ 1694.833044] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1694.834105] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1694.834762] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1694.860400] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1694.861780] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1694.863427] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1694.864925] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1694.866332] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1694.891167] FAULT_INJECTION: forcing a failure. [ 1694.891167] name failslab, interval 1, probability 0, space 0, times 0 [ 1694.893220] CPU: 0 UID: 0 PID: 11644 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1694.893251] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1694.893265] Call Trace: [ 1694.893275] [ 1694.893286] dump_stack_lvl+0xfa/0x120 [ 1694.893344] should_fail_ex+0x4d7/0x5e0 [ 1694.893388] ? __kernfs_new_node+0xd3/0x930 [ 1694.893411] should_failslab+0xc2/0x120 [ 1694.893449] kmem_cache_alloc_noprof+0x80/0x710 [ 1694.893507] ? __kernfs_new_node+0xd3/0x930 [ 1694.893529] __kernfs_new_node+0xd3/0x930 [ 1694.893580] ? __pfx___kernfs_new_node+0x10/0x10 [ 1694.893629] ? lock_acquire+0x15e/0x2d0 [ 1694.893665] ? kernfs_root+0x23/0x2a0 [ 1694.893696] ? find_held_lock+0x2b/0x80 [ 1694.893722] ? kernfs_root+0xee/0x2a0 [ 1694.893748] ? lock_release+0xc8/0x270 [ 1694.893775] ? lock_is_held_type+0x9e/0x120 [ 1694.893836] kernfs_new_node+0x13c/0x1e0 [ 1694.893887] kernfs_create_link+0xcf/0x240 [ 1694.893935] sysfs_do_create_link_sd+0x90/0x140 [ 1694.893972] sysfs_create_link+0x63/0xc0 [ 1694.894005] device_add+0x5d7/0x1830 [ 1694.894059] ? __pfx_device_add+0x10/0x10 [ 1694.894099] ? lockdep_init_map_type+0x4b/0x220 [ 1694.894137] ? __init_waitqueue_head+0xca/0x150 [ 1694.894193] netdev_register_kobject+0x1a9/0x3e0 [ 1694.894252] register_netdevice+0x1302/0x1d90 [ 1694.894314] ? __pfx_register_netdevice+0x10/0x10 [ 1694.894356] ? dev_addr_mod+0x294/0x340 [ 1694.894413] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1694.894465] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1694.894489] ? __fget_files+0x34/0x3b0 [ 1694.894523] ? find_held_lock+0x2b/0x80 [ 1694.894549] ? __fget_files+0x203/0x3b0 [ 1694.894582] ? lock_release+0xc8/0x270 [ 1694.894644] ? selinux_file_ioctl+0xb9/0x280 [ 1694.894684] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1694.894721] __x64_sys_ioctl+0x18f/0x210 [ 1694.894761] do_syscall_64+0xbf/0x420 [ 1694.894797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1694.894821] RIP: 0033:0x7f998c284b19 [ 1694.894840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1694.894862] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1694.894885] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1694.894900] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1694.894914] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1694.894928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1694.894941] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1694.895014] 11:32:28 executing program 0: r0 = timerfd_create(0x8, 0xc0000) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000040)) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:32:28 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x6, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1694.971916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1694.973524] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1694.975456] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1694.977288] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1694.979380] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:32:28 executing program 0: r0 = timerfd_create(0x8, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000000)) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:32:28 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x51) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)={0x1, 0x6, [@multicast, @multicast, @random="18dd7358f00e", @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}]}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x20280, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x20, 0xc6, 0x4, 0x3, 0x0, 0xffff, 0x308, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e9, 0x1, @perf_bp={&(0x7f0000000200), 0xa}, 0x800, 0x6, 0x3f, 0x3, 0x9, 0x80000000, 0x9, 0x0, 0x7, 0x0, 0x7a0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:32:28 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 45) [ 1695.056433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1695.057741] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1695.059498] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:32:28 executing program 4: sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x1, 0x3, 0x600, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFQA_EXP={0x4c, 0xf, 0x0, 0x1, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x71a}, @CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1c000}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xfffffbff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x100000}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x40}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000011}, 0x800) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) [ 1695.082502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1695.082990] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:32:38 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) readv(r1, &(0x7f00000018c0), 0x0) 11:32:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) r2 = socket(0x18, 0x800, 0x28) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@flushsa={0x74, 0x1c, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@mark={0xc, 0x15, {0x35075a, 0x6}}, @address_filter={0x28, 0x1a, {@in6=@mcast2, @in=@local, 0x0, 0x7f, 0x27}}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x1c}, @in6=@mcast1, 0x0, 0xa}}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getsadinfo={0x40, 0x23, 0x20, 0x70bd2a, 0x25dfdbfc, 0x0, [@tfcpad={0x8, 0x16, 0x8}, @lifetime_val={0x24, 0x9, {0x1, 0x1, 0x7, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x5}, 0x4011) 11:32:38 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 46) 11:32:38 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x7, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:32:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:32:38 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xdce, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:32:38 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2400}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:32:38 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x3, 0x1, 0x1, 0x4}, {0xf1, 0x0, 0xfe, 0x9}, {0x0, 0x4, 0x1f, 0x2}, {0x1ff, 0xb1, 0x80, 0x4}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) [ 1705.089286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1705.090019] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1705.090723] buffer_io_error: 5 callbacks suppressed [ 1705.090731] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1705.091796] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1705.092450] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1705.112070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1705.112801] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1705.113499] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1705.114155] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1705.114817] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1705.142834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1705.143297] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1705.144266] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1705.145045] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1705.145881] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1705.165912] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1705.166812] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1705.168046] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1705.176777] FAULT_INJECTION: forcing a failure. [ 1705.176777] name failslab, interval 1, probability 0, space 0, times 0 [ 1705.178450] CPU: 0 UID: 0 PID: 11692 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1705.178481] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1705.178494] Call Trace: [ 1705.178503] [ 1705.178513] dump_stack_lvl+0xfa/0x120 [ 1705.178563] should_fail_ex+0x4d7/0x5e0 [ 1705.178605] ? __kernfs_new_node+0xd3/0x930 [ 1705.178628] should_failslab+0xc2/0x120 [ 1705.178664] kmem_cache_alloc_noprof+0x80/0x710 [ 1705.178685] ? perf_trace_lock+0x337/0x5d0 [ 1705.178717] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1705.178767] ? __kernfs_new_node+0xd3/0x930 [ 1705.178791] __kernfs_new_node+0xd3/0x930 [ 1705.178832] ? __pfx___kernfs_new_node+0x10/0x10 [ 1705.178874] ? lock_acquire+0x15e/0x2d0 [ 1705.178902] ? kernfs_root+0x23/0x2a0 [ 1705.178928] ? find_held_lock+0x2b/0x80 [ 1705.178952] ? kernfs_root+0xee/0x2a0 [ 1705.178977] ? lock_release+0xc8/0x270 [ 1705.179002] ? lock_is_held_type+0x9e/0x120 11:32:38 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'vlan0\x00'}) 11:32:38 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xdcf, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1705.179059] kernfs_new_node+0x13c/0x1e0 [ 1705.179106] __kernfs_create_file+0x55/0x360 [ 1705.179155] sysfs_add_file_mode_ns+0x21c/0x430 [ 1705.179191] ? __pfx_dev_attr_store+0x10/0x10 [ 1705.179240] internal_create_group+0x662/0xeb0 [ 1705.179299] ? __pfx_internal_create_group+0x10/0x10 [ 1705.179329] ? kernfs_add_one+0x150/0x830 [ 1705.179378] ? kernfs_create_link+0x1be/0x240 [ 1705.179425] internal_create_groups.part.0+0x90/0x140 [ 1705.179466] sysfs_create_groups+0x29/0x50 [ 1705.179495] device_add+0x67e/0x1830 [ 1705.179544] ? __pfx_device_add+0x10/0x10 [ 1705.179581] ? lockdep_init_map_type+0x4b/0x220 [ 1705.179617] ? __init_waitqueue_head+0xca/0x150 [ 1705.179671] netdev_register_kobject+0x1a9/0x3e0 [ 1705.179718] register_netdevice+0x1302/0x1d90 [ 1705.179769] ? __pfx_register_netdevice+0x10/0x10 [ 1705.179808] ? dev_addr_mod+0x294/0x340 [ 1705.179861] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1705.179911] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1705.179933] ? __fget_files+0x34/0x3b0 [ 1705.179965] ? find_held_lock+0x2b/0x80 [ 1705.179989] ? __fget_files+0x203/0x3b0 [ 1705.180020] ? lock_release+0xc8/0x270 [ 1705.180078] ? selinux_file_ioctl+0xb9/0x280 [ 1705.180116] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1705.180150] __x64_sys_ioctl+0x18f/0x210 [ 1705.180189] do_syscall_64+0xbf/0x420 [ 1705.180220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1705.180243] RIP: 0033:0x7f998c284b19 [ 1705.180263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1705.180283] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1705.180304] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1705.180319] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1705.180332] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1705.180345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1705.180357] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1705.180425] [ 1705.245469] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1705.245949] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:32:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syncfs(r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x10001}) [ 1705.268973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1705.269467] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:32:38 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xdd0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:32:38 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x8, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:32:39 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 47) 11:32:39 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000000c0)) 11:32:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'virt_wifi0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="3d000000390e220009000000010000000001007803274a1c0491d408e09f48f4e4a03200"]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000240)={{0x0, 0x414c}, 0x100, './file0\x00'}) capset(&(0x7f0000000380)={0x20071026}, &(0x7f0000000100)={0x7ffffffc, 0x0, 0x0, 0x0, 0x1f1, 0x1}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_macvtap\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="4d00000000f95e5160dfdf158c737f0000070b0000ff7feeffbfffffbc0000000009000000466e00000200000002000800ff0700003f00bace00"/72]}) [ 1705.422495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1705.423422] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1705.439380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1705.440270] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1705.467769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1705.468262] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1705.483387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1705.484291] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:32:39 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xdd1, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:32:39 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x9, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:32:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)=@ethtool_ts_info}) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) [ 1705.639506] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1705.701239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1705.716116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1705.718027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 11:32:49 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x12}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:32:49 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2a00}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:32:49 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff936645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:32:49 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0xa, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:32:49 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xe00, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:32:49 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 48) 11:32:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000080)={0x2, 'veth1_to_bond\x00', {0x4}, 0x4}) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:32:49 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000100)=0x20) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) poll(&(0x7f0000000040)=[{r3, 0x1000}, {r4, 0x1060}, {r0, 0x8740}, {r2, 0x8000}], 0x4, 0x4) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)=0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000002c0)={"ac295592ea7d6022d9fd1c99288051da", r5, 0x0, {0x5, 0x3f}, {0x9, 0x7}, 0x3, [0x5, 0x100, 0xaa8, 0x67, 0x10001, 0x1, 0x7, 0x6, 0x80000000, 0x6, 0x8, 0xffff, 0x57, 0x0, 0x2]}) [ 1715.935767] FAULT_INJECTION: forcing a failure. [ 1715.935767] name failslab, interval 1, probability 0, space 0, times 0 [ 1715.937648] CPU: 0 UID: 0 PID: 11761 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1715.937678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1715.937690] Call Trace: [ 1715.937700] [ 1715.937710] dump_stack_lvl+0xfa/0x120 [ 1715.937759] should_fail_ex+0x4d7/0x5e0 [ 1715.937800] ? __kernfs_new_node+0xd3/0x930 [ 1715.937823] should_failslab+0xc2/0x120 [ 1715.937860] kmem_cache_alloc_noprof+0x80/0x710 [ 1715.937887] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1715.937938] ? __kernfs_new_node+0xd3/0x930 [ 1715.937960] __kernfs_new_node+0xd3/0x930 [ 1715.938002] ? __pfx___kernfs_new_node+0x10/0x10 [ 1715.938043] ? lock_acquire+0x15e/0x2d0 [ 1715.938073] ? kernfs_root+0x23/0x2a0 [ 1715.938099] ? find_held_lock+0x2b/0x80 [ 1715.938123] ? kernfs_root+0xee/0x2a0 [ 1715.938148] ? lock_release+0xc8/0x270 [ 1715.938173] ? lock_is_held_type+0x9e/0x120 [ 1715.938230] kernfs_new_node+0x13c/0x1e0 [ 1715.938278] __kernfs_create_file+0x55/0x360 [ 1715.938334] sysfs_add_file_mode_ns+0x21c/0x430 [ 1715.938370] ? __pfx_dev_attr_store+0x10/0x10 [ 1715.938419] internal_create_group+0x662/0xeb0 [ 1715.938477] ? __pfx_internal_create_group+0x10/0x10 [ 1715.938500] ? kernfs_add_one+0x150/0x830 [ 1715.938549] ? kernfs_create_link+0x1be/0x240 [ 1715.938597] internal_create_groups.part.0+0x90/0x140 [ 1715.938638] sysfs_create_groups+0x29/0x50 [ 1715.938667] device_add+0x67e/0x1830 [ 1715.938715] ? __pfx_device_add+0x10/0x10 [ 1715.938753] ? lockdep_init_map_type+0x4b/0x220 [ 1715.938789] ? __init_waitqueue_head+0xca/0x150 [ 1715.938842] netdev_register_kobject+0x1a9/0x3e0 [ 1715.938890] register_netdevice+0x1302/0x1d90 [ 1715.938941] ? __pfx_register_netdevice+0x10/0x10 [ 1715.938980] ? dev_addr_mod+0x294/0x340 [ 1715.939033] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1715.939083] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1715.939104] ? __fget_files+0x34/0x3b0 [ 1715.939135] ? find_held_lock+0x2b/0x80 [ 1715.939160] ? __fget_files+0x203/0x3b0 [ 1715.939190] ? lock_release+0xc8/0x270 [ 1715.939248] ? selinux_file_ioctl+0xb9/0x280 [ 1715.939284] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1715.939319] __x64_sys_ioctl+0x18f/0x210 [ 1715.939357] do_syscall_64+0xbf/0x420 [ 1715.939388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.939411] RIP: 0033:0x7f998c284b19 [ 1715.939430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1715.939451] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1715.939472] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1715.939487] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1715.939501] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1715.939513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1715.939526] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1715.939592] [ 1715.982196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1715.983184] blk_print_req_error: 4 callbacks suppressed [ 1715.983199] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1715.985195] buffer_io_error: 32 callbacks suppressed [ 1715.985208] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1715.987155] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1715.988375] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:32:49 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r0, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000080)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:32:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r2, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) poll(&(0x7f0000001440)=[{r2, 0x1}], 0x1, 0x7) sendmsg$nl_xfrm(r2, &(0x7f0000001400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000013c0)={&(0x7f0000000140)=@getsa={0x1268, 0x12, 0x2, 0x70bd25, 0x25dfdbfb, {@in=@multicast2, 0x4d5, 0xa, 0x3c}, [@sec_ctx={0x100c, 0x8, {0x1008, 0x8, 0x0, 0x80, 0x1000, "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"}}, @sec_ctx={0xbe, 0x8, {0xba, 0x8, 0x1, 0x8, 0xb2, "84716c5e3b107c15dc27a31bf4a1987bf1dcb8101bd9f0af6e51c93c8ee91ebbc6fb4aced863a45ad0fa2d81417995d279785f55a3ce8c72f867f22ee65e13c5c1c8fe44884e3e8a52591682a7118f16d9cd078ce2fa5cd3bac9c79395e5318d94168c8ce5efa0d3d21d3e6428b859314c241ae47978e65ba31b9e6a833bdfefce1ef57601273b53dea91275ac833e5a47a2d89f7081a41eb70989baee6bc979aed75e426b5296271f98df60e70a80753ed6"}}, @replay_thresh={0x8, 0xb, 0x9}, @lifetime_val={0x24, 0x9, {0x18dd, 0x3f, 0x2, 0xbc}}, @algo_crypt={0x147, 0x2, {{'ctr-serpent-sse2\x00'}, 0x7f8, "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"}}]}, 0x1268}, 0x1, 0x0, 0x0, 0x48804}, 0x40) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) sendmsg$nl_xfrm(r2, &(0x7f0000001780)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001740)={&(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x26c}, 0x1, 0x0, 0x0, 0x40080}, 0x20045015) [ 1716.084678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1716.085604] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1716.086847] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1716.088020] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1716.089169] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1716.105515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1716.107942] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1716.109541] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1716.111060] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1716.112560] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:32:49 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 49) 11:32:49 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x1008, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:32:49 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0xb, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:32:49 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a969d348f6d4d2507c9e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d46b61038e891a566d7035828"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:32:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x3, 0x0, 0x40000, 0x0, 0x0, 0x4000}) r3 = socket$packet(0x11, 0x2, 0x300) r4 = gettid() capset(&(0x7f00000000c0)={0x20071026, r4}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r1, r2}}, './file0\x00'}) getuid() r6 = getuid() r7 = getgid() r8 = dup(r0) bind$packet(r8, &(0x7f0000000200)={0x11, 0x1b, 0x0, 0x1, 0x4, 0x6, @multicast}, 0x14) r9 = getuid() r10 = getuid() r11 = getgid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x0, r10, 0xee00, r9, r11, 0x0, 0x7}, 0x0, 0x0, 0x8, 0x3, 0x17e, 0x1, 0x8, 0x2, 0xfffb, 0x401, 0xffffffffffffffff}) r12 = getuid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x0, r6, r11, r12, r7, 0x0, 0x7}, 0x0, 0x0, 0x8, 0x3, 0x17e, 0x1, 0x8, 0x2, 0xfffb, 0x401, 0xffffffffffffffff}) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={r4, r5, r7}, 0xc) [ 1716.344286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1716.345226] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1716.346490] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1716.414291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1716.415227] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1716.417126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1716.418085] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1716.452529] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1716.453611] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:33:00 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:33:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:33:00 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 50) 11:33:00 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x2000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:33:00 executing program 0: r0 = timerfd_create(0x8, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) timerfd_gettime(r1, &(0x7f0000000000)) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:33:00 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000080)) 11:33:00 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0xc, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:33:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) open_by_handle_at(r0, &(0x7f0000000080)=@fuse={0xc, 0x81, {0x9, 0x2, 0x3}}, 0x200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) [ 1726.907844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1726.908363] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1726.909009] buffer_io_error: 11 callbacks suppressed [ 1726.909017] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1726.910091] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1726.910705] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1726.944989] FAULT_INJECTION: forcing a failure. [ 1726.944989] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.946017] CPU: 1 UID: 0 PID: 11812 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1726.946035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1726.946042] Call Trace: [ 1726.946047] [ 1726.946052] dump_stack_lvl+0xfa/0x120 [ 1726.946081] should_fail_ex+0x4d7/0x5e0 [ 1726.946100] ? __kernfs_new_node+0xd3/0x930 [ 1726.946113] should_failslab+0xc2/0x120 [ 1726.946132] kmem_cache_alloc_noprof+0x80/0x710 [ 1726.946146] ? perf_trace_lock_acquire+0xc9/0x700 [ 1726.946169] ? __kernfs_new_node+0xd3/0x930 [ 1726.946182] __kernfs_new_node+0xd3/0x930 [ 1726.946199] ? __pfx___kernfs_new_node+0x10/0x10 [ 1726.946216] ? lock_acquire+0x15e/0x2d0 [ 1726.946233] ? kernfs_root+0x23/0x2a0 [ 1726.946246] ? find_held_lock+0x2b/0x80 [ 1726.946259] ? kernfs_root+0xee/0x2a0 [ 1726.946272] ? lock_release+0xc8/0x270 [ 1726.946285] ? lock_is_held_type+0x9e/0x120 [ 1726.946314] kernfs_new_node+0x13c/0x1e0 [ 1726.946333] __kernfs_create_file+0x55/0x360 [ 1726.946355] sysfs_add_file_mode_ns+0x21c/0x430 [ 1726.946370] ? __pfx_dev_attr_store+0x10/0x10 [ 1726.946394] internal_create_group+0x662/0xeb0 [ 1726.946417] ? __pfx_internal_create_group+0x10/0x10 [ 1726.946430] ? kernfs_add_one+0x150/0x830 [ 1726.946450] ? kernfs_create_link+0x1be/0x240 [ 1726.946471] internal_create_groups.part.0+0x90/0x140 [ 1726.946488] sysfs_create_groups+0x29/0x50 [ 1726.946502] device_add+0x67e/0x1830 [ 1726.946523] ? __pfx_device_add+0x10/0x10 [ 1726.946541] ? lockdep_init_map_type+0x4b/0x220 [ 1726.946558] ? __init_waitqueue_head+0xca/0x150 [ 1726.946578] netdev_register_kobject+0x1a9/0x3e0 [ 1726.946601] register_netdevice+0x1302/0x1d90 [ 1726.946622] ? __pfx_register_netdevice+0x10/0x10 [ 1726.946638] ? dev_addr_mod+0x294/0x340 [ 1726.946661] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1726.946680] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1726.946692] ? __fget_files+0x34/0x3b0 [ 1726.946708] ? find_held_lock+0x2b/0x80 [ 1726.946719] ? __fget_files+0x203/0x3b0 [ 1726.946734] ? lock_release+0xc8/0x270 [ 1726.946755] ? selinux_file_ioctl+0xb9/0x280 [ 1726.946772] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1726.946786] __x64_sys_ioctl+0x18f/0x210 [ 1726.946802] do_syscall_64+0xbf/0x420 [ 1726.946816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.946829] RIP: 0033:0x7f998c284b19 [ 1726.946839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1726.946851] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1726.946863] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1726.946871] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1726.946878] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1726.946886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1726.946893] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1726.946913] [ 1726.981982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1726.982493] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1726.983191] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1726.983850] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1726.984499] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1726.985633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1726.986121] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1726.986974] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1726.987816] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1726.988544] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:33:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setuid(0x0) setsockopt(r0, 0x5, 0x100, &(0x7f0000000140)="a80b45262ef382784e1ebf776e4591022c1c01e4cd89dde4b78463ae352bfd61ff59491dbb010d1699e2baa77422d982a05718cf9938cb18d347ad6760b2eea790fa", 0x42) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) [ 1727.010117] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1727.011567] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1727.013076] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:33:00 executing program 5: perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x7a, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xb604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa2}, 0x0, 0x9, 0xffffffffffffffff, 0x8) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:33:00 executing program 0: r0 = timerfd_create(0x8, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) timerfd_settime(r1, 0x0, &(0x7f0000000000), &(0x7f0000000040)) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:33:00 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 51) 11:33:00 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x3f00, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:33:00 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0xd, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:33:00 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00001e9a57c27a9fd140efb54f6edaeb1ff964b113cf65f0be4ab10000000036645f0ae3fbea00040bfee32de576970308a41f1fd6c2cf47288f88958fdca6e8681f1f000066d7035828c45f35e8bb1fc58a88b0a0c0deeb02b1b20bca329e00"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:33:00 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x20200, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) setuid(r3) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r6 = getuid() r7 = getuid() r8 = getgid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x0, r7, 0xee00, r6, r8, 0x0, 0x7}, 0x0, 0x0, 0x8, 0x3, 0x17e, 0x1, 0x8, 0x2, 0xfffb, 0x401, 0xffffffffffffffff}) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000004c0)=""/112, 0x70}], 0x2, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd0}, 0x2040) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000010001000000000002000000", @ANYRES32=r5, @ANYBLOB="040005000000000008000600", @ANYRES32=r8, @ANYBLOB="f9ff0000", @ANYRES32=r9, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="10000200000000002000040000000000"], 0x6c, 0xe7b1a7fe0907e84f) capset(&(0x7f00000000c0)={0x20071026, r2}, &(0x7f0000000100)={0x7bf2, 0x6, 0x92, 0x5, 0x0, 0x100000}) [ 1727.213282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1727.213860] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1727.228618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1727.229581] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1727.247930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1727.248415] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1727.259984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1727.260506] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:33:10 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:33:10 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3600}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:33:10 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 52) 11:33:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ftruncate(r2, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x94, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x47}}}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY={0x3c, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_CIPHER={0x8}, @NL80211_KEY_SEQ={0x14, 0x4, "dc947627213ebb928a4266bd40cd64a7"}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a4584a1e50155e8bdafad559a6"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x94}}, 0x0) setuid(r1) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x10001}) 11:33:10 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x4000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:33:10 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b564b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e0000000000000000"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:33:10 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0xe, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:33:10 executing program 0: r0 = timerfd_create(0x8, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) timerfd_settime(r1, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000040)) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) [ 1736.438270] FAULT_INJECTION: forcing a failure. [ 1736.438270] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.439249] CPU: 0 UID: 0 PID: 11862 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1736.439265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1736.439273] Call Trace: [ 1736.439278] [ 1736.439284] dump_stack_lvl+0xfa/0x120 [ 1736.439317] should_fail_ex+0x4d7/0x5e0 [ 1736.439342] ? __kernfs_new_node+0xd3/0x930 [ 1736.439356] should_failslab+0xc2/0x120 [ 1736.439376] kmem_cache_alloc_noprof+0x80/0x710 [ 1736.439393] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1736.439423] ? __kernfs_new_node+0xd3/0x930 [ 1736.439435] __kernfs_new_node+0xd3/0x930 [ 1736.439458] ? __pfx___kernfs_new_node+0x10/0x10 [ 1736.439480] ? lock_acquire+0x15e/0x2d0 [ 1736.439498] ? kernfs_root+0x23/0x2a0 [ 1736.439512] ? find_held_lock+0x2b/0x80 [ 1736.439526] ? kernfs_root+0xee/0x2a0 [ 1736.439540] ? lock_release+0xc8/0x270 [ 1736.439554] ? lock_is_held_type+0x9e/0x120 [ 1736.439586] kernfs_new_node+0x13c/0x1e0 [ 1736.439612] __kernfs_create_file+0x55/0x360 [ 1736.439638] sysfs_add_file_mode_ns+0x21c/0x430 [ 1736.439658] ? __pfx_dev_attr_store+0x10/0x10 [ 1736.439687] internal_create_group+0x662/0xeb0 [ 1736.439719] ? __pfx_internal_create_group+0x10/0x10 [ 1736.439732] ? kernfs_add_one+0x150/0x830 [ 1736.439758] ? kernfs_create_link+0x1be/0x240 [ 1736.439784] internal_create_groups.part.0+0x90/0x140 [ 1736.439805] sysfs_create_groups+0x29/0x50 [ 1736.439821] device_add+0x67e/0x1830 [ 1736.439847] ? __pfx_device_add+0x10/0x10 [ 1736.439868] ? lockdep_init_map_type+0x4b/0x220 [ 1736.439887] ? __init_waitqueue_head+0xca/0x150 [ 1736.439916] netdev_register_kobject+0x1a9/0x3e0 [ 1736.439943] register_netdevice+0x1302/0x1d90 [ 1736.439971] ? __pfx_register_netdevice+0x10/0x10 [ 1736.439992] ? dev_addr_mod+0x294/0x340 [ 1736.440021] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1736.440049] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1736.440060] ? __fget_files+0x34/0x3b0 [ 1736.440079] ? find_held_lock+0x2b/0x80 [ 1736.440092] ? __fget_files+0x203/0x3b0 [ 1736.440108] ? lock_release+0xc8/0x270 [ 1736.440140] ? selinux_file_ioctl+0xb9/0x280 [ 1736.440160] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1736.440179] __x64_sys_ioctl+0x18f/0x210 [ 1736.440200] do_syscall_64+0xbf/0x420 [ 1736.440217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.440231] RIP: 0033:0x7f998c284b19 [ 1736.440241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1736.440254] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1736.440266] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1736.440274] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1736.440282] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.440290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1736.440297] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1736.440333] [ 1736.500794] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1736.501269] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1736.501973] buffer_io_error: 14 callbacks suppressed [ 1736.501980] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1736.503005] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1736.503642] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:33:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r4) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@migrate={0xe0, 0x21, 0x800, 0x70bd2b, 0x25dfdbfd, {{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x4e23, 0xd4a, 0x4e22, 0xfff9, 0x2, 0x20, 0xa0, 0x3b, r2, r4}, 0x6e6bbe, 0x2}, [@replay_esn_val={0x30, 0x17, {0x5, 0x70bd2a, 0x70bd2d, 0x70bd2b, 0x70bd27, 0x3, [0x1, 0x9, 0x7, 0x100, 0x10000]}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}, @algo_aead={0x4f, 0x12, {{'morus1280-generic\x00'}, 0x18, 0xc0, "257f43"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20010010}, 0x40) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) [ 1736.541286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1736.542288] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1736.544056] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1736.545322] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1736.546559] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:33:10 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 53) [ 1736.554901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1736.555935] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1736.557254] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1736.558542] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1736.559838] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:33:10 executing program 0: r0 = timerfd_create(0x8, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000380), 0x6e, &(0x7f0000000800)=[{&(0x7f0000000400)=""/144, 0x90}, {&(0x7f00000004c0)=""/87, 0x57}, {&(0x7f0000000540)=""/167, 0xa7}, {&(0x7f0000000600)=""/69, 0x45}, {&(0x7f0000000680)=""/78, 0x4e}, {&(0x7f0000000700)=""/119, 0x77}, {&(0x7f0000000780)=""/79, 0x4f}], 0x7, &(0x7f0000000880)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x40002000) timerfd_settime(r1, 0x0, &(0x7f0000000900)={{0x77359400}}, &(0x7f0000000940)) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f00000002c0)={{r2, r3+60000000}, {r4, r5+10000000}}, &(0x7f0000000340)) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/rfcomm\x00') write$sndseq(r6, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, &(0x7f0000000100)) timerfd_gettime(r6, &(0x7f0000000140)) [ 1736.603205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1736.603723] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1736.604406] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:33:10 executing program 5: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r2 = gettid() capset(&(0x7f00000000c0)={0x20071026, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x2, 0x1, 0x4, 0x7, 0x0, 0x7, 0x400, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x8, 0x6}, 0x8802, 0x1, 0x1, 0x8, 0x8, 0x3, 0x8, 0x0, 0x2, 0x0, 0x6}, r2, 0x8, r3, 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00'}) 11:33:10 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0xf, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:33:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x100}) 11:33:10 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xcd0d, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1736.708435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1736.709689] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1736.724817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1736.725542] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:33:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, &(0x7f0000000080)=0x1, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) getresuid(&(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000540)) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffc}) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000001c0)=0x68) chown(&(0x7f0000000500)='./file0\x00', r2, 0x0) r3 = dup2(0xffffffffffffffff, r1) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x48801001}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x6e}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x80}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x40}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc0c}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x200}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 1736.750666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1736.751260] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1736.776748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1736.777248] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:33:18 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) timerfd_gettime(r1, &(0x7f0000000000)) 11:33:18 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xce0d, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:33:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000005c0)={0x0, @llc={0x1a, 0x322, 0x0, 0xff, 0x40, 0x1, @remote}, @sco={0x1f, @none}, @isdn={0x22, 0x3f, 0x20, 0x3, 0x6}, 0x3, 0x0, 0x0, 0x0, 0x4a88, &(0x7f0000000580)='hsr0\x00', 0x1, 0x1}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0x4, 0xff, 0x5, 0x0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x1, 0x2, 0x1}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r4) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0xff, 0x0, 0x3ff, 0x20, @empty, @mcast1, 0x7800, 0x700, 0x0, 0xffff}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r7) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)=@acquire={0x200, 0x17, 0x80a, 0x70bd26, 0x25dfdbff, {{@in=@local, 0x4d6, 0x6c}, @in=@multicast1, {@in=@empty, @in=@local, 0x4e23, 0x60d2, 0x4e20, 0x6, 0xa, 0xa0, 0x80, 0x87, r2, r4}, {{@in=@multicast2, @in6=@loopback, 0x4e21, 0x0, 0x4e23, 0x1, 0xa, 0xa0, 0x180, 0x0, r5, r7}, {0xfff, 0x1000, 0x4, 0x3, 0x5, 0x0, 0x37bc408b, 0x800}, {0x0, 0x8, 0x20, 0x1000}, 0x10000, 0x6e6bc0, 0x0, 0x0, 0x3, 0x2}, 0x6, 0x6f59, 0x6, 0x70bd29}, [@offload={0xc}, @algo_auth_trunc={0xc4, 0x14, {{'ghash-generic\x00'}, 0x3c0, 0xc0, "c83e432a86708be232fd3d4e8fb8c8f1bb4b75714a0f191b5ef04836baf11b3da30d8ef8fcd636a40508f0c1256b0693879a4d023b9de2490d87639f7d9aa5553dce00283666c5421ff92fdad1d3dbfc4337252882367de255b2809b834bbabbd1daaa73ffa15588bf3e1aa9d5ec8f2826dd3922e3d95276"}}, @tfcpad={0x8, 0x16, 0x10001}]}, 0x200}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) openat(r1, &(0x7f0000000540)='./file0\x00', 0x40, 0x217c9f8b5772cc15) setuid(r8) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:33:18 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x10, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:33:18 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 54) 11:33:18 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:33:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x24}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:33:18 executing program 5: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000100)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r2, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000080)=0x80000000) [ 1745.241719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1745.242825] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1745.244201] buffer_io_error: 14 callbacks suppressed [ 1745.244215] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1745.246385] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1745.247689] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1745.255291] FAULT_INJECTION: forcing a failure. [ 1745.255291] name failslab, interval 1, probability 0, space 0, times 0 [ 1745.257154] CPU: 1 UID: 0 PID: 11930 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1745.257185] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1745.257199] Call Trace: [ 1745.257207] [ 1745.257216] dump_stack_lvl+0xfa/0x120 [ 1745.257262] should_fail_ex+0x4d7/0x5e0 [ 1745.257295] ? __kernfs_new_node+0xd3/0x930 [ 1745.257325] should_failslab+0xc2/0x120 [ 1745.257359] kmem_cache_alloc_noprof+0x80/0x710 [ 1745.257387] ? perf_trace_lock_acquire+0xc9/0x700 [ 1745.257428] ? __kernfs_new_node+0xd3/0x930 [ 1745.257452] __kernfs_new_node+0xd3/0x930 [ 1745.257483] ? __pfx___kernfs_new_node+0x10/0x10 [ 1745.257515] ? lock_acquire+0x15e/0x2d0 [ 1745.257544] ? kernfs_root+0x23/0x2a0 [ 1745.257568] ? find_held_lock+0x2b/0x80 [ 1745.257607] ? kernfs_root+0xee/0x2a0 [ 1745.257631] ? lock_release+0xc8/0x270 [ 1745.257658] ? lock_is_held_type+0x9e/0x120 [ 1745.257703] kernfs_new_node+0x13c/0x1e0 [ 1745.257739] __kernfs_create_file+0x55/0x360 [ 1745.257779] sysfs_add_file_mode_ns+0x21c/0x430 [ 1745.257807] ? __pfx_dev_attr_store+0x10/0x10 [ 1745.257850] internal_create_group+0x662/0xeb0 [ 1745.257890] ? __pfx_internal_create_group+0x10/0x10 [ 1745.257914] ? kernfs_add_one+0x150/0x830 [ 1745.257951] ? kernfs_create_link+0x1be/0x240 [ 1745.257990] internal_create_groups.part.0+0x90/0x140 [ 1745.258024] sysfs_create_groups+0x29/0x50 [ 1745.258051] device_add+0x67e/0x1830 [ 1745.258090] ? __pfx_device_add+0x10/0x10 [ 1745.258126] ? lockdep_init_map_type+0x4b/0x220 [ 1745.258158] ? __init_waitqueue_head+0xca/0x150 [ 1745.258197] netdev_register_kobject+0x1a9/0x3e0 [ 1745.258235] register_netdevice+0x1302/0x1d90 [ 1745.258274] ? __pfx_register_netdevice+0x10/0x10 [ 1745.258307] ? dev_addr_mod+0x294/0x340 [ 1745.258350] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1745.258389] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1745.258412] ? __fget_files+0x34/0x3b0 [ 1745.258443] ? find_held_lock+0x2b/0x80 [ 1745.258466] ? __fget_files+0x203/0x3b0 [ 1745.258495] ? lock_release+0xc8/0x270 [ 1745.258537] ? selinux_file_ioctl+0xb9/0x280 [ 1745.258568] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1745.258597] __x64_sys_ioctl+0x18f/0x210 [ 1745.258627] do_syscall_64+0xbf/0x420 [ 1745.258654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1745.258678] RIP: 0033:0x7f998c284b19 [ 1745.258696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1745.258719] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1745.258742] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1745.258758] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1745.258772] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1745.258786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1745.258799] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1745.258838] 11:33:18 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x9a44}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth1_to_bridge\x00'}) 11:33:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r2, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r4) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl}], [{@subj_user={'subj_user', 0x3d, '('}}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@euid_lt={'euid<', r4}}, {@subj_type={'subj_type', 0x3d, '#%\'@*'}}, {@subj_user={'subj_user', 0x3d, '[)}@&}'}}]}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000080)) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)) [ 1745.343088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1745.344255] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1745.345835] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1745.347512] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1745.348821] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1745.351183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1745.352208] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1745.353613] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:33:19 executing program 0: arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xd) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) [ 1745.354923] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1745.356440] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:33:19 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 55) 11:33:19 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xcf0d, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:33:19 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x11, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:33:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r1, r2}}, './file0\x00'}) r4 = timerfd_create(0x0, 0x80000) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f0000000140)={{r4}, "417ae77cc680881d05370d088950721f0b349f443151dd22750a99eff5c78be85f27b723bfb731a869f1d2b5917cb6dcbf0d5182805b00f3048f95dd81f3cf7188ae1904b774bb24e9f7cc9413b77c3091d5e4400885d7f4c2b5ed3b7465038bf64257a290aa35bfa5a180c0237af6cdc07a4e035f9d2dc84c3e8c58735d236fbfb0a736984c7de3df25f4142ee7bbf2e2972ba18f968aa8ee6c9b2b604c2da9ff3f1ef9ef4c51b6de869d35e53f1f4d013081b0e9fb7c60189d1a1b4a4dfc68b74c81fea6d98836e1b7abba9c8a5b3bc0137fbe2e25afbf39e93c1a64cfcf26e0eb4a90d9e9d71bd99d3aea2ad966d6c883f05e1d1c66a85c05b1fb3e33ce896644d8ef9d1f8790f8798941cfd41890e9d4fa3b30ddb0399458c46029b89a06516fa1fd577fe70731102b11e9c36de61902ea78f8f45e5372683cfee88f52df84c5fc70e2a34d43e3d6c7a1a30d1f88f24504b63ef8cf00011ecd697a7643d66c7c635006469164a3b18351eb6ab902507e1b169d69272f80ca0c19f0284f8947c1dfc4a9a9566feb6f1d516c984087ded64aeaca1d022f9c29978f13d394eb423d0913d2bc761a91f8c37ec1193d8597e6e19ec5620bf9cfd88fe84ca7ca688431bb2605653ef647abda41f196da8176c343728baf306147f06c053560fb60b34104e41aea966baf2f18978b52b1872e4693abde30569469f8e83a3236adfa8190f63eba25018ca9bfc73afcc648e611a48c6eafe40ddaae00d1606a1e02f9a4c43f5149e799a06daf438fa89c727d579c2e63e4271f9f99ad377ddef3ee84c84b13395e98378db03697a98239c7a7832c5b703a68cb06f08a97f03c382a6103dac1cb37c716d5380f2756baed964f0a0bc195a2e469076e3ca179197752182907a2dacece119020527f9d95a7050f9799445f1faa9c5bff814d9e443c09c935f8da025e8641eb2668beab47900426c0267d1199aab039cf7e3438e3c5a434c7ee887248fa22b09a5098b26242748be3d2351bc3322d8a34d3034e9e15069a321ef9dcbe09930f873b059becf153def8dfe2947ba49384d84a5b78e3b9fcb0c74c4082f830e6351b062dcd795284af2a0341df3a37861a2ac4db1188f92e003293a23247381bee925aba6eeac65ac30d24826e77f8a7d289aac9a85f78c35269a12d084cbc43f93dd398615744cab707b9aa3055c44193936232d6dc51c22eeb5c1cf98fc2f9c37f7acc67c555c91435fe15f2a8e700ab2dfc70510f55f3e7beac0818158aec9a179a4e8b3d865d6c1a14809ace2c2284f85c51682ce7868ad4940a26036ded7f31c622f1ac64c5fc0e3aaf19fb2d87430af4d239228b6670a3237684572a0e53ea53d020a29cc7f5b3e30526db6f29a27aa66989dbb2ccbb4cc397dec41aa219fa512470e7df9de5717d08c4f9c0392f391fca196f81dc951b01f2b551f1bf247d9bc91d92213e9497a9ea05e50329b60dabee7a7543bb08e1e6294644782dcdc50506cda8637ba5c376052ee2789a62dfff5ff0cee6270d0412099d580d645602a14155fb1000f199fd4d0c38a350acf1260eca98053e4c48fdf765555651ea525b9d2f9c2537d4d377cbccdd9d9da7c351da3685c74e6dd875505ed942886e5a718c19ed81d24a84ec10ed3f342986484f182c7f2c0b25b82d4dde3305bad3ba9005d4a1f48e0ab72f04448fce74de0ac9b75f2ad7c6c8d6d005e7e01102bf53324a8c26b8da717b64b91969c0317d8f8ccde997f5b5f0fd55bdd4f5ed0049f4fa44fe31e0c164549122b7886075a19a48f069acf1a8d2de4b80664a3bac6098f8ca12a973a89cbc98128b60012a8ea3b1d4ade237560683201c330007b4c406a65d51bce9cf9edb1601ed79710361a1c954a5e2affdaec3bc53c4377588219de59b4ce222c41fece7a78442ec923ca15d1a250ef8c1c73eda80453c1fd86cb31ef4871d1db4694f8add329cdc707cae2e6c2528cb256a6775a91304f88c2f017ebfc5fde08b5c925be3c757801412182419eb91b1d43becb1f45ca9832d675ae0b1707149e312df625da2a374994e35ed66e22564237967d32994078892f458d7307cb4f3ebfbc7ecc2aecee1bd30bcc3835ae119a0981d847ccea3555b4918dd180a70f561cf057df08c001771f8a6466271e5b76a95f85fb7252575e0a767bd399dce71edb70d8e657b94d27eb7546a31ec9d10e34bc0321d6ab66f5415e273d1764aaa2c09e98846f8a329a92f6b6f2f390389a51c6173f4c5081b8afeb3c6393b847f946e2bcc814c8571a4c14168ff0acebeb8df21df9cf87601110fd76a7aad474c8c587129df654966d5e517a29969cbd826964f79d021abc9a93681b4fb1588a470e9e16da48c8b9e5b6c2f616f8eab24ed8f6e9bf93cd5bbd716b4597914fc91a36e3839bd2dfffa2f1f8e68ab4975af952c10d7c7b3f9f55feca9d21c02075c38f6f0329f0631a42f5645330eb6440361c471174a9cf0574f17a149dc71dbb46424852d71bc03cddca398310a97367b1b1afd525c2391bbeb2c88ac1a046673c122c5fda347f49953eb701f1d6374943ac4871275468d9792d2ea9ef757a577815fb0794c862be8ece4a2af5d696cff9b295ea75c3be5a3739e2aaf6d6019c4eefaad842a7d267dbc2546a42fe52d2d5273baac32cb8732d13db90c7aa87e765b7478346bfdf9a190b5c0ab175de49d530f788d5cdf6dfe2adc8b75f355539a7702ac51664a93af2b4affd659dec4855234a53431dc0113c0f951caad51b17043da7616203b2867f77874cf7f870cbd59e148b97ffa4cd866e33e82efc8672918e5b6ed0963906a710d1a16f745cd2dc7a06c9a45a4ffbdd431d505f90b96cf5ff32054dfa21d0569673bbb346e22b0f050d67a8a1a3f3035368449a17be01a8efa7c5bf400982b092019ef8e3f6889ec28f5ee91aacf868dacc2a19cd1575f9001b04ac144274ac74e956df9d87045109fe32d48efdc863105c2babacd5ececea0a74e335d53569c19e48c205318845ae65964aa4ff2072524e37f41fe571be45f011f28c79e06ea25a8ebf918b862c21ba7959e216c4eb772299222620810a63c98be850009162d964bbbaef6dff8b6d975a1176e651eadde113811de5d59f37e012680b74da5d5026150d47b10694f65b9130e963c3976cfe3ef7cc6d49916ca0a281ec86021be7d85d7ebbaa18dc0685e870fb52d39a0f3c2152b7fe93e16a80d1026d0435a2903924494a52f845fce8f1990b45df41b1dc1b5d031ffc51e298993a78a156f50c39e3093162b76469ed1430eeef5f717b2f335f1959ca180dd5b95f5c24fffddd3e0d057e0d4b8240119fbe7b19b7762699772dfd48cd56a96cd55ea4bbdb82aca36cc51f14879e8cbf20372c5183e8225c5ff9187c6daa620e3fdab9ee846f2964300e3b59291df6c727765b65e30d8d4c49f429e8f3ac17295f31cca0a5832592286fb8f61a33a05e3f5fa6ba47db55745b91cc8bbcdf3635d9f1e3dec2244f382411e3f0bb0ccad2a34f208e91ee38f0edcf953f16bddc79925100838ccee377bfb4c606327a98e5867078bc78bfe49f2782d3e55188f6cb9c5d1a36459849fc91cf3ef053b73bcdc3fed28e404537bcd3f964615735fd6e4af54b91c556c90ec413cddef59a767e2088ef4627b528e458ef9fb40445bfc8cdba79e58660531c8ea7bbfc36441ec78a039f4802330b2d9d9dbeeb034ac4456f99d04b605de9e24cce102857d25401057702a7cf2efaf14d748320bd6736427e7030af0225f9c14543ef910b3039c0f74a77b2576f2b437dfd13b1523938fb633bb8d00257f6e42bd77b3e4a0d9a5a0dde3f9503c5ef514dc53595d2f44e15417524ec140979ae4660d344c15b44cc808ee114412472773c43f755aef0fcdcd52fb910ed3438b7a07f4b2b5b487855d38477c56ef3f18c99e5d54710a64414dde6711a2f5224a05a06f0c370bf2040ed03437c1113895d7dbfb5148f8ba74e35cf63acdba06b5cca2bba6af65d819e9f34591f392244f7f690711760523b18f00d1ef1520f8d76531499b8800acb9849c90d5d8f859c747f46a64fed90c4efd9f717c4faa27c2f76e7f0a7310033b5ee7adfaf8d223a053f4fee0c8a4a6aed3b8e28599ccb58de0a8ee73a8527545a836d6f90107d452d206eadb9b91915e310537f77a0249d3848fc0a6f43925ac8a9de55704638f17e0229204884e36a6fb8a28a0b27b0694c166ce9cd346fb37e5c7dc6b8c44665d9976eed40ff336974974a7d75836a88b275779d206395b8245330859c1e7a8082abda584ec77271d787a0251d58949619ec42dbef8ac10483648490b8f574d680421682ad92a6f50a42d0e20590505bbd7f51a060115a6e4a8d565e059b14a1492c6f6ac128d2d723efafc7e5ee2c9a04acbc96b381f947c18978c987b146aea5093709eb3186d667e553ff52f5d9823e43be36fa07195e88eeac75681a325f4028db4957dd2e6e8eab2a0c950656210e190d2ed396f0b88b762ac4400ec5bfb1cd9a32eb7034f022150d52e6006389d3c4dc6ad3fdc7d0aff6bf9b71aaab423ad607e71dba07e7ba628a29b5ce301b3e4c1241782ad8e47fd6bb5a493a12a1b6c0998da7247ab221fe9d1cc8debe07bb1d770fe88128f460cf1efcc4d4bebe06af9928ef59ac912b500c0097f4055eac5a2708924c51dc7fa5c74538d337e5e3ef21d8bee3d8d645f89960b4c26f131ce1156b5408d773758923f5233a02d797f166b74f611e37337a36673b49d3cc41b8778ac6199138aab8577536d9dfa933ea7203b769d61e15a80a82e8d9d5e6f8bbf9fa7aaa61d7b36b28c010767f36ffedf8d2c685ae57845852595108758f297bd3464fa56ebcfdb3044935c75b4e179e9a148f25d219a898851c265f9c4c02c65742c2f64bdd39eb226ad27b9ce8091a7b1c4864b2b7baa70e84961416dac912c6bf181dedbdc6253239a6e7f8355a8e2a2edbb285c6200e0f04f71482f0ac35b7d412ce88c5459f5e2d3d3623db2819bb30b8f1971c14b44e869cf971e70702ba086c81b4754b09a57c56d0e57360c57a7f9d85b6b185223fc26ce94c840c40c8ef0d1e974732b3bf4234fb3838aa8bce565a97625c0abff699789db2b54d0f8e971ae529428a740fd285a5ca56682c10b642388b78b05add64cddb7ff98576c6618e786e5982aa48c3786da056291f4e979d219f6c1a944d3e6060c22ca6518e68f410f3e8e4eaa657e465a9ceab88d6946f227c829cad8aea3752615ffad4255da6886d939311521ccd6d0e415549c0328459cca3b28dda7550abfddb3bb751751351c34b96572c669ec87366f3946c1e8c367c6c68f031d73ffd08f65e67ad0dc5cc6b013c4ac24f13bcc434be4678a35447beaada42e2342da0cff7aff4749f2e70d24702c44fb031484bacbd0ee9d7b274696ed7c5236b3a86fc13bf8316e29a666a2698307c890c8f9af354a5de601377d0c935cfd07820e302e346218bb6d7839bc32b29bccb7e275bc964e6287df0b77644a28674a7c68b0476a08f24b302a404fb2e8790164805b153d8a75f8545674ea4421c0afd85e770cd473e8aa2a0749504e53e89706863385a1e1d08cdca025827632b51e1a1b831fb7713139cae005b273af412b1c4170b954a7cd7dcb78ca6834bada43ae6935406fd4f344aece621801eeb5deaebcfe2edb9349a27fac1b947a3e8b08d7f04479ce2c6eaabc3faf37a2f6d3977ae8b4b2084e87c3c33a7d603a9b166f8aea008d70"}) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:33:19 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00001efa34b50f474f6edaeb1ff964b1a2655d43abb8d4e40eb213cf65f0be4ab146aa029636645f0ae3094e59e50bfee31be57600000000000000cf47288f8895dca2e8681f1f7d4666d7035828c45f0bca329e00"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:33:19 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) r2 = signalfd(r0, &(0x7f0000000000)={[0x101]}, 0x8) timerfd_gettime(r2, &(0x7f0000000040)) [ 1745.517494] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1745.518017] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1745.518958] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1745.559638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1745.560643] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:33:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) ioprio_get$uid(0x3, r2) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) [ 1745.574125] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1745.574638] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1745.587100] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1745.588127] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:33:19 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x12, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:33:19 executing program 5: fchmod(0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'veth0_vlan\x00', @remote}) lseek(r0, 0x7, 0x0) [ 1745.686366] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1745.686896] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1745.709866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1745.710821] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:33:28 executing program 0: r0 = timerfd_create(0x2, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f00000002c0)) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x294600) timerfd_settime(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, &(0x7f0000000300)) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000180)) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r2, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) ioctl$CDROMREADTOCHDR(r2, 0x5305, &(0x7f0000000080)={0x2d, 0x1f}) timerfd_settime(r1, 0x1, &(0x7f0000000100)={{0x0, 0x989680}}, &(0x7f0000000140)) 11:33:28 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 56) 11:33:28 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:33:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2a}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:33:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000300)=0xfffffd83) setuid(r1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80e000, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@polexpire={0xc8, 0x1b, 0x200, 0x70bd27, 0x25dfdbfc, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@broadcast, 0x4e20, 0x7, 0x4e23, 0xff, 0x0, 0x20, 0x20, 0x5c, 0x0, r1}, {0x7, 0x3, 0x7, 0xfffffffffffffffe, 0x4, 0xcd, 0xcbd, 0x100000000}, {0x10001, 0x1, 0x8, 0xffffffffffffffc0}, 0x200, 0x6e6bb4, 0x2, 0x1, 0x1, 0x3}, 0xfa}, [@tfcpad={0x8, 0x16, 0x8}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x20048000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000340)=""/182, &(0x7f0000000400)=0xb6) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:33:28 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x13, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:33:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa4, 0xfff}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="00001e74409eb7a6c15463941d8d4f6e090632ca384f5e970d2ce0eb03f964b133cf65f0be4cf71fe97d2f6011e6a83883484ab146aa7a9a36645d0ae3094e59e50bfee32de5769703829e1f1fd6c2cf47288f8895dca6e868171f7d4e66d7035828c45f0bca329e5d65063df5a97a921cb24625f440772a61f05dcf521c50ed537ead356391bdfa520fa1aee418c89cda022c3dddd8cc8bd410df82756f9c3f7f0163d27d62b3d3985ec153c7dc834ed1bcd44ebed97da916479f290d6dd7830da83110555482a37f1bbf64b4a2e625825469e3366daa6cf850e4d825f04e1f6eef1cf6dcb96493bbc34a1fdfc46e98641434587b"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x22803, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x3, 0x1f, 0xf8, 0x40, 0x0, 0x6, 0x2000, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x5, 0x9}, 0x4050, 0x1, 0xfdbd, 0x5, 0x8, 0x2, 0x2, 0x0, 0x3f, 0x0, 0x100000}, 0x0, 0x7, r2, 0x9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'veth1\x00'}) 11:33:28 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xd00d, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:33:28 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f00000000c0)) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000000)) [ 1754.613285] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1754.613870] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1754.614745] buffer_io_error: 17 callbacks suppressed [ 1754.614753] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1754.615930] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1754.616659] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1754.628193] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1754.628772] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1754.629563] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1754.630287] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1754.631011] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:33:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) sendmsg$nl_xfrm(r0, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000140)=@newae={0x464, 0x1e, 0x10, 0x70bd2a, 0x25dfdbff, {{@in=@remote, 0x4d2, 0x0, 0x33}, @in6=@mcast2, 0x6, 0x3500}, [@policy={0xac, 0x7, {{@in=@rand_addr=0x64010101, @in=@multicast2, 0x4e22, 0x3, 0x4e20, 0x3, 0xa, 0x0, 0x80, 0x5e, 0x0, r1}, {0xeb6, 0x10001, 0x8, 0x3, 0x3, 0x8c59, 0x3, 0x7}, {0x4, 0x0, 0x2, 0x4}, 0x7fffffff, 0x6e6bba, 0x1, 0x1, 0x1}}, @algo_auth_trunc={0x131, 0x14, {{'blake2s-128-arm\x00'}, 0x728, 0x40, "de5bd2416ff67d547474e99404ea471ee27b3a3bdacfe29b5156c5f2fa7ec513b88b81e855bf6702ebb61a79a45b2a9653d1495200d84d61ce1b0faed444036318b0e682e4617c3e136ae77bf0984eb08766d6569cb6c3637ccb0cc4a271a4a17ea864f5beb835060f13eca280e83956f7451f5ed1f3e35800c1c9aced829f07c15321993687ab51444bd364086189a16a14613529ffabd5a1981b74a7bb85ae563b180a75bc35e5bbf3bd1df9f3b42d334e9d0ed1af94f9866c1368132ec238584521b77d5df5bb136da2a842672a145f2faceec92a71bcadcda8696a8c479a066312ae83"}}, @replay_thresh={0x8, 0xb, 0xc55}, @XFRMA_SET_MARK={0x8, 0x1d, 0x7f}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x800}, @algo_crypt={0xe1, 0x2, {{'ecb(arc4)-generic\x00'}, 0x4c8, "aac3472afb2356c1d961560057b1bd7b229745d6bbead1bce2b955b45e8cbce87f169d05e6dd6a88dffb42342994969b09f01f4c2dace120b8b893de6aa6b6f52aabb8d4d6d58e4491048f495f05f6630184fcf2fa0aaeb348f4b5d7cd3033e66b2fb30835e1c7107f2994df8103ed991c7b13736756d5efbdd33abc8bd7e7f7fac78cc9e9640567a83229b76567aa18202acfeee80126ab7b"}}, @algo_crypt={0x99, 0x2, {{'xchacha20-generic\x00'}, 0x288, "3d1ef66e182dcccd19b6bbe5f410ae8882cbb9925777ad80c0f9e1137c771af3ccc95008ffdadb98aad7ed9f8bfe1e27b091b6c74227d7d98ab7eb43b33d573228bfe39558fbe2fb556da86a033f8ef43c"}}, @policy={0xac, 0x7, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1c}, @in=@dev={0xac, 0x14, 0x14, 0x21}, 0x4e23, 0x7fff, 0x4e23, 0x6, 0x2, 0x20, 0x80, 0xc, 0x0, r1}, {0x40, 0x6, 0x5, 0x5, 0x8, 0x7, 0x2, 0xffff}, {0x58145d29, 0x80, 0x80000001, 0x8}, 0x7fff, 0x6e6bb4, 0x2, 0x0, 0x2, 0x2}}]}, 0x464}, 0x1, 0x0, 0x0, 0x800}, 0x8010) [ 1754.650153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1754.650957] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1754.651741] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1754.652475] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1754.653177] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:33:28 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) [ 1754.670779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1754.671363] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1754.672121] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:33:37 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 57) 11:33:37 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:33:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:33:37 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x14, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:33:37 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0200a6fa34b50f474f6edaeb1ff964b913cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x1b1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="000005000180c20000002360e1280afbffffffffffffaaaa424b2febaa2aaa2daaaa"]) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) 11:33:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0x36) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r4, 0x1, 0x0, 0x0, {0x19}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@updpolicy={0xd8, 0x19, 0x100, 0x70bd25, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x4e21, 0x3, 0x4e24, 0x30a, 0xa, 0x80, 0x0, 0xc, r6, r1}, {0x2, 0x7, 0x80000000, 0x8d7, 0x4, 0xcf, 0x40, 0x7f}, {0x7, 0xd7, 0x1, 0x1000000000}, 0xb94f, 0x6e6bbc, 0x2, 0x0, 0x2, 0x2}, [@lastused={0xc, 0xf, 0x5}, @srcaddr={0x14, 0xd, @in=@local}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4801}, 0x4040) setuid(r1) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x800}) 11:33:37 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {r1, r2+60000000}}, &(0x7f0000000080)) 11:33:37 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xd10d, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:33:37 executing program 0: r0 = timerfd_create(0x5, 0x0) clock_gettime(0x5, &(0x7f0000000040)) timerfd_settime(r0, 0x0, &(0x7f00000000c0), 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/252, 0xfc}, {&(0x7f00000001c0)=""/232, 0xe8}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xd}) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x8059}], 0x1, &(0x7f0000000100), &(0x7f0000000140)={[0x8]}, 0x8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x33fe40, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) close_range(r3, r1, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000300)=[{0x36, 0x0, 0x3, 0xfd, @time={0x0, 0x3}, {0x3}, {}, @result}], 0x1c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000500)=0x2) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) timerfd_settime(r2, 0x0, &(0x7f0000000480)={{0x77359400}, {r5, r6+10000000}}, &(0x7f00000004c0)) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000180)) [ 1763.709036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1763.709647] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1763.710507] buffer_io_error: 2 callbacks suppressed [ 1763.710515] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1763.711703] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1763.712435] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1763.724189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1763.725193] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1763.726628] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1763.727938] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1763.729218] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1763.737871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1763.738852] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1763.740268] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1763.741595] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1763.742942] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:33:37 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) [ 1763.759439] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1763.760000] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1763.760796] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:33:37 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xf500, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:33:37 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) fchown(r0, r1, r2) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:33:37 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 58) 11:33:37 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1d, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:33:37 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r0, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, r1, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x11dc}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x147}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x6f8}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0xc000) r2 = timerfd_create(0x8, 0x0) timerfd_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:33:37 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) [ 1763.910950] FAULT_INJECTION: forcing a failure. [ 1763.910950] name failslab, interval 1, probability 0, space 0, times 0 [ 1763.912201] CPU: 0 UID: 0 PID: 12058 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1763.912218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1763.912226] Call Trace: [ 1763.912231] [ 1763.912237] dump_stack_lvl+0xfa/0x120 [ 1763.912268] should_fail_ex+0x4d7/0x5e0 [ 1763.912292] ? __kernfs_new_node+0xd3/0x930 [ 1763.912311] should_failslab+0xc2/0x120 [ 1763.912331] kmem_cache_alloc_noprof+0x80/0x710 [ 1763.912347] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1763.912376] ? __kernfs_new_node+0xd3/0x930 [ 1763.912388] __kernfs_new_node+0xd3/0x930 [ 1763.912411] ? __pfx___kernfs_new_node+0x10/0x10 [ 1763.912433] ? lock_acquire+0x15e/0x2d0 [ 1763.912451] ? kernfs_root+0x23/0x2a0 [ 1763.912465] ? find_held_lock+0x2b/0x80 [ 1763.912479] ? kernfs_root+0xee/0x2a0 [ 1763.912493] ? lock_release+0xc8/0x270 [ 1763.912507] ? lock_is_held_type+0x9e/0x120 [ 1763.912538] kernfs_new_node+0x13c/0x1e0 [ 1763.912566] __kernfs_create_file+0x55/0x360 [ 1763.912595] sysfs_add_file_mode_ns+0x21c/0x430 [ 1763.912615] ? __pfx_dev_attr_store+0x10/0x10 [ 1763.912643] internal_create_group+0x662/0xeb0 [ 1763.912675] ? __pfx_internal_create_group+0x10/0x10 [ 1763.912687] ? kernfs_add_one+0x150/0x830 [ 1763.912713] ? kernfs_create_link+0x1be/0x240 [ 1763.912739] internal_create_groups.part.0+0x90/0x140 [ 1763.912761] sysfs_create_groups+0x29/0x50 [ 1763.912776] device_add+0x67e/0x1830 [ 1763.912803] ? __pfx_device_add+0x10/0x10 [ 1763.912823] ? lockdep_init_map_type+0x4b/0x220 [ 1763.912842] ? __init_waitqueue_head+0xca/0x150 [ 1763.912871] netdev_register_kobject+0x1a9/0x3e0 [ 1763.912899] register_netdevice+0x1302/0x1d90 [ 1763.912929] ? __pfx_register_netdevice+0x10/0x10 [ 1763.912950] ? dev_addr_mod+0x294/0x340 [ 1763.912978] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1763.913006] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1763.913018] ? __fget_files+0x34/0x3b0 [ 1763.913038] ? find_held_lock+0x2b/0x80 [ 1763.913050] ? __fget_files+0x203/0x3b0 [ 1763.913067] ? lock_release+0xc8/0x270 [ 1763.913098] ? selinux_file_ioctl+0xb9/0x280 [ 1763.913121] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1763.913139] __x64_sys_ioctl+0x18f/0x210 [ 1763.913160] do_syscall_64+0xbf/0x420 [ 1763.913177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1763.913191] RIP: 0033:0x7f998c284b19 [ 1763.913202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1763.913214] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1763.913227] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1763.913235] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1763.913243] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1763.913250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1763.913258] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1763.913294] [ 1763.958874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1763.959976] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1763.977816] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1763.978415] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1763.979628] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1763.980142] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1764.011782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1764.012755] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:33:47 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 59) 11:33:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=@allocspi={0x168, 0x16, 0x400, 0x70bd2b, 0x25dfdbfb, {{{@in=@loopback, @in=@multicast1, 0x4e22, 0x3ff, 0x4e20, 0x1d5, 0x2, 0x0, 0x20, 0x2, 0x0, r1}, {@in=@remote, 0x4d2, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, {0x22f1, 0x200, 0x100, 0x20, 0xffffffffffffffe1, 0x4, 0x38, 0x3}, {0x166, 0xea, 0x6, 0x1}, {0x3, 0xff, 0x9}, 0x70bd2b, 0x3507, 0x2, 0x0, 0x3f, 0x160}, 0x20, 0x9}, [@algo_auth={0x70, 0x1, {{'sha512-ce\x00'}, 0x140, "97ca7c98a3bf14f0e78d5f5ae8d2b4e4ab866f84c473f33a6e06b0aae9751f92056f2999357e39b1"}}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:33:47 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x80000, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:33:47 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xff05, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:33:47 executing program 0: r0 = timerfd_create(0x8, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000040)={0x52e, 0x20, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0), 0x4a) 11:33:47 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:33:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x36}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:33:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1020, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@sbsector}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) [ 1773.879227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1773.879832] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1773.880500] buffer_io_error: 14 callbacks suppressed [ 1773.880507] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1773.881508] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1773.882111] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1773.896749] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 1773.921808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1773.922267] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1773.923166] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1773.923958] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1773.924702] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1773.961152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1773.962142] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1773.963599] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1773.964797] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1773.965972] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1773.973109] isofs_fill_super: bread failed, dev=loop5, iso_blknum=16, block=32 [ 1773.981144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1773.981803] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1773.982627] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:33:47 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {r1, r2+60000000}}, &(0x7f0000000100)) r3 = dup2(0xffffffffffffffff, r0) timerfd_gettime(r3, &(0x7f00000007c0)) timerfd_gettime(r0, &(0x7f0000000000)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003040)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/166, 0xa6}, {&(0x7f0000000380)=""/77, 0x4d}, {&(0x7f0000000400)=""/188, 0xbc}, {&(0x7f00000004c0)=""/101, 0x65}, {&(0x7f0000000540)=""/204, 0xcc}, {&(0x7f0000000640)=""/215, 0xd7}], 0x6, &(0x7f00000007c0)}}, {{&(0x7f0000000800), 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000880)=""/104, 0x68}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000900)=""/178, 0xb2}, {&(0x7f00000009c0)=""/29, 0x1d}, {&(0x7f0000000a00)=""/204, 0xcc}], 0x5, &(0x7f0000000b80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f0000000cc0), 0x6e, &(0x7f0000001100)=[{&(0x7f0000000d40)=""/130, 0x82}, {&(0x7f0000000e00)=""/34, 0x22}, {&(0x7f0000000e40)=""/31, 0x1f}, {&(0x7f0000000e80)=""/182, 0xb6}, {&(0x7f0000000f40)=""/235, 0xeb}, {&(0x7f0000001040)=""/143, 0x8f}], 0x6, &(0x7f0000001180)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000001200)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001280)=""/57, 0x39}, {&(0x7f00000012c0)=""/150, 0x96}, {&(0x7f0000001380)=""/97, 0x61}, {&(0x7f0000001400)=""/29, 0x1d}], 0x4, &(0x7f0000001480)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000001500), 0x6e, &(0x7f0000002a80)=[{&(0x7f0000001580)=""/107, 0x6b}, {&(0x7f0000001600)=""/29, 0x1d}, {&(0x7f0000001640)=""/185, 0xb9}, {&(0x7f0000001700)=""/152, 0x98}, {&(0x7f00000017c0)}, {&(0x7f0000001800)=""/151, 0x97}, {&(0x7f0000002900)=""/124, 0x7c}, {&(0x7f0000002980)=""/93, 0x5d}, {&(0x7f0000002a00)=""/110, 0x6e}], 0x9, &(0x7f0000002b40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002b80), 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000002c00)=""/215, 0xd7}, {&(0x7f0000002d00)=""/182, 0xb6}, {&(0x7f0000002dc0)=""/79, 0x4f}, {&(0x7f0000002e40)=""/44, 0x2c}, {&(0x7f0000002e80)=""/55, 0x37}], 0x5, &(0x7f0000002f40)=ANY=[@ANYBLOB="14000000000000000100000000000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xf0}}], 0x6, 0x1, &(0x7f00000031c0)={0x77359400}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) dup(r4) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:33:47 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x20000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1774.019174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1774.019691] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1774.034596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1774.035073] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:33:47 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x40000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:33:47 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1ffffe, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:33:47 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0xfe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x2}, 0x2d10, 0x0, 0x0, 0x4, 0x2, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="0100ffffffffffff000400000000000009000000000000000100000000000000ff0300000000000007000000000000006f00000002000000400000000800000003000000000000004202000000000000fcffffffffffffff56bf2a559d7fab6223702cfbffffffffffffff0800"/123]) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000180)={0xfffffffeffffffff, 0x28, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'geneve1\x00'}) 11:33:47 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 60) [ 1774.147487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1774.148422] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1774.160868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1774.162073] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1774.187612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1774.188724] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1774.190863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1774.191861] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:33:47 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 61) 11:33:47 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x60000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:33:47 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x2, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1774.315884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1774.317685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1774.350938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1774.355082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 11:33:58 executing program 0: r0 = timerfd_create(0x8, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x9d2, 0x7, &(0x7f0000000580)=[{&(0x7f0000000080)="6db2fc555ee6a71d1c2c5e84ffb1b051c768f697cc87377ac1834451c7e2c2fc63c238964934c3f33380e7871a2bbd3738d83099ce97d0c46e9041da29ddc8508764b93f20c8f50a6cfb2e8722d74b711d6be87b679ac90bb7c305734134320b0b479947b3d827a332a0f6f6567d5b89ca6a18f6c396597f830e304bb64a8fbf0a0ef8323a6bc3784b343e500c519f86001f16e0577184f61c1bf8b22b30c68110a559231bd249d96badc72a7126bd70544bb4616c2fe4b69569dc510b84fd4ee9290d2fcbd4", 0xc6, 0x80}, {&(0x7f00000002c0)="26279eb0c10118f985ab64704e494e0e65341e88bb7180d79d1b4604331a4720221e2543063ae39d3557f4dd0461907c8d70a4d4009c0dd2478bf63a56dd5e04d3f733989ce69575596955c73fdcde13c7d3046c73d7f1a70e229f84f1dc4d5c9fe83c5ba5cb206e4ba31a8bba", 0x6d, 0x300c71c6}, {&(0x7f0000000340)="2f70d265426a0cdcde37a9844345d51b0e1efbfa70c045ec92a8f7d28e746a2dd999f0ee525a960a0ddc8a00a94b74fb4af5914ed08f4beb67f72c87babfc9caf22c437e5e79022a2519c4dcbab7c01a11b9c52c7e6e891952be1fa5f47d93f9d80c2d0684b55b5b97fdaa4ce4116466974aae5cbfe8d60fbfcbd9fa64172b243c3557bedf685bbb538bd975ac290966b21ebec94ea466a5edcf7788546c14c0998e8cc848904f747799ceca685d0e399f7f1f1b83b594aa66", 0xb9, 0x3}, {&(0x7f0000000180)="d93c8b7e50142684ee1b103c8980a636fcc3b5b7133b29f2d2bd149b40ec7ab8d8040e1c4e0df1b3d777ea8ac1dcde5af0bdb3c0c0e3f464f4e279dae346", 0x3e, 0x8001}, {&(0x7f0000000400)="527871fd139e27e6850b7d9359fce400d24a9133ffe22aecf2373b7c80f9217196b3fa9e8f9e15abe4ee5cdd41b5351d936ed014214ade0e672fcbdd1868fc4c83233f28c55651908e38836d1da83c4152b28ad204fd83adca860ce84d4e56b9fa36bda79a", 0x65}, {&(0x7f0000000480)="a048b8e86766df96f100bd3907983840a4", 0x11, 0x8001}, {&(0x7f00000004c0)="fb71aba84a66a3752af71ac662830caf18ed81b2e75c0fd59f44eca60ce558dfc6f00adcb4873ff37856d0841df3f2e63ba6e7a44c464a8daa7305ffb2bd94d307450ed34319dc89d512756e18283f085d06723a27849928dca84f19706dd59c58e5ff633c755d659d1b57e8f600a6fc41b37c7536c1e6da0703168319268014c6e40bdcf724b2f3896ef3c21c45feafacf92d1102b7ea375be8d3ca7d29cfe678a0465c8d02bc5cd734386ab766116690bcba068ee1ce1e0392bd7cab2b", 0xbe, 0x5}], 0x20040, &(0x7f0000000640)={[{@huge_within_size}], [{@dont_appraise}, {@hash}, {@uid_lt}, {@uid_gt={'uid>', 0xee00}}]}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x41002, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000006c0)=0x1) 11:33:58 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:33:58 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 62) 11:33:58 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x80000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:33:58 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x4, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:33:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:33:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000065480)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000065680)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0x7, "70c6d8b2c5d315"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005ba80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000005bc80)={{0x0, 0x10001, 0x8b78, 0x7, 0xbc, 0x8, 0x2, 0x7f, 0x1, 0x0, 0x3471, 0x7, 0x8, 0x5, 0x1}, 0x8, [0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005f080)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000060080)={{0x0, 0x1f, 0x3, 0x5, 0x3, 0x0, 0x6, 0xffff, 0x5, 0x984, 0x800, 0x4, 0x6, 0x10001, 0x2}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000061080)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1f, "26dbb28c343087"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000062080)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000062280)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000063280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "1bb05a59c8e09c"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000064280)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000065480)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000065680)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {r6, r7}, {r9, r10}, {}, {}, {}, {}, {}, {r12, r13}, {0x0, r14}], 0x7, "70c6d8b2c5d315"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000005bd00)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005cd00)={0x6af885aa, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "0217ca5ac3838c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005dd00)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {r4, r13}, {}, {}, {}, {0x0, r15}, {0x0, r16}], 0xfe, "7236578bcc1494"}) 11:33:58 executing program 5: write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x51) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vcan0\x00'}) [ 1784.841064] FAULT_INJECTION: forcing a failure. [ 1784.841064] name failslab, interval 1, probability 0, space 0, times 0 [ 1784.842957] CPU: 0 UID: 0 PID: 12143 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1784.842985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1784.842998] Call Trace: [ 1784.843006] [ 1784.843016] dump_stack_lvl+0xfa/0x120 [ 1784.843064] should_fail_ex+0x4d7/0x5e0 [ 1784.843104] ? __kernfs_new_node+0xd3/0x930 [ 1784.843126] should_failslab+0xc2/0x120 [ 1784.843161] kmem_cache_alloc_noprof+0x80/0x710 [ 1784.843188] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1784.843239] ? __kernfs_new_node+0xd3/0x930 [ 1784.843262] __kernfs_new_node+0xd3/0x930 [ 1784.843310] ? __pfx___kernfs_new_node+0x10/0x10 [ 1784.843353] ? lock_acquire+0x15e/0x2d0 [ 1784.843384] ? kernfs_root+0x23/0x2a0 [ 1784.843409] ? find_held_lock+0x2b/0x80 [ 1784.843433] ? kernfs_root+0xee/0x2a0 [ 1784.843458] ? lock_release+0xc8/0x270 [ 1784.843483] ? lock_is_held_type+0x9e/0x120 [ 1784.843540] kernfs_new_node+0x13c/0x1e0 [ 1784.843588] __kernfs_create_file+0x55/0x360 [ 1784.843637] sysfs_add_file_mode_ns+0x21c/0x430 [ 1784.843672] ? __pfx_dev_attr_store+0x10/0x10 [ 1784.843721] internal_create_group+0x662/0xeb0 [ 1784.843780] ? __pfx_internal_create_group+0x10/0x10 [ 1784.843803] ? kernfs_add_one+0x150/0x830 [ 1784.843852] ? kernfs_create_link+0x1be/0x240 [ 1784.843900] internal_create_groups.part.0+0x90/0x140 [ 1784.843941] sysfs_create_groups+0x29/0x50 [ 1784.843970] device_add+0x67e/0x1830 [ 1784.844018] ? __pfx_device_add+0x10/0x10 [ 1784.844056] ? lockdep_init_map_type+0x4b/0x220 [ 1784.844091] ? __init_waitqueue_head+0xca/0x150 [ 1784.844144] netdev_register_kobject+0x1a9/0x3e0 [ 1784.844191] register_netdevice+0x1302/0x1d90 [ 1784.844241] ? __pfx_register_netdevice+0x10/0x10 [ 1784.844280] ? dev_addr_mod+0x294/0x340 [ 1784.844334] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1784.844384] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1784.844405] ? __fget_files+0x34/0x3b0 [ 1784.844437] ? find_held_lock+0x2b/0x80 [ 1784.844461] ? __fget_files+0x203/0x3b0 [ 1784.844492] ? lock_release+0xc8/0x270 [ 1784.844550] ? selinux_file_ioctl+0xb9/0x280 [ 1784.844587] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1784.844621] __x64_sys_ioctl+0x18f/0x210 [ 1784.844660] do_syscall_64+0xbf/0x420 [ 1784.844691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1784.844715] RIP: 0033:0x7f998c284b19 [ 1784.844733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1784.844753] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1784.844775] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1784.844790] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1784.844803] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1784.844816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1784.844828] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1784.844896] [ 1784.899578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1784.900524] blk_print_req_error: 4 callbacks suppressed [ 1784.900539] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1784.902635] buffer_io_error: 32 callbacks suppressed [ 1784.902648] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1784.904598] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1784.905797] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:33:58 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 63) 11:33:58 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80280, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:33:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = gettid() capset(&(0x7f00000000c0)={0x20071026, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) r3 = getuid() r4 = getuid() r5 = getgid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x0, r4, 0xee00, r3, r5, 0x0, 0x7}, 0x0, 0x0, 0x8, 0x3, 0x17e, 0x1, 0x8, 0x2, 0xfffb, 0x401, 0xffffffffffffffff}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={r2, r1, r5}, 0xc) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x8001) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000100)={0x2, 0x2, 0x10001, 0x2, 0x5}) [ 1785.012833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1785.014130] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1785.015590] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1785.016917] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1785.018237] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1785.033917] FAULT_INJECTION: forcing a failure. [ 1785.033917] name failslab, interval 1, probability 0, space 0, times 0 [ 1785.035945] CPU: 1 UID: 0 PID: 12155 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1785.035975] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1785.035988] Call Trace: [ 1785.035995] [ 1785.036004] dump_stack_lvl+0xfa/0x120 [ 1785.036047] should_fail_ex+0x4d7/0x5e0 [ 1785.036080] should_failslab+0xc2/0x120 [ 1785.036112] __kmalloc_node_track_caller_noprof+0xd7/0x820 [ 1785.036141] ? __is_insn_slot_addr+0x136/0x290 [ 1785.036168] ? kstrdup_const+0x57/0x80 [ 1785.036205] ? lock_release+0xc8/0x270 [ 1785.036259] ? kstrdup+0x3e/0xc0 [ 1785.036290] kstrdup+0x3e/0xc0 [ 1785.036331] kstrdup_const+0x57/0x80 [ 1785.036364] __kernfs_new_node+0x9c/0x930 [ 1785.036392] ? __absent_pages_in_range+0x4b/0x190 [ 1785.036425] ? __pfx___kernfs_new_node+0x10/0x10 [ 1785.036455] ? lock_acquire+0x15e/0x2d0 [ 1785.036482] ? kernfs_root+0x23/0x2a0 [ 1785.036504] ? find_held_lock+0x2b/0x80 [ 1785.036525] ? kernfs_root+0xee/0x2a0 [ 1785.036547] ? lock_release+0xc8/0x270 [ 1785.036572] ? lock_is_held_type+0x9e/0x120 [ 1785.036614] kernfs_new_node+0x13c/0x1e0 [ 1785.036648] kernfs_create_dir_ns+0x4d/0x1a0 [ 1785.036680] sysfs_create_dir_ns+0x12a/0x2a0 [ 1785.036704] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1785.036727] ? find_held_lock+0x2b/0x80 [ 1785.036751] ? lock_release+0xc8/0x270 [ 1785.036775] ? net_namespace+0x12/0x50 [ 1785.036802] ? __pfx_net_namespace+0x10/0x10 [ 1785.036827] ? device_namespace+0x78/0xb0 [ 1785.036867] kobject_add_internal+0x24c/0x9a0 [ 1785.036902] kobject_add+0x157/0x240 [ 1785.036929] ? __pfx_kobject_add+0x10/0x10 [ 1785.036960] ? lock_release+0xc8/0x270 [ 1785.036989] ? kobject_put+0xaa/0x260 [ 1785.037028] device_add+0x32d/0x1830 [ 1785.037066] ? __pfx_device_add+0x10/0x10 [ 1785.037099] ? lockdep_init_map_type+0x4b/0x220 [ 1785.037130] ? __init_waitqueue_head+0xca/0x150 [ 1785.037167] netdev_register_kobject+0x1a9/0x3e0 [ 1785.037208] register_netdevice+0x1302/0x1d90 [ 1785.037259] ? __pfx_register_netdevice+0x10/0x10 [ 1785.037291] ? dev_addr_mod+0x294/0x340 [ 1785.037331] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1785.037365] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1785.037386] ? __fget_files+0x34/0x3b0 [ 1785.037415] ? find_held_lock+0x2b/0x80 [ 1785.037436] ? __fget_files+0x203/0x3b0 [ 1785.037464] ? lock_release+0xc8/0x270 [ 1785.037503] ? selinux_file_ioctl+0xb9/0x280 [ 1785.037532] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1785.037559] __x64_sys_ioctl+0x18f/0x210 [ 1785.037587] do_syscall_64+0xbf/0x420 [ 1785.037613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.037635] RIP: 0033:0x7f998c284b19 [ 1785.037653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1785.037674] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1785.037695] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1785.037709] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1785.037722] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1785.037735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1785.037747] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1785.037783] [ 1785.083430] kobject: kobject_add_internal failed for vcan0 (error: -12 parent: net) 11:33:58 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x8, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:33:58 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 64) 11:33:58 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) accept4$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c, 0x80800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xfffffe22) setuid(r2) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:33:58 executing program 0: r0 = timerfd_create(0x8, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/ldiscs\x00', 0x0, 0x0) write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000040)={{}, {r2, r3+10000000}}, &(0x7f0000000080)) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:33:58 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xa0000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1785.266210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1785.267408] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1785.268945] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1785.270434] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1785.271886] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1785.299274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1785.300512] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1785.301850] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1785.364764] FAULT_INJECTION: forcing a failure. [ 1785.364764] name failslab, interval 1, probability 0, space 0, times 0 [ 1785.366746] CPU: 1 UID: 0 PID: 12167 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1785.366780] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1785.366795] Call Trace: [ 1785.366805] [ 1785.366816] dump_stack_lvl+0xfa/0x120 [ 1785.366864] should_fail_ex+0x4d7/0x5e0 [ 1785.366899] ? __kernfs_new_node+0xd3/0x930 [ 1785.366923] should_failslab+0xc2/0x120 [ 1785.366958] kmem_cache_alloc_noprof+0x80/0x710 [ 1785.366987] ? perf_trace_lock_acquire+0xc9/0x700 [ 1785.367030] ? __kernfs_new_node+0xd3/0x930 [ 1785.367054] __kernfs_new_node+0xd3/0x930 [ 1785.367087] ? __pfx___kernfs_new_node+0x10/0x10 [ 1785.367120] ? lock_acquire+0x15e/0x2d0 [ 1785.367151] ? kernfs_root+0x23/0x2a0 [ 1785.367175] ? find_held_lock+0x2b/0x80 [ 1785.367205] ? kernfs_root+0xee/0x2a0 [ 1785.367241] ? lock_release+0xc8/0x270 [ 1785.367278] ? lock_is_held_type+0x9e/0x120 [ 1785.367333] kernfs_new_node+0x13c/0x1e0 [ 1785.367371] __kernfs_create_file+0x55/0x360 [ 1785.367413] sysfs_add_file_mode_ns+0x21c/0x430 [ 1785.367442] ? __pfx_dev_attr_store+0x10/0x10 [ 1785.367487] internal_create_group+0x662/0xeb0 [ 1785.367528] ? __pfx_internal_create_group+0x10/0x10 [ 1785.367553] ? kernfs_add_one+0x150/0x830 [ 1785.367592] ? kernfs_create_link+0x1be/0x240 [ 1785.367633] internal_create_groups.part.0+0x90/0x140 [ 1785.367668] sysfs_create_groups+0x29/0x50 [ 1785.367696] device_add+0x67e/0x1830 [ 1785.367738] ? __pfx_device_add+0x10/0x10 [ 1785.367776] ? lockdep_init_map_type+0x4b/0x220 [ 1785.367810] ? __init_waitqueue_head+0xca/0x150 [ 1785.367852] netdev_register_kobject+0x1a9/0x3e0 [ 1785.367892] register_netdevice+0x1302/0x1d90 [ 1785.367932] ? __pfx_register_netdevice+0x10/0x10 [ 1785.367968] ? dev_addr_mod+0x294/0x340 [ 1785.368012] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1785.368050] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1785.368074] ? __fget_files+0x34/0x3b0 [ 1785.368106] ? find_held_lock+0x2b/0x80 [ 1785.368129] ? __fget_files+0x203/0x3b0 [ 1785.368160] ? lock_release+0xc8/0x270 [ 1785.368212] ? selinux_file_ioctl+0xb9/0x280 [ 1785.368259] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1785.368289] __x64_sys_ioctl+0x18f/0x210 [ 1785.368321] do_syscall_64+0xbf/0x420 [ 1785.368349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.368374] RIP: 0033:0x7f998c284b19 [ 1785.368394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1785.368417] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1785.368441] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1785.368458] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1785.368472] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1785.368487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1785.368500] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1785.368540] [ 1785.426964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1785.428816] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1785.502892] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1785.504204] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:34:08 executing program 0: r0 = timerfd_create(0x8, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x9c) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000040)={0x9, 0x30, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 11:34:08 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:34:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x600}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:34:08 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1000}) 11:34:08 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 65) 11:34:08 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xc0000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:34:08 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0xa, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:34:08 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f88b8dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000000c0)=0x2) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000080)={'ipvlan1\x00'}) 11:34:08 executing program 0: r0 = syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x5d2, 0x0, &(0x7f0000000080), 0x12, &(0x7f0000000100)={[{']*:+.\'\\'}], [{@smackfsroot={'smackfsroot', 0x3d, '#}\'^'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\]}\x90-]+{#\x92-'}}, {@pcr={'pcr', 0x3d, 0x30}}, {@seclabel}, {@euid_lt={'euid<', 0xee00}}, {@pcr={'pcr', 0x3d, 0x1c}}]}) mknodat$loop(r0, &(0x7f00000002c0)='./file0\x00', 0x10, 0x0) r1 = timerfd_create(0x8, 0x0) timerfd_settime(r1, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:34:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000080)=0x2) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:34:08 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 66) [ 1794.728072] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1794.729498] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1794.731402] buffer_io_error: 8 callbacks suppressed [ 1794.731423] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1794.733933] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1794.735366] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1794.750261] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1794.751481] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1794.752859] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1794.754140] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1794.755466] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1794.779402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1794.780699] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1794.782254] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1794.783662] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1794.784971] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1794.793975] FAULT_INJECTION: forcing a failure. [ 1794.793975] name failslab, interval 1, probability 0, space 0, times 0 [ 1794.794861] CPU: 0 UID: 0 PID: 12208 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1794.794878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1794.794886] Call Trace: [ 1794.794891] [ 1794.794897] dump_stack_lvl+0xfa/0x120 [ 1794.794927] should_fail_ex+0x4d7/0x5e0 [ 1794.794952] ? __kernfs_new_node+0xd3/0x930 [ 1794.794965] should_failslab+0xc2/0x120 [ 1794.794987] kmem_cache_alloc_noprof+0x80/0x710 [ 1794.795003] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1794.795033] ? __kernfs_new_node+0xd3/0x930 [ 1794.795045] __kernfs_new_node+0xd3/0x930 [ 1794.795068] ? __pfx___kernfs_new_node+0x10/0x10 [ 1794.795091] ? lock_acquire+0x15e/0x2d0 [ 1794.795108] ? kernfs_root+0x23/0x2a0 [ 1794.795122] ? find_held_lock+0x2b/0x80 [ 1794.795136] ? kernfs_root+0xee/0x2a0 [ 1794.795149] ? lock_release+0xc8/0x270 [ 1794.795163] ? lock_is_held_type+0x9e/0x120 [ 1794.795194] kernfs_new_node+0x13c/0x1e0 [ 1794.795221] __kernfs_create_file+0x55/0x360 [ 1794.795248] sysfs_add_file_mode_ns+0x21c/0x430 [ 1794.795267] ? __pfx_dev_attr_store+0x10/0x10 [ 1794.795301] internal_create_group+0x662/0xeb0 [ 1794.795334] ? __pfx_internal_create_group+0x10/0x10 [ 1794.795347] ? kernfs_add_one+0x150/0x830 [ 1794.795373] ? kernfs_create_link+0x1be/0x240 [ 1794.795399] internal_create_groups.part.0+0x90/0x140 [ 1794.795421] sysfs_create_groups+0x29/0x50 [ 1794.795437] device_add+0x67e/0x1830 [ 1794.795464] ? __pfx_device_add+0x10/0x10 [ 1794.795485] ? lockdep_init_map_type+0x4b/0x220 [ 1794.795505] ? __init_waitqueue_head+0xca/0x150 [ 1794.795534] netdev_register_kobject+0x1a9/0x3e0 [ 1794.795564] register_netdevice+0x1302/0x1d90 [ 1794.795593] ? __pfx_register_netdevice+0x10/0x10 [ 1794.795614] ? dev_addr_mod+0x294/0x340 [ 1794.795643] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1794.795671] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1794.795683] ? __fget_files+0x34/0x3b0 [ 1794.795701] ? find_held_lock+0x2b/0x80 [ 1794.795714] ? __fget_files+0x203/0x3b0 [ 1794.795731] ? lock_release+0xc8/0x270 [ 1794.795763] ? selinux_file_ioctl+0xb9/0x280 [ 1794.795784] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1794.795803] __x64_sys_ioctl+0x18f/0x210 [ 1794.795824] do_syscall_64+0xbf/0x420 [ 1794.795841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.795855] RIP: 0033:0x7f998c284b19 [ 1794.795866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1794.795879] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1794.795891] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1794.795899] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1794.795907] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1794.795914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1794.795921] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1794.795958] [ 1794.833733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1794.834182] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1794.834981] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:34:08 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xf0200, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) poll(&(0x7f0000000040)=[{r3, 0x40}, {r1, 0x4340}, {r0, 0xd2}, {r0, 0x2c}, {r4, 0xdc}, {r5, 0x622}], 0x6, 0x6a) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r6 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$TCSETAF(r8, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) io_submit(0x0, 0x4, &(0x7f0000000800)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x81, r1, &(0x7f00000003c0)="da8683dbe458886a2c17d596a8d8b91474b433a1e716cb4e8b57002ee862b4a3d1b48489b780079dc41fe4bdd0b60dc2cbffbcf5f0ec8aa6911dbed8f3fd8ee2ebee2e1197c6b9cf96284cf8ad741c687a87c28724f12c65ae51560bf3c05479b53dc816fb838e13a980193ca11bed8c08fee85915eed2a04b6f9173db8ae75e18ef75ec2f3a475debaf75f3d8bbf9647df4c2304c6c0cea452f9f36d7796787a133826673d618384135d89322cea6524227cb80cd33d096f8ec48f24cd97cfd1ddbc2e7f3e564dc", 0xc8, 0x3, 0x0, 0x5286f473959279e1, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xb, 0x1, r6, &(0x7f0000000540)="9cb0486aff8c016af2c102a60114a23f33d1280a814f502af49e1c0573db78a927c53b33bb3cd9acfe96e2bdd1c53d4eaa9837525d5d31a6f812b462a9b4416b73e8a63c1892f1f2", 0x48, 0x8, 0x0, 0x1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x800, r7, &(0x7f0000000600)="e6aa8a5af6f53954903d5c69c65a182319d4ee8d54c80e3e2fc552d5caedcfc638556f01de6b3a18360963b8b156d98fbd47be73ba1a531ef850835debe231812260a00482c6be9621", 0x49, 0xfffffffffffffff8, 0x0, 0x2}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0xff, r8, &(0x7f00000006c0)="ab6f04739533d3035e66d2cd460d3d04f356e7f4258a21059b5daaa717939222f9727df18b9bbbfc1debc94593a200b5bbbf3ca40976a0e287656f698a1410a81d48f7e5dc74406e3abedfbed5b6712f07e7ae3e29858d6adef66fd65c809244c681e056a8eae17552a7e360ba995e65683d231e5a94dca73ae0632baef5c0c293b151d8b30f34296a0051bfcdbf86a180250759ab0d394acea41c1b1e302bb222358d4c9e0dd89404750f8ad160f21f56c442bc50bc0b3ceee68fad5577d59719d1caaefaba2119d2431ab2dc4d2bfc1fa86d9e7d98cc27f9d917c04450d1aae5966d8b6b3b9b", 0xe7, 0x7872, 0x0, 0x1}]) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:34:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_rxfh={0x46, 0x1, 0x8, 0x4, 0xea, "a17ed7", 0x7, [0xc72, 0x339, 0x7, 0x0]}}) 11:34:08 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0xc, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:34:08 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xe0000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:34:08 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x230801, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@local, @in=@broadcast}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x51) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:34:08 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 67) [ 1794.980089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1794.981031] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1795.018729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1795.019203] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1795.063579] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1795.064775] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1795.099771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1795.100267] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:34:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc00}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:34:17 executing program 0: clock_gettime(0x0, &(0x7f0000000000)) r0 = semget(0x3, 0x1, 0x190) semtimedop(r0, &(0x7f0000000140)=[{0x0, 0xffff, 0x1000}, {0x3, 0x101}, {0x0, 0x4, 0x1800}, {0x1, 0x0, 0x800}, {0x2, 0x400}, {0x1, 0x1ff, 0x800}], 0x6, &(0x7f0000000180)={0x77359400}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) semctl$GETPID(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000002c0)=""/123) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000340)) futex(&(0x7f0000000040)=0x2, 0x6, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x1, 0x2) r1 = semget$private(0x0, 0x2, 0x82) semtimedop(r1, &(0x7f0000000380)=[{0x3, 0x800, 0x800}, {0x3, 0x6, 0x1800}], 0x2, &(0x7f00000003c0)) 11:34:17 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:34:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:34:17 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 68) 11:34:17 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0xe, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:34:17 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:34:17 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1804.024107] FAULT_INJECTION: forcing a failure. [ 1804.024107] name failslab, interval 1, probability 0, space 0, times 0 [ 1804.025052] CPU: 0 UID: 0 PID: 12245 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1804.025069] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1804.025076] Call Trace: [ 1804.025081] [ 1804.025087] dump_stack_lvl+0xfa/0x120 [ 1804.025116] should_fail_ex+0x4d7/0x5e0 [ 1804.025139] ? __kernfs_new_node+0xd3/0x930 [ 1804.025152] should_failslab+0xc2/0x120 [ 1804.025172] kmem_cache_alloc_noprof+0x80/0x710 [ 1804.025188] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1804.025216] ? __kernfs_new_node+0xd3/0x930 [ 1804.025228] __kernfs_new_node+0xd3/0x930 [ 1804.025250] ? __pfx___kernfs_new_node+0x10/0x10 [ 1804.025272] ? lock_acquire+0x15e/0x2d0 [ 1804.025289] ? kernfs_root+0x23/0x2a0 [ 1804.025307] ? find_held_lock+0x2b/0x80 [ 1804.025321] ? kernfs_root+0xee/0x2a0 [ 1804.025335] ? lock_release+0xc8/0x270 [ 1804.025348] ? lock_is_held_type+0x9e/0x120 [ 1804.025379] kernfs_new_node+0x13c/0x1e0 [ 1804.025405] __kernfs_create_file+0x55/0x360 [ 1804.025431] sysfs_add_file_mode_ns+0x21c/0x430 [ 1804.025450] ? __pfx_dev_attr_store+0x10/0x10 [ 1804.025478] internal_create_group+0x662/0xeb0 [ 1804.025509] ? __pfx_internal_create_group+0x10/0x10 [ 1804.025522] ? kernfs_add_one+0x150/0x830 [ 1804.025548] ? kernfs_create_link+0x1be/0x240 [ 1804.025573] internal_create_groups.part.0+0x90/0x140 [ 1804.025595] sysfs_create_groups+0x29/0x50 [ 1804.025610] device_add+0x67e/0x1830 [ 1804.025637] ? __pfx_device_add+0x10/0x10 [ 1804.025657] ? lockdep_init_map_type+0x4b/0x220 [ 1804.025676] ? __init_waitqueue_head+0xca/0x150 [ 1804.025705] netdev_register_kobject+0x1a9/0x3e0 [ 1804.025731] register_netdevice+0x1302/0x1d90 [ 1804.025760] ? __pfx_register_netdevice+0x10/0x10 [ 1804.025781] ? dev_addr_mod+0x294/0x340 [ 1804.025810] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1804.025837] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1804.025849] ? __fget_files+0x34/0x3b0 [ 1804.025866] ? find_held_lock+0x2b/0x80 [ 1804.025879] ? __fget_files+0x203/0x3b0 [ 1804.025896] ? lock_release+0xc8/0x270 [ 1804.025927] ? selinux_file_ioctl+0xb9/0x280 [ 1804.025947] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1804.025966] __x64_sys_ioctl+0x18f/0x210 [ 1804.025987] do_syscall_64+0xbf/0x420 [ 1804.026004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1804.026017] RIP: 0033:0x7f998c284b19 [ 1804.026027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1804.026039] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1804.026051] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1804.026059] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1804.026066] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1804.026073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1804.026080] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1804.026116] 11:34:17 executing program 0: r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{r1, r2+60000000}, {0x0, 0x989680}}, 0x0) io_submit(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x1, 0xffffffffffffffff, &(0x7f00000002c0)="15e945db681e45e437357c42e3c71fb3e0f725ad3c3995a9ff27e3c221a54c587f70ad93d1ef94edd5fdb515b98c54bbe5441a436c04816a521285521e2c8298b384bfe016c35f57fb42ad76744aef561850911c2e1809e3d8b6fde7533b33083e58c6317ed2cdd74df45e2e2e8270b750d94cf0ac67dcaa7a655a918b8412ca8b31bf169574936f97ea28450a8506b5e66cae29cc300763f6ca66976db7337a3f1918728a1c8e2f1e30d50848d024cb31d4e01463ad2519c8fa50da12ed5fe68847a38546f3654fbe060ae1", 0xcc, 0x8000, 0x0, 0x1}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x7, r0, &(0x7f00000003c0)="ea9fb326388372a679aa5a6b2afdf9e2e6b1b60478550992c711ba3d92b3aad7e6e5e665635e0075dc09414819d526dbbadf0ecb3cd21b4838295059e5e1e0d9f8a12f230f3ecb7f54a7f4cb64aa4ecacb4841d58fb9890265889e2347d5cc9f70e903b422035f8768e6e7f8fc7e8631ac025612b02251634c901728ce887c2c323535309a415c7bd40067ebcb039f2728e016696ad737fba9e9e36f81eaefe43c0498abaeaf947512c71a8ff6253dc2d63e0c1fb298dcf236d4b5055fed415923320e7b1de013e511f5d1f37425659dcc99a0285870765bf8ae", 0xda, 0x7fffffff, 0x0, 0x2}]) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) timerfd_gettime(r0, &(0x7f00000000c0)) [ 1804.087627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1804.088618] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1804.089942] buffer_io_error: 14 callbacks suppressed [ 1804.089957] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1804.092016] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1804.093267] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:34:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @dev, @initdev}, &(0x7f00000001c0)=0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8041000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=@getae={0x35c, 0x1f, 0x400, 0x70bd2b, 0x25dfdbfe, {{@in6=@private1, 0x4d3, 0x2, 0x6c}, @in=@private=0xa010101, 0x10000}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x3}, @proto={0x5, 0x19, 0x3c}, @tfcpad={0x8, 0x16, 0x1}, @algo_auth_trunc={0xbe, 0x14, {{'streebog256\x00'}, 0x390, 0x40, "ca04d4e990a92bc43e7a896ac6d871d7adb08fb6187f5153321308c1dd1a8447d6f47cb2f8b060f6dbb0ef526d8433c88675604b8306107ddc344143f39dbc32feec8e01605e3574bf87911a0c2978ac54127068747faf2b81b0354438b500a4943a77e9f00bcfd196c87099f949c0643e1c"}}, @algo_crypt={0xbd, 0x2, {{'lrw-serpent-avx2\x00'}, 0x3a8, "5e19dd5eab86105feef4449c9d5072f058a8e943e50116e580dec7d6675a11c7867522375a4bcb1e3938a4196fe0d52e1ec71acf40522a588aa12f3342f961d602c78bc02b385415bcfdd92d80f7315a86d68e443448b59080587365e9fe0124c2389e06bf5fab85f8f49ced1226efbd274c53d2b1"}}, @algo_auth_trunc={0xd5, 0x14, {{'wp512-generic\x00'}, 0x448, 0x40, "f851f1df330dc498f626407fb7cfa0f16b5179b196bc8c505e5f92e1409d2ee5c43f7addf2dd58fc26274001497d088f4ef3c846547dc833188c3ae80c7bfe4c0f2f17340d809e6f8b6c025174b32f01ff9e4f4280fd0254635f0f1ad5c138e8a6e2fc525d83e271bf3f6b29f8eaded1f896dc4ea83991a86189275070dfadb6a58024dc20d39744fe"}}, @policy={0xac, 0x7, {{@in=@empty, @in6=@private2, 0x4e23, 0x23, 0x4e23, 0x6c8, 0xa, 0x0, 0x10, 0x33, r2, 0xee00}, {0xc69a, 0x8, 0x7, 0xffffffffffffff88, 0x37, 0x2, 0x9, 0x1}, {0x67, 0x5, 0x2, 0x6}, 0x0, 0x6e6bb4, 0x0, 0x0, 0x2}}]}, 0x35c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) [ 1804.125872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1804.127218] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1804.128744] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1804.130185] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1804.131600] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:34:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x10000, 0x46) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x80}, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) [ 1804.157646] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1804.158164] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1804.158903] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1804.159575] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1804.160202] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:34:17 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 69) 11:34:17 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000040)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x103000, 0x0) timerfd_gettime(r2, &(0x7f0000000180)) timerfd_gettime(r1, &(0x7f0000000100)) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:34:17 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0xf, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:34:17 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7f, 0xe9, 0x81, 0x5, 0x0, 0x7, 0x14400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x7}, 0x2000, 0x2, 0x5, 0x2, 0x9, 0x1a80, 0x8000, 0x0, 0x200, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r1, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:34:17 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x1ffffe, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1804.314970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1804.315751] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1804.316439] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1804.361205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1804.361854] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1804.380189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1804.381142] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1804.405860] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1804.406574] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:34:27 executing program 0: ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000000)) r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f00000000c0)={{r1, r2+10000000}, {r3, r4+60000000}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{r5, r6+10000000}, {0x0, 0x3938700}}, &(0x7f0000000140)) 11:34:27 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:34:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1200}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:34:27 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:34:27 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2d347288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:34:27 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x1fffff, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:34:27 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 70) 11:34:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) sendmsg$inet6(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000180)="2d3339800ba689092fc15068202245c06e869ddac0393a8c22608f27f18a1a1df66bdf53efa9cf7b64bc34ed4f390ebd572838cdb1c29e8d994b62fd649ef55e754688429bcff77db5593260239a5e469f4f9b7c386452e9d758e450d5e60601a6273df388dd92a0a97929514d4d8ebdc151bb759fc2f4", 0x77}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="d9e7022565f6ca3491b3d491565e182abbfcb31f5d5efefddc81bf1409cab5e548895de60f3274785a14fc6dee825c7b8a8be7d407f948c7825c79747f5f942442dda0e08a3d5049e100d76dc445b3f7db22763cfe5568bba343b1", 0x5b}, {&(0x7f0000001280)="a9c05db75bc0cbbf68824c9543e3dddc4318529f0f1494154b91345864a62dba25c0e60f14131767ab5b8381762bf2ab192d91a972e225acccd7a195cf58618145d845a2ad9ef7ce785db55e00746d660d839bbe8e725811a5d7dcc88d94682a8fbdb0050d0bc8dc8136eab9690c7a9fe42796d7c24f026b34ab480c53e78dba5771121ab0dc59dace5a7e514b30fd3b68d848b07bb51dd2", 0x98}, {&(0x7f0000001340)="ff2966884a1fd350f2379822fcee8c9f2b54b65889e1f9704017c4f4ea720cee01e0020d1fb0c08bdc3c0148b5861213f97454865d39d271ceed0b9fdc6df2ca13d01e16085ddf7efd2b4cd5e5f1c32a6523de019f98cea0fe9e9f533d48608b0a9c4c7154b606f898195187e73499d01e8a5f3bd5db60b1beb8d13a54c8c9aedac4a12fa72df7ae32a3c56087eee59960417347a478187c2ca3cc9134d6a1e7f07b9a835c9ad2e03494b5608e04c2f3bb4aed93423a53265fcc094b814522c5ebb4faf0ad0f9adae8a5d917c25d956229ea87fed69bf1b321f590", 0xdb}, {&(0x7f0000001440)="09ad4098b1636b0530e57c0ac160cede1c10f271ec690e031de9afcdce90f6cfc9afd0e1c61772f6aa1d4d9fe31c9437d28f51020936e8d3385f4190f02bbb4007a978587cab2f68a77443e74e582e03bf5c19ace5aafec2b6db2f4b41cfad8cbd", 0x61}, {&(0x7f00000014c0)="6d646bd96c51a24f6b1ee4a11b4e2bc77966b38092eff67899990906499927fc2fa233fb71b6a22304961e72d914609cf2aa897e7103abb776af85e5101b9032932af1bb24e90fa5c803afcc23deaa48b3238c22b7839607abbea84f714213d5c0d3dcc9bbf61d0c2e09e27db8a1bf", 0x6f}, {&(0x7f0000001540)="365376f55671930ac949a705a43ced853c03970a811f98c8b30391b808cf92d734c5613aeafd39ee635491eec7cf184124978100c7350cf71da9e58a246b8b5c7c9997da575e306e2ca57fb1e04ad26dafe748c0974ec59c09548528af454e2d25f59268acc0f7f5c16b139a1ce66b33c6a5833d6c4d58cdacf22ac11384d21b9056ff7e3792e9b98cd94ccbaf003aa00170d5d08c0ca51b9d070a0eceac6da8cd44211ccd586d3ecd187d1b78924fc48687d185278f9a968795a675eedd55b8832d6bb2ce6717ee082b60dbf563aa125a4a0a4e3fac002c3698f80a8fe4b9f0", 0xe0}, {&(0x7f0000001640)="f2d71a44a471a19737aec85fbb816ba1b4aee2dc90af6c79d665f1d6606caa69b995bc606c524309c23e0bcf", 0x2c}, {&(0x7f0000001680)="4c0e0ea8f87b3e631ac58f0477c3619cb456c35259ec917db26c7daafe39042b7494ddaf5ec1dd48edf22f3b17bdba3c13ada493c641cdbe91d606beef", 0x3d}], 0xa, &(0x7f0000001780)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @dstopts={{0x70, 0x29, 0x37, {0x8, 0xa, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0xd7, 0x7, [0xffffffffffffff64, 0x8, 0x9]}}, @jumbo={0xc2, 0x4, 0xb6}, @jumbo={0xc2, 0x4, 0x9}, @generic={0x7, 0x21, "c03c7c89f8f2b897a9ea3e3c9c6948a31e5a849e5a9d9ceb67b7dbef95c3e09f77"}, @pad1]}}}, @hopopts={{0x78, 0x29, 0x36, {0x2c, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @generic={0xff, 0x56, "d68f3f1ecd6a8984212aa2ae991cbf46f2c8877987da0da8d411253a99807cadb8f31a7479fc4925cad015cf41433928468df0c3fe282f133c145b972c487ce597f906a1d395930a5bde610cdd99527ede2b586a5f31"}]}}}, @hoplimit_2292={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x38, 0x29, 0x39, {0x67, 0x4, 0x2, 0x1, 0x0, [@private1, @mcast1]}}}], 0x180}, 0x881) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) [ 1813.779429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1813.780395] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1813.781639] buffer_io_error: 11 callbacks suppressed [ 1813.781653] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1813.783569] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1813.784730] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1813.801866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1813.802788] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1813.804069] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1813.805232] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1813.806423] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1813.810424] FAULT_INJECTION: forcing a failure. [ 1813.810424] name failslab, interval 1, probability 0, space 0, times 0 [ 1813.812077] CPU: 0 UID: 0 PID: 12304 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1813.812106] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1813.812119] Call Trace: [ 1813.812128] [ 1813.812138] dump_stack_lvl+0xfa/0x120 [ 1813.812185] should_fail_ex+0x4d7/0x5e0 [ 1813.812226] ? __kernfs_new_node+0xd3/0x930 [ 1813.812248] should_failslab+0xc2/0x120 [ 1813.812284] kmem_cache_alloc_noprof+0x80/0x710 [ 1813.812317] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1813.812367] ? __kernfs_new_node+0xd3/0x930 [ 1813.812390] __kernfs_new_node+0xd3/0x930 [ 1813.812431] ? __pfx___kernfs_new_node+0x10/0x10 [ 1813.812473] ? lock_acquire+0x15e/0x2d0 [ 1813.812503] ? kernfs_root+0x23/0x2a0 [ 1813.812528] ? find_held_lock+0x2b/0x80 [ 1813.812553] ? kernfs_root+0xee/0x2a0 [ 1813.812578] ? lock_release+0xc8/0x270 [ 1813.812603] ? lock_is_held_type+0x9e/0x120 [ 1813.812659] kernfs_new_node+0x13c/0x1e0 [ 1813.812706] __kernfs_create_file+0x55/0x360 [ 1813.812754] sysfs_add_file_mode_ns+0x21c/0x430 [ 1813.812789] ? __pfx_dev_attr_store+0x10/0x10 [ 1813.812837] internal_create_group+0x662/0xeb0 [ 1813.812895] ? __pfx_internal_create_group+0x10/0x10 [ 1813.812918] ? kernfs_add_one+0x150/0x830 [ 1813.812967] ? kernfs_create_link+0x1be/0x240 [ 1813.813013] internal_create_groups.part.0+0x90/0x140 [ 1813.813054] sysfs_create_groups+0x29/0x50 [ 1813.813082] device_add+0x67e/0x1830 [ 1813.813131] ? __pfx_device_add+0x10/0x10 [ 1813.813168] ? lockdep_init_map_type+0x4b/0x220 [ 1813.813203] ? __init_waitqueue_head+0xca/0x150 [ 1813.813255] netdev_register_kobject+0x1a9/0x3e0 [ 1813.813301] register_netdevice+0x1302/0x1d90 [ 1813.813352] ? __pfx_register_netdevice+0x10/0x10 [ 1813.813391] ? dev_addr_mod+0x294/0x340 [ 1813.813444] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1813.813493] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1813.813515] ? __fget_files+0x34/0x3b0 [ 1813.813547] ? find_held_lock+0x2b/0x80 [ 1813.813571] ? __fget_files+0x203/0x3b0 [ 1813.813602] ? lock_release+0xc8/0x270 [ 1813.813660] ? selinux_file_ioctl+0xb9/0x280 [ 1813.813697] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1813.813732] __x64_sys_ioctl+0x18f/0x210 [ 1813.813771] do_syscall_64+0xbf/0x420 [ 1813.813802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1813.813826] RIP: 0033:0x7f998c284b19 [ 1813.813845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1813.813866] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1813.813888] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1813.813902] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1813.813916] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1813.813929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1813.813941] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1813.814008] [ 1813.873447] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1813.874624] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1813.876035] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1813.877585] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1813.879003] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:34:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000280)={0x6, '\x00', {0x2}, 0x40}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) recvfrom$inet6(r3, &(0x7f0000000140)=""/236, 0xec, 0x10000, &(0x7f0000000080)={0xa, 0x4e20, 0xa3c5, @empty, 0x93}, 0x1c) 11:34:27 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x1d, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:34:27 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xe0ffff, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:34:27 executing program 0: sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0xc8, 0x0, 0x330, 0x70bd25, 0x25dfdbff, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x488d}, 0x0) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:34:27 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 71) [ 1814.020017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1814.020959] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1814.022208] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:34:27 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x80000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@appraise_type}]}}) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000180)=0x6) r4 = getpgrp(0xffffffffffffffff) r5 = openat$cgroup_int(r2, &(0x7f00000013c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001400)={0x0, r5, 0x5e2, 0x0, 0x1, 0x1}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4, 0x6, 0x7, 0x46, 0x0, 0x401, 0x42800, 0xc, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000080), 0xa}, 0x180, 0x6, 0x5, 0x7, 0x3, 0x616, 0x9, 0x0, 0x0, 0x0, 0x3f}, r4, 0x10, r0, 0x1) r6 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) r7 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) open_by_handle_at(r7, &(0x7f0000000140)=@reiserfs_2={0x8, 0x2, {0xffb}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r8, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$BTRFS_IOC_INO_LOOKUP(r8, 0xd0009412, &(0x7f00000003c0)={0x0, 0x6}) [ 1814.058965] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1814.060119] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1814.073497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1814.074632] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1814.106122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1814.107059] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:34:27 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x1ffffe, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1814.257878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1814.259088] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1814.284449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1814.285280] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:34:38 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x1) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:34:38 executing program 0: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000040)={'veth0_vlan\x00'}) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/snd_seq_dummy', 0x10400, 0x0) 11:34:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) r8 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r10 = getuid() r11 = getuid() r12 = getgid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x0, r11, 0xee00, r10, r12, 0x0, 0x7}, 0x0, 0x0, 0x8, 0x3, 0x17e, 0x1, 0x8, 0x2, 0xfffb, 0x401, 0xffffffffffffffff}) getgroups(0x6, &(0x7f00000002c0)=[r2, r2, r2, r2, r2, r2]) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [{0x2, 0x3, r4}, {0x2, 0x9, r6}, {0x2, 0x1, r7}, {0x2, 0x2, r8}, {0x2, 0x0, r9}], {0x4, 0x2}, [{0x8, 0x0, r2}, {0x8, 0x5, r12}, {0x8, 0x5, r13}], {0x10, 0x1}, {0x20, 0x2}}, 0x64, 0x3) 11:34:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:34:38 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 72) 11:34:38 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:34:38 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:34:38 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xfeff3f, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1825.057880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1825.058956] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1825.060415] buffer_io_error: 17 callbacks suppressed [ 1825.060430] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1825.062670] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1825.064018] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1825.106545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1825.107524] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1825.108810] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1825.110003] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1825.111172] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:34:38 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000001e001b29601c8b81ad69080e959509e6dea4363315e39830e15eaf47dda4e67b8ca7553a872af267a6f1fca0b19091103763074f5c3b16f22385a9978b23cd7ceedecf266b232136af6faa9f88316f15cf7f7ea4bdd63e0728720004f9649d800d02a8d83fbb1743eb85d976d4dcc241ab3074171573999304e70ceea5b1a42406bff78a07c460041a242d299d2134e1cf006c2354e6d04dc1e57d4d4742ea411b8c5ad73893d1dbf3e12ce27b969b7b5c7436de4e4c8af44ccca8d1"]) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000040)) [ 1825.118897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1825.120029] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1825.121342] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1825.122587] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1825.123810] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1825.173710] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1825.174678] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1825.175948] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:34:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f0000001740), 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001340), 0xb01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000190000000c00018008000100000000", @ANYRES32=r7, @ANYBLOB], 0x20}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000001700)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000016c0)={&(0x7f00000013c0)=@newsa={0x300, 0x10, 0x100, 0x70bd29, 0x25dfdbfb, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x7ff, 0x4e22, 0x6, 0xea723dc9ebbdd3a7, 0x0, 0x20, 0x2b, r7, r2}, {@in6=@mcast1, 0x4d3, 0x33}, @in6=@private0, {0x10001, 0x401, 0x8000, 0x6, 0x9, 0x8, 0x1, 0x5}, {0x2, 0xfffffffffffffffb, 0x0, 0x6f9b}, {0x5, 0x7, 0xfffffffb}, 0x70bd27, 0x3507, 0xa, 0x2, 0x2, 0x40}, [@algo_aead={0xe7, 0x12, {{'morus1280-generic\x00'}, 0x4d8, 0x0, "8b5a810fa12dc5fc905f978297b25c053181a47015890099ca36c065f8bd85447701c35deb020127b2217ba70cb9dbbc421c3718556302cabb05e4572170c075fc6b58bb7609a131268957092498f9147d5e353a42f5e46969761fadc72e25844af70fe7e928ed0ba8650f9cc3f379b43a4264119d3e3c6fefe36f0be3eaf38c034304ca3a9095d24b25daf438e372ffde822ee1943816e2a4e3de"}}, @lifetime_val={0x24, 0x9, {0x400, 0x400, 0x7, 0x6}}, @lastused={0xc, 0xf, 0x17}, @algo_aead={0xed, 0x12, {{'aegis128\x00'}, 0x508, 0x80, "e1e777bbf94dee3abdd65bd0b4ea5369c8a7eb6b701feb40361f6847060355e372592ad4952479675a89db38160fd8af712a5a57feaaad18eff5a056743436e3b566f299b47df3d3c9560de0189b0deb7875679bf10f9a4ebe166e1627994099f2428b9008bd96fa1ba7ab1a6a376822d29c311d128ab6d402fdf253b13917eb305f30d9f562ea777facb344542d416ec57cd20cffc6c3d6b910e4bd964a9bb13e"}}, @tfcpad={0x8, 0x16, 0x4}]}, 0x300}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r8 = clone3(&(0x7f00000012c0)={0x100241000, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180), {0x5}, &(0x7f00000001c0)=""/4096, 0x1000, &(0x7f00000011c0)=""/173, &(0x7f0000001280)=[r1, r1, r1, r1, r1, r1, r1, r1, r1, r1], 0xa}, 0x58) capset(&(0x7f00000000c0)={0x20071026, r8}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x26293024}) 11:34:38 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x2, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:34:38 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x1000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:34:38 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x20000004}, r1, 0x1, 0x0, 0x1, {0x0, r2}}, 0xfffffffa) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) timerfd_gettime(r3, &(0x7f0000000080)) [ 1825.311737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1825.312769] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1825.320074] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1825.321023] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1825.357256] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1825.358176] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1825.373082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1825.374418] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:34:39 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 73) 11:34:39 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r2, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth1\x00'}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x10) 11:34:39 executing program 0: r0 = timerfd_create(0x8, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) dup2(r0, r1) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:34:39 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x3, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1825.575126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1825.576037] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1825.611804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1825.612721] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:34:47 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 74) 11:34:47 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:34:47 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:34:47 executing program 0: syz_usb_ep_read(0xffffffffffffffff, 0x4, 0xd0, &(0x7f00000002c0)=""/208) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) 11:34:47 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x2000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:34:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:34:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000180)={0x448, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa9a7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x7, 0x0}, 0x2120}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2, @loopback, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7b9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaad}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "f03fc3a4c54d4fecfc8b4c3200e754c019d3c441f582dd526a08be4b43b1bf93c386"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "2e611b443470b1be38029c05f70b30a12aaaa322585791fddac016ca6fed8211"}}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x3b, 0x3, "5623bc5737f7c0e8aa1ab4be21a21751c4ad6c060476855494e17868532f920fd78d4b359981fae625b45d1d46f55d3bca22fbf000748e"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "686ef7a344f9a2fa78eb03e3702e9e54c4a6bc14b7b7a6698677"}}]}]}, 0x448}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:34:47 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1833.499287] FAULT_INJECTION: forcing a failure. [ 1833.499287] name failslab, interval 1, probability 0, space 0, times 0 [ 1833.500187] CPU: 0 UID: 0 PID: 12409 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1833.500202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1833.500209] Call Trace: [ 1833.500214] [ 1833.500220] dump_stack_lvl+0xfa/0x120 [ 1833.500245] should_fail_ex+0x4d7/0x5e0 [ 1833.500268] ? __kernfs_new_node+0xd3/0x930 [ 1833.500280] should_failslab+0xc2/0x120 [ 1833.500302] kmem_cache_alloc_noprof+0x80/0x710 [ 1833.500317] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1833.500344] ? __kernfs_new_node+0xd3/0x930 [ 1833.500357] __kernfs_new_node+0xd3/0x930 [ 1833.500379] ? __pfx___kernfs_new_node+0x10/0x10 [ 1833.500401] ? lock_acquire+0x15e/0x2d0 [ 1833.500418] ? kernfs_root+0x23/0x2a0 [ 1833.500431] ? find_held_lock+0x2b/0x80 [ 1833.500444] ? kernfs_root+0xee/0x2a0 [ 1833.500458] ? lock_release+0xc8/0x270 [ 1833.500471] ? lock_is_held_type+0x9e/0x120 [ 1833.500503] kernfs_new_node+0x13c/0x1e0 [ 1833.500528] __kernfs_create_file+0x55/0x360 [ 1833.500554] sysfs_add_file_mode_ns+0x21c/0x430 [ 1833.500573] ? __pfx_dev_attr_store+0x10/0x10 [ 1833.500600] internal_create_group+0x662/0xeb0 [ 1833.500631] ? __pfx_internal_create_group+0x10/0x10 [ 1833.500643] ? kernfs_add_one+0x150/0x830 [ 1833.500670] ? kernfs_create_link+0x1be/0x240 [ 1833.500695] internal_create_groups.part.0+0x90/0x140 [ 1833.500717] sysfs_create_groups+0x29/0x50 [ 1833.500733] device_add+0x67e/0x1830 [ 1833.500759] ? __pfx_device_add+0x10/0x10 [ 1833.500779] ? lockdep_init_map_type+0x4b/0x220 [ 1833.500798] ? __init_waitqueue_head+0xca/0x150 [ 1833.500827] netdev_register_kobject+0x1a9/0x3e0 [ 1833.500852] register_netdevice+0x1302/0x1d90 [ 1833.500879] ? __pfx_register_netdevice+0x10/0x10 [ 1833.500900] ? dev_addr_mod+0x294/0x340 [ 1833.500929] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1833.500956] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1833.500967] ? __fget_files+0x34/0x3b0 [ 1833.500984] ? find_held_lock+0x2b/0x80 [ 1833.500997] ? __fget_files+0x203/0x3b0 [ 1833.501014] ? lock_release+0xc8/0x270 [ 1833.501045] ? selinux_file_ioctl+0xb9/0x280 [ 1833.501065] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1833.501083] __x64_sys_ioctl+0x18f/0x210 [ 1833.501103] do_syscall_64+0xbf/0x420 [ 1833.501120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1833.501132] RIP: 0033:0x7f998c284b19 [ 1833.501142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1833.501154] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1833.501165] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1833.501173] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1833.501180] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1833.501187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1833.501193] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1833.501229] [ 1833.533487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1833.534072] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1833.534851] buffer_io_error: 20 callbacks suppressed [ 1833.534858] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1833.536016] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1833.536696] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:34:47 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 75) [ 1833.572735] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1833.573689] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1833.574962] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1833.576158] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1833.577364] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1833.595100] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1833.596237] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1833.597682] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1833.599073] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1833.600393] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1833.618064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1833.618613] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1833.619268] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:34:47 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x3000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:34:47 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x5, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1833.740510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1833.741009] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:34:47 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 76) [ 1833.767012] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1833.767787] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1833.790722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1833.791645] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1833.809016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1833.809990] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:34:47 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x30000000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000240)) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:34:47 executing program 5: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8008080}, 0x20000005) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRESHEX=r1], 0x51) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:34:47 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x4000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1833.931292] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1833.932284] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1833.968979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1833.969972] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:34:56 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x5000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:34:56 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x6, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:34:56 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1e000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:34:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2400}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:34:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) r4 = gettid() capset(&(0x7f00000000c0)={0x20071026, r4}, &(0x7f0000001540)={0x0, 0x200002, 0x2, 0x107, 0xfffffffc}) capset(&(0x7f00000000c0)={0x20080522, r1}, &(0x7f0000000100)={0x2, 0x3, 0x80, 0x0, 0x4, 0x200}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001ac0)=0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) r7 = fsmount(0xffffffffffffffff, 0x1, 0x73) r8 = epoll_create1(0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r9, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001e40)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r11 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001e80), 0x2, 0x0) r12 = accept4$inet6(0xffffffffffffffff, &(0x7f0000001ec0), &(0x7f0000001f00)=0x1c, 0x100000) r13 = syz_io_uring_setup(0x6377, &(0x7f0000001f40)={0x0, 0xe063, 0x8, 0x0, 0x4c}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001fc0), &(0x7f0000002000)) r14 = socket$inet(0x2, 0xa, 0xffffffff) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$unix(r7, &(0x7f0000002340)=[{{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000080)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="0fd0a71e2b5a3e32d6c36923c2ecc6fadd12a69e89b8afca43c17a26a79041e835aaad59b23eefbcffa66f5d4ed46ffcee79eb4d87e18801f764f1358ba7fbcaecda56277de4e234247ca343091db5f41f074cb251dbf0f359d0d4d2c19c261b7def506ddc62319cfc3e1328b9d0fb00aae101d7371561319d39158cef568b02ceb6d7859910a22a6271cbbe92b370b26250ede219125b12653487e347e6c2e01f7bd35e5fdcd1f82a39c29085fcbc1c49c977e7d5c4cb7cce3248b3c26c8def373e2f85ea461d1e41aba11cb1", 0xcd}, {&(0x7f00000012c0)="617e7fdc1dcbe55f45266181ad2b8f22e9fd78eee704a120f641b508c1f2088f42fc4222a8a5730e2d34cd4f68be53ccae4b085e0c58d80b02ab321eb923bcb7bc283647d1ac75d39dc4278aefa26d9e1328797b05d2ffc352d78c480935bd11668b3f891043c4add472cb798e18f7dce2ff36a3b16589dc585fd06c4e348f760bca93e94b48b8215b85ccb3b0b3019af7d00454070e3053eb8b3a402b884970a96c5e1afe593c6dfda39487d73d2f63b5a31cee17031966d6b04f446a", 0xbd}], 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYBLOB="6e7029f42e55dc956a839dc89725b421626bd786210674e7d3f96530a12a05209957c1e2cecefb73f434d8cd7eec1c981927f7b0f122fcaa1bc72613ca11cdc07b0ab120efe5e847338335a7d89682af92f0bc63e44fdb41788f3d78821e5289e33d208b37f6a0a531268ee2b42c7642a240", @ANYRES64=r7, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r14, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="000000001c0000000000000001000000020000009b4f9f970d16ba7ab08a45de1b744e76e9b82afbe71442c016631cf479d49f15858f2861d19a96d3f3922ffc91b7444b91425404c577cf3628521bcf06b2ecabfb5f1732e23c39a2eedc5d1643189e8ae42ada172e8482248add71b053ba", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0000000034000000000000000100d30001000000b4ddfc2f5b00d961b1babe4bfcdf7a65415a30587b513094b6809a70e8f18fb726008fd74a3bc256c6c787f5d1580fbe6295b04f3a7e89a21e41b0664f3db3fad04cb73a44a613747d7bef1aeb48736d66b58c8a7744d78a0cd6d7eec508789f80a6fd749d4f4d00481c75b3315bcd9da6af4002e49112d6fd6fab48649d0b12e198677a9bad99e143191e803879b508c2fd664c69565a94aacf6413b984481db2141be16c9bd470ea702c3e1a51f3b7a4acb45d1de6aa02fc903241d5a8f80c351c3812433e57d3772a75a5a995cffe9706", @ANYRES16, @ANYRES32, @ANYRES64=r8, @ANYRES32=r0, @ANYRES32, @ANYRESDEC=r4, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=r3, @ANYRES64, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x128, 0x24000000}}, {{&(0x7f0000001c40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001cc0)="01b863a3f992a3", 0x7}, {&(0x7f0000001380)="a9c5490262dc887c121cc3f34ace07ca6803fc15a391aed092372972b8d6603135b23d6fc0d1", 0x26}, {&(0x7f0000001d40)="7438e0262deda7b986e2171fe8b984344227ee48042595082d087511512daf9d114c40b3fc8e634df920fc98d2140600e2b8154aa36c2a00f6fcf3f8b396b91fe2785220861c551ac3e4679a3433bfe851513ccf5503aa86f58c513a6c3b13b1bd770a4779e6eff9aec1e771249da1cc3dfca86a91057337871d288f25f4aac35f48e998ee362e1046dfbe", 0x8b}], 0x3, &(0x7f00000013c0)=[@rights={{0x18, 0x1, 0x1, [r8, r15]}}, @rights={{0x2c, 0x1, 0x1, [r8, r9, r0, r0, r10, r11, r0]}}, @rights={{0x34, 0x1, 0x1, [r0, r12, r0, r0, r0, r0, 0xffffffffffffffff, r13, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r14, r0, r15, 0xffffffffffffffff, r0]}}], 0xa8, 0x1}}, {{&(0x7f0000002100)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002300)=[{&(0x7f0000002180)="7679b718606392adb640b0d3b5290ab4ae68b96254eadc310014286b32a124e1979a28b74eef3bf9c2b4c757559ade2a858403e8427860c1431a69c2ae8896b763547e7d89648ac219ada891812ff01f633ebb0904677869ba98862d28db2c9a3187ba3734b6322d64f6ec5efe647c8f6604f80aeeec474d197c3896191561df0045044d98aab45c4a99b3e0485996104f7274ebec60adb0f4a8526ca17e9a2ecf5343bc5a83c529ae16892c824cc413d88f7d80e55d328ff5e81c16ffb78c59606d3e693c335abd6102fe9d1b240a04d091c0f6c1", 0xd5}, {&(0x7f0000001880)="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", 0x10c}], 0x2, 0x0, 0x0, 0x20000104}}], 0x3, 0x8000) 11:34:56 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() capset(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x55, 0x9, 0x24, 0x7c, 0x0, 0x8, 0x8010, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x9, 0x1}, 0x44003, 0x8001, 0x1, 0x5, 0x1800000, 0xff, 0x9, 0x0, 0x8, 0x0, 0x827}, r1, 0xd, r0, 0xa) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x51) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:34:56 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 77) 11:34:56 executing program 0: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) timerfd_gettime(r1, &(0x7f0000000000)) [ 1842.708125] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1842.708657] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1842.709432] buffer_io_error: 20 callbacks suppressed [ 1842.709440] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1842.710509] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1842.711152] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1842.717971] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 1842.758429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1842.759446] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1842.760802] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1842.762077] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1842.763395] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1842.775594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1842.776590] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1842.777932] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1842.779210] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1842.780474] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1842.793477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1842.793960] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1842.794645] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:34:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000140)={0x0, 0x28, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x13) setuid(r2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r3, &(0x7f0000000300)=[{0x32, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000}, 0x4001) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:34:56 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x6000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:34:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x7, 0x6, 0x6, 0x9, 0x5, "3e1bcea5be7e54592f5c7a8aafe35327e5b054", 0x3, 0x7f}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, "78a0073c367a0cc5"}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x400000000000000, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmstat\x00', 0x0, 0x0) clone3(&(0x7f0000000600)={0x108000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x1c}, &(0x7f0000000200)=""/84, 0x54, &(0x7f0000000280), 0x0}, 0x58) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000300)=r5) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$KDSKBSENT(r6, 0x4b49, &(0x7f00000003c0)={0x4, "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"}) 11:34:56 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 78) 11:34:56 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x8, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:34:56 executing program 0: r0 = timerfd_create(0x8, 0x0) clock_gettime(0x0, &(0x7f0000000000)) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x8, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{r1, r2+60000000}, {0x77359400}}, 0x0) readv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/244, 0xf4}], 0x1) [ 1842.920784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1842.921288] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1842.937176] FAULT_INJECTION: forcing a failure. [ 1842.937176] name failslab, interval 1, probability 0, space 0, times 0 [ 1842.938124] CPU: 0 UID: 0 PID: 12492 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1842.938140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1842.938148] Call Trace: [ 1842.938153] [ 1842.938159] dump_stack_lvl+0xfa/0x120 [ 1842.938190] should_fail_ex+0x4d7/0x5e0 [ 1842.938214] ? __kernfs_new_node+0xd3/0x930 [ 1842.938228] should_failslab+0xc2/0x120 [ 1842.938249] kmem_cache_alloc_noprof+0x80/0x710 [ 1842.938266] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1842.938300] ? __kernfs_new_node+0xd3/0x930 [ 1842.938312] __kernfs_new_node+0xd3/0x930 [ 1842.938335] ? __pfx___kernfs_new_node+0x10/0x10 [ 1842.938357] ? lock_acquire+0x15e/0x2d0 [ 1842.938379] ? kernfs_root+0x23/0x2a0 [ 1842.938394] ? find_held_lock+0x2b/0x80 [ 1842.938407] ? kernfs_root+0xee/0x2a0 [ 1842.938421] ? lock_release+0xc8/0x270 [ 1842.938435] ? lock_is_held_type+0x9e/0x120 [ 1842.938466] kernfs_new_node+0x13c/0x1e0 [ 1842.938492] __kernfs_create_file+0x55/0x360 [ 1842.938518] sysfs_add_file_mode_ns+0x21c/0x430 [ 1842.938537] ? __pfx_dev_attr_store+0x10/0x10 [ 1842.938566] internal_create_group+0x662/0xeb0 [ 1842.938598] ? __pfx_internal_create_group+0x10/0x10 [ 1842.938611] ? kernfs_add_one+0x150/0x830 [ 1842.938637] ? kernfs_create_link+0x1be/0x240 [ 1842.938663] internal_create_groups.part.0+0x90/0x140 [ 1842.938685] sysfs_create_groups+0x29/0x50 [ 1842.938713] device_add+0x67e/0x1830 [ 1842.938740] ? __pfx_device_add+0x10/0x10 [ 1842.938760] ? lockdep_init_map_type+0x4b/0x220 [ 1842.938779] ? __init_waitqueue_head+0xca/0x150 [ 1842.938809] netdev_register_kobject+0x1a9/0x3e0 [ 1842.938836] register_netdevice+0x1302/0x1d90 [ 1842.938865] ? __pfx_register_netdevice+0x10/0x10 [ 1842.938886] ? dev_addr_mod+0x294/0x340 [ 1842.938914] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1842.938942] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1842.938954] ? __fget_files+0x34/0x3b0 [ 1842.938973] ? find_held_lock+0x2b/0x80 [ 1842.938986] ? __fget_files+0x203/0x3b0 [ 1842.939002] ? lock_release+0xc8/0x270 [ 1842.939033] ? selinux_file_ioctl+0xb9/0x280 [ 1842.939054] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1842.939073] __x64_sys_ioctl+0x18f/0x210 [ 1842.939094] do_syscall_64+0xbf/0x420 [ 1842.939111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1842.939124] RIP: 0033:0x7f998c284b19 [ 1842.939135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1842.939147] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1842.939159] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1842.939167] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1842.939175] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1842.939182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1842.939190] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1842.939226] [ 1842.978655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1842.979131] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1843.005181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1843.006438] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1843.019078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1843.020245] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:35:05 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x9, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:35:05 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 79) 11:35:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 11:35:05 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:35:05 executing program 4: getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000080)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000140)=0x2c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) setuid(r2) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:35:05 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80280, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:35:05 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2a00}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:35:05 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x7000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:35:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x3, 0x200280) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000280)=ANY=[@ANYBLOB="010000ff0100020000000000015388544f435551febc2c58ce1a23726338117107545ba625ec8b4554992ef06686a1c63da1e293dc5947a1d6a91afad57714d9a721422617eb10e4733f1584ff1580e321f9028ac75a84cdc243ad33360502f4eca836083e56332dd970c5ee033272a00e340c9be3f6ad76f4b55eda5b4fadfae91a7ee78ce27f52c989d429c7c83d55a721d36de184342a1cb1", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file0\x00']) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000080), &(0x7f0000000140)=0x8) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) [ 1852.362221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1852.363415] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1852.364714] buffer_io_error: 14 callbacks suppressed [ 1852.364727] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1852.366746] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1852.367986] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1852.411575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1852.412083] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1852.412793] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1852.413435] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1852.414051] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:35:06 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) [ 1852.425711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1852.427139] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1852.428862] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1852.430108] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1852.431377] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:35:06 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x101, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0xdf9, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000080)=0x3d) setuid(r4) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) ioprio_get$uid(0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) dup(r5) creat(&(0x7f0000000000)='./file0\x00', 0x180) 11:35:06 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff965d1dd7a65f0be4ab146aa7a9636645f0ae3094e59e50bfee32d00000000001f1f7d4666d7035828c45f0bca329e29f4c2e535424a6fa573d2753a2dcc1d197587a924f8606bc64474c962f24984d32dea7530f307e91d39eab69917cdd4bf4fe73e8eb9b9151fa854c60cdb9b9c4322c61f13d43ae626f0b99897cfe8d021f2ec4d1e9da851ccafd10d127bbf4d37f98fcead9160dbbd4ae07bd76958a848046b00000000"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = signalfd4(r0, &(0x7f0000000080)={[0x20]}, 0x8, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.time_recursive\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f00000001c0)=""/89) 11:35:06 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 80) 11:35:06 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xa, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1852.473491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1852.474690] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1852.476021] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:35:06 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x8000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1852.549431] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1852.550026] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1852.586546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1852.588022] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:35:06 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2a00}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:35:06 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='/dev/net/tun\x00') 11:35:06 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 81) [ 1852.679216] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1852.680226] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1852.715276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1852.715788] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1852.731219] FAULT_INJECTION: forcing a failure. [ 1852.731219] name failslab, interval 1, probability 0, space 0, times 0 [ 1852.732343] CPU: 1 UID: 0 PID: 12554 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1852.732360] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1852.732367] Call Trace: [ 1852.732372] [ 1852.732376] dump_stack_lvl+0xfa/0x120 [ 1852.732405] should_fail_ex+0x4d7/0x5e0 [ 1852.732424] ? __kernfs_new_node+0xd3/0x930 [ 1852.732437] should_failslab+0xc2/0x120 [ 1852.732456] kmem_cache_alloc_noprof+0x80/0x710 [ 1852.732470] ? perf_trace_lock_acquire+0xc9/0x700 [ 1852.732494] ? __kernfs_new_node+0xd3/0x930 [ 1852.732505] __kernfs_new_node+0xd3/0x930 [ 1852.732521] ? __pfx___kernfs_new_node+0x10/0x10 [ 1852.732537] ? lock_acquire+0x15e/0x2d0 [ 1852.732552] ? kernfs_root+0x23/0x2a0 [ 1852.732565] ? find_held_lock+0x2b/0x80 [ 1852.732579] ? kernfs_root+0xee/0x2a0 [ 1852.732591] ? lock_release+0xc8/0x270 [ 1852.732605] ? lock_is_held_type+0x9e/0x120 [ 1852.732628] kernfs_new_node+0x13c/0x1e0 [ 1852.732646] __kernfs_create_file+0x55/0x360 [ 1852.732667] sysfs_add_file_mode_ns+0x21c/0x430 [ 1852.732681] ? __pfx_dev_attr_store+0x10/0x10 [ 1852.732705] internal_create_group+0x662/0xeb0 [ 1852.732727] ? __pfx_internal_create_group+0x10/0x10 [ 1852.732739] ? kernfs_add_one+0x150/0x830 [ 1852.732758] ? kernfs_create_link+0x1be/0x240 [ 1852.732778] internal_create_groups.part.0+0x90/0x140 [ 1852.732795] sysfs_create_groups+0x29/0x50 [ 1852.732808] device_add+0x67e/0x1830 [ 1852.732829] ? __pfx_device_add+0x10/0x10 [ 1852.732847] ? lockdep_init_map_type+0x4b/0x220 [ 1852.732864] ? __init_waitqueue_head+0xca/0x150 [ 1852.732885] netdev_register_kobject+0x1a9/0x3e0 [ 1852.732908] register_netdevice+0x1302/0x1d90 [ 1852.732930] ? __pfx_register_netdevice+0x10/0x10 [ 1852.732947] ? dev_addr_mod+0x294/0x340 [ 1852.732969] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1852.732989] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1852.733001] ? __fget_files+0x34/0x3b0 [ 1852.733017] ? find_held_lock+0x2b/0x80 [ 1852.733029] ? __fget_files+0x203/0x3b0 [ 1852.733044] ? lock_release+0xc8/0x270 [ 1852.733065] ? selinux_file_ioctl+0xb9/0x280 [ 1852.733083] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1852.733098] __x64_sys_ioctl+0x18f/0x210 [ 1852.733114] do_syscall_64+0xbf/0x420 [ 1852.733128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.733141] RIP: 0033:0x7f998c284b19 [ 1852.733151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1852.733164] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1852.733176] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1852.733184] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1852.733192] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1852.733199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1852.733207] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1852.733226] 11:35:16 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x8100000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:35:16 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0xb, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:35:16 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2a000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:35:16 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 82) 11:35:16 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xc, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:35:16 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r3, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r4, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000001880)) r5 = fsmount(0xffffffffffffffff, 0x1, 0x82) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r7 = creat(&(0x7f0000001700)='./file0\x00', 0x0) io_submit(0x0, 0x7, &(0x7f0000001840)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x8, r0, &(0x7f00000003c0)="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", 0x1000, 0x7fffffff, 0x0, 0x2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x3ff, r2, &(0x7f0000000140)="040b377fb56b6dc5e00efca48d503fe840bc54d76e4fe47cc3f8f1e146d1a215edfc130aa4f03d82fdeaa99d8dc7920f4b7c006407064bf973a0db5f71ce9c7cd40b78dc64494af2c849217bb0674ba60b5554ba7b64cbd8cf4aaaac5ca06c0ff7a027ae2a489aef2b46fa17698ba54d5de472468413bf100bd79e72a2e4bb7bcb1348d94310b6ee0e3be9bca52c590801e14b2b1ed64c91296dee7efec9e860b6b5b615cfd676c09884547fbbccef4aeac13f1d2d922e15e2f8f139c105191e1d96d8b48d33f7aa0301706a72903ff2b91f3dc0ea", 0xd5, 0x400, 0x0, 0x2, r3}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x1, r1, &(0x7f00000013c0)="5d099d09d0907ccf14d74f2b283080601d3a3ea0b164dea249a493e825fa4581dc731bd885f5937c6b27227ea3c842a56c02aa1e3b3a347c14e04bf939d1c2aa7331bb3e99c45144e94938c8622753cd7fcf84755e8eb8f0f69221d7db7c880fd64034662f5d26206d3fea06eb4b28b3f9b1ccc200b953d2eae7b04b24480684e1f7f81e987398ee04a7abf4de901475ac58315709883fea86f28951b8bb36d010f95fc23d9e79cf8d27ceb9dd78359642a84553d92d370cf5578396d08c74c0950cf9b4208dea6b", 0xc8, 0xe8, 0x0, 0x5}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x6, r5, &(0x7f00000014c0)="c9f4fe93b3b4a373b35ca5128f75c161cc9d257338e55268a680e3a990d2ceb8eceb3b0d82f6a6300645db31987b4b5e5a3dee6f9df94c7931d1bfff093399e012508628dfe2ce89a88de89ff33844bcb51cdb2c47a040942f8ba2fc4000cf002583517fc26dd0c65e1b4d1154eabfe0443c09823849197deb955b8c92bf233ffac1990a43e4485b93d62bf50afb47c9d6bb4cee592c6f4f51ae9b0b0d85ef249627398aec60a75592", 0xa9, 0x4, 0x0, 0x1}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x6, 0xc38c, r6, &(0x7f0000001580)="c2ea04a4695cead2b6c7849deb1733b84bb232d57bc77543921acc8c00c5e68741625f09b3a4f045c577454940a62c372e48b020c194d137387d574fb1af831db8e4a2ac4b9d4a7d5137b9c2cef92b76af27fdc5b06838fa03e98201613bcf1d0ae80b3b800788fd1c0d2959f2c6423ddcd7a5da1620ae24145b6db4813579ac28f27fc84c94242f707be59a56828d68cb0ada7e0ecc2cab7bd5bb845aadd07c085c075ce8edd8c2b4cdd1f165e3e6018d68a0b138d4fd2f6da3b6800bc12b7bc4da2a", 0xc3, 0x4, 0x0, 0x1}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x7, 0x8, r0, &(0x7f00000016c0)="a6abe6c4a8f870617923c0dee8dd", 0xe, 0x6c52, 0x0, 0x1, r7}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x8, 0x1000, r1, &(0x7f0000001780)="a42ad58307f1f7e4356ddc07a438653e312407e90fa16c82309051df4551849585048bc21dacabe8c87fe5689be009ae37076bb514341e7cee61d2987990a311e997f53034d6aecfa12d040d0a369ae79799dbc2bfc7d4dd0ace33bb2c71d069cf6c813c049ea975ca4d4f05018cbadc515e1207476415ddbad5ce8a", 0x7c, 0xff}]) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'macvtap0\x00'}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000000c0)=0x1ff) 11:35:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:35:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x0, 0x0, 0x1}) [ 1863.022673] FAULT_INJECTION: forcing a failure. [ 1863.022673] name failslab, interval 1, probability 0, space 0, times 0 [ 1863.024133] CPU: 0 UID: 0 PID: 12566 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1863.024155] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1863.024164] Call Trace: [ 1863.024170] [ 1863.024178] dump_stack_lvl+0xfa/0x120 [ 1863.024215] should_fail_ex+0x4d7/0x5e0 [ 1863.024246] ? __kernfs_new_node+0xd3/0x930 [ 1863.024263] should_failslab+0xc2/0x120 [ 1863.024290] kmem_cache_alloc_noprof+0x80/0x710 [ 1863.024316] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1863.024357] ? __kernfs_new_node+0xd3/0x930 [ 1863.024374] __kernfs_new_node+0xd3/0x930 [ 1863.024405] ? __pfx___kernfs_new_node+0x10/0x10 [ 1863.024436] ? lock_acquire+0x15e/0x2d0 [ 1863.024458] ? kernfs_root+0x23/0x2a0 [ 1863.024476] ? find_held_lock+0x2b/0x80 [ 1863.024495] ? kernfs_root+0xee/0x2a0 [ 1863.024513] ? lock_release+0xc8/0x270 [ 1863.024532] ? lock_is_held_type+0x9e/0x120 [ 1863.024574] kernfs_new_node+0x13c/0x1e0 [ 1863.024610] __kernfs_create_file+0x55/0x360 [ 1863.024645] sysfs_add_file_mode_ns+0x21c/0x430 [ 1863.024672] ? __pfx_dev_attr_store+0x10/0x10 [ 1863.024709] internal_create_group+0x662/0xeb0 [ 1863.024752] ? __pfx_internal_create_group+0x10/0x10 [ 1863.024769] ? kernfs_add_one+0x150/0x830 [ 1863.024806] ? kernfs_create_link+0x1be/0x240 [ 1863.024841] internal_create_groups.part.0+0x90/0x140 [ 1863.024871] sysfs_create_groups+0x29/0x50 [ 1863.024893] device_add+0x67e/0x1830 [ 1863.024929] ? __pfx_device_add+0x10/0x10 [ 1863.024956] ? lockdep_init_map_type+0x4b/0x220 [ 1863.024983] ? __init_waitqueue_head+0xca/0x150 [ 1863.025022] netdev_register_kobject+0x1a9/0x3e0 [ 1863.025058] register_netdevice+0x1302/0x1d90 [ 1863.025095] ? __pfx_register_netdevice+0x10/0x10 [ 1863.025124] ? dev_addr_mod+0x294/0x340 [ 1863.025164] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1863.025201] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1863.025217] ? __fget_files+0x34/0x3b0 [ 1863.025241] ? find_held_lock+0x2b/0x80 [ 1863.025259] ? __fget_files+0x203/0x3b0 [ 1863.025282] ? lock_release+0xc8/0x270 [ 1863.025325] ? selinux_file_ioctl+0xb9/0x280 [ 1863.025353] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1863.025379] __x64_sys_ioctl+0x18f/0x210 [ 1863.025407] do_syscall_64+0xbf/0x420 [ 1863.025431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1863.025448] RIP: 0033:0x7f998c284b19 [ 1863.025462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1863.025478] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1863.025495] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1863.025506] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1863.025516] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1863.025526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1863.025535] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1863.025586] [ 1863.103510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1863.104198] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1863.105107] buffer_io_error: 14 callbacks suppressed [ 1863.105117] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1863.106866] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1863.107710] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1863.110567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1863.111706] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1863.113052] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1863.114326] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1863.115595] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1863.163018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1863.163952] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1863.164959] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1863.165904] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1863.166840] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:35:16 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0xb, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1863.187360] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1863.188450] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1863.189917] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:35:16 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xe, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1863.283652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1863.284776] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:35:16 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 83) [ 1863.307410] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1863.307975] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:35:16 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x4, 0x58c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x3}, 0x2092, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="00008d0000a6fa34b50f47e1e4c3f46e338aae9636645f0ae3e576970308a41f1f0300000000000000dca6e86de7c31d9685f6687515cf46681f1f7d4666d7035828c45f0bca329e000000000000001d0000"], 0x51) r1 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x7, 0x7, 0x81, 0x1f, 0x0, 0xfffffffffffff800, 0x20400, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, @perf_bp={&(0x7f0000000140), 0x2}, 0x4, 0x80000000, 0x286, 0x4, 0x8001, 0x5, 0x9, 0x0, 0x5}, r1, 0x1, r0, 0xb) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'veth1\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r4 = epoll_create1(0x80000) close(r4) [ 1863.326942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1863.327650] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:35:17 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x10, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:35:17 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xa000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1863.395056] audit: type=1400 audit(1764416117.057:31): avc: denied { tracepoint } for pid=12592 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 11:35:17 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1863.424159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1863.424731] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1863.457669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1863.458646] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1863.471497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1863.471985] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1863.483318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 11:35:26 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 84) 11:35:26 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2a000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:35:26 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x30000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:35:26 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xf5, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:35:26 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1}) capget(&(0x7f0000000080)={0x20080522, r1}, &(0x7f0000000140)={0x8d5, 0x1, 0x400, 0x6, 0x5, 0x1}) r3 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(0x0, r3) r5 = pidfd_getfd(r3, r3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000440)=0xc) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x2b) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="02002cbd7000fddbdf250d00000008000300", @ANYRES32=r7, @ANYBLOB="060028000300000005002a000000000008002c000500000008002c0006000000050030000000000005002e00000000000600322800410000"], 0x54}}, 0x8000) 11:35:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3600}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:35:26 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x10000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:35:26 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="00001e290f23e7bb9e073f91eabb6974408d0000a6fa34b50f471ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfe052de576970308a41f1fd6c2cf0200000000000000681f1f7d4666d7035828c45f0bca329e00649fbc109639"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'dummy0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:35:27 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 85) 11:35:27 executing program 5: timer_getoverrun(0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000005c0)) write$tun(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f46aa7a9636645f0ae32e9e778cd5ea3013dc7e7a8251c1094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca628c45f0bca339ed1f305e79062eb8a17b98a22522f6856d5d7273cfcfd2c4347365b0dedc795b9321f89accbc3ae91772e5e7f25f539bdfeae0f08040d6c2ab28e0fb57fe493fdf9804448010000000000000042d0bbb46c620054b6a919b658d9ca1affcc080211a75951ff61fc80ad7ae8f9e76c8b59b6cd6d79dc84e7ba4ec9b006"], 0x51) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x2, 0x0) fgetxattr(r2, &(0x7f0000000300)=@known='user.incfs.size\x00', &(0x7f00000003c0)=""/214, 0xd6) [ 1873.411698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1873.412212] blk_print_req_error: 1 callbacks suppressed [ 1873.412221] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1873.413614] buffer_io_error: 23 callbacks suppressed [ 1873.413622] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1873.414824] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1873.415678] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1873.446903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1873.448274] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1873.450239] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1873.451518] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1873.452779] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1873.468597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1873.469602] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1873.470986] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1873.472267] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1873.473521] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1873.499194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1873.499877] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1873.500591] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:35:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0xff, 0x4, 0x24, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x7, 0x9, 0x3f}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@getpolicy={0x8c, 0x15, 0x10, 0x70bd26, 0x25dfdbff, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0x3, 0x4e20, 0x0, 0x8, 0x80, 0x60, 0xaf, r2, r3}, 0x6e6bb7}, [@etimer_thresh={0x8, 0xc, 0x1bb5}, @replay_thresh={0x8, 0xb, 0x80000001}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x1c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}}]}, 0x8c}}, 0x4040000) setxattr$trusted_overlay_origin(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480), 0x2, 0x0) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:35:27 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x20000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:35:27 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 86) 11:35:27 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x300, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:35:27 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/275], 0x51) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60080, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:35:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) fcntl$setlease(r0, 0x400, 0x0) setuid(r2) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, 0x6}) pread64(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0) setpriority(0x2, r1, 0x10000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x100, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000001740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001700)={&(0x7f0000000240)={0x14b4, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "641f53b51fd27e95acff2af8748318bd1c7dc8335eda6460"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x94, 0x3, "d01b5a8a82ccd25e275e2b9a1ea03e781ec0c4749f85102009764ba9c422ab93fcc07ccafd1729d0210e82b7ff4a2c1c12a87dfa96bbc3e310173ed36d2f337420f75b9fb4d5d61061c324c344d9c6be1ff0e8fe5aa86f0de07202c009ed38dc31c138a54f55038657655bdc691e96cf104fdc5da0e1b38d7624323b4b9f943e9e6007b1086d962a675871d7b2b20032"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9a8}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe134}]}, @TIPC_NLA_NODE={0x105c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "07c7e67943763b451b4076c28f5af215338b50cda5fe07de0be6c7bf649cc7b4d1bc4f"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xef3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xcf}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x50f0db54}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4a598667}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NODE={0x188, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "2394bcb8504995af57171b183217b6cde767704ab26248880a07"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "42b8afd87952c483a4d0ea9b05fcdeef55fb81d6"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "2788d27a7ce69665d1713ec0f0405c93ffd408083eaa0f470ff60572f4"}}, @TIPC_NLA_NODE_ID={0xba, 0x3, "fb3c99f4bdf418ce2389b0dc10601ae17b747dfb240caad271e0312c089e97ecf2119ca1a3c2ee8f13642df42857d4aef7fbf09c4c99a7775fe82122139c3ef66dc2bbec7c6369d2d0ce4122c536d0769b6bd449e1581a128a9272ab99899e4e1bd881b2e49efc69c4c04a926aff69a9d028d44506195377cde37697ec1039accc9a93cd3db2aa7ea65ef5d4732c85fcbf22b7d4331459ecb1a4cff2db2ba346216f0a9db8bd4ce8ab4df3420c50ccc531591fdea4eb"}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0x14b4}, 0x1, 0x0, 0x0, 0x10}, 0x8010) [ 1873.665903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1873.667007] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1873.709585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1873.710718] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1873.723869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1873.724831] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:35:27 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x58818}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r0, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x7, 0x1, 0xc0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000080)}, 0x2a0, 0x100000001, 0x3, 0x5, 0x7, 0xc9bd, 0x3, 0x0, 0x4, 0x0, 0x11}, 0xffffffffffffffff, 0xd, r0, 0x2) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) [ 1873.739961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1873.740622] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:35:36 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x500, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:35:36 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 87) 11:35:36 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x36000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:35:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:35:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)={0x0, 0x7f}) 11:35:36 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r0, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0xa2c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:35:36 executing program 0: perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="01011e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae31f1fd6c2cf47287209617287a47dc329aca06d8f8895dca6e86c1f1f7d4666d7035828c45f0bca329e00"/93], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x1}]) r2 = signalfd(r0, &(0x7f0000000140), 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r3, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) r5 = eventfd(0x10001) io_submit(r1, 0x5, &(0x7f0000000580)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x3, r0, &(0x7f0000000080)="be586ddb51acaccd5b59bd7d11c5add8a162d7ab7c0c2292e3df6bcd59b5a641fe6036f0b8823ed0e06dbb5bb802d91cb621db44acccb18fee494f7776a874d77f91ffaf6bc25663dc27f6cd8d5f14872ceb83791f6041da5be1d9cc6005", 0x5e, 0x9, 0x0, 0x2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f0000000180)="ac91648675cae4050f89fb9e7cd1d922253b22ed615b749f5f8bb73f3482b99b746c804dd0f5d5f7a9838375d9b01d755dd906209708c7c516b2d37214e31eef0426c408c6b72e8147e70308fdc2e7a24366b6f4", 0x54, 0x1000, 0x0, 0x2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x1, r0, &(0x7f0000000240)="28f5cab2bf26314597f0ec90e547372e361ce50c6e743f7a036791833cbda3c18e8c489c727043f57744bd83188c454db8263c539af120f82e10efc68856a099410a14a2c0f1230ca58ef0697343b7e0c49e7d6cf3db33a23e566310f3e5230a206f", 0x62, 0x401, 0x0, 0x0, r3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3f, 0xffffffffffffffff, &(0x7f00000003c0)="45d33592546ed81ea50b2e7a16abaa7486c72e8f43c6b0b1fb955039486ce8fa1aa28e09d7c3bc3aa433da309c1862d16acc3ebf433c72fa01518cd2b61163358a4fce2d8b9990867e03f7ad7adb291fa74906b555cb870a7a097fb711e579e7b92ea47c38ad73dbf658c648520d2615801d4a8d4789a414b46bebd24f38bf3413296d3fc2f3f94d711588e647079351bc207345f51c4893e244cd4bac6409bd906da8e3a0c7f4d48574a38ec5d93930caa3cdb7d7fe593d1e873d7d617e779800645441adbb2730d972465ec75ac5d36dfc", 0xd2, 0x9, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0xd637, r4, &(0x7f00000004c0)="aacab28c7db7a4af850477ddb548b88f3595684dc464537c4d0740ee06bbb774329f1db49182789f8114a6f499642f9774c0372d69b84901be212e9946d70158d31ba2fc87a1d53e00a7a6bc712f64ce62100482b5b3122b9a5e6c77cca7d9cb75509ec09c2d6395241c84e86cbaf6d55c323f1f981738", 0x77, 0x721c, 0x0, 0x2, r5}]) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:35:36 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x3f000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:35:36 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() capset(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x7}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f00000001c0), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/5, 0x5}, {&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f0000000280)=""/100, 0x64}], 0x5, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/136, 0x88}, {&(0x7f0000000300)=""/50, 0x32}, {&(0x7f0000000900)=""/33, 0x21}, {&(0x7f0000000940)=""/91, 0x5b}, {&(0x7f00000009c0)=""/74, 0x4a}, {&(0x7f0000000a40)=""/25, 0x19}, {&(0x7f0000000a80)=""/163, 0xa3}], 0x7, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000b1b960f6eb9d35930002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x68}}], 0x2, 0x40002000, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0xcb, 0x6, 0x7, 0x0, 0x1, 0x20000, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xfffffffffffffff9, 0x2}, 0x10, 0xfffffffffffffffa, 0x37, 0x8, 0x10001, 0x920e, 0x1, 0x0, 0x2}, r1, 0xb, r4, 0x9) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) write(r0, &(0x7f0000000080)="7131566158c6832c576ef6031b518c3dc2a0751b7fbfeed3aba5190248875254f68630faa0d821be7a6adf432e22560bbd1da656c8a7d2c16c0c5e90fb3d32aeeafaf1d38a49a4e23bbd1ec03180f4e6e9db8dfaf1c075ca110224b8d68e2699d1f6e03d56223566f5cb859f369624088b347c2dea1194a85f7eedb5e8be90cf18cf8111ff6e73b93349144c9835aedcb0bdfa51019778fe7575dc266f6b1ac3cf38abaa2a61c54410a2deaa605319efdd70a9", 0xb3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000cc0)={'veth0_to_bridge\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) lseek(r8, 0x5, 0x7) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r9, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r10, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r12 = syz_open_dev$vcsu(&(0x7f0000000dc0), 0x1ff, 0xc02) poll(&(0x7f0000000e00)=[{r10, 0x10e}, {r11, 0x250}, {r5, 0x2000}, {r12, 0x1}, {r6, 0x10}], 0x5, 0x1f) ioctl$TUNGETVNETHDRSZ(r9, 0x800454d7, &(0x7f0000000d00)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000e80)={'vcan0\x00'}) [ 1882.542488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1882.542984] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1882.543791] buffer_io_error: 14 callbacks suppressed [ 1882.543798] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1882.544946] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1882.545765] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1882.556124] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1882.556623] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1882.557325] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1882.557944] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1882.558594] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:35:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={r4, r1, r2}, 0xc) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) [ 1882.580991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1882.581505] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1882.582177] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1882.582842] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1882.583495] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1882.597089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1882.597923] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1882.599068] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:35:36 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x3ffffe00, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:35:36 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x5ff, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:35:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) setuid(r2) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:35:36 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 88) 11:35:36 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x808}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)=ANY=[@ANYBLOB="090000000300000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 1882.752316] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1882.753216] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1882.764547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1882.765272] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:35:36 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() capset(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x7}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f00000001c0), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/5, 0x5}, {&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f0000000280)=""/100, 0x64}], 0x5, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/136, 0x88}, {&(0x7f0000000300)=""/50, 0x32}, {&(0x7f0000000900)=""/33, 0x21}, {&(0x7f0000000940)=""/91, 0x5b}, {&(0x7f00000009c0)=""/74, 0x4a}, {&(0x7f0000000a40)=""/25, 0x19}, {&(0x7f0000000a80)=""/163, 0xa3}], 0x7, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000b1b960f6eb9d35930002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x68}}], 0x2, 0x40002000, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0xcb, 0x6, 0x7, 0x0, 0x1, 0x20000, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xfffffffffffffff9, 0x2}, 0x10, 0xfffffffffffffffa, 0x37, 0x8, 0x10001, 0x920e, 0x1, 0x0, 0x2}, r1, 0xb, r4, 0x9) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) write(r0, &(0x7f0000000080)="7131566158c6832c576ef6031b518c3dc2a0751b7fbfeed3aba5190248875254f68630faa0d821be7a6adf432e22560bbd1da656c8a7d2c16c0c5e90fb3d32aeeafaf1d38a49a4e23bbd1ec03180f4e6e9db8dfaf1c075ca110224b8d68e2699d1f6e03d56223566f5cb859f369624088b347c2dea1194a85f7eedb5e8be90cf18cf8111ff6e73b93349144c9835aedcb0bdfa51019778fe7575dc266f6b1ac3cf38abaa2a61c54410a2deaa605319efdd70a9", 0xb3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000cc0)={'veth0_to_bridge\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) lseek(r8, 0x5, 0x7) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r9, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r10, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r12 = syz_open_dev$vcsu(&(0x7f0000000dc0), 0x1ff, 0xc02) poll(&(0x7f0000000e00)=[{r10, 0x10e}, {r11, 0x250}, {r5, 0x2000}, {r12, 0x1}, {r6, 0x10}], 0x5, 0x1f) ioctl$TUNGETVNETHDRSZ(r9, 0x800454d7, &(0x7f0000000d00)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000e80)={'vcan0\x00'}) [ 1882.783119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1882.783646] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1882.804561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1882.805042] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:35:36 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setuid(0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000240008032bbd7000fedbdf250000040000000000000000000000000000000000ad81571d449f2e6c41940fd795b94e7ef361e76cbf59006d"], 0x24}, 0x1, 0x0, 0x0, 0x8180}, 0x20000000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x7f}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000040}, 0x44051) 11:35:36 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x40000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1882.924965] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1882.925782] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1882.950755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1882.951345] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:35:45 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 89) 11:35:45 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x600, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:35:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:35:45 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3c000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:35:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) capset(&(0x7f0000000080)={0x20080522, r1}, &(0x7f0000000140)={0x490, 0x341c, 0xcd, 0x8, 0x3f, 0x7ff}) 11:35:45 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xcd0d0000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:35:45 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x9) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee01) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:35:45 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() capset(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x7}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f00000001c0), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/5, 0x5}, {&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f0000000280)=""/100, 0x64}], 0x5, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/136, 0x88}, {&(0x7f0000000300)=""/50, 0x32}, {&(0x7f0000000900)=""/33, 0x21}, {&(0x7f0000000940)=""/91, 0x5b}, {&(0x7f00000009c0)=""/74, 0x4a}, {&(0x7f0000000a40)=""/25, 0x19}, {&(0x7f0000000a80)=""/163, 0xa3}], 0x7, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000b1b960f6eb9d35930002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x68}}], 0x2, 0x40002000, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0xcb, 0x6, 0x7, 0x0, 0x1, 0x20000, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xfffffffffffffff9, 0x2}, 0x10, 0xfffffffffffffffa, 0x37, 0x8, 0x10001, 0x920e, 0x1, 0x0, 0x2}, r1, 0xb, r4, 0x9) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) write(r0, &(0x7f0000000080)="7131566158c6832c576ef6031b518c3dc2a0751b7fbfeed3aba5190248875254f68630faa0d821be7a6adf432e22560bbd1da656c8a7d2c16c0c5e90fb3d32aeeafaf1d38a49a4e23bbd1ec03180f4e6e9db8dfaf1c075ca110224b8d68e2699d1f6e03d56223566f5cb859f369624088b347c2dea1194a85f7eedb5e8be90cf18cf8111ff6e73b93349144c9835aedcb0bdfa51019778fe7575dc266f6b1ac3cf38abaa2a61c54410a2deaa605319efdd70a9", 0xb3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000cc0)={'veth0_to_bridge\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) lseek(r8, 0x5, 0x7) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r9, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r10, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r12 = syz_open_dev$vcsu(&(0x7f0000000dc0), 0x1ff, 0xc02) poll(&(0x7f0000000e00)=[{r10, 0x10e}, {r11, 0x250}, {r5, 0x2000}, {r12, 0x1}, {r6, 0x10}], 0x5, 0x1f) ioctl$TUNGETVNETHDRSZ(r9, 0x800454d7, &(0x7f0000000d00)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000e80)={'vcan0\x00'}) [ 1892.300691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1892.301807] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1892.303195] buffer_io_error: 20 callbacks suppressed [ 1892.303210] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1892.305322] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1892.306585] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:35:45 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x5) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r2) setuid(r2) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0xffffff01, 0x0, 0xfffffffe}) [ 1892.332757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1892.333745] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1892.335084] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1892.336383] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1892.337620] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:35:46 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() capset(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x7}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f00000001c0), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/5, 0x5}, {&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f0000000280)=""/100, 0x64}], 0x5, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/136, 0x88}, {&(0x7f0000000300)=""/50, 0x32}, {&(0x7f0000000900)=""/33, 0x21}, {&(0x7f0000000940)=""/91, 0x5b}, {&(0x7f00000009c0)=""/74, 0x4a}, {&(0x7f0000000a40)=""/25, 0x19}, {&(0x7f0000000a80)=""/163, 0xa3}], 0x7, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000b1b960f6eb9d35930002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x68}}], 0x2, 0x40002000, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0xcb, 0x6, 0x7, 0x0, 0x1, 0x20000, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xfffffffffffffff9, 0x2}, 0x10, 0xfffffffffffffffa, 0x37, 0x8, 0x10001, 0x920e, 0x1, 0x0, 0x2}, r1, 0xb, r4, 0x9) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) write(r0, &(0x7f0000000080)="7131566158c6832c576ef6031b518c3dc2a0751b7fbfeed3aba5190248875254f68630faa0d821be7a6adf432e22560bbd1da656c8a7d2c16c0c5e90fb3d32aeeafaf1d38a49a4e23bbd1ec03180f4e6e9db8dfaf1c075ca110224b8d68e2699d1f6e03d56223566f5cb859f369624088b347c2dea1194a85f7eedb5e8be90cf18cf8111ff6e73b93349144c9835aedcb0bdfa51019778fe7575dc266f6b1ac3cf38abaa2a61c54410a2deaa605319efdd70a9", 0xb3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000cc0)={'veth0_to_bridge\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) lseek(r8, 0x5, 0x7) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r9, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r10, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r12 = syz_open_dev$vcsu(&(0x7f0000000dc0), 0x1ff, 0xc02) poll(&(0x7f0000000e00)=[{r10, 0x10e}, {r11, 0x250}, {r5, 0x2000}, {r12, 0x1}, {r6, 0x10}], 0x5, 0x1f) ioctl$TUNGETVNETHDRSZ(r9, 0x800454d7, &(0x7f0000000d00)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000e80)={'vcan0\x00'}) [ 1892.365848] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1892.366384] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1892.367083] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1892.367866] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1892.368628] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:35:46 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 90) [ 1892.373938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1892.375004] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1892.376397] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:35:46 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00020000008d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x464281, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x0, 0x4f, 0x1, 0x0, 0x7, 0x60008, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x97f9, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x820, 0x3, 0x3, 0x5, 0xf6a6, 0x2, 0x80, 0x0, 0x401, 0x0, 0x81}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:35:46 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x810, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:35:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x85}}, './file0\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000140)=0xfffffffffffffc46) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x800, 0x3ff}}, './file0\x00'}) setuid(r2) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:35:46 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xce0d0000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1892.518814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1892.519365] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1892.533825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1892.534947] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1892.559040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1892.559820] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1892.583906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1892.584456] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:35:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:35:55 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:35:55 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 91) 11:35:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x5e8c}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=@acquire={0x130, 0x17, 0x2, 0x70bd2c, 0x25dfdbfd, {{@in6=@remote, 0x4d5, 0x32}, @in=@rand_addr=0x64010102, {@in=@remote, @in=@local, 0x4e21, 0x0, 0x4e23, 0x6, 0x2, 0x20, 0x60, 0x2, 0x0, r3}, {{@in=@empty, @in=@private=0xa010101, 0x4e20, 0x8001, 0x4e24, 0xfc01, 0xa, 0x20, 0x20, 0x2b, r6, r1}, {0x575b, 0x1, 0x3, 0x80000001, 0x5, 0x9a7c, 0x5, 0x8000}, {0x1, 0x4, 0x8, 0x7ff}, 0x2, 0x6e6bb5, 0x1, 0x0, 0x2}, 0x7, 0x401, 0x8, 0x70bd26}, [@proto={0x5, 0x19, 0x3c}]}, 0x130}, 0x1, 0x0, 0x0, 0x14}, 0x0) 11:35:55 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x900, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:35:55 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xcf0d0000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:35:55 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf6b, 0x1, 0x0, 0x0, 0x0, 0xe2e2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:35:55 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() capset(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x7}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f00000001c0), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/5, 0x5}, {&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f0000000280)=""/100, 0x64}], 0x5, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/136, 0x88}, {&(0x7f0000000300)=""/50, 0x32}, {&(0x7f0000000900)=""/33, 0x21}, {&(0x7f0000000940)=""/91, 0x5b}, {&(0x7f00000009c0)=""/74, 0x4a}, {&(0x7f0000000a40)=""/25, 0x19}, {&(0x7f0000000a80)=""/163, 0xa3}], 0x7, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000b1b960f6eb9d35930002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x68}}], 0x2, 0x40002000, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0xcb, 0x6, 0x7, 0x0, 0x1, 0x20000, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xfffffffffffffff9, 0x2}, 0x10, 0xfffffffffffffffa, 0x37, 0x8, 0x10001, 0x920e, 0x1, 0x0, 0x2}, r1, 0xb, r4, 0x9) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) write(r0, &(0x7f0000000080)="7131566158c6832c576ef6031b518c3dc2a0751b7fbfeed3aba5190248875254f68630faa0d821be7a6adf432e22560bbd1da656c8a7d2c16c0c5e90fb3d32aeeafaf1d38a49a4e23bbd1ec03180f4e6e9db8dfaf1c075ca110224b8d68e2699d1f6e03d56223566f5cb859f369624088b347c2dea1194a85f7eedb5e8be90cf18cf8111ff6e73b93349144c9835aedcb0bdfa51019778fe7575dc266f6b1ac3cf38abaa2a61c54410a2deaa605319efdd70a9", 0xb3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000cc0)={'veth0_to_bridge\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) lseek(r8, 0x5, 0x7) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r9, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r10, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r12 = syz_open_dev$vcsu(&(0x7f0000000dc0), 0x1ff, 0xc02) poll(&(0x7f0000000e00)=[{r10, 0x10e}, {r11, 0x250}, {r5, 0x2000}, {r12, 0x1}, {r6, 0x10}], 0x5, 0x1f) ioctl$TUNGETVNETHDRSZ(r9, 0x800454d7, &(0x7f0000000d00)) 11:35:55 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="10001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a96b6645f0ae31f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0xffff4659) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) [ 1901.756623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1901.757129] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1901.757955] buffer_io_error: 14 callbacks suppressed [ 1901.757963] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1901.759168] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1901.759853] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1901.801552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1901.802564] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1901.803953] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1901.805212] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1901.806447] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1901.819329] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1901.819813] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1901.820597] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1901.821216] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1901.821962] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1901.829083] FAULT_INJECTION: forcing a failure. [ 1901.829083] name failslab, interval 1, probability 0, space 0, times 0 [ 1901.830046] CPU: 1 UID: 0 PID: 12777 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1901.830063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1901.830070] Call Trace: [ 1901.830074] [ 1901.830079] dump_stack_lvl+0xfa/0x120 [ 1901.830106] should_fail_ex+0x4d7/0x5e0 [ 1901.830127] ? __kernfs_new_node+0xd3/0x930 [ 1901.830141] should_failslab+0xc2/0x120 [ 1901.830159] kmem_cache_alloc_noprof+0x80/0x710 [ 1901.830173] ? perf_trace_lock_acquire+0xc9/0x700 [ 1901.830195] ? __kernfs_new_node+0xd3/0x930 [ 1901.830206] __kernfs_new_node+0xd3/0x930 [ 1901.830222] ? __pfx___kernfs_new_node+0x10/0x10 [ 1901.830238] ? lock_acquire+0x15e/0x2d0 [ 1901.830254] ? kernfs_root+0x23/0x2a0 [ 1901.830266] ? find_held_lock+0x2b/0x80 [ 1901.830277] ? kernfs_root+0xee/0x2a0 [ 1901.830293] ? lock_release+0xc8/0x270 [ 1901.830306] ? lock_is_held_type+0x9e/0x120 [ 1901.830330] kernfs_new_node+0x13c/0x1e0 [ 1901.830348] __kernfs_create_file+0x55/0x360 [ 1901.830369] sysfs_add_file_mode_ns+0x21c/0x430 [ 1901.830383] ? __pfx_dev_attr_store+0x10/0x10 [ 1901.830406] internal_create_group+0x662/0xeb0 [ 1901.830427] ? __pfx_internal_create_group+0x10/0x10 [ 1901.830439] ? kernfs_add_one+0x150/0x830 [ 1901.830457] ? kernfs_create_link+0x1be/0x240 [ 1901.830478] internal_create_groups.part.0+0x90/0x140 [ 1901.830495] sysfs_create_groups+0x29/0x50 [ 1901.830509] device_add+0x67e/0x1830 [ 1901.830530] ? __pfx_device_add+0x10/0x10 [ 1901.830548] ? lockdep_init_map_type+0x4b/0x220 [ 1901.830565] ? __init_waitqueue_head+0xca/0x150 [ 1901.830586] netdev_register_kobject+0x1a9/0x3e0 [ 1901.830608] register_netdevice+0x1302/0x1d90 [ 1901.830629] ? __pfx_register_netdevice+0x10/0x10 [ 1901.830646] ? dev_addr_mod+0x294/0x340 [ 1901.830668] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1901.830687] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1901.830699] ? __fget_files+0x34/0x3b0 [ 1901.830716] ? find_held_lock+0x2b/0x80 [ 1901.830727] ? __fget_files+0x203/0x3b0 [ 1901.830742] ? lock_release+0xc8/0x270 [ 1901.830764] ? selinux_file_ioctl+0xb9/0x280 [ 1901.830781] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1901.830796] __x64_sys_ioctl+0x18f/0x210 [ 1901.830813] do_syscall_64+0xbf/0x420 [ 1901.830826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1901.830840] RIP: 0033:0x7f998c284b19 [ 1901.830850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1901.830862] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1901.830874] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1901.830883] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1901.830890] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1901.830898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1901.830905] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1901.830925] 11:35:55 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xd00d0000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1901.877146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1901.878131] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1901.879489] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:35:55 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = accept$unix(r0, &(0x7f0000000140), &(0x7f0000000080)=0x6e) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000040)=0xc) setuid(r2) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:35:55 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 92) [ 1901.921823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1901.922358] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1901.937739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1901.938237] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:35:55 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xa00, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:35:55 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x401}}, './file0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'wg0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:35:55 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xd10d0000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:35:55 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() capset(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x7}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f00000001c0), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/5, 0x5}, {&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f0000000280)=""/100, 0x64}], 0x5, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/136, 0x88}, {&(0x7f0000000300)=""/50, 0x32}, {&(0x7f0000000900)=""/33, 0x21}, {&(0x7f0000000940)=""/91, 0x5b}, {&(0x7f00000009c0)=""/74, 0x4a}, {&(0x7f0000000a40)=""/25, 0x19}, {&(0x7f0000000a80)=""/163, 0xa3}], 0x7, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000b1b960f6eb9d35930002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x68}}], 0x2, 0x40002000, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0xcb, 0x6, 0x7, 0x0, 0x1, 0x20000, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xfffffffffffffff9, 0x2}, 0x10, 0xfffffffffffffffa, 0x37, 0x8, 0x10001, 0x920e, 0x1, 0x0, 0x2}, r1, 0xb, r4, 0x9) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) write(r0, &(0x7f0000000080)="7131566158c6832c576ef6031b518c3dc2a0751b7fbfeed3aba5190248875254f68630faa0d821be7a6adf432e22560bbd1da656c8a7d2c16c0c5e90fb3d32aeeafaf1d38a49a4e23bbd1ec03180f4e6e9db8dfaf1c075ca110224b8d68e2699d1f6e03d56223566f5cb859f369624088b347c2dea1194a85f7eedb5e8be90cf18cf8111ff6e73b93349144c9835aedcb0bdfa51019778fe7575dc266f6b1ac3cf38abaa2a61c54410a2deaa605319efdd70a9", 0xb3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000cc0)={'veth0_to_bridge\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) lseek(r8, 0x5, 0x7) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r9, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r10, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r12 = syz_open_dev$vcsu(&(0x7f0000000dc0), 0x1ff, 0xc02) poll(&(0x7f0000000e00)=[{r10, 0x10e}, {r11, 0x250}, {r5, 0x2000}, {r12, 0x1}, {r6, 0x10}], 0x5, 0x1f) [ 1902.025256] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1902.025805] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1902.052849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1902.053364] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1902.075114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1902.075630] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1902.101056] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1902.102022] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:36:04 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xf4ffffff, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:36:04 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 93) 11:36:04 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:36:04 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:36:04 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a61834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae0094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 11:36:04 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() capset(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x7}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f00000001c0), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/5, 0x5}, {&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f0000000280)=""/100, 0x64}], 0x5, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/136, 0x88}, {&(0x7f0000000300)=""/50, 0x32}, {&(0x7f0000000900)=""/33, 0x21}, {&(0x7f0000000940)=""/91, 0x5b}, {&(0x7f00000009c0)=""/74, 0x4a}, {&(0x7f0000000a40)=""/25, 0x19}, {&(0x7f0000000a80)=""/163, 0xa3}], 0x7, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000b1b960f6eb9d35930002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x68}}], 0x2, 0x40002000, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0xcb, 0x6, 0x7, 0x0, 0x1, 0x20000, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xfffffffffffffff9, 0x2}, 0x10, 0xfffffffffffffffa, 0x37, 0x8, 0x10001, 0x920e, 0x1, 0x0, 0x2}, r1, 0xb, r4, 0x9) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) write(r0, &(0x7f0000000080)="7131566158c6832c576ef6031b518c3dc2a0751b7fbfeed3aba5190248875254f68630faa0d821be7a6adf432e22560bbd1da656c8a7d2c16c0c5e90fb3d32aeeafaf1d38a49a4e23bbd1ec03180f4e6e9db8dfaf1c075ca110224b8d68e2699d1f6e03d56223566f5cb859f369624088b347c2dea1194a85f7eedb5e8be90cf18cf8111ff6e73b93349144c9835aedcb0bdfa51019778fe7575dc266f6b1ac3cf38abaa2a61c54410a2deaa605319efdd70a9", 0xb3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000cc0)={'veth0_to_bridge\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) lseek(r6, 0x5, 0x7) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r7, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r8, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) syz_open_dev$vcsu(&(0x7f0000000dc0), 0x1ff, 0xc02) [ 1911.346503] FAULT_INJECTION: forcing a failure. [ 1911.346503] name failslab, interval 1, probability 0, space 0, times 0 [ 1911.347557] CPU: 1 UID: 0 PID: 12819 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1911.347573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1911.347580] Call Trace: [ 1911.347584] [ 1911.347589] dump_stack_lvl+0xfa/0x120 [ 1911.347617] should_fail_ex+0x4d7/0x5e0 [ 1911.347635] ? __kernfs_new_node+0xd3/0x930 [ 1911.347648] should_failslab+0xc2/0x120 11:36:04 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xc00, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:36:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r1, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0x3}, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) setuid(r3) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) sendfile(r4, 0xffffffffffffffff, &(0x7f00000002c0)=0x6, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'syzkaller0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="09aa38310680df003d3d5a1cddc3000000ff000000100000000000"]}) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000240)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000280)=0x28) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000340)=""/87, &(0x7f00000003c0)=0x57) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xf8, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0xf8}}, 0x80) capset(&(0x7f0000000040)={0x20071026, r2}, &(0x7f0000000140)={0x0, 0x1ff, 0xf941, 0xbe9, 0x80000001, 0x81}) [ 1911.347667] kmem_cache_alloc_noprof+0x80/0x710 [ 1911.347681] ? perf_trace_lock_acquire+0xc9/0x700 [ 1911.347703] ? __kernfs_new_node+0xd3/0x930 [ 1911.347715] __kernfs_new_node+0xd3/0x930 [ 1911.347731] ? __pfx___kernfs_new_node+0x10/0x10 [ 1911.347747] ? lock_acquire+0x15e/0x2d0 [ 1911.347763] ? kernfs_root+0x23/0x2a0 [ 1911.347775] ? find_held_lock+0x2b/0x80 [ 1911.347786] ? kernfs_root+0xee/0x2a0 [ 1911.347798] ? lock_release+0xc8/0x270 [ 1911.347811] ? lock_is_held_type+0x9e/0x120 [ 1911.347836] kernfs_new_node+0x13c/0x1e0 [ 1911.347854] __kernfs_create_file+0x55/0x360 [ 1911.347874] sysfs_add_file_mode_ns+0x21c/0x430 [ 1911.347888] ? __pfx_dev_attr_store+0x10/0x10 [ 1911.347912] internal_create_group+0x662/0xeb0 [ 1911.347932] ? __pfx_internal_create_group+0x10/0x10 [ 1911.347944] ? kernfs_add_one+0x150/0x830 [ 1911.347963] ? kernfs_create_link+0x1be/0x240 [ 1911.347983] internal_create_groups.part.0+0x90/0x140 [ 1911.348000] sysfs_create_groups+0x29/0x50 [ 1911.348013] device_add+0x67e/0x1830 [ 1911.348034] ? __pfx_device_add+0x10/0x10 [ 1911.348052] ? lockdep_init_map_type+0x4b/0x220 [ 1911.348069] ? __init_waitqueue_head+0xca/0x150 [ 1911.348089] netdev_register_kobject+0x1a9/0x3e0 [ 1911.348110] register_netdevice+0x1302/0x1d90 [ 1911.348131] ? __pfx_register_netdevice+0x10/0x10 [ 1911.348148] ? dev_addr_mod+0x294/0x340 [ 1911.348170] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1911.348190] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1911.348202] ? __fget_files+0x34/0x3b0 [ 1911.348218] ? find_held_lock+0x2b/0x80 [ 1911.348229] ? __fget_files+0x203/0x3b0 [ 1911.348244] ? lock_release+0xc8/0x270 [ 1911.348264] ? selinux_file_ioctl+0xb9/0x280 [ 1911.348281] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1911.348301] __x64_sys_ioctl+0x18f/0x210 [ 1911.348317] do_syscall_64+0xbf/0x420 [ 1911.348331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1911.348343] RIP: 0033:0x7f998c284b19 [ 1911.348353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1911.348366] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1911.348378] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1911.348386] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1911.348393] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1911.348400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1911.348407] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1911.348427] [ 1911.411890] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1911.412429] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1911.413124] buffer_io_error: 20 callbacks suppressed [ 1911.413131] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1911.414340] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1911.414979] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1911.424234] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1911.425234] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1911.426557] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1911.427854] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1911.429122] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:36:05 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 94) [ 1911.452996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1911.453959] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1911.455281] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1911.456576] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1911.457818] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1911.469758] FAULT_INJECTION: forcing a failure. [ 1911.469758] name failslab, interval 1, probability 0, space 0, times 0 [ 1911.470780] CPU: 1 UID: 0 PID: 12836 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1911.470796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1911.470803] Call Trace: [ 1911.470807] [ 1911.470812] dump_stack_lvl+0xfa/0x120 [ 1911.470840] should_fail_ex+0x4d7/0x5e0 [ 1911.470859] ? __kernfs_new_node+0xd3/0x930 [ 1911.470873] should_failslab+0xc2/0x120 [ 1911.470891] kmem_cache_alloc_noprof+0x80/0x710 [ 1911.470906] ? perf_trace_lock_acquire+0xc9/0x700 [ 1911.470929] ? __kernfs_new_node+0xd3/0x930 [ 1911.470941] __kernfs_new_node+0xd3/0x930 [ 1911.470956] ? __pfx___kernfs_new_node+0x10/0x10 [ 1911.470972] ? lock_acquire+0x15e/0x2d0 [ 1911.470987] ? kernfs_root+0x23/0x2a0 [ 1911.471000] ? find_held_lock+0x2b/0x80 [ 1911.471012] ? kernfs_root+0xee/0x2a0 [ 1911.471024] ? lock_release+0xc8/0x270 [ 1911.471038] ? lock_is_held_type+0x9e/0x120 [ 1911.471061] kernfs_new_node+0x13c/0x1e0 [ 1911.471079] __kernfs_create_file+0x55/0x360 [ 1911.471100] sysfs_add_file_mode_ns+0x21c/0x430 [ 1911.471115] ? __pfx_dev_attr_store+0x10/0x10 [ 1911.471139] internal_create_group+0x662/0xeb0 [ 1911.471160] ? __pfx_internal_create_group+0x10/0x10 [ 1911.471172] ? kernfs_add_one+0x150/0x830 [ 1911.471191] ? kernfs_create_link+0x1be/0x240 [ 1911.471211] internal_create_groups.part.0+0x90/0x140 [ 1911.471228] sysfs_create_groups+0x29/0x50 [ 1911.471241] device_add+0x67e/0x1830 [ 1911.471262] ? __pfx_device_add+0x10/0x10 [ 1911.471281] ? lockdep_init_map_type+0x4b/0x220 [ 1911.471301] ? __init_waitqueue_head+0xca/0x150 [ 1911.471322] netdev_register_kobject+0x1a9/0x3e0 [ 1911.471345] register_netdevice+0x1302/0x1d90 [ 1911.471366] ? __pfx_register_netdevice+0x10/0x10 [ 1911.471383] ? dev_addr_mod+0x294/0x340 [ 1911.471405] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1911.471426] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1911.471438] ? __fget_files+0x34/0x3b0 [ 1911.471456] ? find_held_lock+0x2b/0x80 [ 1911.471468] ? __fget_files+0x203/0x3b0 [ 1911.471494] ? lock_release+0xc8/0x270 [ 1911.471515] ? selinux_file_ioctl+0xb9/0x280 [ 1911.471532] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1911.471547] __x64_sys_ioctl+0x18f/0x210 [ 1911.471563] do_syscall_64+0xbf/0x420 [ 1911.471577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1911.471590] RIP: 0033:0x7f998c284b19 [ 1911.471600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1911.471612] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1911.471624] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1911.471633] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1911.471641] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1911.471649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1911.471656] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1911.471676] 11:36:05 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xe00, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:36:05 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() capset(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x7}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f00000001c0), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/5, 0x5}, {&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f0000000280)=""/100, 0x64}], 0x5, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/136, 0x88}, {&(0x7f0000000300)=""/50, 0x32}, {&(0x7f0000000900)=""/33, 0x21}, {&(0x7f0000000940)=""/91, 0x5b}, {&(0x7f00000009c0)=""/74, 0x4a}, {&(0x7f0000000a40)=""/25, 0x19}, {&(0x7f0000000a80)=""/163, 0xa3}], 0x7, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000b1b960f6eb9d35930002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x68}}], 0x2, 0x40002000, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0xcb, 0x6, 0x7, 0x0, 0x1, 0x20000, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xfffffffffffffff9, 0x2}, 0x10, 0xfffffffffffffffa, 0x37, 0x8, 0x10001, 0x920e, 0x1, 0x0, 0x2}, r1, 0xb, r4, 0x9) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) write(r0, &(0x7f0000000080)="7131566158c6832c576ef6031b518c3dc2a0751b7fbfeed3aba5190248875254f68630faa0d821be7a6adf432e22560bbd1da656c8a7d2c16c0c5e90fb3d32aeeafaf1d38a49a4e23bbd1ec03180f4e6e9db8dfaf1c075ca110224b8d68e2699d1f6e03d56223566f5cb859f369624088b347c2dea1194a85f7eedb5e8be90cf18cf8111ff6e73b93349144c9835aedcb0bdfa51019778fe7575dc266f6b1ac3cf38abaa2a61c54410a2deaa605319efdd70a9", 0xb3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000cc0)={'veth0_to_bridge\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) lseek(r6, 0x5, 0x7) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r7, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r8, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) 11:36:05 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xf5000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:36:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) getpeername(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000080)=0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r8, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) sendmsg$nl_xfrm(r8, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@getsadinfo={0x2a8, 0x23, 0x4, 0x70bd25, 0x25dfdbfc, 0x0, [@algo_crypt={0xcf, 0x2, {{'cts(cbc(cast6))\x00'}, 0x438, "5c9cd70117702a8653ecf45b85699e85109ecdc723de022344e7e0990bc161e99fdbfe9aba2c1fc8c05e565987ddcd6d9ad41937b75c6669ba55139dcded089507a91dceab6149ec0848ced69975946a3704ba4f4ea5a149c5cf6ea24247b13ea018b71029c7896554750a03bbebc1ea839fe5f4022c74a9aa4826629c1012f28bdd149096f4b0"}}, @user_kmaddress={0x2c, 0x13, {@in=@multicast2, @in=@loopback, 0x0, 0x2}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xfffffffe}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xfff00000}, @tfcpad={0x8, 0x16, 0x2}, @lastused={0xc, 0xf, 0x6}, @address_filter={0x28, 0x1a, {@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0xa, 0xdf, 0x6}}, @algo_auth_trunc={0xa0, 0x14, {{'wp256\x00'}, 0x2a0, 0x100, "239f8a780e235381152777e5e6e9f210d3e85d46d28c470bf9cc1b698470458f7e122c0e48c10e34562d0767c9fdd92a8543e48be15b0b1589bb8bf9e60e1664292cb3808259349d73a9ff1bc402ad0ea7096866"}}, @proto={0x5, 0x19, 0x6c}, @algo_auth={0xa3, 0x1, {{'hmac(cryptd(blake2s-224-generic))\x00'}, 0x2d8, "995bb55e56543e28aee011a02c08ac53ebd625c44f4efbbe4d31def9a5a75047bd4c67fed87a13585e2797d69ba0d5b1d2647a38bd3c4bd6d8aee1756f13910544b5026b25697e11f4bbb0731fec6be2205b681b6fa6804b61cf59"}}]}, 0x2a8}}, 0x8000) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7fffffff, 0x70}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xa92b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r9 = creat(&(0x7f0000000240)='./file0\x00', 0x4e) setsockopt$inet_opts(r9, 0x0, 0xd, &(0x7f0000000280)="cdceba20cb0019fe9372bba17aeedee5633a172a3223aef410b07b", 0x1b) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) [ 1911.601145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1911.602339] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1911.603738] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1911.624471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1911.624950] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1911.627927] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1911.628443] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:36:05 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 95) 11:36:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) [ 1911.661789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1911.663139] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1911.758726] FAULT_INJECTION: forcing a failure. [ 1911.758726] name failslab, interval 1, probability 0, space 0, times 0 [ 1911.761203] CPU: 0 UID: 0 PID: 12855 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1911.761235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1911.761249] Call Trace: [ 1911.761258] [ 1911.761269] dump_stack_lvl+0xfa/0x120 [ 1911.761326] should_fail_ex+0x4d7/0x5e0 [ 1911.761370] ? __kernfs_new_node+0xd3/0x930 [ 1911.761393] should_failslab+0xc2/0x120 [ 1911.761431] kmem_cache_alloc_noprof+0x80/0x710 [ 1911.761460] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1911.761514] ? __kernfs_new_node+0xd3/0x930 [ 1911.761538] __kernfs_new_node+0xd3/0x930 [ 1911.761582] ? __pfx___kernfs_new_node+0x10/0x10 [ 1911.761627] ? lock_acquire+0x15e/0x2d0 [ 1911.761659] ? kernfs_root+0x23/0x2a0 [ 1911.761686] ? find_held_lock+0x2b/0x80 [ 1911.761712] ? kernfs_root+0xee/0x2a0 [ 1911.761739] ? lock_release+0xc8/0x270 [ 1911.761766] ? lock_is_held_type+0x9e/0x120 [ 1911.761826] kernfs_new_node+0x13c/0x1e0 [ 1911.761877] __kernfs_create_file+0x55/0x360 [ 1911.761928] sysfs_add_file_mode_ns+0x21c/0x430 [ 1911.761966] ? __pfx_dev_attr_store+0x10/0x10 [ 1911.762017] internal_create_group+0x662/0xeb0 [ 1911.762079] ? __pfx_internal_create_group+0x10/0x10 [ 1911.762103] ? kernfs_add_one+0x150/0x830 [ 1911.762156] ? kernfs_create_link+0x1be/0x240 [ 1911.762206] internal_create_groups.part.0+0x90/0x140 [ 1911.762249] sysfs_create_groups+0x29/0x50 [ 1911.762280] device_add+0x67e/0x1830 [ 1911.762335] ? __pfx_device_add+0x10/0x10 [ 1911.762375] ? lockdep_init_map_type+0x4b/0x220 [ 1911.762414] ? __init_waitqueue_head+0xca/0x150 [ 1911.762471] netdev_register_kobject+0x1a9/0x3e0 [ 1911.762521] register_netdevice+0x1302/0x1d90 [ 1911.762575] ? __pfx_register_netdevice+0x10/0x10 [ 1911.762616] ? dev_addr_mod+0x294/0x340 [ 1911.762673] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1911.762725] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1911.762749] ? __fget_files+0x34/0x3b0 [ 1911.762782] ? find_held_lock+0x2b/0x80 [ 1911.762808] ? __fget_files+0x203/0x3b0 [ 1911.762840] ? lock_release+0xc8/0x270 [ 1911.762903] ? selinux_file_ioctl+0xb9/0x280 [ 1911.762942] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1911.762979] __x64_sys_ioctl+0x18f/0x210 [ 1911.763020] do_syscall_64+0xbf/0x420 [ 1911.763054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1911.763078] RIP: 0033:0x7f998c284b19 [ 1911.763099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1911.763122] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1911.763145] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1911.763160] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1911.763175] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1911.763188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1911.763202] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1911.763274] 11:36:14 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:36:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:36:14 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x1008, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:36:14 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xfbffffff, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:36:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setuid(r1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) mount$cgroup(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1000004, &(0x7f00000001c0)={[{@none}], [{@measure}, {@appraise}, {@context={'context', 0x3d, 'root'}}, {@seclabel}, {@fowner_lt={'fowner<', r4}}, {@fowner_gt={'fowner>', r4}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) fchownat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', r4, r2, 0x400) 11:36:14 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 96) 11:36:14 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b19fadf6bedcb0f243f0f8430fcb020a7013cf01f0be4ab146aa7a9636645f06e3094e59e50bfee32de576970308a41f1fcac2cf47288f8895dca6e8681f1f7d4666d703d62ec7f10b9ae1b2d54d0c16975e"], 0x51) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x1, 0x8001, 0x9}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r2 = signalfd4(r0, &(0x7f0000000000), 0x8, 0x80800) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000180)) r3 = accept$unix(r2, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0x4) 11:36:14 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() capset(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x7}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f00000001c0), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/5, 0x5}, {&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f0000000280)=""/100, 0x64}], 0x5, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/136, 0x88}, {&(0x7f0000000300)=""/50, 0x32}, {&(0x7f0000000900)=""/33, 0x21}, {&(0x7f0000000940)=""/91, 0x5b}, {&(0x7f00000009c0)=""/74, 0x4a}, {&(0x7f0000000a40)=""/25, 0x19}, {&(0x7f0000000a80)=""/163, 0xa3}], 0x7, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000b1b960f6eb9d35930002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x68}}], 0x2, 0x40002000, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0xcb, 0x6, 0x7, 0x0, 0x1, 0x20000, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xfffffffffffffff9, 0x2}, 0x10, 0xfffffffffffffffa, 0x37, 0x8, 0x10001, 0x920e, 0x1, 0x0, 0x2}, r1, 0xb, r4, 0x9) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) write(r0, &(0x7f0000000080)="7131566158c6832c576ef6031b518c3dc2a0751b7fbfeed3aba5190248875254f68630faa0d821be7a6adf432e22560bbd1da656c8a7d2c16c0c5e90fb3d32aeeafaf1d38a49a4e23bbd1ec03180f4e6e9db8dfaf1c075ca110224b8d68e2699d1f6e03d56223566f5cb859f369624088b347c2dea1194a85f7eedb5e8be90cf18cf8111ff6e73b93349144c9835aedcb0bdfa51019778fe7575dc266f6b1ac3cf38abaa2a61c54410a2deaa605319efdd70a9", 0xb3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000cc0)={'veth0_to_bridge\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) lseek(r6, 0x5, 0x7) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r7, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r8, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) [ 1920.551966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1920.553802] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1920.554606] buffer_io_error: 11 callbacks suppressed [ 1920.554614] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1920.555619] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1920.556196] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:36:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40040, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={&(0x7f0000000140), 0xc, &(0x7f0000000380)={&(0x7f0000000240)=@migrate={0x130, 0x21, 0x4, 0x70bd29, 0x25dfdbfd, {{@in=@loopback, @in=@broadcast, 0x4e20, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0xa0, 0x84, 0x0, r2}, 0x6e6bbc}, [@lastused={0xc, 0xf, 0x5}, @sec_ctx={0xd4, 0x8, {0xd0, 0x8, 0x1, 0x3f, 0xc8, "d3d8cec3bd932cd2d0d1767e1e887762cf199c5d3112fc6746993dfa1dfdfdf578108d711abe40f5d3239e4a1fc0b2a77fcbd4cc5107ccec3334aa735dfa0d1d0d85a1c127468178b64eed4b5851d628a404ca671dc387267e608be392bec03a1a617a1ccb4ceb0986abe7ad10d4b3b47e545427a79d4c56250684eac7ca5d34e6c43cff32bcd20ed9e6d7736455d8b92eee7eccffa91d080ff798e1fb8db2445d9e1ddb28c005951d19c287c826286103438a54082cb9e5e1b06b702c5ca6cc672065924bdfd324"}}]}, 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) [ 1920.592716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1920.593826] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1920.595342] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1920.596643] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1920.597849] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:36:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000140)={0x3, 'veth0_to_bond\x00', {0x2}, 0x5}) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:36:14 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x2000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1920.642630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1920.643119] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1920.643776] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1920.644402] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1920.645001] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1920.674177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1920.675148] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1920.676462] Buffer I/O error on dev sr0, logical block 0, lost async page write 11:36:14 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) 11:36:14 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() capset(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x7}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f00000001c0), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/5, 0x5}, {&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f0000000280)=""/100, 0x64}], 0x5, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/136, 0x88}, {&(0x7f0000000300)=""/50, 0x32}, {&(0x7f0000000900)=""/33, 0x21}, {&(0x7f0000000940)=""/91, 0x5b}, {&(0x7f00000009c0)=""/74, 0x4a}, {&(0x7f0000000a40)=""/25, 0x19}, {&(0x7f0000000a80)=""/163, 0xa3}], 0x7, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000b1b960f6eb9d35930002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x68}}], 0x2, 0x40002000, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0xcb, 0x6, 0x7, 0x0, 0x1, 0x20000, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xfffffffffffffff9, 0x2}, 0x10, 0xfffffffffffffffa, 0x37, 0x8, 0x10001, 0x920e, 0x1, 0x0, 0x2}, r1, 0xb, r4, 0x9) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) write(r0, &(0x7f0000000080)="7131566158c6832c576ef6031b518c3dc2a0751b7fbfeed3aba5190248875254f68630faa0d821be7a6adf432e22560bbd1da656c8a7d2c16c0c5e90fb3d32aeeafaf1d38a49a4e23bbd1ec03180f4e6e9db8dfaf1c075ca110224b8d68e2699d1f6e03d56223566f5cb859f369624088b347c2dea1194a85f7eedb5e8be90cf18cf8111ff6e73b93349144c9835aedcb0bdfa51019778fe7575dc266f6b1ac3cf38abaa2a61c54410a2deaa605319efdd70a9", 0xb3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000cc0)={'veth0_to_bridge\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) lseek(r6, 0x5, 0x7) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r7, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r8, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000d80)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) [ 1920.760661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1920.761612] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:36:14 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xfeff1f00, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:36:14 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 97) [ 1920.802106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1920.803217] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:36:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000080)) [ 1920.907678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1920.909289] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1920.962053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1920.963430] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:36:24 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x3f00, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:36:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:36:24 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0x538c, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000140)) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}}], 0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 11:36:24 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() capset(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x7}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f00000001c0), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/5, 0x5}, {&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f0000000280)=""/100, 0x64}], 0x5, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/136, 0x88}, {&(0x7f0000000300)=""/50, 0x32}, {&(0x7f0000000900)=""/33, 0x21}, {&(0x7f0000000940)=""/91, 0x5b}, {&(0x7f00000009c0)=""/74, 0x4a}, {&(0x7f0000000a40)=""/25, 0x19}, {&(0x7f0000000a80)=""/163, 0xa3}], 0x7, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000b1b960f6eb9d35930002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x68}}], 0x2, 0x40002000, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0xcb, 0x6, 0x7, 0x0, 0x1, 0x20000, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xfffffffffffffff9, 0x2}, 0x10, 0xfffffffffffffffa, 0x37, 0x8, 0x10001, 0x920e, 0x1, 0x0, 0x2}, r1, 0xb, r4, 0x9) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) write(r0, &(0x7f0000000080)="7131566158c6832c576ef6031b518c3dc2a0751b7fbfeed3aba5190248875254f68630faa0d821be7a6adf432e22560bbd1da656c8a7d2c16c0c5e90fb3d32aeeafaf1d38a49a4e23bbd1ec03180f4e6e9db8dfaf1c075ca110224b8d68e2699d1f6e03d56223566f5cb859f369624088b347c2dea1194a85f7eedb5e8be90cf18cf8111ff6e73b93349144c9835aedcb0bdfa51019778fe7575dc266f6b1ac3cf38abaa2a61c54410a2deaa605319efdd70a9", 0xb3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000cc0)={'veth0_to_bridge\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) lseek(r5, 0x5, 0x7) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r6, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r7, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) syz_open_dev$vcsu(&(0x7f0000000dc0), 0x1ff, 0xc02) 11:36:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "78a0073c367a0cc5"}) r3 = mq_open(&(0x7f0000000140)='^[*@\x8c&\x98)\x00', 0x80, 0x104, &(0x7f0000000180)={0x987b, 0x7, 0x2, 0x8}) copy_file_range(r2, &(0x7f0000000080)=0x7, r3, &(0x7f00000001c0)=0xffffffffefee9f00, 0x80000000, 0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) 11:36:24 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 98) 11:36:24 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xff050000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:36:24 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0202000000b50f52bd4ab146aa7a96a32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c47f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'xfrm0\x00'}) [ 1930.574214] [ 1930.574426] ================================================ [ 1930.574880] WARNING: lock held when returning to user space! [ 1930.575326] 6.18.0-rc7-next-20251128 #1 Not tainted [ 1930.575731] ------------------------------------------------ 11:36:24 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x8, 0x0, 0x3f, 0x9, 0x0, 0x3, 0x39290, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x2000, 0x0, 0x4, 0x4, 0x2, 0xffffffff, 0xfff, 0x0, 0x7fffffff, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) [ 1930.576186] syz-executor.4/12914 is leaving the kernel with locks still held! [ 1930.576910] 1 lock held by syz-executor.4/12914: [ 1930.577290] #0: ffff88800b2e1c88 (&sb->s_type->i_mutex_key#23/1){+.+.}-{4:4}, at: start_creating_noperm+0x84/0xd0 [ 1930.612051] FAULT_INJECTION: forcing a failure. [ 1930.612051] name failslab, interval 1, probability 0, space 0, times 0 [ 1930.613095] CPU: 0 UID: 0 PID: 12926 Comm: syz-executor.6 Not tainted 6.18.0-rc7-next-20251128 #1 PREEMPT(voluntary) [ 1930.613111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1930.613119] Call Trace: [ 1930.613124] [ 1930.613129] dump_stack_lvl+0xfa/0x120 [ 1930.613160] should_fail_ex+0x4d7/0x5e0 [ 1930.613183] ? __kernfs_new_node+0xd3/0x930 [ 1930.613196] should_failslab+0xc2/0x120 [ 1930.613216] kmem_cache_alloc_noprof+0x80/0x710 [ 1930.613231] ? perf_trace_run_bpf_submit+0xef/0x180 [ 1930.613257] ? __kernfs_new_node+0xd3/0x930 [ 1930.613269] __kernfs_new_node+0xd3/0x930 [ 1930.613281] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1930.613303] ? __pfx_perf_trace_lock+0x10/0x10 [ 1930.613325] ? __pfx___kernfs_new_node+0x10/0x10 [ 1930.613349] ? lock_acquire+0xc5/0x2d0 [ 1930.613366] ? kernfs_root+0xee/0x2a0 [ 1930.613382] ? lock_release+0x1c7/0x270 [ 1930.613411] kernfs_new_node+0x13c/0x1e0 [ 1930.613435] __kernfs_create_file+0x55/0x360 [ 1930.613459] sysfs_add_file_mode_ns+0x21c/0x430 [ 1930.613477] ? __pfx_dev_attr_store+0x10/0x10 [ 1930.613505] internal_create_group+0x662/0xeb0 [ 1930.613533] ? __pfx_internal_create_group+0x10/0x10 [ 1930.613546] ? kernfs_add_one+0x150/0x830 [ 1930.613570] ? kernfs_create_link+0x1be/0x240 [ 1930.613595] internal_create_groups.part.0+0x90/0x140 [ 1930.613615] sysfs_create_groups+0x29/0x50 [ 1930.613631] device_add+0x67e/0x1830 [ 1930.613655] ? __pfx_device_add+0x10/0x10 [ 1930.613676] ? lockdep_init_map_type+0x4b/0x220 [ 1930.613694] ? __init_waitqueue_head+0xca/0x150 [ 1930.613721] netdev_register_kobject+0x1a9/0x3e0 [ 1930.613746] register_netdevice+0x1302/0x1d90 [ 1930.613772] ? __pfx_register_netdevice+0x10/0x10 [ 1930.613791] ? dev_addr_mod+0x294/0x340 [ 1930.613818] __tun_chr_ioctl+0x1f9d/0x43d0 [ 1930.613843] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1930.613856] ? lock_acquire+0xc5/0x2d0 [ 1930.613872] ? __fget_files+0x16b/0x3b0 [ 1930.613892] ? lock_release+0x1c7/0x270 [ 1930.613922] ? selinux_file_ioctl+0xb9/0x280 [ 1930.613942] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1930.613959] __x64_sys_ioctl+0x18f/0x210 [ 1930.613979] do_syscall_64+0xbf/0x420 [ 1930.613996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1930.614010] RIP: 0033:0x7f998c284b19 [ 1930.614020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1930.614032] RSP: 002b:00007f99897fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1930.614044] RAX: ffffffffffffffda RBX: 00007f998c397f60 RCX: 00007f998c284b19 [ 1930.614053] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 1930.614060] RBP: 00007f99897fa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1930.614068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1930.614075] R13: 00007ffe63dc2a6f R14: 00007f99897fa300 R15: 0000000000022000 [ 1930.614107] [ 1930.661981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1930.663093] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1930.664619] buffer_io_error: 14 callbacks suppressed [ 1930.664634] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1930.666705] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1930.667939] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1930.686195] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1930.686695] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1930.687382] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1930.688010] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1930.688629] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:36:24 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) (fail_nth: 99) 11:36:24 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() capset(&(0x7f00000000c0)={0x20071026, r1}, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x7}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f00000001c0), 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/5, 0x5}, {&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f0000000280)=""/100, 0x64}], 0x5, &(0x7f0000000740)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/136, 0x88}, {&(0x7f0000000300)=""/50, 0x32}, {&(0x7f0000000900)=""/33, 0x21}, {&(0x7f0000000940)=""/91, 0x5b}, {&(0x7f00000009c0)=""/74, 0x4a}, {&(0x7f0000000a40)=""/25, 0x19}, {&(0x7f0000000a80)=""/163, 0xa3}], 0x7, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c0000b1b960f6eb9d35930002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x68}}], 0x2, 0x40002000, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0xcb, 0x6, 0x7, 0x0, 0x1, 0x20000, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xfffffffffffffff9, 0x2}, 0x10, 0xfffffffffffffffa, 0x37, 0x8, 0x10001, 0x920e, 0x1, 0x0, 0x2}, r1, 0xb, r4, 0x9) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) write(r0, &(0x7f0000000080)="7131566158c6832c576ef6031b518c3dc2a0751b7fbfeed3aba5190248875254f68630faa0d821be7a6adf432e22560bbd1da656c8a7d2c16c0c5e90fb3d32aeeafaf1d38a49a4e23bbd1ec03180f4e6e9db8dfaf1c075ca110224b8d68e2699d1f6e03d56223566f5cb859f369624088b347c2dea1194a85f7eedb5e8be90cf18cf8111ff6e73b93349144c9835aedcb0bdfa51019778fe7575dc266f6b1ac3cf38abaa2a61c54410a2deaa605319efdd70a9", 0xb3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000cc0)={'veth0_to_bridge\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000d40)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) lseek(r5, 0x5, 0x7) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='loginuid\x00') write$sndseq(r6, &(0x7f0000000300)=[{0x36, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000dc0), 0x1ff, 0xc02) [ 1930.744502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1930.745682] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1930.747240] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1930.748492] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1930.749738] Buffer I/O error on dev sr0, logical block 2, lost async page write 11:36:24 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0x4000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) 11:36:24 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000280)={0x6, 0xfffdffff, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="fa", 0x600}]) [ 1930.803610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1930.804103] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1930.804885] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1930.818569] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1930.819039] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 11:36:24 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6fa34b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7d4666d7035828c45f0bca329e"], 0x51) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef", 0x3a, 0x400}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000013a00)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7, 0x3, 0x62, 0x1, 0x0, 0x480f, 0x1200, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x646, 0x2, @perf_config_ext={0x1000}, 0x12120, 0x1, 0x200, 0x5, 0x1, 0xffffffff, 0x2, 0x0, 0x80000001, 0x0, 0x8}, r1, 0x5, r0, 0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) [ 1930.860876] loop5: detected capacity change from 0 to 16 [ 1930.863904] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1930.864822] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1930.867644] EXT4-fs (loop5): bad geometry: block count 64 exceeds size of device (2 blocks) [ 1930.899083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1930.900085] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 3 prio class 2 [ 1930.901781] loop5: detected capacity change from 0 to 16 VM DIAGNOSIS: 11:36:24 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffffff86701ab4 RCX=ffffffff815d92db RDX=0000000000000000 RSI=ffffffff86a6a7b0 RDI=ffffffff86701ab4 RBP=ffffffff86701ab8 RSP=ffff88806ce089a8 R8 =ffffffff86a6a7b0 R9 =0000000000000000 R10=000000000003ccef R11=0000000000011b98 R12=ffffffff86701ab4 R13=ffffffff86701ab4 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff8135d9ef RFL=00000256 [---ZAP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555da17400 00000000 00000000 GS =0000 ffff8880e5368000 00000000 00000000 LDT=0000 fffffe0b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd8f0fad540 CR3=0000000049397000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=1ffff1100d9e11af RCX=0000000000000000 RDX=0000000000000028 RSI=ffff888017589bc0 RDI=ffff88806cf37740 RBP=ffff88801758a530 RSP=ffff88806cf08d48 R8 =ffff88806cf38200 R9 =ffff888017589bd8 R10=0000000000000000 R11=ffff888017589c28 R12=ffff88806cf37740 R13=ffff888017589bc0 R14=ffff88801758a52f R15=0000000000000000 RIP=ffffffff8147e6e4 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055556dd71400 00000000 00000000 GS =0000 ffff8880e5468000 00000000 00000000 LDT=0000 fffffe1900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555582566708 CR3=0000000017708000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000