{0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r1, 0xffffffffffffffff, 0x0) 09:53:02 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:53:02 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5829f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:53:02 executing program 1: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="01d215d85a7310a97ade3a10", @ANYRES32=0xffffffffffffffff, @ANYBLOB="02000000000000002e2f66696c653000"]) r1 = syz_io_uring_setup(0x4041, &(0x7f0000000100)={0x0, 0x2000000, 0x0, 0x0, 0x34d, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r1, 0xffffffffffffffff, 0x0) 09:53:02 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) (fail_nth: 2) 09:53:02 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:53:02 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002cbd7000fbdbdf252100000009001f0070687933000000000a0001007770616e30000000050020000000000009001f0070687933000000009174870a0001007770616e310000000a0001007770616e300000000c0005000201aaaaaaaaaaaa"], 0x64}, 0x1, 0x0, 0x0, 0x4805}, 0x40000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xed7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(0xffffffffffffffff) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x2811, r1, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r1) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="020029bd7000ffdbdf250d0000001c000980080002000008000008000100ff07000008000200020000001c0009800800020017d50000080001000100000008000200090000003c00038008000200000400000800030085dc06010800030003000000080001000437d9000100080002000800000008000200d30500000800030002007ae55d74e3b9e2f4272a0c090874d8"], 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x1000) r3 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmctl$IPC_RMID(r3, 0x0) shmctl$SHM_LOCK(r3, 0xb) shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x7000) r4 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fe7000/0x14000)=nil) shmat(r4, &(0x7f0000ff0000/0x3000)=nil, 0x4000) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000000)={0x10000000000001}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) [ 352.500057] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 352.500057] program syz-executor.0 not setting count and/or reply_len properly [ 352.515757] FAULT_INJECTION: forcing a failure. [ 352.515757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.517538] CPU: 0 PID: 7423 Comm: syz-executor.5 Not tainted 6.4.0-rc1-next-20230510 #1 [ 352.518577] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 352.519593] Call Trace: [ 352.519927] [ 352.520225] dump_stack_lvl+0xc1/0xf0 [ 352.520748] should_fail_ex+0x4b4/0x5b0 [ 352.521277] _copy_to_user+0x30/0xc0 [ 352.521779] simple_read_from_buffer+0xd0/0x170 [ 352.522380] proc_fail_nth_read+0x19c/0x230 [ 352.522931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 352.523540] ? security_file_permission+0xb5/0xe0 [ 352.524164] vfs_read+0x1e4/0x8b0 [ 352.524653] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 352.525282] ? __pfx_vfs_read+0x10/0x10 [ 352.525816] ? __fget_files+0x270/0x480 [ 352.526378] ksys_read+0x12b/0x260 [ 352.526817] ? __pfx_ksys_read+0x10/0x10 [ 352.527354] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 352.528050] do_syscall_64+0x3f/0x90 [ 352.528567] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 352.529250] RIP: 0033:0x7fb7cc7be69c [ 352.529745] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 352.532021] RSP: 002b:00007fb7c9d81170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 352.532977] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fb7cc7be69c [ 352.533882] RDX: 000000000000000f RSI: 00007fb7c9d811e0 RDI: 0000000000000003 [ 352.534794] RBP: 00007fb7c9d811d0 R08: 0000000000000000 R09: 0000000000000000 [ 352.535699] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 352.536611] R13: 00007ffe1b2090ef R14: 00007fb7c9d81300 R15: 0000000000022000 [ 352.537521] 09:53:02 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:53:02 executing program 6: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="01d215d85a7310a97ade3a10", @ANYRES32=0xffffffffffffffff, @ANYBLOB="02000000000000002e2f66696c653000"]) r1 = syz_io_uring_setup(0x4041, &(0x7f0000000100)={0x0, 0x2000000, 0x0, 0x0, 0x34d, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r1, 0xffffffffffffffff, 0x0) 09:53:02 executing program 1: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="01d215d85a7310a97ade3a10", @ANYRES32=0xffffffffffffffff, @ANYBLOB="02000000000000002e2f66696c653000"]) r1 = syz_io_uring_setup(0x4041, &(0x7f0000000100)={0x0, 0x2000000, 0x0, 0x0, 0x34d, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r1, 0xffffffffffffffff, 0x0) [ 352.672737] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 352.672737] program syz-executor.0 not setting count and/or reply_len properly 09:53:02 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 09:53:02 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x41, 0x40, 0x3, 0x0, 0xfb0, 0x80000, 0x12, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xa93, 0x0, @perf_config_ext={0x5, 0x8}, 0x2529, 0x4, 0x40, 0x8, 0x100000001, 0x5, 0xff83, 0x0, 0x1, 0x0, 0x14}, 0x0, 0xe, r0, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000340)) 09:53:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:53:02 executing program 1: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="01d215d85a7310a97ade3a10", @ANYRES32=0xffffffffffffffff, @ANYBLOB="02000000000000002e2f66696c653000"]) r1 = syz_io_uring_setup(0x4041, &(0x7f0000000100)={0x0, 0x2000000, 0x0, 0x0, 0x34d, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r1, 0xffffffffffffffff, 0x0) 09:53:02 executing program 6: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="01d215d85a7310a97ade3a10", @ANYRES32=0xffffffffffffffff, @ANYBLOB="02000000000000002e2f66696c653000"]) r1 = syz_io_uring_setup(0x4041, &(0x7f0000000100)={0x0, 0x2000000, 0x0, 0x0, 0x34d, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r1, 0xffffffffffffffff, 0x0) [ 352.849094] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 352.849094] program syz-executor.0 not setting count and/or reply_len properly 09:53:02 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x2, r0, &(0x7f0000001440)="ce", 0x1) 09:53:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:53:15 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x2, r0, &(0x7f0000001440)="ce", 0x1) 09:53:15 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5829f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:53:15 executing program 1: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="01d215d85a7310a97ade3a10", @ANYRES32=0xffffffffffffffff, @ANYBLOB="02000000000000002e2f66696c653000"]) r1 = syz_io_uring_setup(0x4041, &(0x7f0000000100)={0x0, 0x2000000, 0x0, 0x0, 0x34d, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r1, 0xffffffffffffffff, 0x0) 09:53:15 executing program 6: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="01d215d85a7310a97ade3a10", @ANYRES32, @ANYBLOB="02000000000000002e2f66696c653000"]) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:53:15 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x3, r0, &(0x7f0000001440)="ce", 0x1) 09:53:15 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x41, 0x40, 0x3, 0x0, 0xfb0, 0x80000, 0x12, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xa93, 0x0, @perf_config_ext={0x5, 0x8}, 0x2529, 0x4, 0x40, 0x8, 0x100000001, 0x5, 0xff83, 0x0, 0x1, 0x0, 0x14}, 0x0, 0xe, r0, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) socket$nl_audit(0x10, 0x3, 0x9) sendto$packet(r3, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000340)) 09:53:15 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 365.697554] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 365.697554] program syz-executor.0 not setting count and/or reply_len properly 09:53:15 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0201ef85e92a332b4651eebcf9d02c94"]) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1f, 0xff, 0x34, 0x9, 0x0, 0x1, 0x4a051, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x5, 0x7}, 0x8440, 0x623e, 0x1, 0x4, 0x8, 0x7ff, 0xfff7, 0x0, 0x5, 0x0, 0x9}, r1, 0xa, r2, 0x1) io_setup(0x6, &(0x7f0000000040)=0x0) io_destroy(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105241, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x2800, 0x109) io_submit(r3, 0x4000, &(0x7f00000004c0)=[&(0x7f0000000200)={0xeffdffff, 0x8008, 0x10, 0x1, 0x0, r4, &(0x7f00000001c0)="10", 0x1}]) 09:53:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x30, 0x0, &(0x7f0000000180)=0x600) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x3fffffb, 0x5, 0x3a59dc1b}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000140)={{0x0, 0x80000001, 0x3, 0x6, 0x0, 0x20, 0x7fffffff, 0x304, 0x0, 0x1f, 0x7f, 0xffffffff, 0xfffffffffffffff7, 0x1000, 0x9}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001400)=ANY=[@ANYRES64=r2, @ANYBLOB="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"]) 09:53:15 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5829f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:53:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:53:15 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x4, r0, &(0x7f0000001440)="ce", 0x1) 09:53:15 executing program 6: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="01d215d85a7310a97ade3a10", @ANYRES32, @ANYBLOB="02000000000000002e2f66696c653000"]) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:53:15 executing program 1: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="01d215d85a7310a97ade3a10", @ANYRES32=0xffffffffffffffff, @ANYBLOB="02000000000000002e2f66696c653000"]) r1 = syz_io_uring_setup(0x4041, &(0x7f0000000100)={0x0, 0x2000000, 0x0, 0x0, 0x34d, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r1, 0xffffffffffffffff, 0x0) 09:53:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5829f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:53:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000004fd132612588506db8437b06ad754da99cfd564db0e9cd39ad99b2a36fd617452de8c80900000000000000492f225c7114c015343fa29448b3fde4145a40dc", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800010000000000"], 0x1c}}, 0x0) 09:53:15 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5829f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 365.877182] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 365.877182] program syz-executor.0 not setting count and/or reply_len properly 09:53:15 executing program 6: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="01d215d85a7310a97ade3a10", @ANYRES32, @ANYBLOB="02000000000000002e2f66696c653000"]) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:53:15 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x41, 0x40, 0x3, 0x0, 0xfb0, 0x80000, 0x12, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xa93, 0x0, @perf_config_ext={0x5, 0x8}, 0x2529, 0x4, 0x40, 0x8, 0x100000001, 0x5, 0xff83, 0x0, 0x1, 0x0, 0x14}, 0x0, 0xe, r0, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) socket$nl_audit(0x10, 0x3, 0x9) sendto$packet(r3, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000340)) 09:53:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:53:15 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x41, 0x40, 0x3, 0x0, 0xfb0, 0x80000, 0x12, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xa93, 0x0, @perf_config_ext={0x5, 0x8}, 0x2529, 0x4, 0x40, 0x8, 0x100000001, 0x5, 0xff83, 0x0, 0x1, 0x0, 0x14}, 0x0, 0xe, r0, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) socket$nl_audit(0x10, 0x3, 0x9) sendto$packet(r3, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000340)) 09:53:15 executing program 4: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000140)={0x0, 0x114, 0x1, @tid=r1}, &(0x7f0000000440)) r2 = mq_open(&(0x7f0000000180)='(*\x00', 0x80, 0x40, &(0x7f0000000480)={0x8, 0x100000000, 0x7c0000000000000, 0x8}) mq_notify(r2, &(0x7f0000000680)={0x0, 0x7, 0x4, @thr={&(0x7f00000004c0)="a99b5e9934d947aaa954041e29c3af398aedee570a121b2fd0063bda0eecbce47af185bfd8bbea5563db5ddb7d3be794291bbc8a41b28d125fd58881bce6413a99a098d1300f04fd336d15ed967592c24b3c85f3b30bdabf8e9cf5be213f4f671fbed9b60b45641ef31b210acaf25c8fbce6ed9423087628794bda004cfa802c6b695ac80f1c58a28c4f3a163b99d007926ad17021e27d504e42ff98f311f95de5bce926", &(0x7f0000000600)="6a368eeeaa0de459528515f692c2cb94a505ddf3e6b84e913421fbed77a32bee907c5a615f8d38f25c700ce90e5063a844a9717b917a6637c63c0f9bbd11807473b5cac16d02ecf92b25bb79e524ee3d98cde5ea797329176c7d6d743a3ea4c3618173a9e0be52025464bffa40cfc6012d05ced45c7e"}}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)=0x0) timer_getoverrun(r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}, 0x104a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2f) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000c00)) r4 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r4, r5, &(0x7f0000000b40)=0xffffffffffffffe0, 0x100) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r5, &(0x7f0000000000)="3d723d21de61", 0x6, 0x0, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$inet(r5, &(0x7f0000000b00)={&(0x7f00000006c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000700)="b30586cfb4ca5b083f10c96f8c37105c475f737a099b9ab8034dc458", 0x1c}, {&(0x7f0000000740)="c52404effa6016fbd3e32bbf76f83a93b4b0f170e3036d33aae1b79f36fec3cc6f6547", 0x23}, {&(0x7f0000000780)="0a2ce637502e4830be927d8515d9ab7cbed0a2f39408f855d3920c608c5803b258b01e6e2169f83b0cc36e3cdd93559220c5668f236f3abf998be022556eb9845f1574adaf72d84023da20395a7532b8fade9af16a6090f81690fe2eb462c89da66765f930db2b461e627ec6ae18c376253963cf05581b5dbce14b84bd9ef170051df241f924682762c5b335bc4eb5f3eeed9589d8ea7154ae1e92f7c457ebdb7c221de272f1d66a12c88e4d32c193082069f6f2", 0xb4}, {&(0x7f0000000840)="0418c78d7d3a62161b4b559ea26b68d1c24d71c82f13da0f5170b09d42", 0x1d}, {&(0x7f0000000880)="41bd4715597acc88689f102d7a4f89494b6c59fd84b3a0e5b981554a3a02ea982d0380f8d2a30c91edcd6090399d9e8cca22cc4397de9224750005ad12a2ba88103fdbeb20126513c2b857a0aa86ffda6877b50f5dafce589ba569a97b53dd521f", 0x61}, {&(0x7f0000000900)="d8736b81ff9f041fb8153965cd81652086283361a03caea6a9cfab604fe34ec9b0b5b4d7924632d0f661764a9f48793942d726de5a170c9f2c36", 0x3a}, {&(0x7f0000000940)="579fd7f17b79d9307912338ef4c1d20082ab1ee451a2896ae32f345ebf6698a366068914b62ff895b240f0eaed97e4b1247420bffc932c475a2d8bb3a66746b844a1f94e172dedbc32ed0a72bd0078a4d89d3c34090d1fbc7d07b5107f4be7ad77a27dcef713917a5f55dfec55942aa78b0963183f371fe7d648f83262619100be8abbb8dce0b262f28f6482d34729a4d02b577e8ce3dbaba5dca3dc4fd5aa4b053f7f481dae46eed00844bddc1146c0219b224b948c6eaf5d705bed6edfb7288b3cda144ca92f6f97794cd43bcad68db2ec2b2b48566eee3249e6d7584c382999f1cb67d09ce76c", 0xe8}], 0x7, &(0x7f0000000ac0)=[@ip_ttl={{0x14}}], 0x18}, 0x48040) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="070100ff7002000034000000ffffffff1f00000000000000000544d3ae16a17b2670bc3703ae7c4805e0fe5bdac5425976f087f9c5bfaee22b79f29207868a93b2d31edae2e3874bb0d9876f400867ae5ffac08f83a434aa3bc7a41ab11ce1b02c35d2f37db85227cedaadb41baeea6bab947e5be923fdf40682a57c57ad9ccb6a9a38259179503762d65e4ccaa069ac2d912e1d88708c9cd72bcf005ddf94c85fc6ffc7ad8a9eb5a6d4dcd98a610bf9991f07210c4abe29d7ea1f92a562bb2921dd6987e857ebef5d0000000000000000"], 0xd1) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 366.036577] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 366.036577] program syz-executor.0 not setting count and/or reply_len properly 09:53:26 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x5, r0, &(0x7f0000001440)="ce", 0x1) 09:53:26 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x41, 0x40, 0x3, 0x0, 0xfb0, 0x80000, 0x12, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xa93, 0x0, @perf_config_ext={0x5, 0x8}, 0x2529, 0x4, 0x40, 0x8, 0x100000001, 0x5, 0xff83, 0x0, 0x1, 0x0, 0x14}, 0x0, 0xe, r0, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) socket$nl_audit(0x10, 0x3, 0x9) sendto$packet(r3, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000340)) 09:53:26 executing program 4: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000140)={0x0, 0x114, 0x1, @tid=r1}, &(0x7f0000000440)) r2 = mq_open(&(0x7f0000000180)='(*\x00', 0x80, 0x40, &(0x7f0000000480)={0x8, 0x100000000, 0x7c0000000000000, 0x8}) mq_notify(r2, &(0x7f0000000680)={0x0, 0x7, 0x4, @thr={&(0x7f00000004c0)="a99b5e9934d947aaa954041e29c3af398aedee570a121b2fd0063bda0eecbce47af185bfd8bbea5563db5ddb7d3be794291bbc8a41b28d125fd58881bce6413a99a098d1300f04fd336d15ed967592c24b3c85f3b30bdabf8e9cf5be213f4f671fbed9b60b45641ef31b210acaf25c8fbce6ed9423087628794bda004cfa802c6b695ac80f1c58a28c4f3a163b99d007926ad17021e27d504e42ff98f311f95de5bce926", &(0x7f0000000600)="6a368eeeaa0de459528515f692c2cb94a505ddf3e6b84e913421fbed77a32bee907c5a615f8d38f25c700ce90e5063a844a9717b917a6637c63c0f9bbd11807473b5cac16d02ecf92b25bb79e524ee3d98cde5ea797329176c7d6d743a3ea4c3618173a9e0be52025464bffa40cfc6012d05ced45c7e"}}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)=0x0) timer_getoverrun(r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}, 0x104a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2f) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000c00)) r4 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r4, r5, &(0x7f0000000b40)=0xffffffffffffffe0, 0x100) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r5, &(0x7f0000000000)="3d723d21de61", 0x6, 0x0, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$inet(r5, &(0x7f0000000b00)={&(0x7f00000006c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000700)="b30586cfb4ca5b083f10c96f8c37105c475f737a099b9ab8034dc458", 0x1c}, {&(0x7f0000000740)="c52404effa6016fbd3e32bbf76f83a93b4b0f170e3036d33aae1b79f36fec3cc6f6547", 0x23}, {&(0x7f0000000780)="0a2ce637502e4830be927d8515d9ab7cbed0a2f39408f855d3920c608c5803b258b01e6e2169f83b0cc36e3cdd93559220c5668f236f3abf998be022556eb9845f1574adaf72d84023da20395a7532b8fade9af16a6090f81690fe2eb462c89da66765f930db2b461e627ec6ae18c376253963cf05581b5dbce14b84bd9ef170051df241f924682762c5b335bc4eb5f3eeed9589d8ea7154ae1e92f7c457ebdb7c221de272f1d66a12c88e4d32c193082069f6f2", 0xb4}, {&(0x7f0000000840)="0418c78d7d3a62161b4b559ea26b68d1c24d71c82f13da0f5170b09d42", 0x1d}, {&(0x7f0000000880)="41bd4715597acc88689f102d7a4f89494b6c59fd84b3a0e5b981554a3a02ea982d0380f8d2a30c91edcd6090399d9e8cca22cc4397de9224750005ad12a2ba88103fdbeb20126513c2b857a0aa86ffda6877b50f5dafce589ba569a97b53dd521f", 0x61}, {&(0x7f0000000900)="d8736b81ff9f041fb8153965cd81652086283361a03caea6a9cfab604fe34ec9b0b5b4d7924632d0f661764a9f48793942d726de5a170c9f2c36", 0x3a}, {&(0x7f0000000940)="579fd7f17b79d9307912338ef4c1d20082ab1ee451a2896ae32f345ebf6698a366068914b62ff895b240f0eaed97e4b1247420bffc932c475a2d8bb3a66746b844a1f94e172dedbc32ed0a72bd0078a4d89d3c34090d1fbc7d07b5107f4be7ad77a27dcef713917a5f55dfec55942aa78b0963183f371fe7d648f83262619100be8abbb8dce0b262f28f6482d34729a4d02b577e8ce3dbaba5dca3dc4fd5aa4b053f7f481dae46eed00844bddc1146c0219b224b948c6eaf5d705bed6edfb7288b3cda144ca92f6f97794cd43bcad68db2ec2b2b48566eee3249e6d7584c382999f1cb67d09ce76c", 0xe8}], 0x7, &(0x7f0000000ac0)=[@ip_ttl={{0x14}}], 0x18}, 0x48040) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="070100ff7002000034000000ffffffff1f00000000000000000544d3ae16a17b2670bc3703ae7c4805e0fe5bdac5425976f087f9c5bfaee22b79f29207868a93b2d31edae2e3874bb0d9876f400867ae5ffac08f83a434aa3bc7a41ab11ce1b02c35d2f37db85227cedaadb41baeea6bab947e5be923fdf40682a57c57ad9ccb6a9a38259179503762d65e4ccaa069ac2d912e1d88708c9cd72bcf005ddf94c85fc6ffc7ad8a9eb5a6d4dcd98a610bf9991f07210c4abe29d7ea1f92a562bb2921dd6987e857ebef5d0000000000000000"], 0xd1) socket$inet_icmp_raw(0x2, 0x3, 0x1) 09:53:26 executing program 1: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="01d215d85a7310a97ade3a10", @ANYRES32=0xffffffffffffffff, @ANYBLOB="02000000000000002e2f66696c653000"]) r1 = syz_io_uring_setup(0x4041, &(0x7f0000000100)={0x0, 0x2000000, 0x0, 0x0, 0x34d, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r1, 0xffffffffffffffff, 0x0) 09:53:26 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5829f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:53:26 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100)={0x0, 0x2000000, 0x0, 0x0, 0x34d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:53:26 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x41, 0x40, 0x3, 0x0, 0xfb0, 0x80000, 0x12, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xa93, 0x0, @perf_config_ext={0x5, 0x8}, 0x2529, 0x4, 0x40, 0x8, 0x100000001, 0x5, 0xff83, 0x0, 0x1, 0x0, 0x14}, 0x0, 0xe, r0, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) socket$nl_audit(0x10, 0x3, 0x9) sendto$packet(r3, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000340)) 09:53:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) [ 376.276035] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 376.276035] program syz-executor.0 not setting count and/or reply_len properly 09:53:26 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5829f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:53:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:53:26 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x41, 0x40, 0x3, 0x0, 0xfb0, 0x80000, 0x12, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xa93, 0x0, @perf_config_ext={0x5, 0x8}, 0x2529, 0x4, 0x40, 0x8, 0x100000001, 0x5, 0xff83, 0x0, 0x1, 0x0, 0x14}, 0x0, 0xe, r0, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) socket$nl_audit(0x10, 0x3, 0x9) sendto$packet(r3, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000340)) 09:53:26 executing program 1: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="01d215d85a7310a97ade3a10", @ANYRES32=0xffffffffffffffff, @ANYBLOB="02000000000000002e2f66696c653000"]) r1 = syz_io_uring_setup(0x4041, &(0x7f0000000100)={0x0, 0x2000000, 0x0, 0x0, 0x34d, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r1, 0xffffffffffffffff, 0x0) [ 376.367352] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 376.367352] program syz-executor.0 not setting count and/or reply_len properly [ 389.155880] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 389.155880] program syz-executor.0 not setting count and/or reply_len properly 09:53:38 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x2000000, 0x0, 0x0, 0x34d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:53:38 executing program 4: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000140)={0x0, 0x114, 0x1, @tid=r1}, &(0x7f0000000440)) r2 = mq_open(&(0x7f0000000180)='(*\x00', 0x80, 0x40, &(0x7f0000000480)={0x8, 0x100000000, 0x7c0000000000000, 0x8}) mq_notify(r2, &(0x7f0000000680)={0x0, 0x7, 0x4, @thr={&(0x7f00000004c0)="a99b5e9934d947aaa954041e29c3af398aedee570a121b2fd0063bda0eecbce47af185bfd8bbea5563db5ddb7d3be794291bbc8a41b28d125fd58881bce6413a99a098d1300f04fd336d15ed967592c24b3c85f3b30bdabf8e9cf5be213f4f671fbed9b60b45641ef31b210acaf25c8fbce6ed9423087628794bda004cfa802c6b695ac80f1c58a28c4f3a163b99d007926ad17021e27d504e42ff98f311f95de5bce926", &(0x7f0000000600)="6a368eeeaa0de459528515f692c2cb94a505ddf3e6b84e913421fbed77a32bee907c5a615f8d38f25c700ce90e5063a844a9717b917a6637c63c0f9bbd11807473b5cac16d02ecf92b25bb79e524ee3d98cde5ea797329176c7d6d743a3ea4c3618173a9e0be52025464bffa40cfc6012d05ced45c7e"}}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)=0x0) timer_getoverrun(r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}, 0x104a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2f) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000c00)) r4 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r4, r5, &(0x7f0000000b40)=0xffffffffffffffe0, 0x100) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r5, &(0x7f0000000000)="3d723d21de61", 0x6, 0x0, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$inet(r5, &(0x7f0000000b00)={&(0x7f00000006c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000700)="b30586cfb4ca5b083f10c96f8c37105c475f737a099b9ab8034dc458", 0x1c}, {&(0x7f0000000740)="c52404effa6016fbd3e32bbf76f83a93b4b0f170e3036d33aae1b79f36fec3cc6f6547", 0x23}, {&(0x7f0000000780)="0a2ce637502e4830be927d8515d9ab7cbed0a2f39408f855d3920c608c5803b258b01e6e2169f83b0cc36e3cdd93559220c5668f236f3abf998be022556eb9845f1574adaf72d84023da20395a7532b8fade9af16a6090f81690fe2eb462c89da66765f930db2b461e627ec6ae18c376253963cf05581b5dbce14b84bd9ef170051df241f924682762c5b335bc4eb5f3eeed9589d8ea7154ae1e92f7c457ebdb7c221de272f1d66a12c88e4d32c193082069f6f2", 0xb4}, {&(0x7f0000000840)="0418c78d7d3a62161b4b559ea26b68d1c24d71c82f13da0f5170b09d42", 0x1d}, {&(0x7f0000000880)="41bd4715597acc88689f102d7a4f89494b6c59fd84b3a0e5b981554a3a02ea982d0380f8d2a30c91edcd6090399d9e8cca22cc4397de9224750005ad12a2ba88103fdbeb20126513c2b857a0aa86ffda6877b50f5dafce589ba569a97b53dd521f", 0x61}, {&(0x7f0000000900)="d8736b81ff9f041fb8153965cd81652086283361a03caea6a9cfab604fe34ec9b0b5b4d7924632d0f661764a9f48793942d726de5a170c9f2c36", 0x3a}, {&(0x7f0000000940)="579fd7f17b79d9307912338ef4c1d20082ab1ee451a2896ae32f345ebf6698a366068914b62ff895b240f0eaed97e4b1247420bffc932c475a2d8bb3a66746b844a1f94e172dedbc32ed0a72bd0078a4d89d3c34090d1fbc7d07b5107f4be7ad77a27dcef713917a5f55dfec55942aa78b0963183f371fe7d648f83262619100be8abbb8dce0b262f28f6482d34729a4d02b577e8ce3dbaba5dca3dc4fd5aa4b053f7f481dae46eed00844bddc1146c0219b224b948c6eaf5d705bed6edfb7288b3cda144ca92f6f97794cd43bcad68db2ec2b2b48566eee3249e6d7584c382999f1cb67d09ce76c", 0xe8}], 0x7, &(0x7f0000000ac0)=[@ip_ttl={{0x14}}], 0x18}, 0x48040) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="070100ff7002000034000000ffffffff1f00000000000000000544d3ae16a17b2670bc3703ae7c4805e0fe5bdac5425976f087f9c5bfaee22b79f29207868a93b2d31edae2e3874bb0d9876f400867ae5ffac08f83a434aa3bc7a41ab11ce1b02c35d2f37db85227cedaadb41baeea6bab947e5be923fdf40682a57c57ad9ccb6a9a38259179503762d65e4ccaa069ac2d912e1d88708c9cd72bcf005ddf94c85fc6ffc7ad8a9eb5a6d4dcd98a610bf9991f07210c4abe29d7ea1f92a562bb2921dd6987e857ebef5d0000000000000000"], 0xd1) socket$inet_icmp_raw(0x2, 0x3, 0x1) 09:53:38 executing program 1: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="01d215d85a7310a97ade3a10", @ANYRES32=0xffffffffffffffff, @ANYBLOB="02000000000000002e2f66696c653000"]) r1 = syz_io_uring_setup(0x4041, &(0x7f0000000100)={0x0, 0x2000000, 0x0, 0x0, 0x34d, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r1, 0xffffffffffffffff, 0x0) 09:53:38 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:53:38 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x6, r0, &(0x7f0000001440)="ce", 0x1) 09:53:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:53:38 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000140)={0x0, 0x114, 0x1, @tid=r1}, &(0x7f0000000440)) r2 = mq_open(&(0x7f0000000180)='(*\x00', 0x80, 0x40, &(0x7f0000000480)={0x8, 0x100000000, 0x7c0000000000000, 0x8}) mq_notify(r2, &(0x7f0000000680)={0x0, 0x7, 0x4, @thr={&(0x7f00000004c0)="a99b5e9934d947aaa954041e29c3af398aedee570a121b2fd0063bda0eecbce47af185bfd8bbea5563db5ddb7d3be794291bbc8a41b28d125fd58881bce6413a99a098d1300f04fd336d15ed967592c24b3c85f3b30bdabf8e9cf5be213f4f671fbed9b60b45641ef31b210acaf25c8fbce6ed9423087628794bda004cfa802c6b695ac80f1c58a28c4f3a163b99d007926ad17021e27d504e42ff98f311f95de5bce926", &(0x7f0000000600)="6a368eeeaa0de459528515f692c2cb94a505ddf3e6b84e913421fbed77a32bee907c5a615f8d38f25c700ce90e5063a844a9717b917a6637c63c0f9bbd11807473b5cac16d02ecf92b25bb79e524ee3d98cde5ea797329176c7d6d743a3ea4c3618173a9e0be52025464bffa40cfc6012d05ced45c7e"}}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)=0x0) timer_getoverrun(r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}, 0x104a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2f) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000c00)) r4 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r4, r5, &(0x7f0000000b40)=0xffffffffffffffe0, 0x100) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r5, &(0x7f0000000000)="3d723d21de61", 0x6, 0x0, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$inet(r5, &(0x7f0000000b00)={&(0x7f00000006c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000700)="b30586cfb4ca5b083f10c96f8c37105c475f737a099b9ab8034dc458", 0x1c}, {&(0x7f0000000740)="c52404effa6016fbd3e32bbf76f83a93b4b0f170e3036d33aae1b79f36fec3cc6f6547", 0x23}, {&(0x7f0000000780)="0a2ce637502e4830be927d8515d9ab7cbed0a2f39408f855d3920c608c5803b258b01e6e2169f83b0cc36e3cdd93559220c5668f236f3abf998be022556eb9845f1574adaf72d84023da20395a7532b8fade9af16a6090f81690fe2eb462c89da66765f930db2b461e627ec6ae18c376253963cf05581b5dbce14b84bd9ef170051df241f924682762c5b335bc4eb5f3eeed9589d8ea7154ae1e92f7c457ebdb7c221de272f1d66a12c88e4d32c193082069f6f2", 0xb4}, {&(0x7f0000000840)="0418c78d7d3a62161b4b559ea26b68d1c24d71c82f13da0f5170b09d42", 0x1d}, {&(0x7f0000000880)="41bd4715597acc88689f102d7a4f89494b6c59fd84b3a0e5b981554a3a02ea982d0380f8d2a30c91edcd6090399d9e8cca22cc4397de9224750005ad12a2ba88103fdbeb20126513c2b857a0aa86ffda6877b50f5dafce589ba569a97b53dd521f", 0x61}, {&(0x7f0000000900)="d8736b81ff9f041fb8153965cd81652086283361a03caea6a9cfab604fe34ec9b0b5b4d7924632d0f661764a9f48793942d726de5a170c9f2c36", 0x3a}, {&(0x7f0000000940)="579fd7f17b79d9307912338ef4c1d20082ab1ee451a2896ae32f345ebf6698a366068914b62ff895b240f0eaed97e4b1247420bffc932c475a2d8bb3a66746b844a1f94e172dedbc32ed0a72bd0078a4d89d3c34090d1fbc7d07b5107f4be7ad77a27dcef713917a5f55dfec55942aa78b0963183f371fe7d648f83262619100be8abbb8dce0b262f28f6482d34729a4d02b577e8ce3dbaba5dca3dc4fd5aa4b053f7f481dae46eed00844bddc1146c0219b224b948c6eaf5d705bed6edfb7288b3cda144ca92f6f97794cd43bcad68db2ec2b2b48566eee3249e6d7584c382999f1cb67d09ce76c", 0xe8}], 0x7, &(0x7f0000000ac0)=[@ip_ttl={{0x14}}], 0x18}, 0x48040) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="070100ff7002000034000000ffffffff1f00000000000000000544d3ae16a17b2670bc3703ae7c4805e0fe5bdac5425976f087f9c5bfaee22b79f29207868a93b2d31edae2e3874bb0d9876f400867ae5ffac08f83a434aa3bc7a41ab11ce1b02c35d2f37db85227cedaadb41baeea6bab947e5be923fdf40682a57c57ad9ccb6a9a38259179503762d65e4ccaa069ac2d912e1d88708c9cd72bcf005ddf94c85fc6ffc7ad8a9eb5a6d4dcd98a610bf9991f07210c4abe29d7ea1f92a562bb2921dd6987e857ebef5d0000000000000000"], 0xd1) socket$inet_icmp_raw(0x2, 0x3, 0x1) 09:53:38 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x41, 0x40, 0x3, 0x0, 0xfb0, 0x80000, 0x12, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xa93, 0x0, @perf_config_ext={0x5, 0x8}, 0x2529, 0x4, 0x40, 0x8, 0x100000001, 0x5, 0xff83, 0x0, 0x1, 0x0, 0x14}, 0x0, 0xe, r0, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000340)) 09:53:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:53:39 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x7, r0, &(0x7f0000001440)="ce", 0x1) [ 389.281631] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 389.281631] program syz-executor.0 not setting count and/or reply_len properly [ 402.757359] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 402.757359] program syz-executor.4 not setting count and/or reply_len properly [ 402.760900] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 402.760900] program syz-executor.0 not setting count and/or reply_len properly 09:53:52 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x8, r0, &(0x7f0000001440)="ce", 0x1) 09:53:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:53:52 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x2000000, 0x0, 0x0, 0x34d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:53:52 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000140)={0x0, 0x114, 0x1, @tid=r1}, &(0x7f0000000440)) r2 = mq_open(&(0x7f0000000180)='(*\x00', 0x80, 0x40, &(0x7f0000000480)={0x8, 0x100000000, 0x7c0000000000000, 0x8}) mq_notify(r2, &(0x7f0000000680)={0x0, 0x7, 0x4, @thr={&(0x7f00000004c0)="a99b5e9934d947aaa954041e29c3af398aedee570a121b2fd0063bda0eecbce47af185bfd8bbea5563db5ddb7d3be794291bbc8a41b28d125fd58881bce6413a99a098d1300f04fd336d15ed967592c24b3c85f3b30bdabf8e9cf5be213f4f671fbed9b60b45641ef31b210acaf25c8fbce6ed9423087628794bda004cfa802c6b695ac80f1c58a28c4f3a163b99d007926ad17021e27d504e42ff98f311f95de5bce926", &(0x7f0000000600)="6a368eeeaa0de459528515f692c2cb94a505ddf3e6b84e913421fbed77a32bee907c5a615f8d38f25c700ce90e5063a844a9717b917a6637c63c0f9bbd11807473b5cac16d02ecf92b25bb79e524ee3d98cde5ea797329176c7d6d743a3ea4c3618173a9e0be52025464bffa40cfc6012d05ced45c7e"}}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)=0x0) timer_getoverrun(r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}, 0x104a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2f) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000c00)) r4 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r4, r5, &(0x7f0000000b40)=0xffffffffffffffe0, 0x100) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r5, &(0x7f0000000000)="3d723d21de61", 0x6, 0x0, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$inet(r5, &(0x7f0000000b00)={&(0x7f00000006c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000700)="b30586cfb4ca5b083f10c96f8c37105c475f737a099b9ab8034dc458", 0x1c}, {&(0x7f0000000740)="c52404effa6016fbd3e32bbf76f83a93b4b0f170e3036d33aae1b79f36fec3cc6f6547", 0x23}, {&(0x7f0000000780)="0a2ce637502e4830be927d8515d9ab7cbed0a2f39408f855d3920c608c5803b258b01e6e2169f83b0cc36e3cdd93559220c5668f236f3abf998be022556eb9845f1574adaf72d84023da20395a7532b8fade9af16a6090f81690fe2eb462c89da66765f930db2b461e627ec6ae18c376253963cf05581b5dbce14b84bd9ef170051df241f924682762c5b335bc4eb5f3eeed9589d8ea7154ae1e92f7c457ebdb7c221de272f1d66a12c88e4d32c193082069f6f2", 0xb4}, {&(0x7f0000000840)="0418c78d7d3a62161b4b559ea26b68d1c24d71c82f13da0f5170b09d42", 0x1d}, {&(0x7f0000000880)="41bd4715597acc88689f102d7a4f89494b6c59fd84b3a0e5b981554a3a02ea982d0380f8d2a30c91edcd6090399d9e8cca22cc4397de9224750005ad12a2ba88103fdbeb20126513c2b857a0aa86ffda6877b50f5dafce589ba569a97b53dd521f", 0x61}, {&(0x7f0000000900)="d8736b81ff9f041fb8153965cd81652086283361a03caea6a9cfab604fe34ec9b0b5b4d7924632d0f661764a9f48793942d726de5a170c9f2c36", 0x3a}, {&(0x7f0000000940)="579fd7f17b79d9307912338ef4c1d20082ab1ee451a2896ae32f345ebf6698a366068914b62ff895b240f0eaed97e4b1247420bffc932c475a2d8bb3a66746b844a1f94e172dedbc32ed0a72bd0078a4d89d3c34090d1fbc7d07b5107f4be7ad77a27dcef713917a5f55dfec55942aa78b0963183f371fe7d648f83262619100be8abbb8dce0b262f28f6482d34729a4d02b577e8ce3dbaba5dca3dc4fd5aa4b053f7f481dae46eed00844bddc1146c0219b224b948c6eaf5d705bed6edfb7288b3cda144ca92f6f97794cd43bcad68db2ec2b2b48566eee3249e6d7584c382999f1cb67d09ce76c", 0xe8}], 0x7, &(0x7f0000000ac0)=[@ip_ttl={{0x14}}], 0x18}, 0x48040) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="070100ff7002000034000000ffffffff1f00000000000000000544d3ae16a17b2670bc3703ae7c4805e0fe5bdac5425976f087f9c5bfaee22b79f29207868a93b2d31edae2e3874bb0d9876f400867ae5ffac08f83a434aa3bc7a41ab11ce1b02c35d2f37db85227cedaadb41baeea6bab947e5be923fdf40682a57c57ad9ccb6a9a38259179503762d65e4ccaa069ac2d912e1d88708c9cd72bcf005ddf94c85fc6ffc7ad8a9eb5a6d4dcd98a610bf9991f07210c4abe29d7ea1f92a562bb2921dd6987e857ebef5d0000000000000000"], 0xd1) socket$inet_icmp_raw(0x2, 0x3, 0x1) 09:53:52 executing program 1: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="01d215d85a7310a97ade3a10", @ANYRES32=0xffffffffffffffff, @ANYBLOB="02000000000000002e2f66696c653000"]) r1 = syz_io_uring_setup(0x4041, &(0x7f0000000100)={0x0, 0x2000000, 0x0, 0x0, 0x34d, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r1, 0xffffffffffffffff, 0x0) 09:53:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:53:52 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x41, 0x40, 0x3, 0x0, 0xfb0, 0x80000, 0x12, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xa93, 0x0, @perf_config_ext={0x5, 0x8}, 0x2529, 0x4, 0x40, 0x8, 0x100000001, 0x5, 0xff83, 0x0, 0x1, 0x0, 0x14}, 0x0, 0xe, r0, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000340)) 09:53:52 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:53:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:53:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:53:52 executing program 1: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="01d215d85a7310a97ade3a10", @ANYRES32=0xffffffffffffffff, @ANYBLOB="02000000000000002e2f66696c653000"]) r1 = syz_io_uring_setup(0x4041, &(0x7f0000000100)={0x0, 0x2000000, 0x0, 0x0, 0x34d, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r1, 0xffffffffffffffff, 0x0) 09:53:52 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x9, r0, &(0x7f0000001440)="ce", 0x1) 09:53:52 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x2000000, 0x0, 0x0, 0x34d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) [ 402.886147] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 402.886147] program syz-executor.4 not setting count and/or reply_len properly 09:53:52 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:53:52 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x41, 0x40, 0x3, 0x0, 0xfb0, 0x80000, 0x12, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xa93, 0x0, @perf_config_ext={0x5, 0x8}, 0x2529, 0x4, 0x40, 0x8, 0x100000001, 0x5, 0xff83, 0x0, 0x1, 0x0, 0x14}, 0x0, 0xe, r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000340)) 09:53:52 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:53:52 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:53:52 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0xa, r0, &(0x7f0000001440)="ce", 0x1) 09:53:52 executing program 6: r0 = syz_io_uring_setup(0x4041, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) [ 403.037360] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 403.037360] program syz-executor.4 not setting count and/or reply_len properly 09:54:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:54:05 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5829f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x0, 0x8}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:54:05 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0xb, r0, &(0x7f0000001440)="ce", 0x1) 09:54:05 executing program 6: r0 = syz_io_uring_setup(0x4041, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:54:05 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x41, 0x40, 0x3, 0x0, 0xfb0, 0x80000, 0x12, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xa93, 0x0, @perf_config_ext={0x5, 0x8}, 0x2529, 0x4, 0x40, 0x8, 0x100000001, 0x5, 0xff83, 0x0, 0x1, 0x0, 0x14}, 0x0, 0xe, r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000340)) 09:54:05 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000140)={0x0, 0x114, 0x1, @tid=r1}, &(0x7f0000000440)) r2 = mq_open(&(0x7f0000000180)='(*\x00', 0x80, 0x40, &(0x7f0000000480)={0x8, 0x100000000, 0x7c0000000000000, 0x8}) mq_notify(r2, &(0x7f0000000680)={0x0, 0x7, 0x4, @thr={&(0x7f00000004c0)="a99b5e9934d947aaa954041e29c3af398aedee570a121b2fd0063bda0eecbce47af185bfd8bbea5563db5ddb7d3be794291bbc8a41b28d125fd58881bce6413a99a098d1300f04fd336d15ed967592c24b3c85f3b30bdabf8e9cf5be213f4f671fbed9b60b45641ef31b210acaf25c8fbce6ed9423087628794bda004cfa802c6b695ac80f1c58a28c4f3a163b99d007926ad17021e27d504e42ff98f311f95de5bce926", &(0x7f0000000600)="6a368eeeaa0de459528515f692c2cb94a505ddf3e6b84e913421fbed77a32bee907c5a615f8d38f25c700ce90e5063a844a9717b917a6637c63c0f9bbd11807473b5cac16d02ecf92b25bb79e524ee3d98cde5ea797329176c7d6d743a3ea4c3618173a9e0be52025464bffa40cfc6012d05ced45c7e"}}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)=0x0) timer_getoverrun(r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}, 0x104a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2f) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000c00)) r4 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r4, r5, &(0x7f0000000b40)=0xffffffffffffffe0, 0x100) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r5, &(0x7f0000000000)="3d723d21de61", 0x6, 0x0, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$inet(r5, &(0x7f0000000b00)={&(0x7f00000006c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000700)="b30586cfb4ca5b083f10c96f8c37105c475f737a099b9ab8034dc458", 0x1c}, {&(0x7f0000000740)="c52404effa6016fbd3e32bbf76f83a93b4b0f170e3036d33aae1b79f36fec3cc6f6547", 0x23}, {&(0x7f0000000780)="0a2ce637502e4830be927d8515d9ab7cbed0a2f39408f855d3920c608c5803b258b01e6e2169f83b0cc36e3cdd93559220c5668f236f3abf998be022556eb9845f1574adaf72d84023da20395a7532b8fade9af16a6090f81690fe2eb462c89da66765f930db2b461e627ec6ae18c376253963cf05581b5dbce14b84bd9ef170051df241f924682762c5b335bc4eb5f3eeed9589d8ea7154ae1e92f7c457ebdb7c221de272f1d66a12c88e4d32c193082069f6f2", 0xb4}, {&(0x7f0000000840)="0418c78d7d3a62161b4b559ea26b68d1c24d71c82f13da0f5170b09d42", 0x1d}, {&(0x7f0000000880)="41bd4715597acc88689f102d7a4f89494b6c59fd84b3a0e5b981554a3a02ea982d0380f8d2a30c91edcd6090399d9e8cca22cc4397de9224750005ad12a2ba88103fdbeb20126513c2b857a0aa86ffda6877b50f5dafce589ba569a97b53dd521f", 0x61}, {&(0x7f0000000900)="d8736b81ff9f041fb8153965cd81652086283361a03caea6a9cfab604fe34ec9b0b5b4d7924632d0f661764a9f48793942d726de5a170c9f2c36", 0x3a}, {&(0x7f0000000940)="579fd7f17b79d9307912338ef4c1d20082ab1ee451a2896ae32f345ebf6698a366068914b62ff895b240f0eaed97e4b1247420bffc932c475a2d8bb3a66746b844a1f94e172dedbc32ed0a72bd0078a4d89d3c34090d1fbc7d07b5107f4be7ad77a27dcef713917a5f55dfec55942aa78b0963183f371fe7d648f83262619100be8abbb8dce0b262f28f6482d34729a4d02b577e8ce3dbaba5dca3dc4fd5aa4b053f7f481dae46eed00844bddc1146c0219b224b948c6eaf5d705bed6edfb7288b3cda144ca92f6f97794cd43bcad68db2ec2b2b48566eee3249e6d7584c382999f1cb67d09ce76c", 0xe8}], 0x7, &(0x7f0000000ac0)=[@ip_ttl={{0x14}}], 0x18}, 0x48040) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="070100ff7002000034000000ffffffff1f00000000000000000544d3ae16a17b2670bc3703ae7c4805e0fe5bdac5425976f087f9c5bfaee22b79f29207868a93b2d31edae2e3874bb0d9876f400867ae5ffac08f83a434aa3bc7a41ab11ce1b02c35d2f37db85227cedaadb41baeea6bab947e5be923fdf40682a57c57ad9ccb6a9a38259179503762d65e4ccaa069ac2d912e1d88708c9cd72bcf005ddf94c85fc6ffc7ad8a9eb5a6d4dcd98a610bf9991f07210c4abe29d7ea1f92a562bb2921dd6987e857ebef5d0000000000000000"], 0xd1) socket$inet_icmp_raw(0x2, 0x3, 0x1) 09:54:05 executing program 1: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="01d215d85a7310a97ade3a10", @ANYRES32, @ANYBLOB="02000000000000002e2f66696c653000"]) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:54:05 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:54:05 executing program 6: r0 = syz_io_uring_setup(0x4041, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:54:05 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0xc, r0, &(0x7f0000001440)="ce", 0x1) 09:54:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:54:05 executing program 1: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="01d215d85a7310a97ade3a10", @ANYRES32, @ANYBLOB="02000000000000002e2f66696c653000"]) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:54:05 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:54:05 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x34d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:54:05 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0xd, r0, &(0x7f0000001440)="ce", 0x1) 09:54:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:54:05 executing program 1: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="01d215d85a7310a97ade3a10", @ANYRES32, @ANYBLOB="02000000000000002e2f66696c653000"]) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:54:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:54:19 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x41, 0x40, 0x3, 0x0, 0xfb0, 0x80000, 0x12, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xa93, 0x0, @perf_config_ext={0x5, 0x8}, 0x2529, 0x4, 0x40, 0x8, 0x100000001, 0x5, 0xff83, 0x0, 0x1, 0x0, 0x14}, 0x0, 0xe, r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000340)) 09:54:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:54:19 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:54:19 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0xe, r0, &(0x7f0000001440)="ce", 0x1) 09:54:19 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000140)={0x0, 0x114, 0x1, @tid=r1}, &(0x7f0000000440)) r2 = mq_open(&(0x7f0000000180)='(*\x00', 0x80, 0x40, &(0x7f0000000480)={0x8, 0x100000000, 0x7c0000000000000, 0x8}) mq_notify(r2, &(0x7f0000000680)={0x0, 0x7, 0x4, @thr={&(0x7f00000004c0)="a99b5e9934d947aaa954041e29c3af398aedee570a121b2fd0063bda0eecbce47af185bfd8bbea5563db5ddb7d3be794291bbc8a41b28d125fd58881bce6413a99a098d1300f04fd336d15ed967592c24b3c85f3b30bdabf8e9cf5be213f4f671fbed9b60b45641ef31b210acaf25c8fbce6ed9423087628794bda004cfa802c6b695ac80f1c58a28c4f3a163b99d007926ad17021e27d504e42ff98f311f95de5bce926", &(0x7f0000000600)="6a368eeeaa0de459528515f692c2cb94a505ddf3e6b84e913421fbed77a32bee907c5a615f8d38f25c700ce90e5063a844a9717b917a6637c63c0f9bbd11807473b5cac16d02ecf92b25bb79e524ee3d98cde5ea797329176c7d6d743a3ea4c3618173a9e0be52025464bffa40cfc6012d05ced45c7e"}}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)=0x0) timer_getoverrun(r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}, 0x104a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2f) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000c00)) r4 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r4, r5, &(0x7f0000000b40)=0xffffffffffffffe0, 0x100) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r5, &(0x7f0000000000)="3d723d21de61", 0x6, 0x0, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$inet(r5, &(0x7f0000000b00)={&(0x7f00000006c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000700)="b30586cfb4ca5b083f10c96f8c37105c475f737a099b9ab8034dc458", 0x1c}, {&(0x7f0000000740)="c52404effa6016fbd3e32bbf76f83a93b4b0f170e3036d33aae1b79f36fec3cc6f6547", 0x23}, {&(0x7f0000000780)="0a2ce637502e4830be927d8515d9ab7cbed0a2f39408f855d3920c608c5803b258b01e6e2169f83b0cc36e3cdd93559220c5668f236f3abf998be022556eb9845f1574adaf72d84023da20395a7532b8fade9af16a6090f81690fe2eb462c89da66765f930db2b461e627ec6ae18c376253963cf05581b5dbce14b84bd9ef170051df241f924682762c5b335bc4eb5f3eeed9589d8ea7154ae1e92f7c457ebdb7c221de272f1d66a12c88e4d32c193082069f6f2", 0xb4}, {&(0x7f0000000840)="0418c78d7d3a62161b4b559ea26b68d1c24d71c82f13da0f5170b09d42", 0x1d}, {&(0x7f0000000880)="41bd4715597acc88689f102d7a4f89494b6c59fd84b3a0e5b981554a3a02ea982d0380f8d2a30c91edcd6090399d9e8cca22cc4397de9224750005ad12a2ba88103fdbeb20126513c2b857a0aa86ffda6877b50f5dafce589ba569a97b53dd521f", 0x61}, {&(0x7f0000000900)="d8736b81ff9f041fb8153965cd81652086283361a03caea6a9cfab604fe34ec9b0b5b4d7924632d0f661764a9f48793942d726de5a170c9f2c36", 0x3a}, {&(0x7f0000000940)="579fd7f17b79d9307912338ef4c1d20082ab1ee451a2896ae32f345ebf6698a366068914b62ff895b240f0eaed97e4b1247420bffc932c475a2d8bb3a66746b844a1f94e172dedbc32ed0a72bd0078a4d89d3c34090d1fbc7d07b5107f4be7ad77a27dcef713917a5f55dfec55942aa78b0963183f371fe7d648f83262619100be8abbb8dce0b262f28f6482d34729a4d02b577e8ce3dbaba5dca3dc4fd5aa4b053f7f481dae46eed00844bddc1146c0219b224b948c6eaf5d705bed6edfb7288b3cda144ca92f6f97794cd43bcad68db2ec2b2b48566eee3249e6d7584c382999f1cb67d09ce76c", 0xe8}], 0x7, &(0x7f0000000ac0)=[@ip_ttl={{0x14}}], 0x18}, 0x48040) write$binfmt_aout(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="070100ff7002000034000000ffffffff1f00000000000000000544d3ae16a17b2670bc3703ae7c4805e0fe5bdac5425976f087f9c5bfaee22b79f29207868a93b2d31edae2e3874bb0d9876f400867ae5ffac08f83a434aa3bc7a41ab11ce1b02c35d2f37db85227cedaadb41baeea6bab947e5be923fdf40682a57c57ad9ccb6a9a38259179503762d65e4ccaa069ac2d912e1d88708c9cd72bcf005ddf94c85fc6ffc7ad8a9eb5a6d4dcd98a610bf9991f07210c4abe29d7ea1f92a562bb2921dd6987e857ebef5d0000000000000000"], 0xd1) 09:54:19 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5829f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x0, 0x8}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:54:19 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100)={0x0, 0x2000000, 0x0, 0x0, 0x34d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) [ 429.432719] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 429.432719] program syz-executor.4 not setting count and/or reply_len properly 09:54:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:54:19 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0xf, r0, &(0x7f0000001440)="ce", 0x1) 09:54:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:54:19 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:54:19 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x2000000, 0x0, 0x0, 0x34d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) [ 429.602907] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 429.602907] program syz-executor.4 not setting count and/or reply_len properly 09:54:33 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x0, 0x8}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:54:33 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:54:33 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000140)={0x0, 0x114, 0x1, @tid=r1}, &(0x7f0000000440)) r2 = mq_open(&(0x7f0000000180)='(*\x00', 0x80, 0x40, &(0x7f0000000480)={0x8, 0x100000000, 0x7c0000000000000, 0x8}) mq_notify(r2, &(0x7f0000000680)={0x0, 0x7, 0x4, @thr={&(0x7f00000004c0)="a99b5e9934d947aaa954041e29c3af398aedee570a121b2fd0063bda0eecbce47af185bfd8bbea5563db5ddb7d3be794291bbc8a41b28d125fd58881bce6413a99a098d1300f04fd336d15ed967592c24b3c85f3b30bdabf8e9cf5be213f4f671fbed9b60b45641ef31b210acaf25c8fbce6ed9423087628794bda004cfa802c6b695ac80f1c58a28c4f3a163b99d007926ad17021e27d504e42ff98f311f95de5bce926", &(0x7f0000000600)="6a368eeeaa0de459528515f692c2cb94a505ddf3e6b84e913421fbed77a32bee907c5a615f8d38f25c700ce90e5063a844a9717b917a6637c63c0f9bbd11807473b5cac16d02ecf92b25bb79e524ee3d98cde5ea797329176c7d6d743a3ea4c3618173a9e0be52025464bffa40cfc6012d05ced45c7e"}}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)=0x0) timer_getoverrun(r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}, 0x104a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2f) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000c00)) r4 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r4, r5, &(0x7f0000000b40)=0xffffffffffffffe0, 0x100) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r5, &(0x7f0000000000)="3d723d21de61", 0x6, 0x0, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$inet(r5, &(0x7f0000000b00)={&(0x7f00000006c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000700)="b30586cfb4ca5b083f10c96f8c37105c475f737a099b9ab8034dc458", 0x1c}, {&(0x7f0000000740)="c52404effa6016fbd3e32bbf76f83a93b4b0f170e3036d33aae1b79f36fec3cc6f6547", 0x23}, {&(0x7f0000000780)="0a2ce637502e4830be927d8515d9ab7cbed0a2f39408f855d3920c608c5803b258b01e6e2169f83b0cc36e3cdd93559220c5668f236f3abf998be022556eb9845f1574adaf72d84023da20395a7532b8fade9af16a6090f81690fe2eb462c89da66765f930db2b461e627ec6ae18c376253963cf05581b5dbce14b84bd9ef170051df241f924682762c5b335bc4eb5f3eeed9589d8ea7154ae1e92f7c457ebdb7c221de272f1d66a12c88e4d32c193082069f6f2", 0xb4}, {&(0x7f0000000840)="0418c78d7d3a62161b4b559ea26b68d1c24d71c82f13da0f5170b09d42", 0x1d}, {&(0x7f0000000880)="41bd4715597acc88689f102d7a4f89494b6c59fd84b3a0e5b981554a3a02ea982d0380f8d2a30c91edcd6090399d9e8cca22cc4397de9224750005ad12a2ba88103fdbeb20126513c2b857a0aa86ffda6877b50f5dafce589ba569a97b53dd521f", 0x61}, {&(0x7f0000000900)="d8736b81ff9f041fb8153965cd81652086283361a03caea6a9cfab604fe34ec9b0b5b4d7924632d0f661764a9f48793942d726de5a170c9f2c36", 0x3a}, {&(0x7f0000000940)="579fd7f17b79d9307912338ef4c1d20082ab1ee451a2896ae32f345ebf6698a366068914b62ff895b240f0eaed97e4b1247420bffc932c475a2d8bb3a66746b844a1f94e172dedbc32ed0a72bd0078a4d89d3c34090d1fbc7d07b5107f4be7ad77a27dcef713917a5f55dfec55942aa78b0963183f371fe7d648f83262619100be8abbb8dce0b262f28f6482d34729a4d02b577e8ce3dbaba5dca3dc4fd5aa4b053f7f481dae46eed00844bddc1146c0219b224b948c6eaf5d705bed6edfb7288b3cda144ca92f6f97794cd43bcad68db2ec2b2b48566eee3249e6d7584c382999f1cb67d09ce76c", 0xe8}], 0x7, &(0x7f0000000ac0)=[@ip_ttl={{0x14}}], 0x18}, 0x48040) 09:54:33 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x10, r0, &(0x7f0000001440)="ce", 0x1) 09:54:33 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 09:54:33 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x2000000, 0x0, 0x0, 0x34d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:54:33 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:54:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:54:33 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x11, r0, &(0x7f0000001440)="ce", 0x1) [ 443.499583] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 443.499583] program syz-executor.4 not setting count and/or reply_len properly 09:54:33 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:54:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:54:33 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:54:33 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x2000000, 0x0, 0x0, 0x34d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:54:33 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 09:54:33 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:54:33 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x12, r0, &(0x7f0000001440)="ce", 0x1) 09:54:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:54:33 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000140)={0x0, 0x114, 0x1, @tid=r1}, &(0x7f0000000440)) r2 = mq_open(&(0x7f0000000180)='(*\x00', 0x80, 0x40, &(0x7f0000000480)={0x8, 0x100000000, 0x7c0000000000000, 0x8}) mq_notify(r2, &(0x7f0000000680)={0x0, 0x7, 0x4, @thr={&(0x7f00000004c0)="a99b5e9934d947aaa954041e29c3af398aedee570a121b2fd0063bda0eecbce47af185bfd8bbea5563db5ddb7d3be794291bbc8a41b28d125fd58881bce6413a99a098d1300f04fd336d15ed967592c24b3c85f3b30bdabf8e9cf5be213f4f671fbed9b60b45641ef31b210acaf25c8fbce6ed9423087628794bda004cfa802c6b695ac80f1c58a28c4f3a163b99d007926ad17021e27d504e42ff98f311f95de5bce926", &(0x7f0000000600)="6a368eeeaa0de459528515f692c2cb94a505ddf3e6b84e913421fbed77a32bee907c5a615f8d38f25c700ce90e5063a844a9717b917a6637c63c0f9bbd11807473b5cac16d02ecf92b25bb79e524ee3d98cde5ea797329176c7d6d743a3ea4c3618173a9e0be52025464bffa40cfc6012d05ced45c7e"}}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)=0x0) timer_getoverrun(r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}, 0x104a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2f) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000c00)) r4 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r4, r5, &(0x7f0000000b40)=0xffffffffffffffe0, 0x100) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r5, &(0x7f0000000000)="3d723d21de61", 0x6, 0x0, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) 09:54:33 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x0, 0x8}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:54:33 executing program 1: r0 = syz_io_uring_setup(0x4041, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:54:33 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:54:47 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:54:47 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000140)={0x0, 0x114, 0x1, @tid=r1}, &(0x7f0000000440)) r2 = mq_open(&(0x7f0000000180)='(*\x00', 0x80, 0x40, &(0x7f0000000480)={0x8, 0x100000000, 0x7c0000000000000, 0x8}) mq_notify(r2, &(0x7f0000000680)={0x0, 0x7, 0x4, @thr={&(0x7f00000004c0)="a99b5e9934d947aaa954041e29c3af398aedee570a121b2fd0063bda0eecbce47af185bfd8bbea5563db5ddb7d3be794291bbc8a41b28d125fd58881bce6413a99a098d1300f04fd336d15ed967592c24b3c85f3b30bdabf8e9cf5be213f4f671fbed9b60b45641ef31b210acaf25c8fbce6ed9423087628794bda004cfa802c6b695ac80f1c58a28c4f3a163b99d007926ad17021e27d504e42ff98f311f95de5bce926", &(0x7f0000000600)="6a368eeeaa0de459528515f692c2cb94a505ddf3e6b84e913421fbed77a32bee907c5a615f8d38f25c700ce90e5063a844a9717b917a6637c63c0f9bbd11807473b5cac16d02ecf92b25bb79e524ee3d98cde5ea797329176c7d6d743a3ea4c3618173a9e0be52025464bffa40cfc6012d05ced45c7e"}}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)=0x0) timer_getoverrun(r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}, 0x104a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2f) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000c00)) r4 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r4, r5, &(0x7f0000000b40)=0xffffffffffffffe0, 0x100) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r5, &(0x7f0000000000)="3d723d21de61", 0x6, 0x0, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) 09:54:47 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:54:47 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:54:47 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x13, r0, &(0x7f0000001440)="ce", 0x1) 09:54:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, 0x0, 0x0) 09:54:47 executing program 1: r0 = syz_io_uring_setup(0x4041, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:54:47 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 09:54:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:54:47 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x14, r0, &(0x7f0000001440)="ce", 0x1) 09:54:47 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:54:47 executing program 1: r0 = syz_io_uring_setup(0x4041, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:54:47 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:54:47 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:54:47 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 09:55:01 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x15, r0, &(0x7f0000001440)="ce", 0x1) 09:55:01 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000140)={0x0, 0x114, 0x1, @tid=r1}, &(0x7f0000000440)) r2 = mq_open(&(0x7f0000000180)='(*\x00', 0x80, 0x40, &(0x7f0000000480)={0x8, 0x100000000, 0x7c0000000000000, 0x8}) mq_notify(r2, &(0x7f0000000680)={0x0, 0x7, 0x4, @thr={&(0x7f00000004c0)="a99b5e9934d947aaa954041e29c3af398aedee570a121b2fd0063bda0eecbce47af185bfd8bbea5563db5ddb7d3be794291bbc8a41b28d125fd58881bce6413a99a098d1300f04fd336d15ed967592c24b3c85f3b30bdabf8e9cf5be213f4f671fbed9b60b45641ef31b210acaf25c8fbce6ed9423087628794bda004cfa802c6b695ac80f1c58a28c4f3a163b99d007926ad17021e27d504e42ff98f311f95de5bce926", &(0x7f0000000600)="6a368eeeaa0de459528515f692c2cb94a505ddf3e6b84e913421fbed77a32bee907c5a615f8d38f25c700ce90e5063a844a9717b917a6637c63c0f9bbd11807473b5cac16d02ecf92b25bb79e524ee3d98cde5ea797329176c7d6d743a3ea4c3618173a9e0be52025464bffa40cfc6012d05ced45c7e"}}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)=0x0) timer_getoverrun(r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}, 0x104a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2f) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000c00)) r4 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendfile(r4, r5, &(0x7f0000000b40)=0xffffffffffffffe0, 0x100) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 09:55:01 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:55:01 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 09:55:01 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x34d}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:55:01 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:55:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:55:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, 0x0, 0x0) 09:55:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, 0x0, 0x0) 09:55:01 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x18, r0, &(0x7f0000001440)="ce", 0x1) 09:55:01 executing program 4: syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:55:01 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:55:15 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:55:15 executing program 4: syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:55:15 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:55:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1'}, 0x4) 09:55:15 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x19, r0, &(0x7f0000001440)="ce", 0x1) 09:55:15 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000140)={0x0, 0x114, 0x1, @tid=r1}, &(0x7f0000000440)) r2 = mq_open(&(0x7f0000000180)='(*\x00', 0x80, 0x40, &(0x7f0000000480)={0x8, 0x100000000, 0x7c0000000000000, 0x8}) mq_notify(r2, &(0x7f0000000680)={0x0, 0x7, 0x4, @thr={&(0x7f00000004c0)="a99b5e9934d947aaa954041e29c3af398aedee570a121b2fd0063bda0eecbce47af185bfd8bbea5563db5ddb7d3be794291bbc8a41b28d125fd58881bce6413a99a098d1300f04fd336d15ed967592c24b3c85f3b30bdabf8e9cf5be213f4f671fbed9b60b45641ef31b210acaf25c8fbce6ed9423087628794bda004cfa802c6b695ac80f1c58a28c4f3a163b99d007926ad17021e27d504e42ff98f311f95de5bce926", &(0x7f0000000600)="6a368eeeaa0de459528515f692c2cb94a505ddf3e6b84e913421fbed77a32bee907c5a615f8d38f25c700ce90e5063a844a9717b917a6637c63c0f9bbd11807473b5cac16d02ecf92b25bb79e524ee3d98cde5ea797329176c7d6d743a3ea4c3618173a9e0be52025464bffa40cfc6012d05ced45c7e"}}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)=0x0) timer_getoverrun(r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}, 0x104a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2f) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000c00)) r4 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) socket$nl_audit(0x10, 0x3, 0x9) sendfile(r4, r5, &(0x7f0000000b40)=0xffffffffffffffe0, 0x100) 09:55:15 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:55:15 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 09:55:15 executing program 4: syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:55:15 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1b, r0, &(0x7f0000001440)="ce", 0x1) 09:55:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1'}, 0x4) 09:55:15 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:55:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, 0x0, 0x0) 09:55:15 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1c, r0, &(0x7f0000001440)="ce", 0x1) 09:55:15 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000140)={0x0, 0x114, 0x1, @tid=r1}, &(0x7f0000000440)) r2 = mq_open(&(0x7f0000000180)='(*\x00', 0x80, 0x40, &(0x7f0000000480)={0x8, 0x100000000, 0x7c0000000000000, 0x8}) mq_notify(r2, &(0x7f0000000680)={0x0, 0x7, 0x4, @thr={&(0x7f00000004c0)="a99b5e9934d947aaa954041e29c3af398aedee570a121b2fd0063bda0eecbce47af185bfd8bbea5563db5ddb7d3be794291bbc8a41b28d125fd58881bce6413a99a098d1300f04fd336d15ed967592c24b3c85f3b30bdabf8e9cf5be213f4f671fbed9b60b45641ef31b210acaf25c8fbce6ed9423087628794bda004cfa802c6b695ac80f1c58a28c4f3a163b99d007926ad17021e27d504e42ff98f311f95de5bce926", &(0x7f0000000600)="6a368eeeaa0de459528515f692c2cb94a505ddf3e6b84e913421fbed77a32bee907c5a615f8d38f25c700ce90e5063a844a9717b917a6637c63c0f9bbd11807473b5cac16d02ecf92b25bb79e524ee3d98cde5ea797329176c7d6d743a3ea4c3618173a9e0be52025464bffa40cfc6012d05ced45c7e"}}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)=0x0) timer_getoverrun(r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}, 0x104a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2f) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000c00)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) socket$nl_audit(0x10, 0x3, 0x9) 09:55:15 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 09:55:16 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:55:16 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1'}, 0x4) 09:55:16 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, 0x0, 0x0) 09:55:29 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1e, r0, &(0x7f0000001440)="ce", 0x1) 09:55:29 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:55:29 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000140)={0x0, 0x114, 0x1, @tid=r1}, &(0x7f0000000440)) r2 = mq_open(&(0x7f0000000180)='(*\x00', 0x80, 0x40, &(0x7f0000000480)={0x8, 0x100000000, 0x7c0000000000000, 0x8}) mq_notify(r2, &(0x7f0000000680)={0x0, 0x7, 0x4, @thr={&(0x7f00000004c0)="a99b5e9934d947aaa954041e29c3af398aedee570a121b2fd0063bda0eecbce47af185bfd8bbea5563db5ddb7d3be794291bbc8a41b28d125fd58881bce6413a99a098d1300f04fd336d15ed967592c24b3c85f3b30bdabf8e9cf5be213f4f671fbed9b60b45641ef31b210acaf25c8fbce6ed9423087628794bda004cfa802c6b695ac80f1c58a28c4f3a163b99d007926ad17021e27d504e42ff98f311f95de5bce926", &(0x7f0000000600)="6a368eeeaa0de459528515f692c2cb94a505ddf3e6b84e913421fbed77a32bee907c5a615f8d38f25c700ce90e5063a844a9717b917a6637c63c0f9bbd11807473b5cac16d02ecf92b25bb79e524ee3d98cde5ea797329176c7d6d743a3ea4c3618173a9e0be52025464bffa40cfc6012d05ced45c7e"}}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)=0x0) timer_getoverrun(r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}, 0x104a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2f) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000c00)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) 09:55:29 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:55:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf3"}, 0x1a) 09:55:29 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:55:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, 0x0, 0x0) 09:55:29 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 09:55:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1'}, 0x4) 09:55:29 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:55:29 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:55:29 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x2) 09:55:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1'}, 0x4) 09:55:29 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:55:29 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:55:29 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 09:55:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf3"}, 0x1a) 09:55:29 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000140)={0x0, 0x114, 0x1, @tid=r1}, &(0x7f0000000440)) r2 = mq_open(&(0x7f0000000180)='(*\x00', 0x80, 0x40, &(0x7f0000000480)={0x8, 0x100000000, 0x7c0000000000000, 0x8}) mq_notify(r2, &(0x7f0000000680)={0x0, 0x7, 0x4, @thr={&(0x7f00000004c0)="a99b5e9934d947aaa954041e29c3af398aedee570a121b2fd0063bda0eecbce47af185bfd8bbea5563db5ddb7d3be794291bbc8a41b28d125fd58881bce6413a99a098d1300f04fd336d15ed967592c24b3c85f3b30bdabf8e9cf5be213f4f671fbed9b60b45641ef31b210acaf25c8fbce6ed9423087628794bda004cfa802c6b695ac80f1c58a28c4f3a163b99d007926ad17021e27d504e42ff98f311f95de5bce926", &(0x7f0000000600)="6a368eeeaa0de459528515f692c2cb94a505ddf3e6b84e913421fbed77a32bee907c5a615f8d38f25c700ce90e5063a844a9717b917a6637c63c0f9bbd11807473b5cac16d02ecf92b25bb79e524ee3d98cde5ea797329176c7d6d743a3ea4c3618173a9e0be52025464bffa40cfc6012d05ced45c7e"}}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)=0x0) timer_getoverrun(r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}, 0x104a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2f) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000c00)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 09:55:43 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x3) 09:55:43 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:55:43 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000140)={0x0, 0x114, 0x1, @tid=r1}, &(0x7f0000000440)) r2 = mq_open(&(0x7f0000000180)='(*\x00', 0x80, 0x40, &(0x7f0000000480)={0x8, 0x100000000, 0x7c0000000000000, 0x8}) mq_notify(r2, &(0x7f0000000680)={0x0, 0x7, 0x4, @thr={&(0x7f00000004c0)="a99b5e9934d947aaa954041e29c3af398aedee570a121b2fd0063bda0eecbce47af185bfd8bbea5563db5ddb7d3be794291bbc8a41b28d125fd58881bce6413a99a098d1300f04fd336d15ed967592c24b3c85f3b30bdabf8e9cf5be213f4f671fbed9b60b45641ef31b210acaf25c8fbce6ed9423087628794bda004cfa802c6b695ac80f1c58a28c4f3a163b99d007926ad17021e27d504e42ff98f311f95de5bce926", &(0x7f0000000600)="6a368eeeaa0de459528515f692c2cb94a505ddf3e6b84e913421fbed77a32bee907c5a615f8d38f25c700ce90e5063a844a9717b917a6637c63c0f9bbd11807473b5cac16d02ecf92b25bb79e524ee3d98cde5ea797329176c7d6d743a3ea4c3618173a9e0be52025464bffa40cfc6012d05ced45c7e"}}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)=0x0) timer_getoverrun(r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}, 0x104a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2f) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000c00)) 09:55:43 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:55:43 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:55:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf3"}, 0x1a) 09:55:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 09:55:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1'}, 0x4) 09:55:43 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x9) 09:55:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf3"}, 0x1a) 09:55:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac7"}, 0x25) 09:55:43 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:55:43 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:55:43 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x10) 09:55:43 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:55:43 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000140)={0x0, 0x114, 0x1, @tid=r1}, &(0x7f0000000440)) r2 = mq_open(&(0x7f0000000180)='(*\x00', 0x80, 0x40, &(0x7f0000000480)={0x8, 0x100000000, 0x7c0000000000000, 0x8}) mq_notify(r2, &(0x7f0000000680)={0x0, 0x7, 0x4, @thr={&(0x7f00000004c0)="a99b5e9934d947aaa954041e29c3af398aedee570a121b2fd0063bda0eecbce47af185bfd8bbea5563db5ddb7d3be794291bbc8a41b28d125fd58881bce6413a99a098d1300f04fd336d15ed967592c24b3c85f3b30bdabf8e9cf5be213f4f671fbed9b60b45641ef31b210acaf25c8fbce6ed9423087628794bda004cfa802c6b695ac80f1c58a28c4f3a163b99d007926ad17021e27d504e42ff98f311f95de5bce926", &(0x7f0000000600)="6a368eeeaa0de459528515f692c2cb94a505ddf3e6b84e913421fbed77a32bee907c5a615f8d38f25c700ce90e5063a844a9717b917a6637c63c0f9bbd11807473b5cac16d02ecf92b25bb79e524ee3d98cde5ea797329176c7d6d743a3ea4c3618173a9e0be52025464bffa40cfc6012d05ced45c7e"}}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)=0x0) timer_getoverrun(r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}, 0x104a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2f) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) 09:55:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf3"}, 0x1a) 09:55:57 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:55:57 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:55:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac7"}, 0x25) 09:55:57 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:55:57 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1001) 09:55:57 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:55:57 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000140)={0x0, 0x114, 0x1, @tid=r1}, &(0x7f0000000440)) r2 = mq_open(&(0x7f0000000180)='(*\x00', 0x80, 0x40, &(0x7f0000000480)={0x8, 0x100000000, 0x7c0000000000000, 0x8}) mq_notify(r2, &(0x7f0000000680)={0x0, 0x7, 0x4, @thr={&(0x7f00000004c0)="a99b5e9934d947aaa954041e29c3af398aedee570a121b2fd0063bda0eecbce47af185bfd8bbea5563db5ddb7d3be794291bbc8a41b28d125fd58881bce6413a99a098d1300f04fd336d15ed967592c24b3c85f3b30bdabf8e9cf5be213f4f671fbed9b60b45641ef31b210acaf25c8fbce6ed9423087628794bda004cfa802c6b695ac80f1c58a28c4f3a163b99d007926ad17021e27d504e42ff98f311f95de5bce926", &(0x7f0000000600)="6a368eeeaa0de459528515f692c2cb94a505ddf3e6b84e913421fbed77a32bee907c5a615f8d38f25c700ce90e5063a844a9717b917a6637c63c0f9bbd11807473b5cac16d02ecf92b25bb79e524ee3d98cde5ea797329176c7d6d743a3ea4c3618173a9e0be52025464bffa40cfc6012d05ced45c7e"}}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)=0x0) timer_getoverrun(r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}, 0x104a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2f) 09:55:57 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:55:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf3"}, 0x1a) 09:55:57 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:55:57 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x7ffffffff000) 09:56:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac7"}, 0x25) 09:56:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac7"}, 0x25) 09:56:11 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:56:11 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f12547b98cf488090461ead6c31b6039010119a53ee4819f1187bbb299c7200", 0x2000000}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) add_key(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="f2ecdefd066100fe66c8655586dd98913bdcbb2765d2500500e7502b1b02b87b3bfd84511169dbf010ebb517c0a1179fb19529531df75d2674b83ffb", 0x3c, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r2) 09:56:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:56:11 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:56:11 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:56:11 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000140)={0x0, 0x114, 0x1, @tid=r1}, &(0x7f0000000440)) r2 = mq_open(&(0x7f0000000180)='(*\x00', 0x80, 0x40, &(0x7f0000000480)={0x8, 0x100000000, 0x7c0000000000000, 0x8}) mq_notify(r2, &(0x7f0000000680)={0x0, 0x7, 0x4, @thr={&(0x7f00000004c0)="a99b5e9934d947aaa954041e29c3af398aedee570a121b2fd0063bda0eecbce47af185bfd8bbea5563db5ddb7d3be794291bbc8a41b28d125fd58881bce6413a99a098d1300f04fd336d15ed967592c24b3c85f3b30bdabf8e9cf5be213f4f671fbed9b60b45641ef31b210acaf25c8fbce6ed9423087628794bda004cfa802c6b695ac80f1c58a28c4f3a163b99d007926ad17021e27d504e42ff98f311f95de5bce926", &(0x7f0000000600)="6a368eeeaa0de459528515f692c2cb94a505ddf3e6b84e913421fbed77a32bee907c5a615f8d38f25c700ce90e5063a844a9717b917a6637c63c0f9bbd11807473b5cac16d02ecf92b25bb79e524ee3d98cde5ea797329176c7d6d743a3ea4c3618173a9e0be52025464bffa40cfc6012d05ced45c7e"}}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)=0x0) timer_getoverrun(r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}, 0x104a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:56:11 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:56:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac7"}, 0x25) 09:56:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 09:56:11 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000140)={0x0, 0x114, 0x1, @tid=r1}, &(0x7f0000000440)) r2 = mq_open(&(0x7f0000000180)='(*\x00', 0x80, 0x40, &(0x7f0000000480)={0x8, 0x100000000, 0x7c0000000000000, 0x8}) mq_notify(r2, &(0x7f0000000680)={0x0, 0x7, 0x4, @thr={&(0x7f00000004c0)="a99b5e9934d947aaa954041e29c3af398aedee570a121b2fd0063bda0eecbce47af185bfd8bbea5563db5ddb7d3be794291bbc8a41b28d125fd58881bce6413a99a098d1300f04fd336d15ed967592c24b3c85f3b30bdabf8e9cf5be213f4f671fbed9b60b45641ef31b210acaf25c8fbce6ed9423087628794bda004cfa802c6b695ac80f1c58a28c4f3a163b99d007926ad17021e27d504e42ff98f311f95de5bce926", &(0x7f0000000600)="6a368eeeaa0de459528515f692c2cb94a505ddf3e6b84e913421fbed77a32bee907c5a615f8d38f25c700ce90e5063a844a9717b917a6637c63c0f9bbd11807473b5cac16d02ecf92b25bb79e524ee3d98cde5ea797329176c7d6d743a3ea4c3618173a9e0be52025464bffa40cfc6012d05ced45c7e"}}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)=0x0) timer_getoverrun(r3) 09:56:11 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:56:11 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000140)={'fscrypt:', @auto=[0x30, 0x65, 0x66, 0x35, 0x30, 0x64, 0x33, 0x39, 0x38, 0x65, 0x66, 0x32, 0x31, 0x39, 0x38, 0x61]}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2df9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72", 0x29}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) r1 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)={0x3, 0x0, @c}, 0x29, r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$unlink(0x9, r2, r2) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x1) 09:56:11 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac7"}, 0x25) 09:56:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 09:56:11 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:56:11 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:56:25 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000140)={0x0, 0x114, 0x1, @tid=r1}, &(0x7f0000000440)) r2 = mq_open(&(0x7f0000000180)='(*\x00', 0x80, 0x40, &(0x7f0000000480)={0x8, 0x100000000, 0x7c0000000000000, 0x8}) mq_notify(r2, &(0x7f0000000680)={0x0, 0x7, 0x4, @thr={&(0x7f00000004c0)="a99b5e9934d947aaa954041e29c3af398aedee570a121b2fd0063bda0eecbce47af185bfd8bbea5563db5ddb7d3be794291bbc8a41b28d125fd58881bce6413a99a098d1300f04fd336d15ed967592c24b3c85f3b30bdabf8e9cf5be213f4f671fbed9b60b45641ef31b210acaf25c8fbce6ed9423087628794bda004cfa802c6b695ac80f1c58a28c4f3a163b99d007926ad17021e27d504e42ff98f311f95de5bce926", &(0x7f0000000600)="6a368eeeaa0de459528515f692c2cb94a505ddf3e6b84e913421fbed77a32bee907c5a615f8d38f25c700ce90e5063a844a9717b917a6637c63c0f9bbd11807473b5cac16d02ecf92b25bb79e524ee3d98cde5ea797329176c7d6d743a3ea4c3618173a9e0be52025464bffa40cfc6012d05ced45c7e"}}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 09:56:25 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000280)="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", 0xfffffffffffffdbd, 0xfffffffffffffffb) 09:56:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:56:25 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:56:25 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 09:56:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 09:56:25 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:56:25 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:56:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 09:56:25 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d56"}, 0x2d) 09:56:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:56:25 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:56:25 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:56:25 executing program 5: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(0x0, r1, 0x29, &(0x7f0000000740)={0x17, 0x7, 0x6}) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000800)={r1, 0x0, 0x49d6}) ptrace$peeksig(0x4209, r1, &(0x7f0000000cc0)={0x0, 0x0, 0x5}, &(0x7f0000000d00)=[{}, {}, {}, {}, {}]) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) r3 = creat(&(0x7f0000000b00)='./file0\x00', 0x67) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000b40)={[0xfffffffffffffffb]}, 0x8, 0x80800) r5 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r5, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) r6 = getpgid(0xffffffffffffffff) stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() setresgid(0xffffffffffffffff, r8, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)=[{&(0x7f0000000200)={0x1e0, 0x2b, 0x300, 0x70bd28, 0x25dfdbfe, "", [@nested={0x1c8, 0x69, 0x0, 0x1, [@typed={0xd7, 0x96, 0x0, 0x0, @binary="8173f668ca13e927e2f6c1f84454a57280fd9c58e344f217fbba0ecb6b8a3da2fef3732c23c73326d793b0c88c64fb6c07847c356a612f08c35c9fc25adb096eeedf1a268d03244288f19317169c56550fdc65f70399167e37145ec8f53b19611df098762ea285d926563ca258a7c1d6ab2ceb33efa566585056cf3e0179aff34df14dc9420d8829e625c86ecb1b74a3f49535cf62a6e335889a559112be7dbf597884df3b9acb4f129b91ed5ca73fd212eaf2480d2b7ba65269792be5878655c0d77cda4b15cdaa14a198051bb9a709876ea0"}, @typed={0xf, 0x8e, 0x0, 0x0, @str='/-/-,{#,}:\x00'}, @generic="dd3c2ff60b8017311e5ffb946da6c7c84ff132c44ced5b9978645468bb1d5c114fa68fe7dd54fb1541c04be23212fc79b1ec67737bb8252e12dbf29f6810262d01447c521359e9fa0316d9911efba24ad596e1d00b3da328e83d8e18cf4c1f923aa5a717b323a5a50751ae551e59451df77881f9f1ebe4633e016d35fcd2136dcc07d3abb71ab3a7d1aa6c112827a084c5fa3bdfe949305e2a770480f04aaa8cb3e0a735e8bbdf9a60c23c475f138d6a07fc99f8e642b1db440f2a31525f228e639c7c8e05c6d7e73b1d", @generic="de76b8c8bc50", @typed={0xc, 0x48, 0x0, 0x0, @u64=0xf1}]}, @typed={0x8, 0x89, 0x0, 0x0, @fd}]}, 0x1e0}, {&(0x7f0000000400)={0x1e4, 0x25, 0x1, 0x70bd29, 0x25dfdbfd, "", [@typed={0xc, 0x52, 0x0, 0x0, @u64=0x100000001}, @generic="3b23950709e7f6dd4897d9bfe9787b179d13a65c1b365079f4311687863647d3c5120119407bdf6171bb89e1ec8ebc7b760c425c32e4c92ccc57da155fe216a8e5dae7fb133f378df5b473823d6048a4fac5da79e68c6cf58b294a8656e7516bc27da29f5e011b3029a6960692", @typed={0x8, 0x2b, 0x0, 0x0, @uid}, @nested={0x14e, 0x3e, 0x0, 0x1, [@typed={0x8, 0x65, 0x0, 0x0, @ipv4=@remote}, @generic="a3321c6fd94425ac257666aa9df6dd0af8317fe0767f77101d4cb7ade75d39e84b576c7a30f4170f80b51367c41a7a8e0c5ce72819010870d768f9cb815899b229369a6d4313b4d4f4f432f5e8621f3a2a2065fd596f1038b78742570fb70ac0ea08d078181a7edf5442b438f941ef988049dafaf51f9f16f1c5e719fc12153e8e4bfba1146fdd545d826f7932ef737850d51b1379680d499eb32a38f5e31a067083b08ed3a2925f998aeb3a9773f1447528b4e1901c7a367f0df386d81aaf72e86f8ac38f6dd93f81bff905a850bbc4455ac0", @generic="f5e1271f2f3eb614bb36b3b4609db357808f744fcccef08377ebaf5c853ce6750ce38f01172b91da759c4da10f80f253f138e45c6b2a185bce4acfa3c6f46019863c1ea29d615dc9a8f8864a72ababf77de0232f5f5dd4ccbf7c7c011a809394495d8862", @generic="710e6deb5494b081bc2f27"]}]}, 0x1e4}, {&(0x7f0000000600)={0x14c, 0x14, 0x100, 0x70bd2c, 0x25dfdbfb, "", [@generic="64d0b918144a7e491660f08c0fbe8b2bcdb975882a43604de0e343a87271db77cee4575a015cb7f193785482b9fe306efeca8c7820e731f21d6a2e79c25b475ef734bfc8de0239f17cc6982255b474635e00b3d56a92be928d2c1df8dcfb3dddb3682f220d3222cd7790cea407b3cac6d54181825bf5a78c6fefa465645b982dfcc8fd8ed04f4b0481ed3a7506266436387307511b35d6864a5f", @nested={0x8f, 0x5e, 0x0, 0x1, [@typed={0x8, 0xe, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x87, 0x0, 0x0, @fd}, @typed={0xc, 0x72, 0x0, 0x0, @u64=0x200}, @typed={0x8, 0x68, 0x0, 0x0, @uid}, @typed={0x8, 0x5a, 0x0, 0x0, @u32=0xfffffff9}, @generic="f582a5eb5320bbbf83522bc5c30a852893aa5212b81751fc95d6b69091e4a41f3e413f357d9003b84fbd3508fd44b1e34943709a66aff3b485ed8c01bc68368df225a0f4b2ee975b1152571bc39d89fa13cea14e4477d29eec42c1f4deb2a1"]}, @nested={0x10, 0x93, 0x0, 0x1, [@typed={0xc, 0x69, 0x0, 0x0, @u64=0xffff}]}]}, 0x14c}, {&(0x7f0000000780)={0x248, 0xfffa, 0x100, 0x70bd2b, 0x25dfdbfb, "", [@generic="0b7b4260abfe3a2bf029cebddfe08f83a6b64fa62f914ebcf5ed0da8fc31aac92d13e371f2ce67be054e672ab8f0e68b056985cc36dd161b9426779ff00e5f4bdabbcdfed85cac165290cb9d4dde26827afe4459d037d87393fcd42094bb45852f757e00e21528bd658c10387d981f06491c", @nested={0x58, 0xc, 0x0, 0x1, [@generic="afe685d6cd7897f13624", @generic="a7a1", @generic="ef9e70a3a351e58aba74d9c4ee4cadb1a67e23611c87d2d76f3843cb34dacbd1677ab807f59ee328db12e794789f5b6659c151e803a2b181ee712d61d6708d1f", @typed={0x8, 0x88, 0x0, 0x0, @uid}]}, @generic="3cb3ca0f17c2c7955827c664e6d6fc2a69b90cf18017fd9ce4e2c83c954d3216917cc91eeed548750d01f2382b5824cc240b9b9249bea6b4e87173a7211c61fca0d86ed2732c4b88098afd61be0b236aa9ff57b5b9e319d6b8d0d1b8cb", @typed={0xf9, 0x28, 0x0, 0x0, @binary="f1a48422bcba6adaf19f3a4aacc123af45661ec89c59a7fb7746d2584007addc23f2a8f03f1230ad1de1efcae774d0df9ff169c4af93cf803747f8c9ac4205faafd7f453030cf5dee40b11ff8a7262fd7233399643fac97369d3b21f05665c68b9f1852a21fa5cd3ce2ec570202eec8d27fe0a33ba62eeae04a592e78a5772b75556289e933496250daf6ea00bee1d23dc87e285fce9f5e277f8b7db564ecc1a1b24ddca56a286d1ea2fd86a03cab15ef069791e7faa7485257c88ad3fc58fd03bd02489307300d44c9a33e1b5e8cb0c7820095fc04c95bdc0110f605fae00de01a9df3dc0c65ae357b025a521e79d425c4f07a5e4"}, @typed={0x14, 0x88, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic]}, 0x248}, {&(0x7f0000001480)={0x1090, 0x22, 0x800, 0x70bd26, 0x25dfdbff, "", [@generic="1b914d15c00fae456097d8d5d1d655eddd55acd6cf7fe044ba471f2755581586fed3f88734a169569dc17b32e937820571a757436a120ad7f79e93fe8ef7a534dcda689c06aee886866d0c4cc6e577694ab5416eccce0b2b1d761350689c9771dc4984ceee1ad5b75ac527b450", @generic="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", @typed={0x4, 0x6c}, @typed={0xc, 0x89, 0x0, 0x0, @u64=0x2e}]}, 0x1090}, {&(0x7f0000002540)={0x2394, 0x1f, 0x6cccedd649dd31f7, 0x70bd2b, 0x25dfdbfb, "", [@generic="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", @nested={0x16f, 0x53, 0x0, 0x1, [@generic="1c009e9eaf5d464e52d969707f5ee6bec966db0b14ce6fe67db456dc6b4e4b05358811772f4a5ac456a1ff0736862ba2f6a66cfd7d74ef5267e07521f5c3850f9741187fc19a232842133ea9e7375f53c469d98fb58034c66effc2317ce841d986ade8d561901def9c96427ac40fb3dce2e1e897e5935d679af373d123e7ba1e0b0d91d30d405d8c4fe6dea45581eca613f95bbeead334078deec82a8e7458c19de70e11b3e6cfef0f64662cc186ad64f316a75d0ddc7a461b2e1845ab5edcf9adf341d51f0fa723d6d736a7fd12a2c66a794afcb7256456221d2051ffb275", @typed={0x4, 0x22}, @generic="7372e1c52b6f3629d868bf31a23f6e850a9f123c0e106095c5b7736f9a9315b443b4b7ac0162900c87418ae672598ae3b35d0fd1cfe45d44b2e09c753da3d24f0984219626dcf274a0d2a8ba4cbc69d2c8de3b319c1001d1785b04bf0923751d6211c61a6d5178d2779002e097ef957d60c16771369f4384af7e1589256e7920c4dc4607", @typed={0x4, 0x89}]}, @generic="508cb8e7817aaa34000695e3231ae5e09c614a342a7924ad51f288e70b94eac5e3f515744abf02dba3f6639f66b79a00", @nested={0x126, 0x80, 0x0, 0x1, [@generic="1a6ef03fb7c1550b1e2a4209ab8c061b9cc91761998b5017b2a0d6e7f6b7e519a07d36075c24e0a4213a76f7928b52a5d75978837205719bb06225061d5d52a503488390e321873478b0c5571952057c6f69047676d656e7cb7b70576edede2b39641e98c250868bfe38e2c165e894d694e3086c00695622c2e6550f6aaa2cf08b1c0dc448e6f70ef79f1fb1878b53f3d6", @generic="06bbc37f5102911d00b07578b3a0cbace000813e7dae5fe43ccd7c40a686c039065a81d87074afa8d553765111a0513c6a5544a468001e0c0076ca90428a4710c6adaeaa068a42761985567e474227f4da0a326c89cce9172a823d67405a59c4a526915d8b9888898bccc43084a637974c63391ca07b982b4b6a1c7aef8108e4b288e43dc53c354f9a", @typed={0x8, 0x54, 0x0, 0x0, @u32=0x7}]}, @generic="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", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x2}, @typed={0x32, 0x39, 0x0, 0x0, @binary="794a967bb5530c8da1260d5919c085d719f7c2203a8335d47cfc99098a5b19b43c1c2f11f6343f64b8351359b4dd"}, @generic="3e4de21e28f0145213f8a00c82f0d1a0afb7a0785ce8a7e1f91b3723a54233d5104e721117e9ac3cdb51d05de6ea28cebcf9ec594e9cf4e467febe5f81c7417df669f22592bffc3613e87174b25fef5aa46fc1ab3ee1caaa952e4b92e4170ad679b59d208183b6775ace445b875a624651aede73125a602f378ea0efe286be4e"]}, 0x2394}], 0x6, &(0x7f0000000c40)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, 0xee01}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}], 0x140, 0x2000}, 0x4000) r9 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r9, &(0x7f0000001440)="ce", 0x1) 09:56:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 09:56:25 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000140)={0x0, 0x114, 0x1, @tid=r1}, &(0x7f0000000440)) r2 = mq_open(&(0x7f0000000180)='(*\x00', 0x80, 0x40, &(0x7f0000000480)={0x8, 0x100000000, 0x7c0000000000000, 0x8}) mq_notify(r2, &(0x7f0000000680)={0x0, 0x7, 0x4, @thr={&(0x7f00000004c0)="a99b5e9934d947aaa954041e29c3af398aedee570a121b2fd0063bda0eecbce47af185bfd8bbea5563db5ddb7d3be794291bbc8a41b28d125fd58881bce6413a99a098d1300f04fd336d15ed967592c24b3c85f3b30bdabf8e9cf5be213f4f671fbed9b60b45641ef31b210acaf25c8fbce6ed9423087628794bda004cfa802c6b695ac80f1c58a28c4f3a163b99d007926ad17021e27d504e42ff98f311f95de5bce926", &(0x7f0000000600)="6a368eeeaa0de459528515f692c2cb94a505ddf3e6b84e913421fbed77a32bee907c5a615f8d38f25c700ce90e5063a844a9717b917a6637c63c0f9bbd11807473b5cac16d02ecf92b25bb79e524ee3d98cde5ea797329176c7d6d743a3ea4c3618173a9e0be52025464bffa40cfc6012d05ced45c7e"}}) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) [ 555.928165] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 555.928165] program syz-executor.5 not setting count and/or reply_len properly 09:56:40 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:56:40 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000140)={0x0, 0x114, 0x1, @tid=r1}, &(0x7f0000000440)) mq_open(&(0x7f0000000180)='(*\x00', 0x80, 0x40, &(0x7f0000000480)={0x8, 0x100000000, 0x7c0000000000000, 0x8}) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 09:56:40 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:56:40 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, r2) r3 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72", 0x1f}, 0x48, r0) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r4) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r5) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, r3) keyctl$unlink(0x9, r5, r5) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r5) keyctl$search(0xa, r3, &(0x7f0000000300)='syzkaller\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0) keyctl$unlink(0x9, r4, r4) keyctl$search(0xa, r4, &(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x3}, r3) keyctl$update(0x1d, r3, &(0x7f0000001440)="ce", 0x1) 09:56:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d56"}, 0x2d) 09:56:40 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:56:40 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:56:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d56"}, 0x2d) 09:56:40 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:56:40 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:56:40 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:56:40 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:56:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d56"}, 0x2d) 09:56:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d56"}, 0x2d) 09:56:40 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72", 0x36}, 0x48, 0xfffffffffffffffc) r1 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000001480)="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", 0x1000, 0xfffffffffffffff9) r2 = add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f00000007c0)={'fscrypt:', @desc1}, &(0x7f0000000800)={0x0, "5534c8db1a1b50b1d0b52f49e083e90c02a43b9b3586a80ab9ba5740684b551c158117f43335a59ef386a0542e217f137594ab7ab7f79cf6a26059d8c2271782", 0x21}, 0x48, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r0, 0x0) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) add_key(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000900)="f59ba51b70cceaf27210f09ad8e91e1a19a484e85e1072f2986e2074dab0a3e02c9b5b3d61f426136dbf34a4d80670e8de99503536ac6cd8c3ea53d4f741978d203e985979357aeca0bffb500555cf68c175c3cd51b634015dfab8334f6ea01e6ebc4bf32f40d7c9c69f149163c1441b7cfd2bbdf99b9d89921b1b885d4865738a74c0197f0051a56daadd966816cbb73764ee6e91fb7f2920dba2afa4b40d1d96c7eeefb2e19789ea4eb75306359879a61305385464514591177f720bcea23e48a7b8eb7b2c635cd3c0233434ccd862f5051e1d20ce1bf62568087d4833af509461e6983d6cf3f943e5", 0xea, r2) readv(0xffffffffffffffff, &(0x7f0000000880)=[{&(0x7f0000000280)=""/172, 0xac}, {&(0x7f0000000340)=""/182, 0xb6}, {&(0x7f0000000680)=""/121, 0x79}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000000480)=""/205, 0xcd}, {&(0x7f0000000580)=""/193, 0xc1}], 0x6) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000200)="7b8394745ed49d0332dc31983cb6582e26bdba6d0d2740ee6d04e138fd398c4c5ca961f1b47480fe77d8e042a05e67d7fb3fb0a125f08c86d59376daba46d0fd3a77f0c5796f59ccda3fe19c6a0f20f17ed85a6000263133228d29135527edab447ab49818bc9af79835162648f8ff0c439401c8e6c7", 0x76, r0) 09:56:40 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000140)={0x0, 0x114, 0x1, @tid=r1}, &(0x7f0000000440)) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 09:56:40 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:56:40 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d5613"}, 0x2e) 09:56:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d56"}, 0x2d) 09:56:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d5613"}, 0x2e) 09:56:54 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 09:56:54 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) add_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="7c78fb5f5495a789143b6cf9004e7498a3b1fea25bfd6159381fe734eae1", 0x1e, r0) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 09:56:54 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:56:54 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:56:54 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:56:54 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:56:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d5613"}, 0x2e) 09:56:54 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:56:54 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d5613"}, 0x2e) 09:56:54 executing program 2: timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4}, &(0x7f0000000bc0)) 09:56:54 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:56:54 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) add_key(&(0x7f0000000280)='id_legacy\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="4bd5403713c0a4ac6a51631b2dbe540a1a761b937eab9af5b15d290ae1f93133410b7952afab2c8bc0c12392b0fe3f01d38ebb7dc24a8f1301d9887173acbcc3ecada553858f973e7c7870622fc249a0db721d6265fa3fad7a7078000d06b24b", 0x60, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "91d6c62879e80d02885c2e72af42aaad570d006162d858a8600dd4467f173006c93e6b2c94a8d4b2337c1caee1bdf9d883d22bc3390a6df28d7ba6e30f10065b", 0x1e}, 0x48, r1) 09:56:54 executing program 7: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:56:54 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d5613"}, 0x2e) 09:57:08 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d5613"}, 0x2e) 09:57:08 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:57:08 executing program 2: timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4}, &(0x7f0000000bc0)) 09:57:08 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:57:08 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:57:08 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$negate(0xd, r0, 0x4e81, r1) 09:57:08 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:57:08 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:57:08 executing program 2: timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4}, &(0x7f0000000bc0)) 09:57:08 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:57:08 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:57:08 executing program 2: r0 = clone3(0x0, 0x0) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 09:57:08 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:57:08 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:57:21 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:57:21 executing program 5: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @link_local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0xf, 0x4, @broadcast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x1, 0x4, 0x14, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x7800, 0x8000, 0xffffffff, 0x1f}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x174, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x8040}, 0x20000800) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r4, &(0x7f0000001440)="ce", 0x1) r5 = epoll_create(0x7fff) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)) signalfd(r6, &(0x7f0000000140), 0x8) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000001000)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000001480)={0xb40, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0xb04, 0x8, 0x0, 0x1, [{0x158, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x154, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x2}}]}]}]}, {0x58, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xfff, @local, 0x8000ff}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffff}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x2b4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x240, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x8}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f2f136ed9233fd29c609c05bf2e7d215356812bdeb1ef74f8b7e45517a28aaf8"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @private2, 0x10000}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "314888dfa376edbd7d73aacd42047b0f6caf09fc25d826ca0cdfc8a6c360c6cf"}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x190, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @private0, 0x7}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1ddcc115d537ce775afe8d5574e33fe5cbb2ead02e6f06c2a9b0b78841fe5bb5"}, @WGPEER_A_ALLOWEDIPS={0x148, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}]}, {0x4f8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x10000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0xfffff001}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3, @mcast2, 0xd34}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x45c, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x91}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}]}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x92d5}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0xb40}, 0x1, 0x0, 0x0, 0x4a404}, 0x4040014) 09:57:21 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 612.144733] syz_tun: entered promiscuous mode [ 612.152861] syz_tun: left promiscuous mode 09:57:21 executing program 2: r0 = clone3(0x0, 0x0) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 09:57:21 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:57:21 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:57:21 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:57:21 executing program 0: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:57:21 executing program 2: r0 = clone3(0x0, 0x0) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 09:57:21 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) [ 612.217629] syz_tun: entered promiscuous mode [ 612.221450] syz_tun: left promiscuous mode 09:57:22 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:57:22 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:57:22 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, &(0x7f00000000c0), {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 09:57:22 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:57:22 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:57:22 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "4f866a41bb85249241d18b1022d2db9fee153f125d88df1dd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$negate(0xd, r1, 0x7fc2, 0x0) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r2) r4 = getgid() getgid() getgid() setresgid(r4, 0x0, 0x0) keyctl$chown(0x4, r3, 0xffffffffffffffff, r4) keyctl$unlink(0x9, r2, r2) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r0) request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='fscrypt:', r5) keyctl$get_keyring_id(0x0, r2, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r6) keyctl$unlink(0x9, r6, r6) add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000280)="e28b0d3397e21f972228951464", 0xd, r6) 09:57:35 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:57:35 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:57:35 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:57:35 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) r1 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', r0) keyctl$reject(0x13, r0, 0x9, 0x80000001, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$unlink(0x9, r2, r2) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r2) 09:57:35 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 09:57:35 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:57:35 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:57:35 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:57:35 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:57:35 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:57:35 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bea89fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 09:57:35 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:57:35 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 09:57:36 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:57:36 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:57:36 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:57:36 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:57:36 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:57:36 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7, 0x2, 0x2, 0x6, 0x0, 0xffff, 0x8c00, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x1480, 0xc0f, 0x5, 0x5, 0x1, 0x4c6, 0xffff, 0x0, 0x3, 0x0, 0x1}, 0x0, 0x7, 0xffffffffffffffff, 0x1) r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) tee(0xffffffffffffffff, r1, 0x1, 0x1) lseek(r1, 0x2, 0x0) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 09:57:36 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:57:36 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 09:57:36 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:57:50 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:57:50 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:57:50 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 09:57:50 executing program 5: ptrace$peekuser(0x3, 0x0, 0x7f) r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r0, 0x0, &(0x7f0000000000)='85baa174f0cb1142') add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @auto=[0x63, 0x39, 0xdf1fba0e205cc56b, 0x67, 0x62, 0x36, 0x32, 0xc, 0x35, 0x63, 0x61, 0x35, 0x37, 0x63, 0x64, 0x30]}, &(0x7f0000000200)={0x0, "992a762139e617510b23837d1bf4fe79636dc277f96d4c224a9c22c2bc5ef63dd99d9501b9face4c83a4f0c3e87788a24b3cecc48db727cbba52e019b54c5401", 0x3f}, 0x48, 0xffffffffffffffff) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 09:57:50 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:57:50 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:57:50 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:57:50 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:57:50 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:57:50 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "9e934c4472cefa9a00bd91b1155c85ae34b23db4b80f237a8cab33896a58b9e7bb3e12ff8ccdca3dd1dc741744bbe4ac7ad5c2651eb732890c59581e5e977707", 0x32}, 0x48, 0xfffffffffffffff8) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 09:58:04 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:58:04 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 09:58:04 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72", 0x24}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) r2 = getuid() keyctl$chown(0x4, r1, r2, 0x0) 09:58:04 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:58:04 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:58:04 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:58:04 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:58:04 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 09:58:04 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 09:58:04 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:58:04 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:58:04 executing program 2: clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, 0x0, &(0x7f0000000bc0)) 09:58:04 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) keyctl$read(0xb, r0, &(0x7f0000000080)=""/46, 0x2e) add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) 09:58:04 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:58:04 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 09:58:04 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:58:17 executing program 2: clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, 0x0, &(0x7f0000000bc0)) 09:58:17 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:58:17 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 09:58:17 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:58:17 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:58:17 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) request_key(&(0x7f0000000340)='cifs.idmap\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='.dead\x00', r1) r2 = request_key(&(0x7f0000000000)='.dead\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000200)='85baa174f0cb1142', r0) keyctl$update(0x2, r2, &(0x7f0000000240)="d183817405a6ad5ac9e8845f001288a801c74351b4dcab45e7aadbb6b859b77130b8f27d5e8a9d0bdc1b8d9ffd860bec54246d441b7a3bcd83ae6e63947589a4441604a746c84703fe370888faba4777a42be2e1527a8f4f2894ffcb242fb73f3ad507d01634bbc8e7da2376b954dd329284746931f502495d1eade77a699adb1ee18e8e6544c114e0cdfbc4129779e4e3fe506b512b32b0eb6eb109f3a75d358645828cdc1a8dd9ec55c7a5de8b57ca705abfbd67cf9c2306a66265d9b0d7cfc5fbfff205be8bcfc7c5e2f2eb125fbadbce8292778c64021dac591a12e714157b8bd4c073829c156a217c6019ec91ad4d06f1", 0xf3) 09:58:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 09:58:17 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) [ 668.058934] cgroup: fork rejected by pids controller in /syz2 09:58:17 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:58:17 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:58:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 09:58:17 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:58:17 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:58:17 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "10c51224020000004ca88c090d86f24de12ed4581dfb683e21c8542100251c20dc6a650704df2d0863ba0ace552c75d02dcc6be938e7f6498ff9e026fa036c57", 0x9c}, 0x48, r2) keyctl$reject(0x13, r0, 0x0, 0x7fffffff, r3) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$unlink(0x9, r4, r4) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r4) 09:58:32 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:58:32 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:58:32 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:58:32 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:58:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 09:58:32 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:58:32 executing program 2: clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, 0x0, &(0x7f0000000bc0)) 09:58:32 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db3f125dff0f000000000000b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c7200"}, 0x48, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) keyctl$update(0x1d, r1, &(0x7f0000000700)="ef99c982284c8dbe8c128bd3f8381349b4640a8a52ee8fdfeb784601d2eedd063db796469c385f2000000076d37c4ef1cdc00035d2488484ea95e2e0ce03081db046a0c363ee4129f91f19904283e99d2fa3d0d0d12f08001cda159262728387a90f86692608f3c6a94136d2eababae33e806fd7cfaf8b6df96d2e4cab0a79f163896d4c0d0abda2f902290f8641eeefc96e1a51975e3308e93645d5bd5b2a6705f02353ad844d02a9e49782b53f4c97bee5da07554e9eaf89b39c7f65d1d2c8dc9b8515eb0542b3beea5f8155c2b2f534b88290f056dd65290c9e180b7ff38a60fb58a9768886cae10a8670bbefad64398523cce105287b098d82fa71c73ce12cb4d6c19f1b3a4499f5130e7dc3bc9b2e7995dbbb31135dccbad7ef84d05915c1a5505db1333dc58fb1a2d0c850cb51f70038e22cba51e24f94aff8c27d28ff8449da128a40ceee5f0475e710741a717230c180aa889bcab2a260d335203866e24fed33997d01f860fb952eb2d2fea664facd51ee285509ce2b5258a9506c737d358fbab17819d1edc87e74a7c8f9ccbab6a02e3a2748fe70b1799c1285dda763484bed616ef5ef7f2fe0b3d484ba7e6371c04309727fa4e94ae0e15b3c777823865eddd3c23499cddcff6d00ac0fd5e962", 0xffffffffffffff58) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$unlink(0x9, r2, r2) r3 = add_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$instantiate_iov(0x14, r0, &(0x7f0000000000)=[{&(0x7f00000002c0)="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", 0x108}, {&(0x7f0000000200)="379e9592e4c3abd066b45c1e45ee96ea2c095d8b7b061e29497e1835e80c7375ab15c3fc6ed3c70ce2272457d157df837663d421f65ac72f933ba3bf20d5483a8c6c99e7a9d499badaf5c08b51", 0x4d}, {&(0x7f0000000580)="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", 0x142}], 0x3, r3) 09:58:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 09:58:32 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:58:32 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r0) r2 = request_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000440)='\x7f\xf5\x10n\x85J5\x01^r\xde9Ci\x18o^\xa96\xe0a\xbd\x88\x12<\x0fK\xf2\x1b\x1d~Y\x99\xc0\xf4{\xae\x8e\xfeDV1\xcf\xb3\x1d\vG\x06\x88\x8dy\xc6\x9a\x8a\x1bT\x817f\x00nWV\x9ab2\x8d\xe13\xddy\x98\xef\xb1\xea\xed\xa3\xb1?\t!\x10\xfa\"\xe8\xc1\x9f\xf7\xc1^\x93\xc2\xe4\x87\xc9M]1\x9d\x83\x1c\x99\xff\x06\b\x13\x05ng\xcb\xd7\xef', r1) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000004c0)="f824daf943c4e3a2faaac3716235c84a74088b582c6009d10ad3f8cbd45df22f474f5f35671ee4af92884cf306aa2ecc425f69ba3f2be1000000000000b9bfe311213f6b7e126635039dff2c6b8ab1ccdc7ed8b60b25492dd8fc0936509c79ab63e367358e0cc2c8591d612b60666d443513433eba2167232bf75462d5319212e1b7d4437c76f0a546b3503e08c24246ba1c548d3b36702709aa44daadd2c7fd33f3021f2ac99a3c52328aa22a50d1da52c6d4e7da3d31c21951cd3501e7304f73576626c17f5a66d8c132a0cf27f3fb216b2c1e153af6266161f6900318b4f66944cd5c93b6464abd5c8e6ebe63632182f86234b668187a078d121448155b3a37421d41f177676ceb7352bbf00c6181b877984b1e68b7b8f9ec0f3f870765972aaa96ce73afe3fe40348fee2df74d48e7f5b3c4f2be750770b5a697fa38faefcbd56d6a11426a8429101ceb9e490aa9f259f8a4a99f1e67d743af22a452d023ec40a28034a43d0cd702e17cc45bca83b03b2146f6058f0f5e0a4834382af9036ea705a16814fa03f81dfbebccd91e9c4d8857fca20e26f060c8fb962e3613856b72857c897d1d91eb365cdd2ae381e751adca5077e0d3f904eee58a2dd5553a94cb244cdfae68de61c93f084154ca73bf6387e8bb558891c6ebbc7ffeee03147366c4b63413c78be201549be251782cbd4d53d162fcd68a3b5315dd91c2f9f7a061974a5a8205a7f55402c054376759d48f082d748b7480bff335b9c7dfaf9034287fbccb8a8b78306f5b806ef0cb1bcc5bf8051f17efe2e9c692730ad5", 0x23e, r2) keyctl$update(0x1d, r3, &(0x7f0000000300)="0620721ce9c2086aeeb433e771b0dcfe0dc684963df046226b4814fae48a5da4d987cf0919824ab474271ffdb8f9dccff6b719e271944989c70c3eacb01a8fc82bdcdd5096f11ec32b60dd9683984fd356189af74dd392572752ece2f7e009b6379f979cd956be6ccaac8e4a32de66f888b3ee7a91436a93cad8164398f386f4a51489975bea776510cecb91e04aaf66a048059239333c35f1fd", 0x9a) 09:58:32 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:58:32 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:58:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 09:58:32 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:58:32 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:58:32 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x0, 0x4, @tid=r0}, &(0x7f0000000bc0)) 09:58:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 09:58:45 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:58:45 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x0, 0x4, @tid=r0}, &(0x7f0000000bc0)) 09:58:45 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:58:45 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r0) request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='{)\x00', r1) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 09:58:45 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:58:45 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:58:45 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:58:45 executing program 5: keyctl$update(0x1d, 0x0, &(0x7f0000001440)="ce", 0x1) 09:58:45 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 09:58:45 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:58:45 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:58:45 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) add_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000200)="7bb9d5ff63899f23917dd5b1dddffded19891a60ef8c873f0d1475f9d7bd3c46d44d395c5db3436e8eb3d91a963d4f19c412b8f044b0abca2b7cd847403e390128c9e7f7bd5ebfc379aeb4e0fbf14281144cbecaba190517d826c417cad88007110d3a24743b7c100990e1e68e8916f557bb0c1a13690f80dd738c4da7648d19eac574002bbab9b3647f5b6a36f669ab68e615b7c1bfac513ace44b2677be05e61d7dc19a5b69589754ccfa33f6f9ab329dc01a6", 0xb4, r0) 09:58:46 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:58:46 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:58:46 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 09:58:46 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x0, 0x4, @tid=r0}, &(0x7f0000000bc0)) 09:58:59 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 09:58:59 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:58:59 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:58:59 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:58:59 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="71e89d6308de35f5259a868e7f5b9a83600bdcc6d4d10b36608ab641b279224523f4ff2b6d00f1b0d146d3f062af25018f1a1ec99abf88f0519bc67faeccc23f362b778e6ea7a3478e436974cc0aa8bb8ef19d7b2807970ce31304992ca5a7e557251b7c0f0d69c18edcdd9158817b66b5ba975a9819", 0x76, r1) 09:58:59 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:58:59 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x26, 0x0, @tid=r0}, &(0x7f0000000bc0)) 09:58:59 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:58:59 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:58:59 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72", 0x1}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) keyctl$get_keyring_id(0x0, r0, 0x8) 09:58:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 09:58:59 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:58:59 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x36, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:58:59 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 09:58:59 executing program 5: lremovexattr(&(0x7f0000000600)='./file0\x00', &(0x7f0000000700)=@known='user.syz\x00') r0 = epoll_create(0x7fff) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) recvmsg$unix(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000480)=""/76, 0x4c}, {&(0x7f0000000500)=""/149, 0x95}, {&(0x7f00000005c0)=""/40, 0x28}, {&(0x7f0000000600)}, {&(0x7f0000000640)=""/170, 0xaa}, {&(0x7f0000000700)}, {&(0x7f0000000740)}, {&(0x7f0000000780)=""/51, 0x33}, {&(0x7f00000007c0)=""/65, 0x41}, {&(0x7f0000000840)=""/138, 0x8a}], 0xa, &(0x7f00000009c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x3) openat(r2, &(0x7f0000000a40)='./file0\x00', 0x400102, 0x6c) signalfd(r1, &(0x7f0000000140)={[0xffffffffffffffff]}, 0x8) rt_sigsuspend(&(0x7f0000000440)={[0x8000]}, 0x8) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x20, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}}, 0x402c000) r4 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r4, &(0x7f0000001440)="ce", 0x1) keyctl$get_keyring_id(0x0, r4, 0x4) r5 = request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000002c0)='85baa174f0cb1142', r4) add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000200)="029a2e9a0990b62d8ad5f98f8c844b5e93fc0a1a4926927aa9b3c40cd032e63726bc5dfc6d8a24e7f5349c41dee15d9ec6665638484e4b6680f19ed1d6ecafcf44772b6a2b30f19e3188ce92ff171c58aa0d832da403847ea283228e4f142356e72bf8c705811e14307b5a41ac63523e44579d14ca8c821fd8bd6f0cb6509d150e503f67ea8731d39fa49066fac8e67a04", 0x91, r5) 09:58:59 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:58:59 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x26, 0x0, @tid=r0}, &(0x7f0000000bc0)) 09:59:14 executing program 5: keyctl$update(0x1d, 0x0, &(0x7f0000001440)="ce", 0x1) 09:59:14 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700), 0x0, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:59:14 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:59:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 09:59:14 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:59:14 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:59:14 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x26, 0x0, @tid=r0}, &(0x7f0000000bc0)) 09:59:14 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:59:14 executing program 4: syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 09:59:14 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:59:14 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700), 0x0, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:59:14 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82780, 0x0) r0 = epoll_create(0x7fff) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) signalfd(r1, &(0x7f0000000140), 0x8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000055000000080001008000000008000300", @ANYRES32=r4, @ANYBLOB="0c0099000000000000000000"], 0x30}}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x6) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x44, r2, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008891}, 0x40000) r6 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r6, &(0x7f0000001440)="ce", 0x1) 09:59:14 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:59:14 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:59:14 executing program 4: syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 09:59:28 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:59:28 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700), 0x0, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:59:28 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:59:28 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:59:28 executing program 2: clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x26, 0x4}, &(0x7f0000000bc0)) 09:59:28 executing program 4: syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 09:59:28 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:59:28 executing program 5: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r1, &(0x7f0000001440)="ce", 0x1) 09:59:28 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac7"}, 0x25) 09:59:29 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:59:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, 0x0, 0x0) 09:59:29 executing program 2: clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x26, 0x4}, &(0x7f0000000bc0)) 09:59:29 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:59:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac7"}, 0x25) 09:59:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, 0x0, 0x0) 09:59:29 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:59:43 executing program 2: clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x26, 0x4}, &(0x7f0000000bc0)) 09:59:43 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:59:43 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:59:43 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x32, 0x39, 0x66, 0x32, 0x37, 0x64, 0x39, 0x34, 0x6b, 0x39, 0x36, 0x63, 0x37, 0x0, 0x39, 0x36]}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf48800200000000000000ee1959f5d2f489e1f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 09:59:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac7"}, 0x25) 09:59:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, 0x0, 0x0) 09:59:43 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:59:43 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 09:59:43 executing program 5: keyctl$update(0x1d, 0x0, &(0x7f0000001440)="ce", 0x1) add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="1bf55c64618d625c0c1f5118fd8c2641171e9ccc0da340bc4770d88c4773", 0x1e, 0x0) 09:59:43 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:59:43 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 09:59:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1'}, 0x4) 09:59:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac7"}, 0x25) 09:59:43 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000000)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72", 0x2b}, 0x48, 0xfffffffffffffffb) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 09:59:43 executing program 3: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0, {0x17}, 0x0, 0x0, &(0x7f00000002c0)=""/209, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000140)={0x0, 0x114, 0x1, @tid=r1}, &(0x7f0000000440)) r2 = mq_open(&(0x7f0000000180)='(*\x00', 0x80, 0x40, &(0x7f0000000480)={0x8, 0x100000000, 0x7c0000000000000, 0x8}) mq_notify(r2, &(0x7f0000000680)={0x0, 0x7, 0x4, @thr={&(0x7f00000004c0)="a99b5e9934d947aaa954041e29c3af398aedee570a121b2fd0063bda0eecbce47af185bfd8bbea5563db5ddb7d3be794291bbc8a41b28d125fd58881bce6413a99a098d1300f04fd336d15ed967592c24b3c85f3b30bdabf8e9cf5be213f4f671fbed9b60b45641ef31b210acaf25c8fbce6ed9423087628794bda004cfa802c6b695ac80f1c58a28c4f3a163b99d007926ad17021e27d504e42ff98f311f95de5bce926", &(0x7f0000000600)="6a368eeeaa0de459528515f692c2cb94a505ddf3e6b84e913421fbed77a32bee907c5a615f8d38f25c700ce90e5063a844a9717b917a6637c63c0f9bbd11807473b5cac16d02ecf92b25bb79e524ee3d98cde5ea797329176c7d6d743a3ea4c3618173a9e0be52025464bffa40cfc6012d05ced45c7e"}}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)=0x0) timer_getoverrun(r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff}, 0x104a2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2f) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000c00)) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) 10:00:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1'}, 0x4) 10:00:03 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:00:03 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffff8) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 10:00:03 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:00:03 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:00:03 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:00:03 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, 0x0) 10:00:03 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac7"}, 0x25) 10:00:03 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:00:03 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:00:03 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r1, 0x1) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000200)="a202c3508c8c070b1ed66602225143cf7a612ff983f0ced11a5def156f19acacbff0fe4e52b4f75616e6e07be936eed10c7b330a05c1b0ba760d58f91c3a9e1ad000595b0b406e15a7762a88f028f1a88f108988ce19499ff747f454d7f17dad0ca962c6b88e3639b5693228a5346e6339c436c2c2ae24389252bf7f6c8f3811c9f55474c65c08276c1534e3305dc8d69242d2c5bd84dcae0fa6", 0x9a, r1) 10:00:03 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac7"}, 0x25) 10:00:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1'}, 0x4) 10:00:03 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:00:03 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fa488090461ead6c31b6039010119a53ee2519f1187bbb299c7200"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000200)="8a3447470a21d2fed51481761f0a558c4e0284180557276effa92961572ae1df1650bdc1c6a0323e2f80b0684563e5055ea12d5fe5dc282825e14528d89c44700f64e4d467d1f919f3e0e2ac678939856307ba433a1df79b44867b52a51c691455dde5b8b9a388d041853562b8097a6250a314a51832ce20c54b08f43a8ef348d6135710a0a3187b07c35e62b21ffd2bfc5484377741364fb722fdd44eb9ed9a94e53f0cccbbb5f5218b029ed1d6c560a49a3a09aae5a4f1be0af2b3aaa74afc4183f637ebfc0cb5946ab0fa5f59f18e34132c4d996ba7c67f64f721298f9d4079fa3a940e1af230ae7dfb409471", 0xee, r1) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) 10:00:03 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:00:03 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:00:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1"}, 0x17) 10:00:17 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:00:17 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:00:17 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, 0x0) 10:00:17 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:00:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac7"}, 0x25) 10:00:17 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:00:17 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000040)={0x0, "4f86c31dbb85df3bd889fafa60b555a7eb92a9547bcf488090461e07000000000000009a53ee2519f1187ba8db3e9800"}, 0x48, 0xfffffffffffffffa) add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x18, r0) keyctl$update(0x1d, r0, &(0x7f00000003c0)="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", 0x155) r1 = add_key(&(0x7f0000000340)='rxrpc\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000000540)="c05de08e34356d345d9c16e776b81fe459d1edc8c9b6da53f68f09188ca0c85ec1881bf94ae13e725e18d574cb03efb227f0c9089642565bb419d452f4038b053d896c4dd3353731ef883d4ad5726bc142da5fcc5c37f3b02417998ba69db39d88e5b9c830cb3335e1b16474bab09b79f239bcc5fb810a8fcaa9de1795451117db7d73f9ed0ae1dad6445ee46f2c90171419a14efd8bad732e520a1827ccea674ff1bf6b0fa916502272116420344edd9011fd1984336fcde0", 0xb9, r0) add_key(&(0x7f0000000240)='rxrpc\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="c3aeb5ad0f3df4f88e28e196ff2626122071829654704a94d51ce7cb892138c9c6e0d9858edfca5fca7a61ded2944591b5c56061a777954c6125963caa33fd3afb2e8ff3ad0881f14f392ae12332564a5c3f4e90e60ab30417eb265f7c701228886bec00047a25a5f9a749e084", 0x6d, r1) 10:00:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1"}, 0x17) 10:00:17 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700), 0x0, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:00:17 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:00:17 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac7"}, 0x25) 10:00:17 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:00:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1"}, 0x17) 10:00:31 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac7"}, 0x25) 10:00:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea59"}, 0x21) 10:00:31 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:00:31 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700), 0x0, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:00:31 executing program 2: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, 0x0) 10:00:31 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:00:31 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:00:31 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000500)={'fscrypt:', @desc2}, &(0x7f0000000540)={0x0, "4f86c31dbb00809241d18b1022d2db9fee153f125da7eb70a9547b98cf488090461ead187f00299c00", 0x24}, 0x48, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r0, 0x4e5) r1 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000200)="8454ce3d4b38268ee084e7e6135e30a3a385615dee02faf964be4ebdd21e021b0ee5f4004930c76eb37dfb18658dac3e3ba984b9f30386924c89fa8b9410809cf6275f505a812876e278fa31fb996dc06a06e9fc7bc47da5389ee00112587bbf1c68ce5d4ed81b5ece96d891d506183bb9290e1921eafced8ee0c0b7b726cf7c6a0c9ca62a1804a7b3c77054cb55b814ea819b3a933662331e44d2eabef20815d3b515991247d16e363204569156ff409d2490d1a2181ab18d636990ec42823078cd513f21d9f081bb6714672bba761869105a", 0xd3, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x35, 0x64, 0x37, 0x33, 0x39, 0x37, 0x34, 0x65, 0x61, 0xd, 0x33, 0x61, 0x39, 0x66, 0x34, 0x66]}, &(0x7f0000000300)={0x0, "cf7192f3e0d642a26d9cff8d1276ba6ffc0c094fe8bb47822df0071df3d94579f25af0016d7ad260b1f339ff3d28cb1803ca8335b875d30c90b1b96000", 0x28}, 0x48, r1) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$unlink(0x9, r3, r3) keyctl$update(0x1d, r3, &(0x7f0000000400)="447e8eb3e67e9c5ab6858953ba9d00000000000000000000009490b19b8e8b3b4c4e4a4f6925ab4d20fd370f4707eab02ede15066d4787bb4b0ffa8fed229f8e27889d9d076b5c", 0x47) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) keyctl$read(0xb, 0x0, &(0x7f00000004c0)=""/19, 0x13) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, r6, 0x0, &(0x7f0000000480)='}@\x00') add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$unlink(0x9, r5, r5) r7 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r7) keyctl$unlink(0x9, r7, r7) keyctl$KEYCTL_MOVE(0x1e, r4, r2, 0x0, 0x8068a30d86b0fdb0) 10:00:31 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700), 0x0, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:00:31 executing program 0: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac7"}, 0x25) 10:00:31 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:00:31 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:00:31 executing program 5: r0 = epoll_create(0x7fff) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) signalfd(r1, &(0x7f0000000140), 0x8) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x202}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1c0, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xfe00}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3383f56d}, {0x6, 0x11, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9a12}, {0x6, 0x11, 0x200}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xbf}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1800}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x7993}}]}, 0x1c0}}, 0x8d0) r3 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000000)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d1df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c720000000000000200", 0x16}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r3, &(0x7f0000001440)="ce", 0x1) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r3) 10:00:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea59"}, 0x21) 10:00:31 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1c, r0, &(0x7f0000001440)="ce", 0x1) 10:00:31 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:00:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac7"}, 0x25) 10:00:31 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:00:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea59"}, 0x21) 10:00:46 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:00:46 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:00:46 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:00:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:00:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac7"}, 0x25) 10:00:46 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:00:46 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a3123ff502151911381679bef29f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"], 0x2f) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000591c0)={0x0, ""/256, 0x0, 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f0000000040)={0x0, {0x20, 0x200, 0x4, 0x2, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001480)={0x800, [{r1, r3}, {r6, r3}, {r5, r7}, {r6, r3}, {r5, r3}, {r2, r3}, {r6, r3}, {r1, r7}, {}, {r2, r3}, {r1, r7}, {r6}, {r2, r3}, {r5}, {r6, r7}, {r2, r3}, {r6, r7}, {}, {r2, r3}, {r5, r3}, {r1}, {r5, r3}, {r5, r3}, {r6, r3}, {r6, r3}, {0x0, r3}, {r5, r7}, {r2, r7}, {}, {r6}, {r6, r3}, {r2, r7}, {r2, r3}, {r5, r3}, {r1, r7}, {r1, r7}, {}, {r2, r7}, {r5, r3}, {r5, r7}, {r2, r3}, {r1, r3}, {r5, r3}, {r1}, {r6, r3}, {0x0, r7}, {r2, r3}, {r5, r3}, {r1, r7}, {r6}, {r5, r3}, {r5}, {r2, r7}, {r5, r7}, {r2, r3}, {r5, r3}, {0x0, r7}, {r6, r3}, {0x0, r7}, {r6, r7}, {r2, r7}, {r6, r7}, {r1}, {r6}, {r2}, {r2, r3}, {r1, r3}, {0x0, r7}, {r5, r3}, {r6, r3}, {r6, r3}, {0x0, r3}, {r6, r7}, {r1, r7}, {r1, r3}, {r5, r7}, {r1, r3}, {r5, r3}, {r2}, {0x0, r3}, {r2, r7}, {r5, r7}, {r6, r3}, {r5, r7}, {r1, r3}, {r5}, {r2, r7}, {r6, r7}, {r2, r3}, {r6}, {r2, r7}, {r6, r7}, {r6, r3}, {r5, r3}, {r2, r7}, {r5, r3}, {r6, r3}, {r6, r3}, {0x0, r7}, {r5, r3}, {r2, r3}, {r1, r3}, {r1, r7}, {r5, r3}, {r6, r3}, {0x0, r7}, {r2, r7}, {r2, r3}, {r5, r7}, {r2, r3}, {r5, r7}, {r2, r7}, {r5, r7}, {r1, r7}, {r2}, {r6, r7}, {r5, r7}, {r1, r7}, {r6, r3}, {r2, r3}, {r5, r7}, {r5, r3}, {r6, r3}, {r1, r3}, {r1, r7}, {r1, r3}, {r1, r7}, {r2, r3}, {r6, r7}, {r5, r3}, {r2}, {0x0, r7}, {r5, r3}, {}, {0x0, r7}, {r5, r3}, {r1, r7}, {r2, r3}, {r5}, {r1, r7}, {r1, r7}, {r1, r7}, {r5, r7}, {r1, r3}, {r1, r7}, {r5, r3}, {r1, r3}, {r1, r3}, {r2, r3}, {r6, r7}, {r6, r7}, {r2, r3}, {0x0, r7}, {r6, r3}, {r1, r7}, {r2, r3}, {r2, r3}, {r1, r3}, {r5}, {r6, r7}, {r2, r3}, {r2, r3}, {0x0, r7}, {r5, r3}, {r5, r7}, {r2, r7}, {r2, r3}, {r2, r3}, {r6, r7}, {r6, r3}, {}, {r6}, {r5, r7}, {r2, r3}, {r5, r3}, {r1, r3}, {r1, r3}, {0x0, r7}, {r5}, {0x0, r7}, {r6, r7}, {r5, r7}, {r1, r3}, {r2, r3}, {r1, r3}, {r2, r7}, {r1, r7}, {r5, r3}, {r1, r3}, {r6, r7}, {r1}, {r1, r3}, {0x0, r3}, {r1, r3}, {r1, r7}, {r5, r7}, {r6, r7}, {r1, r3}, {r5, r3}, {r2, r7}, {r5, r3}, {r5, r3}, {r1, r7}, {r1}, {r5}, {r2, r3}, {r5, r3}, {r1, r7}, {r1, r7}, {r5}, {0x0, r7}, {0x0, r7}, {r2, r7}, {r2}, {r1, r3}, {r1, r3}, {r6, r3}, {r1}, {r5, r3}, {r5, r3}, {r5, r7}, {0x0, r7}, {r6, r3}, {r5, r7}, {r1, r3}, {r1, r3}, {r6, r7}, {r6, r3}, {r6, r3}, {0x0, r7}, {r2}, {0x0, r3}, {r2, r7}, {r5, r7}, {r5}, {r2, r3}, {r6, r3}, {r2, r7}, {r5, r7}, {r2, r3}, {r1, r7}, {r5, r3}, {0x0, r7}, {r2, r7}, {r6, r7}, {0x0, r3}, {r2, r7}, {r1, r3}, {r5}, {r5, r3}, {r6, r3}, {r6, r7}, {r2, r7}, {r6, r7}, {r6, r7}], 0x4, "2b1db37115a7c8"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002480)={r8, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000593c0)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1, r7}], 0x9f, "f6e65373606874"}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000003480)={0x0, 0x0, 0x8, 0x0, '\x00', [{0xffff, 0x1, 0xfffffffffffffffd, 0x7, 0x8, 0x9}, {0x1, 0x52, 0x100000001, 0xdf, 0x5, 0x3e}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000200)={{r1, 0x2, 0x7, 0x1000, 0xe31, 0x200, 0x1, 0x5, 0x3, 0x1b87, 0x3ff, 0x711f, 0x10001, 0x0, 0x2}}) r11 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r11, &(0x7f0000001440)="ce", 0x1) [ 816.477052] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 816.477052] program syz-executor.5 not setting count and/or reply_len properly [ 816.489450] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 816.489450] program syz-executor.5 not setting count and/or reply_len properly 10:00:46 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:00:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac7"}, 0x25) 10:00:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f"}, 0x26) 10:00:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:00:46 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:00:46 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:00:46 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000000)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72", 0x1e}, 0xff9b, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 10:00:46 executing program 0: syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac7"}, 0x25) 10:00:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f"}, 0x26) 10:00:46 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:00:46 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:00:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:00:46 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:00:46 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, 0x0, r1, r0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$unlink(0x9, r2, r2) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r2) 10:00:59 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:00:59 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:00:59 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:00:59 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:01:00 executing program 0: syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac7"}, 0x25) 10:01:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f"}, 0x26) 10:01:00 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:01:00 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x31, 0x32, 0x64, 0x62, 0x44a1004e21b8b547, 0x65, 0x39, 0x32, 0x34, 0x38, 0x65, 0x62, 0x31, 0x36, 0x66, 0x63]}, &(0x7f0000000180)={0x0, "190dd826d48914e74df3bff9ccc624135ea9f8cc3b511cb718d621ff300178ccfc3a81d61be71f716ef6d8a42025bb84669165b1dbfd82f87e0ff2b10f25e551", 0x3e}, 0x48, 0xfffffffffffffff8) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000000)={0x0, "4f86b51dbb85249241d18b1022d2db9feea9547b98cf488090461ead6c9c72000000000000000000004006a86800"}, 0x1c, r0) keyctl$update(0x1d, r1, &(0x7f0000001440)="ce", 0x1) 10:01:00 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x3) r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f8bcb1dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 10:01:00 executing program 0: syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac7"}, 0x25) 10:01:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f5645"}, 0x28) 10:01:13 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:01:13 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:01:13 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:01:13 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:01:13 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:01:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, 0x0, 0x0) 10:01:13 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) r1 = request_key(&(0x7f0000000080)='blacklist\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000200)='\x00', 0xfffffffffffffffc) keyctl$setperm(0x5, r1, 0x100104) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$unlink(0x9, r2, r2) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000280)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "6aac626e7ca8747106ac216cacbee5826b58dd6e93bdf4b67a8faec1ff70878e74745b847b6656286a1f695a40578e544a34e2d05b488c6b7bcb8d1ac563c863", 0x2e}, 0x48, r2) 10:01:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, 0x0, 0x0) 10:01:13 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:01:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f5645"}, 0x28) 10:01:13 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:01:13 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r0, 0x1) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 10:01:13 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:01:13 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:01:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f5645"}, 0x28) 10:01:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, 0x0, 0x0) 10:01:25 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:01:25 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 10:01:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1'}, 0x4) 10:01:25 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:01:25 executing program 5: sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xd0, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x20}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x40}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xc6}]}, @NL802154_ATTR_SEC_LEVEL={0x54, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xffffffffffffffd8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 10:01:25 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:01:25 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:01:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552"}, 0x29) 10:01:25 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:01:25 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000200)="39c9152ae2b068e21478fe5f5ad382f74a7928328dc97f3c2c517d92290328fe915c2781a7dd702fd5d583a4bff9c7b5bd1ccccc32608d77f1be2a9f643bcab18f9dee2db4f948a5547daf6a155f8749a1a216d6cb1da6bcf6856307ed1d19f5162fd7e536bb691f614dd4b9d531ad0bd9470ca093baa372eea3a5bdf5c752e65b5102fad2747eecee5f7dd9714a4a82fa468fd742d6197f1525b9423bf2fe07ec592a3217e40b9a04da986d67", 0xad, r1) 10:01:25 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1'}, 0x4) 10:01:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552"}, 0x29) 10:01:25 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:01:25 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:01:25 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) 10:01:25 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:01:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552"}, 0x29) 10:01:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1'}, 0x4) 10:01:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 10:01:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:01:37 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:01:37 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:01:37 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000280)='a*+\x00', r1) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$unlink(0x9, r2, r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r2) 10:01:37 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) 10:01:37 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:01:37 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10:01:37 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b59"}, 0x15) 10:01:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 10:01:37 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:01:37 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 10:01:37 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) 10:01:37 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10:01:37 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:01:37 executing program 5: pread64(0xffffffffffffffff, &(0x7f0000000000)=""/130, 0x82, 0x5) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$unlink(0x9, r2, r1) keyctl$update(0x1d, r0, &(0x7f0000001440)='\x00', 0x1) 10:01:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b59"}, 0x15) 10:01:49 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 10:01:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:01:49 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:01:49 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) 10:01:49 executing program 6: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10:01:49 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000000200)="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", 0xfa) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) 10:01:49 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) 10:01:49 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @auto=[0x63, 0x30, 0x65, 0x52, 0x32, 0x37, 0x36, 0x34, 0x64, 0x39, 0x37, 0x64, 0x64, 0x66, 0x36, 0x37]}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72", 0x1000000}, 0x48, 0xfffffffffffffff9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='blacklist\x00', 0x0) r1 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)={0x2, 0x0, @d}, 0x18, r0) r2 = getgid() r3 = getgid() r4 = getgid() setresgid(r2, r3, r4) keyctl$chown(0x4, r1, 0xee00, r4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/104, 0x68}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/29, 0x1d}, {&(0x7f0000000380)=""/242, 0xf2}], 0x4, &(0x7f00000004c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}, 0x20) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$unlink(0x9, r5, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='id_resolver\x00', &(0x7f0000000240)=@secondary) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 10:01:49 executing program 6: syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:01:49 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b59"}, 0x15) 10:01:49 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) 10:01:49 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:01:49 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 10:01:49 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x0, 0x8}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:01:49 executing program 6: syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:02:01 executing program 5: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req={0x2, 0x7fffffff, 0x2, 0x8}, 0x10) r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 10:02:01 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:02:01 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:02:02 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:02:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad712"}, 0x1d) 10:02:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:02:02 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) 10:02:02 executing program 6: syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:02:02 executing program 5: r0 = add_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000200)="c4728e4ae587a8a46d0528fa7579d5a70e4b7b986f2b8b78e6a0b4dd612dc50754f3c2cc02b745949f854a9013998e68a1074d134f7b259ef653b1063682e5a3831cde4c178340ada83ad114a28b52210dc8c3863810a982e25627e94dae6bd4bfa958e579a386e8ace45ccd8d2eec60237a8c6f10ab248a385a582cc0bbd15d46786c1241bedf2a370bfd9c902cfbda01f91f736d5ac250661b58328e0b3efb962a856d0752512419f91d5fcafee7", 0xaf, 0xfffffffffffffffa) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000140)={'fscrypt:', @auto=[0x61, 0x34, 0x36, 0x31, 0x36, 0x32, 0x33, 0x34, 0x51, 0x39, 0x64, 0x34, 0x61, 0x64, 0x34, 0x64]}, &(0x7f00000000c0)={0x0, "4186c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, r0) keyctl$update(0x1d, r1, &(0x7f0000001440)="ce", 0x1) 10:02:16 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:02:16 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:02:16 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) 10:02:16 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:02:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad712"}, 0x1d) 10:02:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:02:16 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:02:16 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:02:16 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5829f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x0, 0x8}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:02:16 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72", 0x34}, 0x48, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$unlink(0x9, r2, r2) keyctl$negate(0xd, r1, 0x2, r2) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) keyctl$setperm(0x5, r0, 0x100011) 10:02:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad712"}, 0x1d) 10:02:16 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:02:16 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0xf, r0, &(0x7f0000001440)="ce", 0x1) 10:02:16 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:02:16 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0xf, r0, &(0x7f0000001440)="ce", 0x1) 10:02:16 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5829f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x0, 0x8}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000380)={0x137363500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 10:02:16 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x41, 0x40, 0x3, 0x0, 0xfb0, 0x80000, 0x12, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xa93, 0x0, @perf_config_ext={0x5, 0x8}, 0x2529, 0x4, 0x40, 0x8, 0x100000001, 0x5, 0xff83, 0x0, 0x1, 0x0, 0x14}, 0x0, 0xe, r0, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000340)) 10:02:16 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea59"}, 0x21) 10:02:16 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0xf, r0, &(0x7f0000001440)="ce", 0x1) 10:02:16 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:02:16 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72", 0xfffffffc}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) r1 = request_key(&(0x7f0000000440)='cifs.idmap\x00', &(0x7f0000000480)={'syz', 0x1}, &(0x7f00000004c0)='user\x00', r0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$unlink(0x9, r2, r2) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$unlink(0x9, r4, r4) request_key(&(0x7f0000000280)='.dead\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='85baa174f0cb1142', r4) add_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r2) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) add_key(&(0x7f0000000500)='encrypted\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000580)="11fc2bc2e4a0ae50afdc229592a48224c3ed11a2f60b1d9cb17b4b5e6ddcc0b5b4c1e0060714c502dc04b29f54d36676fe67be59c06a7be76e92fb147d5313646c02383454f7d6cd5dffa8f125e30dc57a4ce0bb7f254638df7bc3cc39583b1fcfb80e6515806cc25db6f0", 0x6b, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$unlink(0x9, r5, r5) keyctl$KEYCTL_MOVE(0x1e, r0, r2, r5, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) 10:02:29 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 10:02:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:02:29 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x41, 0x40, 0x3, 0x0, 0xfb0, 0x80000, 0x12, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xa93, 0x0, @perf_config_ext={0x5, 0x8}, 0x2529, 0x4, 0x40, 0x8, 0x100000001, 0x5, 0xff83, 0x0, 0x1, 0x0, 0x14}, 0x0, 0xe, r0, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) socket$nl_audit(0x10, 0x3, 0x9) sendto$packet(r3, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000340)) 10:02:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea59"}, 0x21) 10:02:29 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x41, 0x40, 0x3, 0x0, 0xfb0, 0x80000, 0x12, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xa93, 0x0, @perf_config_ext={0x5, 0x8}, 0x2529, 0x4, 0x40, 0x8, 0x100000001, 0x5, 0xff83, 0x0, 0x1, 0x0, 0x14}, 0x0, 0xe, r0, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000340)) 10:02:29 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:02:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x24}}, 0x8000) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r1, &(0x7f0000001440)="ce", 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="03120000000000650001001000"], 0x14}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x44940) 10:02:29 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x41, 0x40, 0x3, 0x0, 0xfb0, 0x80000, 0x12, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xa93, 0x0, @perf_config_ext={0x5, 0x8}, 0x2529, 0x4, 0x40, 0x8, 0x100000001, 0x5, 0xff83, 0x0, 0x1, 0x0, 0x14}, 0x0, 0xe, r0, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000340)) 10:02:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea59"}, 0x21) 10:02:29 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (fail_nth: 1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) [ 919.476932] FAULT_INJECTION: forcing a failure. [ 919.476932] name failslab, interval 1, probability 0, space 0, times 1 [ 919.477912] CPU: 0 PID: 10981 Comm: syz-executor.3 Not tainted 6.4.0-rc1-next-20230510 #1 [ 919.478497] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 919.479074] Call Trace: [ 919.479259] [ 919.479425] dump_stack_lvl+0xc1/0xf0 [ 919.479721] should_fail_ex+0x4b4/0x5b0 [ 919.480028] ? __alloc_skb+0x28c/0x330 [ 919.480334] should_failslab+0x9/0x20 [ 919.480618] kmem_cache_alloc_node+0x5d/0x3a0 [ 919.480962] __alloc_skb+0x28c/0x330 [ 919.481241] ? __pfx___alloc_skb+0x10/0x10 [ 919.481545] ? __lock_acquire+0xc29/0x64f0 [ 919.481864] tcp_v6_send_response+0x230/0x1ca0 [ 919.482199] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 919.482573] ? __pfx___lock_acquire+0x10/0x10 [ 919.482898] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 919.483273] ? skb_queue_purge+0x2a/0x40 [ 919.483579] ? __pfx_tcp_v6_send_response+0x10/0x10 [ 919.483938] ? lock_acquire+0x19a/0x4c0 [ 919.484236] ? tcp_v6_send_reset+0x18c/0x1130 [ 919.484563] ? __pfx_lock_acquire+0x10/0x10 [ 919.484878] ? tcp_reset+0x147/0x330 [ 919.485153] ? tcp_rcv_state_process+0x3e5/0x4810 [ 919.485510] tcp_v6_send_reset+0x660/0x1130 [ 919.485826] ? __pfx_tcp_v6_send_reset+0x10/0x10 [ 919.486175] tcp_v6_do_rcv+0xb88/0x1730 [ 919.486466] ? __local_bh_enable_ip+0xa1/0x110 [ 919.486811] __release_sock+0x154/0x310 [ 919.487121] __tcp_close+0x4e1/0xf50 [ 919.487406] ? __local_bh_enable_ip+0xa1/0x110 [ 919.487747] tcp_close+0x34/0xc0 [ 919.488004] inet_release+0xed/0x200 [ 919.488294] inet6_release+0x50/0x80 [ 919.488572] __sock_release+0xd2/0x2a0 [ 919.488855] ? __pfx_sock_close+0x10/0x10 [ 919.489152] sock_close+0x1c/0x30 [ 919.489401] __fput+0x263/0xa40 [ 919.489662] task_work_run+0x174/0x280 [ 919.489962] ? __pfx_task_work_run+0x10/0x10 [ 919.490294] ? ksys_write+0x1a7/0x260 [ 919.490584] exit_to_user_mode_prepare+0x17d/0x180 [ 919.490937] syscall_exit_to_user_mode+0x1d/0x50 [ 919.491287] do_syscall_64+0x4c/0x90 [ 919.491562] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 919.491932] RIP: 0033:0x7f268c37bb19 [ 919.492210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 919.493460] RSP: 002b:00007f26898f1188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 919.493998] RAX: 0000000000000000 RBX: 00007f268c48ef60 RCX: 00007f268c37bb19 [ 919.494495] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 919.494990] RBP: 00007f26898f11d0 R08: 0000000000000000 R09: 0000000000000000 [ 919.495490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.495987] R13: 00007ffe1586896f R14: 00007f26898f1300 R15: 0000000000022000 [ 919.496505] 10:02:29 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) 10:02:29 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x41, 0x40, 0x3, 0x0, 0xfb0, 0x80000, 0x12, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xa93, 0x0, @perf_config_ext={0x5, 0x8}, 0x2529, 0x4, 0x40, 0x8, 0x100000001, 0x5, 0xff83, 0x0, 0x1, 0x0, 0x14}, 0x0, 0xe, r0, 0x0) r3 = socket$packet(0x11, 0x0, 0x300) socket$nl_audit(0x10, 0x3, 0x9) sendto$packet(r3, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000340)) 10:02:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:02:29 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:02:29 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) [ 919.577650] FAULT_INJECTION: forcing a failure. [ 919.577650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 919.578632] CPU: 0 PID: 10993 Comm: syz-executor.6 Not tainted 6.4.0-rc1-next-20230510 #1 [ 919.579202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 919.579776] Call Trace: [ 919.579962] [ 919.580127] dump_stack_lvl+0xc1/0xf0 [ 919.580429] should_fail_ex+0x4b4/0x5b0 [ 919.580726] _copy_from_user+0x30/0xf0 [ 919.581022] move_addr_to_kernel.part.0+0x31/0x110 [ 919.581382] __sys_connect+0xde/0x1a0 [ 919.581664] ? __pfx___sys_connect+0x10/0x10 [ 919.581983] ? clockevents_program_event+0x135/0x360 [ 919.582331] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 919.582753] ? hrtimer_interrupt+0x586/0x750 [ 919.583095] __x64_sys_connect+0x73/0xb0 [ 919.583393] ? syscall_enter_from_user_mode+0x21/0x50 [ 919.583771] do_syscall_64+0x3f/0x90 [ 919.584047] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 919.584421] RIP: 0033:0x7f9630eb4b19 [ 919.584690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 919.585938] RSP: 002b:00007f962e42a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 919.586479] RAX: ffffffffffffffda RBX: 00007f9630fc7f60 RCX: 00007f9630eb4b19 [ 919.586982] RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000004 [ 919.587475] RBP: 00007f962e42a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 919.587974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.588496] R13: 00007fff0ba2ac6f R14: 00007f962e42a300 R15: 0000000000022000 [ 919.589016] 10:02:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911ea"}, 0x23) 10:02:40 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10:02:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) (fail_nth: 1) 10:02:40 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:02:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911ea"}, 0x23) 10:02:40 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:02:40 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$unlink(0x9, r2, r2) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$unlink(0x9, r3, r3) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r3, 0x1) add_key(&(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="d81bb0222883d031bfb57fb1d2e224f04d7be769d238e44bf82f196d63d2fec5fc9b11637f135007c17f63b872", 0x2d, 0xffffffffffffffff) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 10:02:40 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (fail_nth: 2) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:02:40 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x2) [ 930.401582] FAULT_INJECTION: forcing a failure. [ 930.401582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 930.403301] CPU: 0 PID: 11022 Comm: syz-executor.4 Not tainted 6.4.0-rc1-next-20230510 #1 [ 930.404383] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 930.405429] Call Trace: [ 930.405776] [ 930.406090] dump_stack_lvl+0xc1/0xf0 [ 930.406631] should_fail_ex+0x4b4/0x5b0 [ 930.407195] _copy_from_user+0x30/0xf0 [ 930.407737] sg_write.part.0+0x1c9/0xac0 [ 930.408287] ? __pfx___lock_acquire+0x10/0x10 [ 930.408905] ? __pfx_lock_release+0x10/0x10 [ 930.409486] ? __pfx_sg_write.part.0+0x10/0x10 [ 930.410108] ? __lock_acquire+0xc29/0x64f0 [ 930.410697] ? __pfx_lock_release+0x10/0x10 [ 930.411286] ? find_held_lock+0x2c/0x110 [ 930.411862] ? inode_security+0x105/0x140 [ 930.412441] ? avc_policy_seqno+0x9/0x20 [ 930.413001] ? selinux_file_permission+0x96/0x510 [ 930.413695] sg_write+0x8d/0xe0 [ 930.414170] vfs_write+0x2b8/0xd40 [ 930.414683] ? __pfx_sg_write+0x10/0x10 [ 930.415249] ? __pfx_vfs_write+0x10/0x10 [ 930.415825] ? __fget_files+0x270/0x480 [ 930.416460] ? __fget_light+0xe5/0x280 [ 930.417037] ksys_write+0x12b/0x260 [ 930.417551] ? __pfx_ksys_write+0x10/0x10 [ 930.418128] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 930.418853] do_syscall_64+0x3f/0x90 [ 930.419381] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 930.420088] RIP: 0033:0x7fb9a6e4db19 [ 930.420614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 930.422958] RSP: 002b:00007fb9a43c3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 930.423979] RAX: ffffffffffffffda RBX: 00007fb9a6f60f60 RCX: 00007fb9a6e4db19 [ 930.424934] RDX: 000000000000002a RSI: 0000000020000000 RDI: 0000000000000003 [ 930.425882] RBP: 00007fb9a43c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 930.426827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.427779] R13: 00007ffe1de6c75f R14: 00007fb9a43c3300 R15: 0000000000022000 [ 930.428770] 10:02:40 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10:02:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911ea"}, 0x23) 10:02:40 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x3) [ 930.453461] FAULT_INJECTION: forcing a failure. [ 930.453461] name failslab, interval 1, probability 0, space 0, times 0 [ 930.454455] CPU: 1 PID: 11021 Comm: syz-executor.6 Not tainted 6.4.0-rc1-next-20230510 #1 [ 930.455038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 930.455578] Call Trace: [ 930.455766] [ 930.455929] dump_stack_lvl+0xc1/0xf0 [ 930.456233] should_fail_ex+0x4b4/0x5b0 [ 930.456542] ? __inet_hash_connect+0x738/0x17c0 [ 930.456899] should_failslab+0x9/0x20 [ 930.457171] kmem_cache_alloc+0x5a/0x390 [ 930.457488] __inet_hash_connect+0x738/0x17c0 [ 930.457821] ? __pfx___inet6_check_established+0x10/0x10 [ 930.458223] ? __pfx___inet_hash_connect+0x10/0x10 [ 930.458592] tcp_v6_connect+0x11b1/0x1a80 [ 930.458901] ? __pfx_tcp_v6_connect+0x10/0x10 [ 930.459219] ? __pfx_avc_has_perm+0x10/0x10 [ 930.459539] ? mark_lock.part.0+0xef/0x2f30 [ 930.459863] ? lock_acquire+0x19a/0x4c0 [ 930.460161] __inet_stream_connect+0x81c/0xda0 [ 930.460514] ? inet_stream_connect+0x43/0xa0 [ 930.460849] ? lock_release+0x1e3/0x680 [ 930.461144] ? __pfx___inet_stream_connect+0x10/0x10 [ 930.461509] ? mark_held_locks+0x9e/0xe0 [ 930.461816] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 930.462194] inet_stream_connect+0x57/0xa0 [ 930.462496] ? __pfx_inet_stream_connect+0x10/0x10 [ 930.462852] __sys_connect_file+0x159/0x1a0 [ 930.463168] __sys_connect+0x169/0x1a0 [ 930.463458] ? __pfx___sys_connect+0x10/0x10 [ 930.463789] ? fput+0x2f/0x1a0 [ 930.464025] ? ksys_write+0x1a7/0x260 [ 930.464318] ? __pfx_ksys_write+0x10/0x10 [ 930.464625] __x64_sys_connect+0x73/0xb0 [ 930.464909] ? syscall_enter_from_user_mode+0x21/0x50 [ 930.465268] do_syscall_64+0x3f/0x90 [ 930.465530] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 930.465906] RIP: 0033:0x7f9630eb4b19 [ 930.466156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 930.467412] RSP: 002b:00007f962e42a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 930.467919] RAX: ffffffffffffffda RBX: 00007f9630fc7f60 RCX: 00007f9630eb4b19 [ 930.468426] RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000004 [ 930.468927] RBP: 00007f962e42a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 930.469436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.469939] R13: 00007fff0ba2ac6f R14: 00007f962e42a300 R15: 0000000000022000 [ 930.470458] 10:02:40 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) (fail_nth: 1) 10:02:40 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:02:40 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb9229547b98cf53e9904b725965a269278f10119a53ee2519f1187bbb299c72", 0x25}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) r1 = add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="d99b4559a0b0c4779ef8dd16dc8272", 0xf, 0xfffffffffffffffa) keyctl$invalidate(0x15, r1) 10:02:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) [ 930.592191] FAULT_INJECTION: forcing a failure. [ 930.592191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 930.593920] CPU: 0 PID: 11037 Comm: syz-executor.7 Not tainted 6.4.0-rc1-next-20230510 #1 [ 930.594974] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 930.596069] Call Trace: [ 930.596458] [ 930.596781] dump_stack_lvl+0xc1/0xf0 [ 930.597347] should_fail_ex+0x4b4/0x5b0 [ 930.597917] _copy_from_user+0x30/0xf0 [ 930.598492] __x64_sys_timer_create+0x101/0x1c0 [ 930.599140] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 930.599822] ? fput+0x2f/0x1a0 [ 930.600291] ? ksys_write+0x1a7/0x260 [ 930.600820] ? __pfx_ksys_write+0x10/0x10 [ 930.601385] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 930.602114] do_syscall_64+0x3f/0x90 [ 930.602631] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 930.603309] RIP: 0033:0x7f7e6fb4ab19 [ 930.603814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 930.606111] RSP: 002b:00007f7e6d0c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 930.607079] RAX: ffffffffffffffda RBX: 00007f7e6fc5df60 RCX: 00007f7e6fb4ab19 [ 930.607989] RDX: 0000000020000bc0 RSI: 0000000020000b80 RDI: 0000000000000000 [ 930.608943] RBP: 00007f7e6d0c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 930.609887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.610833] R13: 00007fff26c38fdf R14: 00007f7e6d0c0300 R15: 0000000000022000 [ 930.611797] 10:02:52 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:02:52 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x4) 10:02:52 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) (fail_nth: 2) 10:02:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) (fail_nth: 2) 10:02:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911ea"}, 0x23) 10:02:52 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "4f863f125d88df3bd889fafa60b555a7eb92a9547b08cf488090461ead6c31b6039010119a53782519f1187bbb299c7200", 0x100200}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 10:02:52 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10:02:52 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (fail_nth: 3) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:02:52 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c300000000000000001022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461eb66c187bbb299c7200", 0x12}, 0x48, 0xfffffffffffffff9) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) add_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000200)="7e7caa13d72f0fd5b65e6625443c8bf34786cb9582108645e221b433cba828ed3722f9c390988889137c5af86e404d79e53f3b0983b1b42024fbc8996d56031a15d78629d897f90edfa4fa6e2c5c1edc56bebeb0e004ce573c43a1e46428c58e21e1e1a3e31e651f5990280d7f323881f2aba45598a43b01b4597de52dbb3c41ae4ce7f270de2877f41b0b2b0fec74f7e79b3a1eac3bee29125cd673ce7ee973bf12cf10022d84f76ca2f04223540101252c1d996c77", 0xb6, r0) [ 942.784339] FAULT_INJECTION: forcing a failure. [ 942.784339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.785653] CPU: 1 PID: 11062 Comm: syz-executor.4 Not tainted 6.4.0-rc1-next-20230510 #1 [ 942.786622] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 942.787649] Call Trace: [ 942.787918] [ 942.788215] dump_stack_lvl+0xc1/0xf0 [ 942.788732] should_fail_ex+0x4b4/0x5b0 [ 942.789165] _copy_to_user+0x30/0xc0 [ 942.789673] simple_read_from_buffer+0xd0/0x170 [ 942.790188] proc_fail_nth_read+0x19c/0x230 [ 942.790617] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 942.791178] ? security_file_permission+0xb5/0xe0 [ 942.791805] vfs_read+0x1e4/0x8b0 [ 942.792265] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 942.792786] ? __pfx_vfs_read+0x10/0x10 [ 942.793042] FAULT_INJECTION: forcing a failure. [ 942.793042] name failslab, interval 1, probability 0, space 0, times 0 [ 942.793186] ? __fget_files+0x270/0x480 [ 942.794366] ksys_read+0x12b/0x260 [ 942.794734] ? __pfx_ksys_read+0x10/0x10 [ 942.795268] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 942.795929] do_syscall_64+0x3f/0x90 [ 942.796306] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 942.796990] RIP: 0033:0x7fb9a6e0069c [ 942.797363] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 942.799277] RSP: 002b:00007fb9a43c3170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 942.800139] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fb9a6e0069c [ 942.800820] RDX: 000000000000000f RSI: 00007fb9a43c31e0 RDI: 0000000000000004 [ 942.801487] RBP: 00007fb9a43c31d0 R08: 0000000000000000 R09: 0000000000000000 [ 942.802160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 942.802921] R13: 00007ffe1de6c75f R14: 00007fb9a43c3300 R15: 0000000000022000 [ 942.803820] [ 942.804062] CPU: 0 PID: 11060 Comm: syz-executor.7 Not tainted 6.4.0-rc1-next-20230510 #1 [ 942.804635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 942.805185] Call Trace: [ 942.805368] [ 942.805532] dump_stack_lvl+0xc1/0xf0 [ 942.805808] should_fail_ex+0x4b4/0x5b0 [ 942.806100] ? do_timer_create+0x150/0x14f0 [ 942.806402] should_failslab+0x9/0x20 [ 942.806676] kmem_cache_alloc+0x5a/0x390 [ 942.806966] ? find_held_lock+0x2c/0x110 [ 942.807258] do_timer_create+0x150/0x14f0 [ 942.807548] ? __pfx_lock_release+0x10/0x10 [ 942.807852] ? __pfx_do_timer_create+0x10/0x10 [ 942.808173] __x64_sys_timer_create+0x177/0x1c0 [ 942.808507] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 942.808872] ? fput+0x2f/0x1a0 [ 942.809116] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 942.809480] do_syscall_64+0x3f/0x90 [ 942.809745] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 942.810098] RIP: 0033:0x7f7e6fb4ab19 [ 942.810358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 942.811553] RSP: 002b:00007f7e6d0c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 942.812072] RAX: ffffffffffffffda RBX: 00007f7e6fc5df60 RCX: 00007f7e6fb4ab19 [ 942.812573] RDX: 0000000020000bc0 RSI: 0000000020000b80 RDI: 0000000000000000 [ 942.813044] RBP: 00007f7e6d0c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 942.813522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 942.814005] R13: 00007fff26c38fdf R14: 00007f7e6d0c0300 R15: 0000000000022000 [ 942.814499] 10:02:52 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:02:52 executing program 1: syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:02:52 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911ea"}, 0x23) 10:02:52 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "369b8da9a186977146287d81ca7f764b9bb69d19d0f3a226717e87edca30524eff5abee365578aba7d4d1156a2d292b7a87fef8dda0d28c32f0947064dd5b363", 0x17}, 0x48, r1) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) r3 = add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @desc3}, &(0x7f0000000400)={0x0, "fc1ec50f3c413bebe323d9e707283859e52f8c79fdfa0d643e0afa314e5e1f5e8a8ecde2f3a79a776264ec901e1158345d2adbd396cf53cfca04409a9f08d834", 0x3f}, 0x48, r0) r4 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$get_security(0x11, r4, &(0x7f0000000500)=""/51, 0x33) add_key(&(0x7f0000000280)='.request_key_auth\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="1d8044c66c531c114b1630753b48e436169471faf55d39b2aacc69b6f7ac243914cd31c6d6e10653698f6d7e9007a33a09338d29677a1d9ddf4fefc89301e460bb5ad4aa61992b625b6e3c2ba5318c504a372dfb27fe8958241a", 0x5a, r3) 10:02:52 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (fail_nth: 4) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:02:52 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x8) 10:02:52 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:02:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) [ 942.934647] FAULT_INJECTION: forcing a failure. [ 942.934647] name failslab, interval 1, probability 0, space 0, times 0 [ 942.935915] CPU: 1 PID: 11081 Comm: syz-executor.6 Not tainted 6.4.0-rc1-next-20230510 #1 [ 942.936888] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 942.937693] Call Trace: [ 942.937995] [ 942.938271] dump_stack_lvl+0xc1/0xf0 [ 942.938648] should_fail_ex+0x4b4/0x5b0 [ 942.939148] ? __inet_hash_connect+0xf01/0x17c0 [ 942.939587] should_failslab+0x9/0x20 [ 942.939946] kmem_cache_alloc+0x5a/0x390 [ 942.940327] __inet_hash_connect+0xf01/0x17c0 [ 942.940760] ? __pfx___inet6_check_established+0x10/0x10 [ 942.941254] ? __pfx___inet_hash_connect+0x10/0x10 [ 942.941719] tcp_v6_connect+0x11b1/0x1a80 [ 942.942111] ? __pfx_tcp_v6_connect+0x10/0x10 [ 942.942520] ? __pfx_avc_has_perm+0x10/0x10 [ 942.943039] ? mark_lock.part.0+0xef/0x2f30 [ 942.943556] ? lock_acquire+0x19a/0x4c0 [ 942.943929] __inet_stream_connect+0x81c/0xda0 [ 942.944365] ? inet_stream_connect+0x43/0xa0 [ 942.944781] ? lock_release+0x1e3/0x680 [ 942.945154] ? __pfx___inet_stream_connect+0x10/0x10 [ 942.945743] ? mark_held_locks+0x9e/0xe0 [ 942.946123] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 942.946692] inet_stream_connect+0x57/0xa0 10:02:52 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000180)={0x0, "4f86c31d000001000000000022d2db9fee153f125d88df3bd889fa0860b555a7eb92a9547b98cf488019f1187bbb299c7200"}, 0x48, 0xfffffffffffffffc) r1 = request_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='\x00', 0xfffffffffffffffd) add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @auto=[0x31, 0x33, 0x31, 0x63, 0x66, 0x32, 0x37, 0x32, 0x63, 0x38, 0x0, 0x34, 0x61, 0x38, 0x57, 0x36]}, &(0x7f0000000400)={0x0, "f6e0ab59d571ef2f3116cc5ba30de672fa33e2cc58472dba50ab03bf080424a91919f433c9885c8c4a3ebf92bb9af8c62d05c47e25d3dadbbd68414ddee23460", 0x16}, 0x48, r1) keyctl$update(0x1d, r0, &(0x7f0000000040)="90a532ca5e76772df29d0bd02d14a86cd9690d64aa9c4eb5f813c3f91f347456371043dd077d34482c98a51b60c516d338bc1ab9d30b892e5069", 0x3a) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$unlink(0x9, r2, r2) r3 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000480)={'fscrypt:', @auto=[0x63, 0x65, 0x64, 0x61, 0x63, 0x66, 0x64, 0x36, 0x37, 0x62, 0x31, 0x62, 0x33, 0x6f, 0x37, 0x34]}, &(0x7f0000000300)={0x0, "3bc3c90eca7794bb3b46325bd651be91ab88f53e26ed6a23c55c9b32a7ca6950ef060e17ced810a4e7575dd85bd40d4ab006a36c66866416494c6d67220b6162", 0x38}, 0x48, r2) keyctl$search(0xa, r0, &(0x7f0000000200)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x2}, r3) [ 942.947206] ? __pfx_inet_stream_connect+0x10/0x10 [ 942.947869] __sys_connect_file+0x159/0x1a0 [ 942.948279] __sys_connect+0x169/0x1a0 [ 942.948656] ? __pfx___sys_connect+0x10/0x10 [ 942.949072] ? fput+0x2f/0x1a0 [ 942.949386] ? ksys_write+0x1a7/0x260 [ 942.949740] ? __pfx_ksys_write+0x10/0x10 [ 942.950129] __x64_sys_connect+0x73/0xb0 [ 942.950495] ? syscall_enter_from_user_mode+0x21/0x50 [ 942.950959] do_syscall_64+0x3f/0x90 [ 942.951301] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 942.951755] RIP: 0033:0x7f9630eb4b19 [ 942.952092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 942.953609] RSP: 002b:00007f962e42a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 942.954441] RAX: ffffffffffffffda RBX: 00007f9630fc7f60 RCX: 00007f9630eb4b19 [ 942.955257] RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000004 [ 942.956077] RBP: 00007f962e42a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 942.956834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 942.957447] R13: 00007fff0ba2ac6f R14: 00007f962e42a300 R15: 0000000000022000 [ 942.958284] 10:02:52 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) (fail_nth: 3) 10:02:52 executing program 1: syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:03:04 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) (fail_nth: 4) 10:03:04 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911ea"}, 0x23) 10:03:04 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (fail_nth: 5) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:03:04 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:03:04 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f0000000180)={0x0, "4f86c3bb85249241d18b1022d2da9fee153f125d88df3bd889fa19000000a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c7200", 0x12}, 0x48, 0xfffffffffffffffc) keyctl$describe(0x6, r0, &(0x7f0000000000)=""/203, 0xcb) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 10:03:04 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xe) 10:03:04 executing program 1: syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:03:04 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x23) [ 954.867643] FAULT_INJECTION: forcing a failure. [ 954.867643] name failslab, interval 1, probability 0, space 0, times 0 [ 954.868524] CPU: 1 PID: 11112 Comm: syz-executor.7 Not tainted 6.4.0-rc1-next-20230510 #1 [ 954.869217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 954.869908] Call Trace: [ 954.870134] [ 954.870331] dump_stack_lvl+0xc1/0xf0 [ 954.870677] should_fail_ex+0x4b4/0x5b0 [ 954.871029] ? __sigqueue_alloc+0x252/0x6d0 [ 954.871399] should_failslab+0x9/0x20 [ 954.871734] kmem_cache_alloc+0x5a/0x390 [ 954.872092] __sigqueue_alloc+0x252/0x6d0 [ 954.872448] do_timer_create+0x16a/0x14f0 [ 954.872725] ? __pfx_lock_release+0x10/0x10 [ 954.873088] ? __pfx_do_timer_create+0x10/0x10 [ 954.873480] __x64_sys_timer_create+0x177/0x1c0 [ 954.873878] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 954.874313] ? fput+0x2f/0x1a0 [ 954.874607] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 954.874941] do_syscall_64+0x3f/0x90 [ 954.875256] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 954.875583] RIP: 0033:0x7f7e6fb4ab19 [ 954.875906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 954.877002] RSP: 002b:00007f7e6d0c0188 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 954.877634] RAX: ffffffffffffffda RBX: 00007f7e6fc5df60 RCX: 00007f7e6fb4ab19 [ 954.878226] RDX: 0000000020000bc0 RSI: 0000000020000b80 RDI: 0000000000000000 [ 954.878816] RBP: 00007f7e6d0c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 954.879405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.879992] R13: 00007fff26c38fdf R14: 00007f7e6d0c0300 R15: 0000000000022000 [ 954.880594] 10:03:04 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (fail_nth: 6) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:03:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) [ 954.979485] FAULT_INJECTION: forcing a failure. [ 954.979485] name failslab, interval 1, probability 0, space 0, times 0 [ 954.980692] CPU: 1 PID: 11128 Comm: syz-executor.6 Not tainted 6.4.0-rc1-next-20230510 #1 [ 954.981196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 954.981874] Call Trace: [ 954.982101] [ 954.982300] dump_stack_lvl+0xc1/0xf0 [ 954.982650] should_fail_ex+0x4b4/0x5b0 [ 954.983014] ? __alloc_skb+0x28c/0x330 [ 954.983275] should_failslab+0x9/0x20 [ 954.983609] kmem_cache_alloc_node+0x5d/0x3a0 [ 954.983908] ? lock_acquire+0x19a/0x4c0 [ 954.984251] __alloc_skb+0x28c/0x330 [ 954.984505] ? __pfx___alloc_skb+0x10/0x10 [ 954.984885] ? __pfx_lock_release+0x10/0x10 [ 954.985261] ? tcp_chrono_stop+0x8f/0x3e0 [ 954.985544] tcp_stream_alloc_skb+0x3c/0x580 [ 954.985925] tcp_connect+0xf87/0x45d0 [ 954.986192] ? __pfx_tcp_connect+0x10/0x10 [ 954.986560] ? secure_tcpv6_ts_off+0x1b8/0x2a0 [ 954.986853] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 954.987330] tcp_v6_connect+0x13df/0x1a80 [ 954.987609] ? __pfx_tcp_v6_connect+0x10/0x10 [ 954.987998] ? __pfx_avc_has_perm+0x10/0x10 [ 954.988280] ? mark_lock.part.0+0xef/0x2f30 [ 954.988653] ? lock_acquire+0x19a/0x4c0 [ 954.988932] __inet_stream_connect+0x81c/0xda0 [ 954.989320] ? inet_stream_connect+0x43/0xa0 [ 954.989608] ? __pfx___inet_stream_connect+0x10/0x10 [ 954.990035] ? mark_held_locks+0x9e/0xe0 [ 954.990299] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 954.990745] inet_stream_connect+0x57/0xa0 [ 954.991020] ? __pfx_inet_stream_connect+0x10/0x10 [ 954.991428] __sys_connect_file+0x159/0x1a0 [ 954.991714] __sys_connect+0x169/0x1a0 [ 954.992051] ? __pfx___sys_connect+0x10/0x10 [ 954.992345] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 954.992860] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 954.993241] ? fput+0x2f/0x1a0 [ 954.993529] ? ksys_write+0x1a7/0x260 [ 954.993781] ? __pfx_ksys_write+0x10/0x10 [ 954.994147] __x64_sys_connect+0x73/0xb0 [ 954.994414] ? syscall_enter_from_user_mode+0x21/0x50 [ 954.994864] do_syscall_64+0x3f/0x90 [ 954.995113] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 954.995540] RIP: 0033:0x7f9630eb4b19 [ 954.995781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 954.997267] RSP: 002b:00007f962e42a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 954.997736] RAX: ffffffffffffffda RBX: 00007f9630fc7f60 RCX: 00007f9630eb4b19 [ 954.998317] RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000004 [ 954.998908] RBP: 00007f962e42a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 954.999500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.000093] R13: 00007fff0ba2ac6f R14: 00007f962e42a300 R15: 0000000000022000 [ 955.000610] 10:03:17 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x10) 10:03:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x29) 10:03:17 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:03:17 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) (fail_nth: 5) 10:03:17 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:03:17 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (fail_nth: 7) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:03:17 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:03:17 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000400)={0x0, "4f86c31dbb85249241d18b0d22d2e79fee153f125d88df3bd889fafa60b555a7f492a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) request_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='logon\x00', 0xfffffffffffffffd) keyctl$unlink(0x9, r1, r1) request_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)='\x00', 0x0) keyctl$get_security(0x11, r1, &(0x7f0000000000)=""/2, 0x2) 10:03:17 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) (fail_nth: 6) 10:03:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) 10:03:17 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:03:17 executing program 4: syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911383679bef69f2cc779b594fe1455225000000000000049559a452eace718d3800000020000000a017b2e48e24805d04000000000000"}, 0x40) 10:03:17 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:03:17 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) [ 968.192458] FAULT_INJECTION: forcing a failure. [ 968.192458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 968.194057] CPU: 0 PID: 11260 Comm: syz-executor.7 Not tainted 6.4.0-rc1-next-20230510 #1 [ 968.195037] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 968.196054] Call Trace: [ 968.196395] [ 968.196697] dump_stack_lvl+0xc1/0xf0 [ 968.197236] should_fail_ex+0x4b4/0x5b0 [ 968.197774] _copy_to_user+0x30/0xc0 [ 968.198282] simple_read_from_buffer+0xd0/0x170 [ 968.198890] proc_fail_nth_read+0x19c/0x230 10:03:17 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x3c) 10:03:17 executing program 5: read(0xffffffffffffffff, &(0x7f0000000000)=""/76, 0x4c) r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) r1 = epoll_create(0x7fff) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) signalfd(r2, &(0x7f0000000140), 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003980)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000003a80)=0xe8) clock_gettime(0x0, &(0x7f0000004140)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000040c0)=[{{&(0x7f0000003ac0), 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003b40)=""/202, 0xca}, {&(0x7f0000003c40)=""/228, 0xe4}, {&(0x7f0000003d40)=""/24, 0x18}, {&(0x7f0000003d80)=""/157, 0x9d}], 0x4}}, {{&(0x7f0000003e80)=@abs, 0x6e, &(0x7f0000003f80)=[{&(0x7f0000003f00)=""/122, 0x7a}], 0x1, &(0x7f0000003fc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}], 0x2, 0x40000000, &(0x7f0000004180)={r4, r5+10000000}) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000041c0)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4e21, 0xff, 0x4e20, 0x100, 0x0, 0x100, 0x80, 0x87, r3, r6}, {0xfff, 0xd, 0x101, 0x64, 0xfffffffffffffff7, 0x0, 0xa94f, 0xffffffffffffffe0}, {0x40, 0xfffffffffffffffd, 0x5, 0xe6}, 0x7, 0x6e6bbd}, {{@in=@empty, 0x4d4, 0x2b}, 0xa, @in6=@mcast2, 0x0, 0x1, 0x3, 0x7f, 0x6, 0x6d8, 0x4}}, 0xe8) keyctl$get_keyring_id(0x0, r0, 0x3) 10:03:17 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (fail_nth: 8) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) [ 968.199429] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 968.200308] ? security_file_permission+0xb5/0xe0 [ 968.201124] vfs_read+0x1e4/0x8b0 [ 968.201715] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 968.202483] ? __pfx_vfs_read+0x10/0x10 [ 968.203158] ? __fget_files+0x270/0x480 [ 968.203867] ksys_read+0x12b/0x260 [ 968.204469] ? __pfx_ksys_read+0x10/0x10 [ 968.205174] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 968.206042] do_syscall_64+0x3f/0x90 [ 968.206643] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 968.207485] RIP: 0033:0x7f7e6fafd69c [ 968.208085] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 968.211121] RSP: 002b:00007f7e6d0c0170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 968.212325] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f7e6fafd69c [ 968.213486] RDX: 000000000000000f RSI: 00007f7e6d0c01e0 RDI: 0000000000000003 [ 968.214635] RBP: 00007f7e6d0c01d0 R08: 0000000000000000 R09: 0000000000000000 [ 968.215790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 968.216957] R13: 00007fff26c38fdf R14: 00007f7e6d0c0300 R15: 0000000000022000 [ 968.218137] 10:03:18 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 10:03:18 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) [ 968.309382] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 968.309382] program syz-executor.4 not setting count and/or reply_len properly [ 968.328986] sg_write: data in/out 558956287/18 bytes for SCSI command 0x52-- guessing data in; [ 968.328986] program syz-executor.4 not setting count and/or reply_len properly 10:03:18 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x10) 10:03:18 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:03:18 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xfc) 10:03:18 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) r1 = request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='logon\x00', r0) keyctl$set_timeout(0xf, r1, 0x4) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 10:03:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797a3123ff502151911381679bef69f2cc779b594fe1a4daf3d7126295ea5911eacac78f5645522535adc1c896d0c60a9126694596d8dd527dbda5ca09336ad5408608b8f4deb50e6952bdc63f8d1cfd122b598b5c87cff7def1716fd6fa2f7a2422146103e559ec0fcb98d3035be41e2c4529bf85e2a88dc6a77c91e3b60836119a499694546b472dfcd279387a3473"], 0x2a) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20, 0x200800) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000040)) 10:03:18 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x8, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 10:03:18 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (fail_nth: 9) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:03:18 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:03:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 10:03:18 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:03:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:03:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:03:29 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (fail_nth: 10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:03:29 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0xb, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 10:03:29 executing program 4: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000200)=""/211, 0xd3}, {&(0x7f0000000300)=""/108, 0x6c}], 0x2, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x2000) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xec, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_NAT={0x78, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, @CTA_EXPECT_MASK={0x4c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}]}, 0xec}, 0x1, 0x0, 0x0, 0xc0}, 0x4940) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)="7ce87cdfde5c30f0cc73ff6d4dc6b172d1a64ad16a82f7456cf6a219505f663cef280cec10aaab8600fa0ee15d8d8a5968b8c709714eba83e488533e467bf8a2aa89c04fea3469e127ec3f80a69444be8e68c1504a6562490c90a34230272137e830397952063d716f83513a73af41d3157e83ff21a2b7220e56773a5f76eab881459830f7a82efb8c507bdd83937639ccf4e0bdf84e3868ac0d00b910ebcb8c59bf61e63ee05f85fef5573e9191fbba", 0xb0, r1}, 0x68) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="73797a3123ff020051910000679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f566a399bcf56d22b16455225"], 0x2a) 10:03:29 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:03:29 executing program 5: add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85242f41d18b5729d2db19000000000000003bd82a36cac2feece1a3a9547b98959a8240c31ead6c31b60390f118148d43371f5b6d9400"}, 0x48, 0xfffffffffffffffc) r0 = request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\xcb-]\'&]&(\x00', 0xfffffffffffffff8) keyctl$update(0x1d, r0, &(0x7f0000000200)="07b634003a66b5fa755fbbce", 0xc) r1 = add_key(&(0x7f0000001280)='.dead\x00', &(0x7f00000012c0)={'syz', 0x1}, &(0x7f0000001300)="9e55409be52ae56c22fd1b32087abde328aee8299438dd0df2f2be10e964848d55ee2ab1b6c77aecfdc803976bb3fea46a783a16a0950d49bfa5e40bb797adc5dd0fd48dbb29adbfdb13bac0cc6b822a46fff96df397da3f4753c3a60bcc59169ccd37acb391b99d6682f3566e663690c575a5d5538684e1bb1d753de1edfcf7ad712b4b8527102159fa4c22b20d0ccfce23021844affaeb2cc0b3265781402b2ecd944478f9b4bebb52b69206e9f2a3fcaa8c0dc7f9b199137026f5205b9e39f091698a70043434", 0xc8, 0xfffffffffffffff9) add_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="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", 0x1000, r1) 10:03:29 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x1f4) [ 979.419617] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 979.419617] program syz-executor.4 not setting count and/or reply_len properly [ 979.430139] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 979.430139] program syz-executor.4 not setting count and/or reply_len properly [ 979.437551] FAULT_INJECTION: forcing a failure. [ 979.437551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 979.438337] CPU: 1 PID: 11436 Comm: syz-executor.6 Not tainted 6.4.0-rc1-next-20230510 #1 [ 979.438882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 979.439449] Call Trace: [ 979.439625] [ 979.439786] dump_stack_lvl+0xc1/0xf0 [ 979.440076] should_fail_ex+0x4b4/0x5b0 [ 979.440373] _copy_to_user+0x30/0xc0 [ 979.440655] simple_read_from_buffer+0xd0/0x170 [ 979.440986] proc_fail_nth_read+0x19c/0x230 [ 979.441303] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 979.441654] ? security_file_permission+0xb5/0xe0 [ 979.442000] vfs_read+0x1e4/0x8b0 [ 979.442254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 979.442593] ? __pfx_vfs_read+0x10/0x10 [ 979.442893] ? __fget_files+0x270/0x480 [ 979.443191] ksys_read+0x12b/0x260 [ 979.443443] ? __pfx_ksys_read+0x10/0x10 [ 979.443727] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 979.444088] do_syscall_64+0x3f/0x90 [ 979.444348] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 979.444692] RIP: 0033:0x7f9630e6769c [ 979.444949] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 979.446146] RSP: 002b:00007f962e42a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 979.446666] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f9630e6769c [ 979.447157] RDX: 000000000000000f RSI: 00007f962e42a1e0 RDI: 0000000000000005 [ 979.447652] RBP: 00007f962e42a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 979.448150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 979.448669] R13: 00007fff0ba2ac6f R14: 00007f962e42a300 R15: 0000000000022000 [ 979.449207] 10:03:29 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000040)={0x0, "4f5bc31dbc85247741d18b1022d20700000000000000df3bd883fafa608f2667d8926c31b6039010119a53ee2519f1187bbb299c7200", 0x16}, 0xfffffffffffffde3, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 10:03:29 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 10:03:29 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x400582}, 0x18) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0x7, 0x3}) 10:03:29 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x240) 10:03:29 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) [ 979.554863] FAULT_INJECTION: forcing a failure. [ 979.554863] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 979.556774] CPU: 0 PID: 11446 Comm: syz-executor.1 Not tainted 6.4.0-rc1-next-20230510 #1 [ 979.558071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 979.559329] Call Trace: [ 979.559754] [ 979.560132] dump_stack_lvl+0xc1/0xf0 [ 979.560776] should_fail_ex+0x4b4/0x5b0 [ 979.561445] prepare_alloc_pages+0x178/0x500 [ 979.562166] __alloc_pages+0x149/0x480 [ 979.562827] ? __pfx___alloc_pages+0x10/0x10 [ 979.563548] ? lock_acquire+0x19a/0x4c0 [ 979.564204] ? lock_vma_under_rcu+0x219/0x9f0 [ 979.564939] ? reacquire_held_locks+0x22b/0x4e0 [ 979.565727] ? lock_vma_under_rcu+0x219/0x9f0 [ 979.566483] vma_alloc_folio+0xe2/0x450 [ 979.567137] __handle_mm_fault+0xe61/0x3300 [ 979.567694] ? __pfx___handle_mm_fault+0x10/0x10 [ 979.568310] ? mas_walk+0x5a8/0x7a0 [ 979.568919] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 979.569549] handle_mm_fault+0x1af/0xba0 [ 979.570082] do_user_addr_fault+0x369/0x12d0 [ 979.570817] exc_page_fault+0x9c/0x1a0 [ 979.571458] asm_exc_page_fault+0x26/0x30 [ 979.572126] RIP: 0033:0x7f3071f32568 [ 979.572721] Code: 24 28 21 00 00 8b 87 c0 00 00 00 85 c0 0f 85 6f 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 01 00 00 48 8d 7c 24 20 <48> 89 9c 24 00 01 00 00 48 89 44 24 48 48 89 44 24 40 48 8d 84 24 [ 979.575525] RSP: 002b:00007f306f4e39f0 EFLAGS: 00010246 [ 979.576390] RAX: 00007f306f4e3b10 RBX: 00007f3072055f80 RCX: 0000000000000000 [ 979.577539] RDX: 00007f306f4e60b8 RSI: 00007f3071fbbc30 RDI: 00007f306f4e3a10 [ 979.578660] RBP: 00007f306f4e60a0 R08: 0000000000000000 R09: 0000000000000000 [ 979.579774] R10: 0000000000000000 R11: 0000000000000000 R12: 00007f3072055f80 [ 979.580884] R13: 00007f3071fbbc30 R14: 00007f306f4e60b8 R15: 00000000fbad2086 [ 979.582051] [ 979.582617] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 10:03:29 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) keyctl$describe(0x6, r0, &(0x7f0000000000)=""/116, 0x74) 10:03:40 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) [ 990.536127] sg_write: data in/out 558956287/18 bytes for SCSI command 0xc7-- guessing data in; [ 990.536127] program syz-executor.4 not setting count and/or reply_len properly 10:03:40 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x300) 10:03:40 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) keyctl$get_security(0x11, r0, &(0x7f0000000000)=""/92, 0x5c) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, r1, r2, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$unlink(0x9, r2, r2) keyctl$instantiate_iov(0x14, r1, &(0x7f00000013c0)=[{&(0x7f00000002c0)="59bad4a05974a52a439ae23e9d917aadd32a7f27a68c8a731a7e040c2e53edc3bfad321b29d670450ea1a257c6ad910edc0363e2aa3b77c688e538ddd14d5a9c318b38fad92eaec90825252b4ad7e44cf26ebbcd20bf4e6c8ca55425a8763add5dfe1b48410c6526e75c33743817129ced7a298fb11f36dd11e18a17833962474e2393d305dbeb247b8ce76a14afcdea9b93da23fac379a2d285be3a3f586b488ea3d30e8a32ed43b45489bb6be5b0ed9ae590d4e9ecb3abdab192f69df499089a4ef193fb1136df59f061713eeae59d9683742eda028e92d6ea987973b38e98e1a8ffbc302c69bf5ed1847dafd86341f0aa1990", 0xf4}, {&(0x7f00000003c0)="649f105ee81d40a51dc835d800c8888881daa15692cea70e029c3641350c01cdb9bb4fe866d27998829610d8e67811a31bb480f428547de8c4e3674917f848f76be7943e38aec7f5632be452ace231cf69cd1473882140f9a33a07ae68855ff53cbe9d9c34be83c69f6a61140a3e97b2f0ba34f4d76af1b2772f29f44abf4cdf9ea45b7e75d68b80377c2d64c1e12567d1d55d76da54970763add6fd1d9b7401e9bd934230cca25d478db08376cc137b7c93958ec113afa9c5c872a6fa48e7807b2da8da275478f107c4565e0c0a6b029dad43d8b88fa88c005417561492b9e210468f6ec6c4136b25415d2e26018b27fbf0d67c6785ec0609d61459b0d3a1201b4a9159915fff8fced910e06d0da7748f7ac464c53ce7770806b2a21d2ab99a9b8b3cc2aa24a3874dbb425a26c3cf9d22edb00bafe1d05da2fb16c0f8873171175cf808f51cb3e8605398b1a027b92786b0662c5e65a9788dcba09e4aed4f345f91bcfa0262ce35525d0ea808dd2b8938d6a0dc39c538319acaea88bb96c90acd6ebf40232a57b4722561441d212f92ed3f46b3452267995c3be0100ffd58ebefb60e3b4728ae3438eee6d0d64c4a3d090ee2bf8c08b1ee50b6487da4351b800822e7bb37384d8d07c4e3bbe707ae0e68d8601d123f6615df82ede50f2c4149137f375b5bf1f2f0da24e7ea5bef7edd5e9c2df9837591fe07b81b8129ea7a2dfa80af11bcbff13595ada922e4e3c0e5d46fd44dc47610ec2ab469e4c95ac1524f400dbb01bad5ef1157f7469d2f6099f38cecad019409411ed12f7134295262730c86297e6270693f4afbd3f124f0f1d0e9e176b7cd7ff4d80b6c286d4e5f1ec7960f4e4a9f0bc640c2a3a066d376d00e01e74ec9a970d0d2889e44b50aaae44587bf07aeb35dbbc8aaa3d100cc39e4bf4e63e795a0131b98d96e793d65199a79817e7e610d17cbc5418d8df340ccc2b80429975c8822516f409d4e56364186fca7ab177d10ce5059b1cb52bc3ce80b3b3c17be2528ebc5bd31b82e7a33e64cb2c357d6f39ebf9e920de7aec63493121f71f512aff3f9559db1220585d0f0679af1de5dc625d3d98bb73c914e3c66f7c08f0f70246c69b6fd0853a36bcc643c137d49fba23d6818b1801376ef345c5fff9219c54aaa46d54329ae0bd9571170e083fab37115002f827cff5672c0504e534a89edaf6b69793f53a4aba693450b3b624272d6b65d4ecee8ebda3614c3ee988bfad48a311614cdf365c1ca206d115b4bc391726c31bd8c15e2c50885a8ccd2f5936ee87f1000b6df6b9b58313e5140b75658044888746e308b0fa0f68d9f4bdfaedce40b85a49665dfd87a42752b5374ff2cf92bbd74ae7de8a62b82c07a5c9d83e4dcb642691a433986e98546b57afa7d3ae97cdc5dea1f76d54fa9c5d38cf9769cf85b381cd9721df6ab1f2083c92eac3d3b5e2831448481f851d00dfa767db16b6677142390d335e0c669bd6e19a84a46a972fa717ae1c33bab19dacc14749a5b3b0953479b9e6623a3317e6fde37ee75b73d9a21fa2b130afb57356f0d0d7c7d28031408e89efd2841eded4bcf025b46ada1a1ff27e975888f67791a7a0faf07e9e6a3880337cdb434f767122fa547fc8f6020286cc53a03f02bb9619d48f9c5267cae508ebb8617ee5be71cd9581e12d158e94f4ab1b25cc048230e3b222e0e26843d617fdb59f95e001554355a2ef97befd2c667390546abf113842c3ac3c8d66afc90fd4dc29db0d66705021ca431973a710a13bd14395223690603dde212dafc9774375998b33a69443f550a77d8a91026fd5e66ff113778e1d888f3c508c55daf9771e1d2d82f93560aa121942f7c35c76dd45b26f11caf75f8ab3166706f9437b8a2330f3e6f91668d906c4a8efafba7e555824d2c5736449de0d44a9e68b09237d21c3099daecbecf61eb6b42a3fcdc9fc0242f4b65a7e4aedbde7380b316579e087b8ce154f4a38c98c40b524551ff540916aebde9905766a5496b92a6d53664511ad1135a019c99e498fb6adb27ab31cc8e12f9d83fa93b666346ce7d3bd228a3ef5d58ef05545e717e9404c483d30b496bb58f0e21eeade02f2fb92a92049fb9ccfad06618036fcff0cc3535082888a5e012cb2259a339fa958b8db1a83b28e97e586c6b9175aabe5936e65b637106a5c26839a9c708901f04e75be32fb4bc623d3e7a54aca3344d871fbf3482d25e155a87fe5bef0db3a7240671e5be9ee2b10ee110766364eff2286b50ec4bf122d818085fe83565f286070842e9321880577379f94c78ba0dcb8c1185fc90e2d6bc54158269e8e7344d1257d1bab81f6c73f505f6b42215fe5625251cf2ad88d280cbb637fa2fc1b8003320465b98999af36f3951ee6700359d94be23cf40f7308f6524cd6a8f71a9a76115246eef2f93cfc9b753e6c58a783dc2aaf36f1e3af9111978ecbf6820cf6e21867dea680cd743171fe98775341e53272bbe194bba7065f3cfebfb207aa1b8c8b6f3b2e458b7442cf801260a757d9219a75ce69af885d99bdb19b58ea0b0ccec675c6b99c4f0e1febbc639be1b3dea4dfd634bb5f51cf56883ea6b6730d06f114ff5293013cfabd7f738d5c2f410cf4b569eab57c8b2a0c5473433e06a68cdd43a464d84c0297b71cb42c82d74bafdfedfb2520f2f76e75784b0712d5142009195d6e3ac2854b88e2d4415c0f28856e141d3078226f4c89ae622a5291bc02fbd9694b02a652a05900a25c961bd51244ac11a42027dee1d409c91883205e00ae73227d36278c94cbffeffb9295fd29513a4b9204b8fefb8ff141dfacb736557b1435d0ac7bd42759efacce063f5b8937a73cbcfe9bd15eef2d5097adedbda68beb9d2944faf0b8b36072aed97ba5e39b433911a5d1524455625d040cf45dce0d8e72597b8c39b7536f4cb1e09ed112f61f02ce03fa50e5c968ec9e8286cfb6d190628f54f55aee8f038ea036fd7ffc13c4785fd51b9b8b0bea21a9278fcefa65ad90846e67fb231f932b3c5a98b28c203bb96a9be8b65ece4aa750ad1bd93bfe559c2e107cb92b326d1d85d15629fc91f50ca59b50a3dae408d8834237399ad5c522791a564d702a9aa5d860a190de99b0d82e0a24c3e430eeff25b2e5444582d8daa4c5a83d5629639e90a423fd16d1b6d2fb8b639341d624268e7a05eace4ece55e7140b802e5bdf6c94010c9c98b7ccd360a929a3d0e2bd6f5fca11cf5ecb3c1ce646884b0852844c3717a14786e26e188128b7f3e70b00471ba5e4162bf4fd9a1804af1e5edfda90c95cb48839f8acc5744d2b2d4b4ed23b4343fd95c33b5dedb95ec16e8267b80153f1d46bf2399d81f73b0c0baa2b8dc340b7d1090c8772ff9695609fde5a8bfc92407f58f094eb7bfa23e6c584e0c12e741665a58142a5f262f6daf6c64a8abe334250ea8e1bc48a478d723c1fa37103d408de6d2b019157afa6c85b614a679624b283343e504fafd7f5a57059d4adede3ef073e6e224e15a07a0cbc8af0f50b81fcfe8514238e0e0ba7bd06a2ce647aa165b85406203f250dbe00bf1c34aa65728d929b58d26c0ece09734809dcbdf9cf35bd0f98621117e6070bca0ce18519f56b9f34040adcd03d1e157a2f122baccf6765b1e60a14eb5eb8a54ccfe6fafbd9b1931d6766308f9ec103aa9e4021aa4d709309f34e2e7d61e01152773aeba041729f86cd6a681aec5530204dbfb85faf41af7af7ddc6b6c6f22bb4bf1a9e3c9ccc6dc4a44fb094a567e7a4f530b79009969e3d667f1734e7866dae28f42d831f12f7789b905563f66d47c0b03f272940ba0217cc1e7e43ef4cd850cb1332213ac178da70ef79f13ccb3253674b7c00bdb4818da9dbe0c41e4fe0c88fecffda387ca1835e99dba8a199206b8ad59845b89dc63a8379bfbc1e8860d8490febea4c079fa4e5fb3ce4c06e61dba3150d3da7b9c72d611df4e5191456e372a482965a70c69ba9494a4f220adae00aebd0baccdaafd4c6ece581a5d54b7b9392a0bc40f3647c83acdd1066c24bf722e40d8965efac616c35bc27a3aa4121f67dbcc5bb4a1d3bc1c0218f268b83f245349a3b7a6331fe4209875e5164904882c1fbef674089366d55f657ef7ef612cfcf51b9d280d299c9a1e9d8a944864684cfd170fcbe1ed82603448b7212b3b8ecfb2f60c70ca8bab3f98e0ec2c7cbda2878307b1b1525f44159a0758eeb48728c58e672e91bda8551f3df00869d5b10ade3481e512d0d72128547eaf8051575a9510b73f0ae1222d5f49c4eaf8c8fe6a60583cb98098844464804073980c4708bba03bff32a64bab68752dc8b88c9c3260aab31e03afdf58db0cddcdabe94a0b82082667561af24bde76eeab92ec755e0fff762a7cb6fc40844eaf13962ebee4a080d5221f9476aacc2d1dace6771582bdd598007087af543c8348a2116f24b0ea4777bfb6859b5ade2e80786325580d3da5e9fa7099745f92ed9b46c66eebf5aae6ecb56ccf27f308231550094cbb609bacb3b7b759e39fffa317899acef2496b67a2ef18fb812165480a67b93653ae3d8ab60e3569376251c046a53f2f81989d0c7efccba901dd218106777baa0079d1a95734f46d08ec5129884787e424051657341a4ef6a63f139ba3f7155a33e79c6d42a96e826bdc32b6892abe74d3025cd2ed4759a214462c49be35411e19f93cdeb4e817bf4d59a20788fa7cdec210ea21b58e661c897c16e74ec2ccb87249db7facae326e4fdce89800073d99a422b7935a0007e05e34dc7f109799a4b24fe25f25959b1ae3d65d9a792492043147d390b0139de35ec1348bd5d9e880a64ff814ad1ecc1f3f30ee8220a025122507cb4851b7a56ee5e32eeb08f99a7e28241fb6abfbebb49862c0d92a8174c8beeaa1744311b17e6fa6fac11d522eadee592437c25690ecb89e247d3b721ff95aa6f8e1415c42544d57fbc6a55def43b7adb85b02f2045e10d73d87fffe66dcd6fd6eec4680411d09a20beeb31d90eb4c71032e66fffc3c7907735b53c42250e9039a937ab274fa2daa7512a2b5a67c165b8664839e99b9e729e034a1ade9c946de87a40c45a6bf156d979310f2d02ee9a1456b06c85e3e3eb1d19597ce142412085992bfb690559bae25ac82f8d03c04047bf34cdb988b25c3b41cf2a8a3e0ac6ef01e5e573be6c54b4c8b6332b02f3692f286afb3c27c3b39cd125980c3328c29571f7b0338be6b1da6dd2db38d9b7034064273ce6ea2ae6a31ddfe9e285962c8a5f5d8cb90625e658fde8610f98a4a7bbf3975b39960d2ac2942642fc1535dd9a19bf779dc2b4696cca4f69e977807974ce1dbb2f6b7b4e045960d6bccda396294a4116fc22c5218fa52d8084b223d72a921a4fed924bc094522784eec8234b8d8a51d7ffb7d5ede4f7dc30dfb75ff268e51a2b01cab5d7e6abcb8e2e42715b36704604f489b9709abe7ac1c57ea421887dfd801b3aeac66961fda97d6f433fff9798655bf057d514c758cad29480baf769c3c2e38fc32ce64aed6416da33e61d6683ba67eadd2510d725233c7bdd9e94ca406751789406853d585e010733f21b3a81516d04bf952211bd52539367c68a803cdae71889b53b6a7e46b4c31be27c861427aaeccd68ae941749842daa84428ca8a74e67339bb00090218142ad21d0c6f4c1296f8210737fe1c4db068a256ed4ebac3991c5b3418ec451cb1bc80d3df9d998120dc9ae2cc4d90a8eaf4ff591840a0fc235a8e12f224d44dd00a0cdee7ec33557c49cbb7cb6275a6fbdadc58ef9afcad6bb31b82", 0x1000}], 0x2, r2) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r3) r4 = add_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$setperm(0x5, r3, 0x810) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f0000000280)=@secondary) keyctl$unlink(0x9, r3, r3) keyctl$negate(0xd, r3, 0x80, r0) 10:03:40 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0xb00, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 10:03:40 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0x2, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:03:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) (fail_nth: 1) 10:03:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r2 = dup(r1) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000080)) write$binfmt_misc(r1, &(0x7f0000000100)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310ed91737011ee336300ecd394865478a567"}, 0x40) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/hid_ntrig', 0x8101, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0xf, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040850}, 0x48890) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x80}}, './file0\x00'}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="9f9cda7a27ba997fe1175dce6a67fb16345385f1eba21d67d974c5299c0435045a8434d21173d554316892b536c1dce3ce36df3e7f8bed69ac316682d7876be96a5e3e66d7de11e614a0511f67d0cf56437de3f89f1b1eb275ef1c6d2cdb74828918774447c9900fde3898c7e76795210681ea23e422814d0b6e5ee47cb49f5bcc7e346437706ca52d32bbc484486d70b6e17a5de49b211f16aa71c06efd47ffe2d31e8721c7c7aafad232a0d5ae6dae68f2d2e82a74732dbcf747255a22f3913de69b6ed85a360ff80f301bcf1d3c1fdae10ad06b16ef236c819737d6a27a7fb4ac092ee5fbbd24ad1dfdac889b89c113"], 0x16) 10:03:40 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x0) [ 990.542123] FAULT_INJECTION: forcing a failure. [ 990.542123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 990.543616] CPU: 0 PID: 11475 Comm: syz-executor.0 Not tainted 6.4.0-rc1-next-20230510 #1 [ 990.544669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 990.545738] Call Trace: [ 990.546082] [ 990.546390] dump_stack_lvl+0xc1/0xf0 [ 990.546934] should_fail_ex+0x4b4/0x5b0 [ 990.547494] _copy_from_user+0x30/0xf0 [ 990.548036] sg_write.part.0+0x1c9/0xac0 [ 990.548583] ? __pfx___lock_acquire+0x10/0x10 [ 990.549204] ? __pfx_lock_release+0x10/0x10 [ 990.549776] ? __pfx_sg_write.part.0+0x10/0x10 [ 990.550402] ? __lock_acquire+0xc29/0x64f0 [ 990.550985] ? __pfx_lock_release+0x10/0x10 [ 990.551568] ? find_held_lock+0x2c/0x110 [ 990.552129] ? inode_security+0x105/0x140 [ 990.552530] sg_write: data in/out 558956287/18 bytes for SCSI command 0xc7-- guessing data in; [ 990.552530] program syz-executor.4 not setting count and/or reply_len properly [ 990.552682] ? avc_policy_seqno+0x9/0x20 [ 990.554247] ? selinux_file_permission+0x96/0x510 [ 990.554957] sg_write+0x8d/0xe0 [ 990.555451] vfs_write+0x2b8/0xd40 [ 990.555966] ? __pfx_sg_write+0x10/0x10 [ 990.556555] ? __pfx_vfs_write+0x10/0x10 [ 990.557154] ? __fget_files+0x270/0x480 [ 990.557775] ? __fget_light+0xe5/0x280 [ 990.558361] ksys_write+0x12b/0x260 [ 990.558895] ? __pfx_ksys_write+0x10/0x10 [ 990.559488] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 990.560233] do_syscall_64+0x3f/0x90 [ 990.560780] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 990.561530] RIP: 0033:0x7f0b8afc3b19 [ 990.562075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 990.564601] RSP: 002b:00007f0b88539188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 990.565672] RAX: ffffffffffffffda RBX: 00007f0b8b0d6f60 RCX: 00007f0b8afc3b19 [ 990.566657] RDX: 0000000000000024 RSI: 0000000020000000 RDI: 0000000000000003 [ 990.567630] RBP: 00007f0b885391d0 R08: 0000000000000000 R09: 0000000000000000 [ 990.568610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.569597] R13: 00007fff58e73e0f R14: 00007f0b88539300 R15: 0000000000022000 [ 990.570614] 10:03:40 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0x3, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:03:40 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xa900, 0x20, 0x1}, 0x18) 10:03:40 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) 10:03:51 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:03:51 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x37a) 10:03:51 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) (fail_nth: 2) 10:03:51 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)={0xfb, 0xf37a, 0x3b3, "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"}) 10:03:51 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x2) 10:03:51 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0x7, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:03:51 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x31, 0x38, 0x62, 0x65, 0x30, 0x31, 0x35, 0x32, 0x35, 0x62, 0x64, 0x34, 0x34, 0x64, 0x30, 0x63]}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 10:03:51 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x80000, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 10:03:51 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:03:51 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x3) [ 1002.015794] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1002.023545] FAULT_INJECTION: forcing a failure. [ 1002.023545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1002.024618] CPU: 0 PID: 11622 Comm: syz-executor.0 Not tainted 6.4.0-rc1-next-20230510 #1 [ 1002.025168] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1002.025722] Call Trace: [ 1002.025908] [ 1002.026072] dump_stack_lvl+0xc1/0xf0 [ 1002.026361] should_fail_ex+0x4b4/0x5b0 [ 1002.026657] _copy_to_user+0x30/0xc0 [ 1002.026944] simple_read_from_buffer+0xd0/0x170 [ 1002.027268] proc_fail_nth_read+0x19c/0x230 [ 1002.027577] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1002.027908] ? security_file_permission+0xb5/0xe0 [ 1002.028245] vfs_read+0x1e4/0x8b0 [ 1002.028491] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1002.028828] ? __pfx_vfs_read+0x10/0x10 [ 1002.029112] ? __fget_files+0x270/0x480 [ 1002.029422] ksys_read+0x12b/0x260 [ 1002.029696] ? __pfx_ksys_read+0x10/0x10 [ 1002.030013] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1002.030505] do_syscall_64+0x3f/0x90 [ 1002.030817] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1002.031230] RIP: 0033:0x7f0b8af7669c [ 1002.031512] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1002.032795] RSP: 002b:00007f0b88539170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1002.033353] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f0b8af7669c [ 1002.033870] RDX: 000000000000000f RSI: 00007f0b885391e0 RDI: 0000000000000004 [ 1002.034371] RBP: 00007f0b885391d0 R08: 0000000000000000 R09: 0000000000000000 [ 1002.034871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.035370] R13: 00007fff58e73e0f R14: 00007f0b88539300 R15: 0000000000022000 [ 1002.035878] 10:03:51 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000200)="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", 0x1f7, r0) 10:04:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:04:02 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x3e8) 10:04:02 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x1000000, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 10:04:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="73797a3123ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225cc3a813d2c779533bc91b90098e02e40a911ffb117e44ecc17c8368bca7377e16049150057b4c8475d2fbcd8b79d64aeacac98560f54f68a3bda2ab6c48b36f12ac6ac3224f88c725bd9f4160b97a7df6cb919e7f3d99c12f4e2c27f0000004944dc1c8aac6e38eed45552cbb0573c531b4be2d54a3c3d8863cff6db55dccf0b8cb95f609f9499bfa2f3aad293a1e72bb3a40fd44a5763a9a14e5daf39d9143011e8b5e230af55e699cbd54e2ced4a75031d846242cecca9e62b0cd80fbc0851d4712db3b9f50c"], 0x2a) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000000)) 10:04:02 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000200)="18dca0c15c424ca3840bd4647c69601ae5b1379208eab2c665e6c11d13d914df47032c865028ee5909e9fb00fa1d4b9eba394fc346ff8ddcdc1bd3aa27617f39a96685a8f1edf873a00b47ebb9e34899e85613f231c14f4ca1316bb674bf23a95374865564183525da717d55efd4cf78cb11c1953dd5ce5ffa8c3f563fd612da2214", 0x82, r1) 10:04:02 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:04:02 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x4) 10:04:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) 10:04:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="73797a3123ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225af86caade6de4d88332d9982ab6384ca92228fe1f9d504e07592cb7e4753f73ade4b44ef259f722f2109e2e6faa1c9503a4ac38aa40c9ba9114344b9f37d87055f2f21c32c67c98745d9b5e5b3757cfadd33b8918709563405a43ee7ae4e564a492976f0280155b8ae02b7451c647cd5e11a91429fec21bca56b614173e00bd6a4aefacbe8715c3304447395889eb48355e97a9e2d4952a35628c4419f6e7a02b1fc7df2d8ce609c6a1891b2d83ebbe708f7a1c2d33865737f3fc40fdf41615165844aa2e5f33f4c8f6bb7f6b684"], 0x2a) 10:04:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:04:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x23) 10:04:02 executing program 4: ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a3123ff502151911381679bef69f2cc779b0300000000000000126295ea59eacac78f56455225"], 0x2a) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000180)={0xf5, 0x200, 0xc55, "70d8c0e88cef26a61f8b8cd923fbafcbc87d50cefcdc8e10a2991de0deae7055888f503de05cdc8053d728f63e29bcaef7a2921d55284832a922779be47d5024c7e57d9d74a838914e98dba9352815760b01c8e27c4e2982f7f0e5e9a035e02d6b1139252512846508b845c8392469480063254ae0342731442a08a7534681f9779ce972f6338e3aae9b08f9f20c4dbb488c9d1736639f4e2923e728f6813172024b29f7f9c1935c0623249ce03f2db972a834085ad4ae416602647173a74e92bee4a548435a27cc1539ddb4da9795d6ffe47a2ba66cb4dac08bfd20fb755cf44676e5f62004c628a651015402139e77e4347e8bf8"}) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xff, 0x5, 0x1, 0x9, 0x0, 0x5, 0x2042, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x355f, 0x4, @perf_config_ext={0x4, 0x8000}, 0x10002, 0x1800000000, 0x7ffffffc, 0x4, 0x3f, 0xff, 0x8, 0x0, 0x9, 0x0, 0x9}, 0x0, 0x6, 0xffffffffffffffff, 0x3) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) r5 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r5, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ppoll(&(0x7f00000000c0), 0x0, &(0x7f00000003c0)={r3, r4+60000000}, &(0x7f0000000140)={[0x10001]}, 0x8) r6 = io_uring_setup(0x2e38, &(0x7f00000002c0)={0x0, 0x6865, 0x0, 0x0, 0x373}) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000000340)={{r2}, {@val, @actul_num={@val=0x2d, 0x101, 0x6b}}}) fchdir(r2) 10:04:02 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) [ 1013.187948] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO 10:04:02 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x8) [ 1013.193203] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1013.193203] program syz-executor.4 not setting count and/or reply_len properly [ 1013.201577] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1013.201577] program syz-executor.4 not setting count and/or reply_len properly 10:04:02 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xe00) 10:04:02 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x1, 0x38, 0x63, 0x36, 0x36, 0x38, 0x3, 0x38, 0x38, 0x65, 0x32, 0x37, 0x36, 0x32, 0x33, 0x62]}, &(0x7f0000000000)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72", 0x800}, 0x48, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) keyctl$get_keyring_id(0x0, r1, 0x2) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) [ 1013.220950] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1013.226503] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1013.226503] program syz-executor.4 not setting count and/or reply_len properly [ 1013.230412] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1013.230412] program syz-executor.4 not setting count and/or reply_len properly 10:04:03 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) [ 1024.364883] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1024.364883] program syz-executor.4 not setting count and/or reply_len properly [ 1024.373972] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO 10:04:14 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0xb000000, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 10:04:14 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xe) 10:04:14 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:04:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x29) 10:04:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a3123ff502151911381679bef86f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"], 0x2a) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)={0xe5, 0x1d60, 0x7, "ea1ea87fe2feaf55c98a41e8981cb85386ad111e576659780e8eca353e87da4199c0114fbd80387b0663374b80bf766692a32c177f221ec36664a6cae4488edf35d8f95a85fc44ec97c2ddcc5879225358d29e2fcd939ae62a9767877dfebb7911d4384d3e928647936d97d611815a64f805405052ee74f0fb3699e9b385ca7f6ca419583133a3e6e540ccdd59767f2c93b905406aa547a11e3ce2dc7014acd752c2d41df8e37999de1f9740795eebf24a40ed5855d6a4e8e938dd1ace2221f304e1215625635875cf5a817c44f2731ce3166b3122476dcaf081901284cd6e39d30e8f546c"}) 10:04:14 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x1f00) 10:04:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:04:14 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) add_key$keyring(&(0x7f0000000080), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) r2 = request_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680)='\x00', r0) keyctl$instantiate_iov(0x14, r0, &(0x7f00000005c0)=[{&(0x7f0000000200)="8659027af0b492c1aa0b5ae8baf4fa34b1ac130fc03d01b61aeeca611ceacecc1ac33a13ad85eb06581479e454cf2fe3a675ce533c51d359af83e2fb0f85ca8b0f99fe1aba45ce49e8f0b081b1d3f34fbac105852e7cc786cb69be2948a8d0e5a8c60a296861e52bbf96a39ad930c56b0e0a0b26d9ea2e7075ce5ce4982296b37a679b764e204ce34aae4829bb93410c88dd9c17528120281efe93080a1c567fccc96e69b30963947c9dd2f30d21f764fe62b7281eee0bd44eefc408f8b6fa5bd85f1a2c10b43f829c39323ae1b5956a0ab7", 0xd2}, {&(0x7f0000000300)="fcb265a199bebf17b5d6fee64c8f71ef79481e04f0eaafdec855438ffaf952993b8c34333d6778e7fa6b65ffcf3360b660fb3ef00e6de4869284e221fe46b0359b721db5133e0cc2bb61f738f4340143d74b03884d7e80f519883e82f138c70076db74e64d471437ec37f211cb71805e32e5b9813a441d41e5d93b0f4af83b86f25023db5e2487c50a81413f19c73102650cc23089b4584613c295675f8b33b7071fad7b892023228d036c066999ccd5e102a17deda92d8b5ec0667ab93240307b2e55bb354c136447788e2a2dc4a53bfc7289b4a46c5d5e28aa31d439e4985e8e2bf34c922edd1923cabec6e2cb88f39b481156", 0xf4}, {&(0x7f0000000400)="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", 0xfd}, {&(0x7f0000000700)="80d3415f83babee834b581f86f3d28d939421cba698851b7881602b0555f93758df02247ff72456acbc3fdf616b9a6d12bf90622d79e0ea6911de1d76fd6f35fc7a143aea4bf482ac979124619a1c7", 0x4f}, {&(0x7f0000000500)="d8c8d109a472220bbde0b3ba9f20733d8827068a0621d6818742a021c81acd6351a8f4c43ede3536923b03fa8779af82f5861ca576dbbec6c9d913fe6616dc8913e79711ec2d23f9ef6a5ce1e2ba479e9ee14f1c73b79b6464480ef5ad0d29f04e08ae7043107c5f596a97e78b52008f7e64da38e807b7ec0e4f08f2e4b416952615622373f8e6d46608bb02f63e", 0x8e}], 0x5, r2) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r4) keyctl$unlink(0x9, r4, r4) add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f00000007c0)={'fscrypt:', @desc1}, &(0x7f0000000800)={0x0, "ed1fbb3adedb3c1b84a9af82c916e6445b2a22cc0f915b215671eb648ceaf0ab2fa9c417628ffb3e826867ee49894f9887a5eacec0b5163d4ed919b160841ca1", 0x2c}, 0x48, r4) r5 = add_key$fscrypt_provisioning(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x2}, &(0x7f0000000900)={0x1, 0x0, @auto=[0x3b, 0x27, 0x3e, 0x20, 0x21, 0x3b, 0x30]}, 0xf, 0xfffffffffffffff8) r6 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r5, r6, r0, 0x0) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 10:04:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:04:14 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0xfeffffff, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 10:04:14 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72", 0x3}, 0x48, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) r2 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc1}, &(0x7f00000003c0)={0x0, "5370d3bc481b408f6c9b178acbba19853b58ffbf117b67641b38053f3e64af493649d55eca88060be0af6183615937ac20f4b7678acfcc5e510eeea38a47ea1c", 0x19}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x1) r3 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000200)="7a1c994cd1567a07c43a7a5ee4a1548d1a96505e09dc8b9bc25c30d575138a3d50b718dd4f8de853644b8c57ddc53ed282bb3322bef7dacadb477ba8e9b01de344613ba6cc4c259a073bae7e71ae73726940935656a3fb8a5714211b2fdd906737ab2b78f2ab7277e27e3ed355f785f9051c2f8d844a01d4e9810822a4a168a1dd69f78e02ed5323066e66175817c626aa1edf950793fef1b7ad48d31a6849613898ee1a8432", 0xa6, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000080)='encrypted\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r0}) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 10:04:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(r1) 10:04:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x24) 10:04:14 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x10) 10:04:14 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:04:14 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x5, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) [ 1024.547629] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1024.547629] program syz-executor.0 not setting count and/or reply_len properly [ 1024.575100] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1024.575100] program syz-executor.0 not setting count and/or reply_len properly 10:04:27 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0xfffffffe, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 10:04:27 executing program 4: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[], 0x7b) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r2, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000140)={r6, 0x1, 0x6, @link_local}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r6, 0xf, 0x4, @broadcast}, 0x10) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000440)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, 0xffffff81, 0x0, 0x3f, 0x0, 0x8, 0x100000, r6}) write$binfmt_misc(r3, &(0x7f0000000340)={'syz0', "23ff502151911301679bef69f2cc8b00594fe1a4d00034d5f41572ac25bcfb9cf738655fede3e78805ee31ad51088097ae4fad37153a586d38510fd63e4f30024a2a8075054b1fe37d8c8e89407032572efad5dea794b94c35a89468551123fc4942e2c5c710b965646e4cf545ce014be492d49eb61d42729d193ab41d1eb4d74e3e37e7819d1aa0b0484cb7b150a0ccc0670be78de7e269c368ebc547164b6b6244c459f98939ab6ddec8294f9c050555bef5b22f59eb72fcb70340c627531f05235d755a0241c4db4bb469f206836d5926c2aef48bf8b0080cdf0374ee9f3a2800"/235}, 0x52) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r7, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) dup2(r2, r7) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fd7eacaca867fbe54f6ee80eba15bc78f56455225"}, 0x0) 10:04:27 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x3c) 10:04:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x1, 0x8c400) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) 10:04:27 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:04:27 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "44f1fcfcb480f830ecc1e65cb2bf80ea715ca4fec6b620cede2fc17ae827e3efdd63af69d73e2e27b51f8970deaab344e28966b132b9b7bd78a3c2470bf31764", 0x12}, 0x48, 0xfffffffffffffffc) 10:04:27 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x6, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:04:27 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x2000) [ 1037.788026] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1037.788026] program syz-executor.4 not setting count and/or reply_len properly [ 1037.803586] syz_tun: entered promiscuous mode [ 1037.804569] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1037.804569] program syz-executor.4 not setting count and/or reply_len properly 10:04:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="73797a3123ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacaf43918ce0889f07f3c45ce6e89a0b889bc41e202a04f05659d74136b4f738f0d5fbb4bfeba37dca343815b7c6d46ef9fbefa97e1c3d3d6715f5b9d5ce8aa5da8687331defecd04c94793d6421b4f0edf791602ebac7c484ec13d82129fa809fa60a29fb6e52c64e703df9da80c49bae15c5270a5b898976c5fd2c5eaefaad49d64bf5da3b570bbf69bbb204c2d5526f12d402414c433a884aaa1f2000ab07aaf1ee1c94aba36aa9a108a788aa7722c5d42fb45709a1366edb06e9dba0c48b6d116f579b3abe1a388e59a"], 0x24) [ 1037.818964] syz_tun: left promiscuous mode [ 1037.836655] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1037.836655] program syz-executor.4 not setting count and/or reply_len properly [ 1037.850741] syz_tun: entered promiscuous mode [ 1037.865189] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1037.865189] program syz-executor.4 not setting count and/or reply_len properly [ 1037.879942] syz_tun: left promiscuous mode 10:04:27 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x3c00) 10:04:27 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xfc) 10:04:27 executing program 5: add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f1260b555a7ebdb1d75ae86012cec90461ead6c31299c7200"}, 0x48, 0xfffffffffffffffc) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$unlink(0x9, r0, r0) keyctl$update(0x1d, r0, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x7) 10:04:27 executing program 0: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000040)={'veth1_to_batadv\x00'}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x142) write$binfmt_misc(r0, &(0x7f0000000140)={'syz1', "23ff502151911381679bef69f2cc779b594f04a5daf38ad7126295ea5911eacaa0716c662b17a872655c243760c62e9f82a31d6e58f6985d17ce8e70524ad6c3e2c72a792f051b2e4127b041e6c341947710c8726ff81d4440cc2e996d509d685bb2023abebedd3d652cfa5c51a0ceb53db4072be231363dbbe9e798367d7cd34dcb105bce0aff16b76a68"}, 0x8f) 10:04:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x62400, 0x8) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x5d, 0x200, 0x5, "70d2be98bb00e13e04fe2ea8ab587c2b2268b87090a71b485583e50ab3f26fdeedee03b527e01986d63cb3c58b971db208ae29718721b09370e1cf701b34f5f4e8ded4a78a7bcd44cbccfa80113d5575e5e66959305a5fe8ff232d044a"}) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="73797a3023ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225501a48bdd386a5161d4c5bd3b9ee6ef2b10e74b73aacd33597cab7eb2863b7f330e721b4000130ab40d30287776157d1bc37e0282921c78c690e8faaeab12c31fc2553e03371560c3fb7b5094bb719c418638b967c9a9cd2d6404c37eb1dd01b33d756864ca902bcc91da4b92c4e205817eab7e4672d33301464ae32c453b834fe08c434ebd3896c31f177cedf13726e78680d4887aacebda4028750ded621f6812011106f444445e7a28583428168504926bec1c7a2c9118a3bd728ec92e72645411db4782c"], 0x2a) [ 1038.085035] sg_write: data in/out 558956287/95 bytes for SCSI command 0xa0-- guessing data in; [ 1038.085035] program syz-executor.0 not setting count and/or reply_len properly [ 1038.103482] sg_write: data in/out 558956287/95 bytes for SCSI command 0xa0-- guessing data in; [ 1038.103482] program syz-executor.0 not setting count and/or reply_len properly 10:04:43 executing program 2: perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:04:43 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='fscrypt:', r1) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 10:04:43 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x7, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:04:43 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x1f4) 10:04:43 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x4000) 10:04:43 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x8000000000000, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 10:04:43 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x40002) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) 10:04:43 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @link_local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0xf, 0x4, @broadcast}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@empty, 0x0}, &(0x7f0000000100)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}]}}]}, 0xe0}}, 0x20000001) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r4, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000000)) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="73797ac9f0a3b2d9f8e904acb9fa5d2f3123ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225e3d6b6cd2bdf"], 0x2a) [ 1053.968546] syz_tun: entered promiscuous mode [ 1053.979469] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1053.979469] program syz-executor.4 not setting count and/or reply_len properly [ 1053.989441] syz_tun: left promiscuous mode [ 1054.000921] syz_tun: entered promiscuous mode [ 1054.006550] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1054.006550] program syz-executor.4 not setting count and/or reply_len properly 10:04:43 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c720000001200"}, 0x48, 0xfffffffffffffffc) request_key(&(0x7f0000000280)='logon\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='85baa174f0cb1142', r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$search(0xa, r0, &(0x7f0000000000)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x1}, r0) keyctl$unlink(0x9, r1, r1) keyctl$update(0x1d, r1, &(0x7f0000000040)="3716440b1171034d42d055756e8ad626024dff7a4979109e1d7806bed0bb770db6805d8eb5d0b1f630eca7663fb21039851fcd322f84f681927e91db30d002672c6418a3272937801c9914cd27e2b2c1af7d891148dfd3e225c22432486f020c1c807c054e5e546fb054b900"/118, 0x4) [ 1054.028160] syz_tun: left promiscuous mode 10:04:43 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x4002) 10:04:43 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x100000000, 0x2) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000080)) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) 10:04:43 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x8, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:04:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0xffffffffffffffff, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 10:04:43 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x240) 10:04:44 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0xde, 0x402) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="73797a31ef69f2cc779b594fe1a4daf38ad7126295ea5911eacac083216e54eed42f3ebd404e64518673f17fae3b58cef2fd3729f882089c1003257a514f2882fd2677ba038e0b7b624e55181f107ee038ae00ffffffffffe4fffa00"], 0x24) r1 = memfd_secret(0x80000) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000000)=0x100) 10:04:44 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x100000000000000, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 10:05:01 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0xb00000000000000, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 10:05:01 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x300) 10:05:01 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xe, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:05:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"], 0x2a) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x9, 0x2, @scatter={0x1, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/15, 0xf}]}, &(0x7f00000000c0)="e874ae7d30c2482835", &(0x7f0000000100)=""/23, 0x8000, 0x0, 0x1, &(0x7f0000000140)}) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='cgroup\x00') ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) 10:05:01 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x3}) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$join(0x1, &(0x7f00000002c0)={'syz', 0x1}) add_key(&(0x7f0000000300)='blacklist\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) r3 = request_key(&(0x7f0000000440)='asymmetric\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)='blacklist\x00', r2) add_key(&(0x7f0000000380)='cifs.spnego\x00', &(0x7f00000003c0)={'syz', 0x1}, &(0x7f0000000400)="8eb8aa37751c7c6a7d825100602db08ce64180a9760d110c3b9c5bfc51b3d29d5cb7a275c0bc85448f", 0x29, r3) keyctl$read(0xb, r1, &(0x7f0000000000)=""/202, 0xca) 10:05:01 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x7a03) 10:05:01 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x40043) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) 10:05:01 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:05:02 executing program 0: ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'veth0_to_team\x00', {0x2, 0x0, @initdev}}) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x248003) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="6b0000000900000071c3a070f4ad156514c62ccb5300100000947d6d8cb8b831c9e0b9e056d25c3dce380b0a57576195ce05079c1a5c2425a769226290ae91018b1cc5dd19f48c987e1c6144285b02811a93eaf3c38ee709ee2abdbbe454f869ba05d8b4ef24cd5cc4850b1bdffc7c6999a1e0d7422f2ac8bfd2aabe0dfb55e6943ce2b5"]) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) 10:05:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x240000) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x2e, 0x4, 0x63c7, "e30eba5b79a6e539be4f59a58f5c62b9fcf0cbca1974c0232af97fff9b73acc6329aa942f09bc2da3bb4222df996"}) 10:05:02 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x3e8) 10:05:02 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x80fe) 10:05:02 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x50, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:05:02 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0xfeffffff00000000, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 10:05:02 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000000)=0x100000001) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc090}, 0x20001080) r4 = epoll_create(0x7fff) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)) signalfd(r5, &(0x7f0000000140), 0x8) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000640)={0x150, r6, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x40}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x3b2a}, {0x8, 0x15, 0xa0f}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x808}, {0x8, 0x15, 0x4}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4041}, 0x0) keyctl$update(0x1d, r1, &(0x7f0000000280)="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", 0x23b) 10:05:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = signalfd(r0, &(0x7f0000000140)={[0x2]}, 0x8) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffe, 0x61, 0x20, @buffer={0x0, 0x21, &(0x7f0000000040)=""/33}, &(0x7f0000000080)="1004813e1e80f3cafa06808cc35caab7d19255edecb3ceebdc2f68ab8a3a0841de07f7242d3085096830274de57b7e561e9fafaab83d37ea8acd8d52e7482b9fdcac1d23d9d08d23456d5cb3abdc669dea87df3da99820a264c618ed95183ff6af", &(0x7f0000000100)=""/3, 0x0, 0x10030, 0x0, &(0x7f0000000340)}) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) write$binfmt_misc(r0, &(0x7f0000000180)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000000)) 10:05:02 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) r1 = syz_io_uring_complete(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x80000004) [ 1072.480976] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1072.480976] program syz-executor.5 not setting count and/or reply_len properly 10:05:02 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x874) 10:05:02 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xc0fe) 10:05:02 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) r1 = epoll_create(0x7fff) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) signalfd(r2, &(0x7f0000000140), 0x8) openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000001c0)={0x20000000}) 10:05:02 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r1 = epoll_create(0x7fff) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) signalfd(r2, &(0x7f0000000140), 0x8) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080)={0x200}, 0x4) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a3123ff502151910700679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f562b5225"], 0x2a) 10:05:02 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xe803) 10:05:02 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xbe, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:05:17 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x8, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 10:05:17 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:05:17 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfc, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:05:17 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xe00) 10:05:17 executing program 5: r0 = open(&(0x7f0000000000)='./file0\x00', 0xc8b81, 0x45) r1 = socket$netlink(0x10, 0x3, 0x12) r2 = epoll_create(0x7fff) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0x8000000000000]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) sendmsg$nl_netfilter(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1e4, 0x5, 0x7, 0x101, 0x70bd25, 0x25dfdbfe, {0x1, 0x0, 0x1}, [@generic="c0b68666b2b726e26e2879aa45ef7c4fa94dedcb850ec248b2bbe8eaeb916c23624a5bf2109f915c00a2971002de323e329310e96d6daeca10d44c3202fbfe82de51f61aabe41713ebe32e83807726cf223fb71e065acd633b2cddc0f4e8cd5b1a303f2901466cad4f030eb452535ef160657520b9dcf23a3b271bbe9eab52d029ea7c5fde643d9e0c493e0c3f39ae18f80f0e77b4157ba4adf88ae779e2d9a1b16af3a5cb1cde1822721c13844ca7d8fc44a074fb4f76229237d3ea3c3f16", @generic="09e4878bc05cc1b66a2ae5608b038eb660e7a5d999b7bff67cb74a0bb767f8e07ee177457b846a697c0cf4e5506948189c77889d54c4e769a4d7e62a55110d3ce28f06d0961f12148914b2276ce11dbfba769ac46e2b217544706059207429813d68c763bfc6bc8b395fc1fcd1e51ed5af50a9eaf8e66cb2cef3a7c2697b6656765e8d98e6bcb8b3b43e7bd4735de5c9a06fd2ee377577b28e2808af39f3dc732e6e5d49c9b0a4dddf73da4a", @nested={0x5b, 0x7f, 0x0, 0x1, [@generic="7fecf8bfd5b02f171ae833d514f492cbff54c0df3b6f06d85f0709b35f51d073d0229e897413a458e65fdea38a06433c6b8b9fafe0edf2503c9e06acc28aab594935ba31b920ef096b39737a9e2efc5408ef78e822ffeb"]}, @typed={0x8, 0x50, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) signalfd(r3, &(0x7f0000000140), 0x8) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r4, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) r5 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r5, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x695e}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={0x0, 0x1, r7, 0x2, 0x80000}) r8 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$setperm(0x5, r8, 0x3022202) keyctl$update(0x1d, r8, &(0x7f0000001440)="ce", 0x1) 10:05:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffc, 0xe2, 0x8, @buffer={0x0, 0x22, &(0x7f0000000040)=""/34}, &(0x7f0000000080)="38d80a60e2c37ea1646e8903bf178af5c8cd7d6cd299fe028cc87b9c6283f3970ce2e5c8367fed64315ca3732d3772345169c6eb154c7eefdbb3771284b2a9b1c7869ae9a4f2ea446deeffef392f2b7b61cc8443d27d8817a6ee6ff2bc7e263c827e4b4eb4c9c33d223b1edfb04d326d67a83761a1693648fa2b6970c7b132a7f4ca9fc18debaf7178c3e0d3c5b242e5e21947a5f4dd3cff960ac6dd7c559ef819d57080f0aebdf720263523f581d5b509be617fd7cfb0b1d770cb07327474d5cf95c6b7cd80255191e696f5801487be68db89e3eb407ea20e47fce546fd48cafac4", &(0x7f0000000180)=""/87, 0x1, 0x13, 0x3, &(0x7f0000000200)}) 10:05:17 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r1, &(0x7f00000001c0)={'syz1', "23ff502151911381679bef95ea590700000000000000256a3356ffff"}, 0x20) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="014000000100000804000000", @ANYRES32=r2, @ANYBLOB="000004000e090000000000000066696c06300002681259948c"]) r3 = signalfd4(r2, &(0x7f0000000080)={[0x1]}, 0x8, 0x80000) r4 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r4, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000180)={0x0, 0xb5, 0x1}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="dc1f8ff91c0b13e618000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00?\x00\x00\x00./file0\x00']) write$binfmt_script(r5, &(0x7f0000000140)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '{['}, {0x20, '%\\^'}, {0x20, '/dev/sg#\x00'}, {0x20, 'syz1'}, {}], 0xa, "9892ff0a032b6ebbaab33ee6ad"}, 0x31) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f00000000c0)) 10:05:17 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xf401) [ 1087.733770] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1087.733770] program syz-executor.4 not setting count and/or reply_len properly [ 1087.749611] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1087.749611] program syz-executor.4 not setting count and/or reply_len properly [ 1087.782769] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1087.782769] program syz-executor.5 not setting count and/or reply_len properly [ 1087.784700] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1087.784700] program syz-executor.5 not setting count and/or reply_len properly 10:05:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0xe4, 0x81, @buffer={0x0, 0x9b, &(0x7f0000000040)=""/155}, &(0x7f0000000100)="b06d0e50a054c5203f81a6605e8129f837929b6ae308c68ae4aea8202f7fbce1b340b915a652143a377c4b3e5d78f1b70d5484b7a27eaedeeffe12ac91866273e0d3f6af088e1033ef087368f1596e32cf01d1b77fdae7035dd31a0e74237c03cc1f8155085d3bc9278241ba7a878c2e8fae73c32ef635b68acb630464389fa41511115517cfab08164b76cb972d72c1c2613a7b871b83332299e146e8b51ef7d37303b1f944190edef09eccbceebd318a273175e73dc3ebd9f1e86dfe0f0fce021135c81feabc57d04372f001950e6eceb9ff740a2a49b5b69f04d4d90055099fbc465b", &(0x7f0000000200)=""/166, 0x2, 0x10004, 0x2, &(0x7f00000002c0)}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a3123ff502151911381679bef69f2cc77ca9772f0a4daf38ad7126295ea5911eaca"], 0x24) 10:05:17 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x1f4, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) [ 1087.905069] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1087.905069] program syz-executor.5 not setting count and/or reply_len properly [ 1087.906581] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1087.906581] program syz-executor.5 not setting count and/or reply_len properly 10:05:31 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xfc00) 10:05:31 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x218, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:05:31 executing program 5: add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000006162636465666768696a6b6c6de56e6f707172737475767778797a303132333435"], 0x29, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$unlink(0x9, r0, r0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) keyctl$update(0x1d, r1, &(0x7f0000000200)="ce", 0x1) 10:05:31 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0xb, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 10:05:31 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:05:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000780)={0x53, 0xfffffffffffffffe, 0xef, 0xde, @scatter={0x7, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/220, 0xdc}, {&(0x7f0000000180)=""/219, 0xdb}, {&(0x7f0000000280)=""/37, 0x25}, {&(0x7f00000002c0)=""/68, 0x44}, {&(0x7f0000000340)=""/116, 0x74}, {&(0x7f00000003c0)=""/108, 0x6c}, {&(0x7f0000000440)=""/70, 0x46}]}, &(0x7f0000000540)="3c5c6f5933fb251c15d4d1a9e8debe9f8f7274feeef20e386c23bf2f5bf31258b744320608b10e024fc26be5ad64cbf91c8f9dadf25a7196830e0e3581ed5045928503cdd33d0c2d87619a2b945a6b95fde140eac9ba89ebdb59fa83b01ffe19223ce4cb622beb0ed97db12bb76b6036f56afbf7282922a5042096dc4b3a0fa5d9c8eeb11dbde3d62c41c3639ebe8c2f9404ddf4f6e0e05373171edca489b22c796bc378d0680e755d1eb71c3262b19568e65b61fbfdabfb899c1c67238775ade36d98b515c61629928f69625ccd54c1e246d2b7514f6b889957d1e20d7250cbb07a172fdf2d6cdcb6b079100c4919", &(0x7f0000000640)=""/206, 0x0, 0x10000, 0x1, &(0x7f0000000740)}) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) 10:05:31 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x1f00) 10:05:31 executing program 4: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$unlink(0x9, r0, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, r1, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0x2) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r2, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 10:05:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000023ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"], 0x24) 10:05:31 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x240, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:05:31 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x2000) 10:05:31 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x1000000000000a9, 0x4ee00) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797a3123ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f5645522559bc168691d31960be3a65ca5f794737abd85dc38cec2ed1fb971c5deb004a84c352d7f467db8983789804ea99b73a284b797f54d1c9aba75586cd44a1cb12f62ba1842183e80e9035075f5ddcd6219841252bff26666a11acbf26c6d9759fcacae3b718afbc"], 0x2a) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000040)) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000180)={0x63, 0xbced, 0x6548, "da7e5d1dcc2bc43586b00adf4a6e4e405181cc398ffbbcb86af186e03d9e3720571cbff8e9a24fcd38cc93a8787c4153328a0b762f314adcaee2131111bfda2395fe8a0f3139420714ad8a61f6a68395d48030a9e36d2295e83f42c822fd79e7ee8ee2"}) fremovexattr(r1, &(0x7f0000000200)=@random={'security.', '\xe3/![&!\x00'}) [ 1101.624692] cgroup: fork rejected by pids controller in /syz7 10:05:31 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xfe80) 10:05:31 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$unlink(0x9, r1, r1) add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="cbdae56502029aa899364a063afc6bebb94c58a9810cd688c3adb0659810852f0b96f7bfa99711940efbc8f95c4f150ed70666763ec1078cd321922c26b559101923c7196f2b9a94061e688d4089d0aee61eaef5b7636d72d01845", 0x5b, r1) [ 1101.694542] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1101.694542] program syz-executor.4 not setting count and/or reply_len properly [ 1101.704705] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1101.716321] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1101.716321] program syz-executor.4 not setting count and/or reply_len properly [ 1101.727717] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO 10:05:31 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000140)) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/269]) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a31237f502151911302000000000000009b594fe1a4daf38ad7126220acd410a36a5914cb0d7294c4a84d95ea"], 0x2f) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)={0x75, 0xfffff3e8, 0x8, "9d44d24690b4f42ed0d5fcfb92ca15be7babd4b9c0512890579249fdd99eb6e02fcd092bde2a4649df05adf3f3f48fd26e08b7dd807f8643dc1f2335ca61b7628d52d46f778d0456e5af9a8b5fa6ed60af49ab4683450af774b272647d1c6180b52c33f82911cb6eda7e0f106a1828690245f7e343"}) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r2, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f00000004c0)={0x6, {0x12, 0xff, 0x459, 0x200, 0x9}}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0xc8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x3ff}}, './file0\x00'}) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x1000, 0x0, @buffer={0x0, 0x2f, &(0x7f00000001c0)=""/47}, &(0x7f0000001040)="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", &(0x7f0000000200)=""/137, 0x80000001, 0x24, 0x0, &(0x7f0000000400)}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a3123a61d45a74177dcf6bc8bc4a549ff502151911381679bef6982cc779b594fe1"], 0xffffffffffffff57) 10:05:31 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x3c00) 10:05:31 executing program 4: ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0xd, 0x4}) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x1) fcntl$notify(r1, 0x402, 0x8000000b) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 10:05:31 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72", 0x27}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 10:05:31 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0xb00, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) [ 1101.844025] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 10:05:31 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x300, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) [ 1101.860080] sg_write: data in/out 558923519/1 bytes for SCSI command 0x59-- guessing data in; [ 1101.860080] program syz-executor.0 not setting count and/or reply_len properly [ 1101.876756] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1101.887738] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1101.887738] program syz-executor.0 not setting count and/or reply_len properly [ 1101.922216] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1101.922866] sg_write: data in/out 558923519/1 bytes for SCSI command 0x59-- guessing data in; [ 1101.922866] program syz-executor.0 not setting count and/or reply_len properly [ 1101.949045] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1101.952771] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1101.952771] program syz-executor.0 not setting count and/or reply_len properly 10:05:45 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xfec0) 10:05:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7127295ea5911eacac78f0f9d5225"}, 0x2a) 10:05:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:05:45 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x80000, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 10:05:45 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, r1, r2) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 10:05:45 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b80), 0x40000, 0x0) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x1f) syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xfc, 0x3, 0x38, 0x0, 0x0, 0x7, 0xb09, 0x12, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x7fff, 0x414}, 0x940, 0x100000001, 0x4, 0x6, 0x7fff, 0xfffff81d, 0x8, 0x0, 0x7, 0x0, 0x10000}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) 10:05:45 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3e8, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:05:45 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x4000) 10:05:45 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xbe}}, './file0\x00'}) 10:05:45 executing program 5: keyctl$update(0x1d, 0x0, &(0x7f0000001440)="ce", 0x1) 10:05:45 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x500, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:05:45 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a3123ff50215191138167b0ef69f2cc779b594fe199dafb8ad7126295ea5911eaca"], 0x24) 10:05:45 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xff00) 10:05:45 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x4002) 10:05:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:05:46 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x1000000, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 10:05:46 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010159a53ee2519f1187bbb299c72", 0xffffffff}, 0x48, 0xfffffffffffffff8) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) add_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000200)="c00cd2534d7506403ef0e7642864b77ee437c03cdf8d49008c85feba566d6c31d8fc7a94018a59e02e561fae3c0ec09902e0c3c9e7706b18df80c2d6121f0a02a28a3c21e02e544dc5439a67894e84e3d2593fa2d737213ec03d4856765c4d3728606c961716585f2f152097aa8b09e277362a12eaa7361dbc35779d993051e6bd33", 0x82, 0xfffffffffffffffd) 10:06:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x7f, 0x349603) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73797a3123ff50215191138166a71099b4c758939ff2beb9639bef69f2cc779b594fe1a4daf38ad7126296b6b61198a828"], 0x2a) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x40002, 0x0) fcntl$setstatus(r1, 0x4, 0x0) 10:06:00 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0xb000000, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 10:06:00 executing program 5: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$unlink(0x9, r0, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x62, 0x39, 0x62, 0x61, 0x66, 0x35, 0x37, 0x31, 0x61, 0x36, 0xd187755f0b741907, 0x37, 0x66, 0x37, 0x39, 0x35]}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72", 0x3c}, 0x48, r0) keyctl$update(0x1d, r1, &(0x7f0000001440)="ce", 0x1) 10:06:00 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xff0f) 10:06:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffb, 0x52, 0xab, @buffer={0x0, 0xcb, &(0x7f0000000040)=""/203}, &(0x7f0000000140)="4cb9c9072293b070698e2711543ae366c37595700812686d4d9ebded970d4ec1b4ef102edc61b5521fbd75004cfcc41aa29715bbebfed568c453d525e7d343d690b8c41468abb19d21d50a820b1a5bee88e4", &(0x7f00000001c0), 0x6, 0x1, 0xffffffffffffffff, &(0x7f0000000200)}) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) 10:06:00 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x600, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:06:00 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x7408) 10:06:00 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:06:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r2, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f00000000c0)) 10:06:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x102) r1 = epoll_create1(0x80000) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)={0x75, 0x7, 0xa0e, "f2f8fc32e90d6d0232fe4c60fa66d79f5537ccc90b2010fc10aa0174cf30cc70218962de4b1295b0d388f4bd9c89255eae6e517f1434ab14767b7096c62054a06533eb228ac7ca255cae1c7634fb4848772b8313485e64145b19bdfae4b813bf2f643baec9de183c80fba6447b56a1f85376fa6d1d"}) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xcb) syz_open_dev$sg(&(0x7f0000000140), 0x9, 0x161f02) [ 1130.981989] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1130.981989] program syz-executor.0 not setting count and/or reply_len properly 10:06:00 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x80fe) 10:06:00 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x195fe) [ 1130.997190] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1130.997190] program syz-executor.0 not setting count and/or reply_len properly 10:06:00 executing program 5: r0 = dup(0xffffffffffffffff) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9, 0x100010, r0, 0x250fb000) r2 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r2, &(0x7f0000001440)="ce", 0x1) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r2) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000200)="47cfa697a59a8da766a08225d674af6ad51ba80fbc1c1df50ad737e131840586b5ee241761a03b82fd2c78a8bd80ff0f93f16e79a195796a8f5ed3375897e5d88e997e5c876a1071af918cb0d4d6ed046363f25cc87e40630595b7965c48c7fc7a59cf35e2e9984e463f1ca1c1c65e451127f3d7942c21bd46aede12dfc51d675e9f602a", 0x84, r3) 10:06:00 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000040)={'syz1', "23b4502151911381679bef69f2cc779b5947b48ccb9303c9247cc66e0d904c4c4fe1a4daf38ad7126295ea5911eaca"}, 0x33) 10:06:00 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0xfeffffff, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) [ 1131.073459] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1131.094340] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1131.109863] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1131.109863] program syz-executor.5 not setting count and/or reply_len properly 10:06:00 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x700, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) [ 1131.132587] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1131.132587] program syz-executor.5 not setting count and/or reply_len properly 10:06:00 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="73797a3123ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552251b7446f6e6c9b2f6c7079d605a9c98e1170bfe177f1c7ab803ff515e051ce1e5b091489c417de59a51b6b4434892552821be657030ab8564d11dbbe51cc1b6e6916d79900a20412db5a64d26460e352a95bc4ad356f5da70bb0fef233709f3d71b8fb3a96b922d137b1afeab41cd64b97bd4a87bb6387e9775297a536c8bcb8c8472dc23a851ba643a106f2810817438834377b433896614526a63c60b7838e5c97d15dd6f797ee80653fb7fa208c3ce0d20a4020f33"], 0x2a) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000040)) [ 1131.155520] sg_write: data in/out 558937087/5 bytes for SCSI command 0x4f-- guessing data in; [ 1131.155520] program syz-executor.0 not setting count and/or reply_len properly 10:06:00 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x20000) 10:06:00 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xc0fe) 10:06:01 executing program 5: add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x31, 0x64, 0x30, 0x0, 0x56, 0x64, 0x66, 0x36, 0x34, 0x36, 0x34, 0x39, 0x62, 0x32, 0x63, 0x33]}, &(0x7f0000000080)={0x0, "ae838825f69c1b9cb71fd55903cec06c505722f4d9849a35449103d47bc514492b9ef847c52db3be736864163116ee97a3306f28a81ba93fcabb5673503bbad1", 0x36}, 0x48, 0xfffffffffffffff8) keyctl$get_security(0x11, r0, &(0x7f0000000200)=""/123, 0x7b) 10:06:01 executing program 0: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x100, 0x7ff, 0x8, 0x800, 0x2, 0x3}) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="73796a3123ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca2093d5fabf2e0000000095ae1e8bd64bd9cc33f0e36794f168264ffae4450f1e6914b246e423bbc7735825a28c0edfac00cc258fddaccced00b5ca51e7859bdfd93396961d429acef37bdd5b221e6be48867d9e1712ac3d3b2892e596e25f2b9924ebac42112bbcc7bc023d56953fc"], 0x24) [ 1131.296075] sg_write: process 350 (syz-executor.0) changed security contexts after opening file descriptor, this is not allowed. 10:06:01 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc9bc53a66909f7d364812629dea5911eacac78f5645522500"}, 0x2a) 10:06:01 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x35, 0x32, 0x32, 0x36, 0x66, 0x65, 0x36, 0x34, 0x38, 0x36, 0x37, 0x63, 0x35, 0x36, 0x64, 0x34]}, &(0x7f0000000180)={0x0, "4f86c31dbb850000df3b0000000060b555a703b6039010119a53ee2519f19da4bb299c7200"}, 0x2a, 0xfffffffffffffffc) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) [ 1144.914685] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1144.914685] program syz-executor.5 not setting count and/or reply_len properly 10:06:14 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:06:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000040)) 10:06:14 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0xfffffffe, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 10:06:14 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xe803) 10:06:14 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x80000) 10:06:14 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x820, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:06:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7373dbefe253452d8eeb5f6c50797a3123ff502151911381679bef594fe1a4daf38ad7126295ea5911eacac78f56455225000000000022beb5841f1c9259795247256d77acab37484fbe5b3279cafc76a0eb77bba906ba3f832e039cd2530d757d22cacbbba35a30e98caea53fca1f832f37cbebb29cb76538b517ccdd23ec3aae9396b15d6c639493d1d44fb9327cbb1cbe31c3b05cd32b613eb1b6f727bbdd65f705ddd4353440ec056be27818f4a57dfd7a3d21faeba662bf8f91791cd893850d1c3adb67d8c245629a862870e3c0c6d5cd"], 0x2a) 10:06:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r1) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$update(0x1d, r1, &(0x7f0000001440)="ce", 0x1) add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000080)="47e3e4c73dc3938065b827313eb85a2f59edd51c87b252d144e2b263b6e8726bc65933e3824090b265094f78fa385d9e51be554bdf801317d8a92cf604", 0x3d, r1) [ 1144.950804] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1144.950804] program syz-executor.5 not setting count and/or reply_len properly [ 1144.958815] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1144.958815] program syz-executor.0 not setting count and/or reply_len properly [ 1145.012042] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1145.012042] program syz-executor.0 not setting count and/or reply_len properly 10:06:14 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xe00, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:06:14 executing program 5: mknodat$loop(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1000, 0x1) r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) chdir(&(0x7f0000000040)='./file0\x00') keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 10:06:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x60902) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x10240, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='.\x00', 0x0, r1) r2 = epoll_create(0x7fff) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) signalfd(r3, &(0x7f0000000140), 0x8) write$vga_arbiter(r3, &(0x7f00000000c0)=@target={'target ', {'PCI:', '15', ':', 'f', ':', '1f', '.', '19'}}, 0x16) 10:06:14 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x972d3) 10:06:14 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xf401) 10:06:14 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$update(0x1d, r0, &(0x7f0000001440)="ce", 0x1) 10:06:14 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)) signalfd(r0, &(0x7f0000000140), 0x8) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r2 = epoll_create(0x7fff) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) signalfd(r3, &(0x7f0000000140), 0x8) r4 = epoll_create(0x7fff) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)) signalfd(r5, &(0x7f0000000140), 0x8) r6 = epoll_create(0x7fff) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)) signalfd(r7, &(0x7f0000000140), 0x8) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x16c, r1, 0x2, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x16c}}, 0x1) r8 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r8, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc800) 10:06:14 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x1802, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:06:28 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:06:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r2, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)={0xf3, 0x2, 0x0, "14c2517038adbb4ba4bb055d7832f5e618716c7018e3c5a5e186bc4ed0bf30b095f32283b46933060e0cad7b84c3ecbe28211ec9fc030fa2bbf0f66cfd65c9144c4882325ca5011043599d49c416ecde749cea9ebde845ead35ed78b3ee648aa1568a63982433c5a3702789dfc91a98b693cbf1f60fc7bd354688f38c25b5c0becd7324897508f1a768210f8b8459ab82f7b75347631d5fb09b2a1237333886b96940252746345b42fe00f881a14ba0c266e2c61ba0b027768e7ec3f49dcb8f9160151252a545920dce706318446238f97408cce5607f2b2517f148642ecf5559ef1fbaa58d9ab1f926cc6bb28f2feacfe008c"}) 10:06:28 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x2008, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:06:28 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73797ab123ff502151911381679bef57f2cc779b594fe1a4dab38ad7126283ea5911eacac78f56075225"], 0x2a) 10:06:28 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xfc00) 10:06:28 executing program 5: ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000000)="f8e9ead77583c6f89ce44964cef823ecd8421a9f02b81ddfdb211a8ee80fafe1aba7b6854d7f13d29f72a673ebdcc6861e001302095aeda927e5fbf3037c2be162135431fe44da07834fa83021475bd8f47611b05757b756a2a281ed5fe03ca16da6b74155abdc87a0a663877ef756ab4717aa1a577028978f3b31c1dbd722f2f3c1e8afe5375f45f6d3e93e7b6fcb7f1bb34662ee26e7f14d26dca44626c3a6f79f31ead1caa1bf3bf6045e69092d0a253ce17a152867c92eadce8d6a402eff2832a496efefe83a20d67015ff5e55871f7f0e51e143fa55bcf320fd46932f2153370cd93e701c36b0") fcntl$getown(0xffffffffffffffff, 0x9) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="73797ae1ffff46fcf602f75e28a1e00c0800215191138167ae383b8ca41daf73a1b67e7e441fb39adc46a98854871509525e30b2124945fea1329d9c8297e328c04a0d1cfd6b0a2e55b80bd3871e5a8276de4db6e8897ff000f27038d2af8acdd6bc8953742043ee60cbb6ab84569f0c09263ff36f515373e7fb779668a85e67efd40008db77126a0a929a664cfb71215ec5ce05c592b07a3dbbb75987d48fa18a3c364c293e7c9097d8c887"], 0x2f) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x15}}, './file0\x00'}) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000240)) flock(r0, 0x1) r2 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "4f86c31dbb85249241d18b1022d2db9fee153f125d88df3bd889fafa60b555a7eb92a9547b98cf488090461ead6c31b6039010119a53ee2519f1187bbb299c72"}, 0x48, 0xfffffffffffffffc) keyctl$update(0x1d, r2, &(0x7f0000001440)="ce", 0x1) 10:06:28 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x8000000000000, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 10:06:28 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x200000) [ 1159.169163] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1159.169163] program syz-executor.0 not setting count and/or reply_len properly [ 1159.191690] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 10:06:29 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @link_local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0xf, 0x4, @broadcast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', r2, 0x4, 0xdd, 0x4, 0x96d3, 0x65, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x8, 0x8, 0x7}}) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r3, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) [ 1159.216239] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1159.216239] program syz-executor.0 not setting count and/or reply_len properly [ 1159.237931] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 10:06:29 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x400000) 10:06:29 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)) signalfd(r0, &(0x7f0000000140), 0x8) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r2 = epoll_create(0x7fff) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) signalfd(r3, &(0x7f0000000140), 0x8) r4 = epoll_create(0x7fff) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)) signalfd(r5, &(0x7f0000000140), 0x8) r6 = epoll_create(0x7fff) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)) signalfd(r7, &(0x7f0000000140), 0x8) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x16c, r1, 0x2, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x16c}}, 0x1) r8 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r8, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc800) 10:06:29 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000040)) 10:06:29 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xfe80) [ 1159.331979] syz_tun: entered promiscuous mode [ 1159.336599] syz_tun: left promiscuous mode [ 1159.348338] syz_tun: entered promiscuous mode [ 1159.355427] syz_tun: left promiscuous mode 10:06:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:06:43 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)) signalfd(r0, &(0x7f0000000140), 0x8) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r2 = epoll_create(0x7fff) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) signalfd(r3, &(0x7f0000000140), 0x8) r4 = epoll_create(0x7fff) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)) signalfd(r5, &(0x7f0000000140), 0x8) r6 = epoll_create(0x7fff) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)) signalfd(r7, &(0x7f0000000140), 0x8) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x16c, r1, 0x2, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x16c}}, 0x1) r8 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r8, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc800) 10:06:43 executing program 0: r0 = epoll_create(0x2008000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) signalfd(r1, &(0x7f0000000140), 0x8) recvmsg$unix(r1, &(0x7f0000000500)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000180)=""/39, 0x27}, {&(0x7f00000001c0)=""/240, 0xf0}, {&(0x7f00000002c0)=""/36, 0x24}, {&(0x7f0000000300)=""/195, 0xc3}], 0x5, &(0x7f0000000480)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}, 0x120) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x7, 0x4c8602) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)={0x3c, 0x65a, 0x1000, "219fe02fd83e2e891b8adecb660e4ef988405c982630229b6dc6611b1442b2c489f2a7f88bc9968458ba6ffa4b2db62565561936b27dc9bdf32c01e9"}) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a3123ff502151911381cc779b594fe1a4daf38ad7126295ea5911eaca"], 0x24) 10:06:43 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = epoll_create(0x7fff) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) signalfd(r2, &(0x7f0000000140), 0x8) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6}, 0x10) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 10:06:43 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4000, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:06:43 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x100000000000000, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 10:06:43 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x1000000) 10:06:43 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xfec0) 10:06:43 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4002, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:06:43 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xff00) 10:06:43 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x450ac2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) 10:06:43 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x2000000) 10:06:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:06:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="737951911381679bef7ef2cc779b594fe1a4daf38a97126295ea5911eacac78f56455225000005000000"], 0x2a) 10:06:58 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0xb00000000000000, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 10:06:58 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xff0f) 10:06:58 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)) signalfd(r0, &(0x7f0000000140), 0x8) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r2 = epoll_create(0x7fff) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) signalfd(r3, &(0x7f0000000140), 0x8) r4 = epoll_create(0x7fff) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)) signalfd(r5, &(0x7f0000000140), 0x8) r6 = epoll_create(0x7fff) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)) signalfd(r7, &(0x7f0000000140), 0x8) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x16c, r1, 0x2, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x16c}}, 0x1) r8 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r8, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc800) 10:06:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xfffffffd}}, './file0\x00'}) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000000040)={0xb9cd, {0x30, 0x81, 0x0, 0x5, 0x401}}) 10:06:58 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x5000, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:06:58 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x3000000) [ 1188.424637] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1188.424637] program syz-executor.0 not setting count and/or reply_len properly [ 1188.439584] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1188.439584] program syz-executor.0 not setting count and/or reply_len properly 10:06:58 executing program 4: syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381689bef6536788b9b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 10:06:58 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x20000) 10:07:12 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x4000000) 10:07:12 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x80000) 10:07:12 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0xfeffffff00000000, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 10:07:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040)) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x2a) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000480)={0x53, 0xfffffffffffffffe, 0xa1, 0x3f, @scatter={0x2, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/26, 0x1a}, {&(0x7f0000000280)=""/253, 0xfd}]}, &(0x7f0000000380)="e421b364c30207ad7e01873a6e35eb8b0b1ff01038fe00baece812e0d500cebe0d4cc2c888d0d0ce717a0d4edf41016af6498a6f27570d59efd48dba68070d5b3855d939eed48905908c91684f2f4047d934061ea8f1880e4a8edc668bc34f5a8735015ddfab7c14ac2205a62f454be6a46d0bb3e9bdbfd8a48b7e01f5c2a7890242111ce004c319b13dcdde2ac307ee4b4093d0a9b4d7faf83042babe717d6487", &(0x7f00000000c0)=""/95, 0x8, 0x10000, 0x3, &(0x7f0000000440)}) 10:07:12 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x210e00, 0x0) r1 = epoll_create(0x7fff) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) signalfd(r0, &(0x7f0000000400), 0x8) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a3123ff502151911381679bed69f2cc95ea5911eacac78f564552256a2d56131000"/47], 0x2f) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x1, 0x3, 0x4}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) r4 = epoll_create(0x7fff) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000ffff", @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf251900000008000300", @ANYRES32=r6, @ANYBLOB="0c009900ef04000070000000050060003f00000005006000090000000500a30001000000"], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)) r7 = signalfd(r5, &(0x7f0000000140), 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {0x5e2}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) r8 = syz_open_dev$sg(&(0x7f0000001000), 0x4, 0x288a00) write$binfmt_misc(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="73797a3123ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca45c8371871ba0cfee20fed192e0ea893c39e00000000000000b41a617e72eaa5da7c3654d639b9cdf0ffa7408a2a8d63b489ad94ad346502015bf185cb819cc53f290f2a0dc533cdd50fe19c6fc2408620"], 0x24) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x9}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0xc894) 10:07:12 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x80fe, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:07:12 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:07:12 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)) signalfd(r0, &(0x7f0000000140), 0x8) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r2 = epoll_create(0x7fff) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) signalfd(r3, &(0x7f0000000140), 0x8) r4 = epoll_create(0x7fff) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)) signalfd(r5, &(0x7f0000000140), 0x8) r6 = epoll_create(0x7fff) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)) signalfd(r7, &(0x7f0000000140), 0x8) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x16c, r1, 0x2, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x16c}}, 0x1) r8 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r8, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) [ 1202.758919] sg_write: data in/out 558956287/5 bytes for SCSI command 0x0-- guessing data in; [ 1202.758919] program syz-executor.0 not setting count and/or reply_len properly [ 1202.765288] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1202.765288] program syz-executor.4 not setting count and/or reply_len properly [ 1202.777134] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1202.777134] program syz-executor.4 not setting count and/or reply_len properly [ 1202.811303] sg_write: data in/out 558956287/5 bytes for SCSI command 0x0-- guessing data in; [ 1202.811303] program syz-executor.0 not setting count and/or reply_len properly 10:07:12 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) r1 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(0x0, r1, 0x29, &(0x7f0000000740)={0x17, 0x7, 0x6}) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000800)={r1, 0x0, 0x49d6}) ptrace$peeksig(0x4209, r1, &(0x7f0000000cc0)={0x0, 0x0, 0x5}, &(0x7f0000000d00)=[{}, {}, {}, {}, {}]) fcntl$setown(r0, 0x8, r1) 10:07:12 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x8000000) 10:07:12 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xa8812) 10:07:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0xfffffffffffffffa, 0x10002) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) 10:07:12 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xbe00, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:07:12 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)) signalfd(r0, &(0x7f0000000140), 0x8) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r2 = epoll_create(0x7fff) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) signalfd(r3, &(0x7f0000000140), 0x8) r4 = epoll_create(0x7fff) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)) signalfd(r5, &(0x7f0000000140), 0x8) r6 = epoll_create(0x7fff) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)) signalfd(r7, &(0x7f0000000140), 0x8) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x16c, r1, 0x2, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x16c}}, 0x1) syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) 10:07:12 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x26, 0x2, @tid=r0}, &(0x7f0000000bc0)) 10:07:12 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x200000) 10:07:12 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xe000000) 10:07:12 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0xffffffff) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) 10:07:12 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x400000) 10:07:13 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797a3123ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911fad5a9dc3864d8d367a0fead253d0ad5dfa5064ff7fd6cd68431daf727e603a1d0141eaa6db374674b018cdc7617ca30d8fe05bc189b3aa19fc848d0e1b33e8ac87d5956f72b7030ede6b95f3090c7d57fe6280a3c8e4632c4d3f5be40494861b15458220341d1b931a9fcf5511d379a38ecacd7e7b8d0d76ad39029edde7a1d0ace86172b243d2aec16b204017f063e06b5"], 0x24) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000180)={0xdb, 0x65d4e692, 0x3, "911538c8005134005e7398509b6bd4b46bbb5830a4043dc0e16f418fd2ba8d8367b7fc1eff7b9aa416bda5110c072ccb97b9cbef1daab1b21fe35acc2c24875f9d3f9a6b8a95ff36d560c80bb98adab13159cd2b2617f816abfd6d99d32d2c3570e6042206b2e974a97db7f558a2da034ea65c270260cd97c483f333009a6287eda485fa167792f696df40e8259403d15ca1a92892c82dbff6941c96aa8b1f81a62a87544c740f239ec2823424c85ec5afe38b1664c7ba0765353c7f84459c060b0877123c645aaf9a0729e946b900e8dcbf4266c656b484d392e6"}) r2 = syz_open_dev$sg(&(0x7f0000000c80), 0x0, 0x2) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000540)={'syzkaller1\x00', {0x2, 0x0, @private}}) r3 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r3, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000bc0)={0x53, 0xfffffffffffffffb, 0xf1, 0x40, @scatter={0x5, 0x0, &(0x7f0000000940)=[{&(0x7f0000000580)=""/78, 0x4e}, {&(0x7f0000000600)=""/145, 0x91}, {&(0x7f00000006c0)=""/247, 0xf7}, {&(0x7f00000007c0)=""/199, 0xc7}, {&(0x7f00000008c0)=""/67, 0x43}]}, &(0x7f00000009c0)="7856cbe0098673d254970ee15b49633284d1e174866a327c2684dedd17b029d2f0fedbca6ebb8b4827f66ceaa64b764aff8d3e913c2016e0bc713979aaf6e2b6a9778fd59dd0b050809bc07653ecc2b04630da7815bc20e14b197fff2d6bea4c74a3d2d0110ce9d85c9a00d667e1094d9fc9320bd3753325352e5705bbca865de226853cc638405f031127ead8682f246e8252acaa411ed12fb121e3704af083ec6d492af63b720de3ba74bbbc333b7a4aec22a2a7301425e36d6689e619922b932f10125329030f345fdb2623129a458b3bfcab27b7df85d49e081028a63c775f2fb7df3e0c21a06e617ebb8da35d5284", &(0x7f0000000ac0)=""/156, 0x7fff, 0x0, 0x1, &(0x7f0000000b80)}) write$binfmt_misc(r2, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$SG_IO(r2, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffe, 0xfe, 0x40, @buffer={0x0, 0x65, &(0x7f0000000040)=""/101}, &(0x7f0000000280)="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", &(0x7f0000000380)=""/208, 0x8000, 0x2, 0x0, &(0x7f0000000480)}) 10:07:13 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xc0fe, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:07:13 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x10000000) [ 1203.301630] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1203.301630] program syz-executor.0 not setting count and/or reply_len properly [ 1203.320172] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1203.337268] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1203.337268] program syz-executor.0 not setting count and/or reply_len properly [ 1203.365281] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1203.365281] program syz-executor.0 not setting count and/or reply_len properly [ 1203.382093] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1203.382093] program syz-executor.0 not setting count and/or reply_len properly [ 1203.382100] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1203.394151] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1203.394151] program syz-executor.0 not setting count and/or reply_len properly [ 1203.395945] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1203.395945] program syz-executor.0 not setting count and/or reply_len properly 10:07:27 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)) signalfd(r0, &(0x7f0000000140), 0x8) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r2 = epoll_create(0x7fff) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) signalfd(r3, &(0x7f0000000140), 0x8) r4 = epoll_create(0x7fff) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)) signalfd(r5, &(0x7f0000000140), 0x8) r6 = epoll_create(0x7fff) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)) signalfd(r7, &(0x7f0000000140), 0x8) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x16c, r1, 0x2, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x16c}}, 0x1) 10:07:27 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:07:27 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x5d, 0x2400, 0x3, "3341694d56aef334a61b1a61d9327d4cd6f1a80cc441dab4e61c5cbd20bc127244207a4c88546d04c71355ef4212ecfa37bf1b8408e3ffe5cc45c2772ef30a8bfa6b19fa1d4e9859eb89c600f0bdc0804f7883f69ab56f5b61d1ed02a6"}) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) 10:07:27 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x1000000) 10:07:27 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = epoll_create(0x7fff) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) signalfd(r2, &(0x7f0000000140), 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0xdc, @mcast1, 0x4}, 0x1c) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 10:07:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a3123ff502151911381679bef69f2cc739b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"], 0x2f) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000280)) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000100)={0x78, {0x2, 0x4ff, 0x3ff, 0x7ff, 0x4f66a8c8}}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x800}}, './file0\x00'}) socketpair(0x1, 0x80000, 0x6, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000591c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000180)={{0x0, 0xffff, 0x3, 0x80, 0x1000, 0x10000, 0x200, 0xffffffff, 0xfffffffe, 0x1, 0x3, 0xd, 0x101, 0x2, 0x7}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000002040)={0x100000000000, [{r6, r8}, {0x0, r8}, {}, {r6}, {}, {0x0, r8}, {}, {0x0, r8}, {r7}, {r6}, {r7, r8}, {0x0, r8}, {r7}, {0x0, r8}, {r6}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r7}, {r6, r8}, {r7, r8}, {r9, r8}, {r6}, {}, {}, {r7, r8}, {r7}, {0x0, r8}, {}, {r7}, {}, {r6, r8}, {r9, r8}, {r6, r8}, {}, {r9}, {r9, r8}, {}, {r9, r8}, {r7, r8}, {}, {0x0, r8}, {r9, r8}, {}, {r9}, {}, {0x0, r8}, {}, {r9, r8}, {0x0, r8}, {r6, r8}, {r7}, {r6}, {r6, r8}, {r6}, {r7}, {0x0, r8}, {r7, r8}, {r9}, {r7, r8}, {}, {r9}, {}, {r9}, {r7, r8}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {r7}, {r9, r8}, {0x0, r8}, {}, {}, {r6, r8}, {r7, r8}, {}, {0x0}, {}, {r7, r8}, {r7}, {0x0, r8}, {0x0, r8}, {r7}, {}, {r9}, {r9, r8}, {r6}, {0x0, r8}, {r7}, {}, {0x0, r8}, {r7}, {r6}, {r6}, {0x0, r8}, {}, {r6}, {r7, r8}, {r7, r8}, {r6}, {r6}, {0x0, r8}, {r7}, {0x0, r8}, {r9}, {}, {r7}, {r9}, {r7, r8}, {}, {r6, r8}, {r6, r8}, {r7, r8}, {}, {}, {r9}, {r6}, {r7}, {r7, r8}, {r9, r8}, {r9, r8}, {r7, r8}, {0x0, r8}, {}, {}, {}, {0x0, r8}, {r6}, {r6}, {r9, r8}, {r9}, {}, {0x0, r8}, {}, {0x0, r8}, {0x0, r8}, {}, {r7, r8}, {r7}, {r9}, {r7, r8}, {r9}, {r9}, {r7}, {r9}, {r6}, {}, {0x0, r8}, {r7, r8}, {0x0, r8}, {}, {}, {0x0, r8}, {}, {r7}, {0x0, r8}, {r6, r8}, {r6}, {r6, r8}, {0x0, r8}, {r9}, {0x0, r8}, {0x0, r8}, {0x0, r8}, {r9}, {r6}, {0x0, r8}, {r9, r8}, {0x0, r8}, {r6}, {}, {}, {0x0, r8}, {}, {0x0, r8}, {}, {}, {r9}, {r7, r8}, {r7}, {r7, r8}, {r7, r8}, {r6}, {r9, r8}, {r6}, {r9}, {r7, r8}, {}, {0x0, r8}, {r9}, {r9}, {}, {r6}, {0x0, r8}, {}, {r7}, {r9, r8}, {r7, r8}, {r7, r8}, {0x0, r8}, {r9, r8}, {0x0, r8}, {r6, r8}, {0x0, r8}, {r7}, {0x0, r8}, {0x0, r8}, {r9, r8}, {}, {0x0, r8}, {r6, r8}, {}, {}, {}, {}, {}, {0x0, r8}, {0x0, r8}, {}, {0x0, r8}, {}, {0x0, r8}, {r7}, {}, {r6}, {}, {}, {r7, r8}, {r6}, {r7, r8}, {r6, r8}, {r9, r8}, {}, {0x0, r8}, {r6, r8}, {}, {r6, r8}, {0x0, r8}, {r6}, {r9}, {}, {r9}, {r7}, {r9, r8}, {}, {r6}, {r7, r8}, {r7, r8}, {0x0, r8}], 0x3, "e4112eafe8c803"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000593c0)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {r6}], 0x9f, "f6e65373606874"}) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000001040)={r6, 0x1}) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000240)) 10:07:27 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x1f000000) 10:07:27 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xe803, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) [ 1217.462345] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1217.468006] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1217.468006] program syz-executor.4 not setting count and/or reply_len properly [ 1217.481943] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1217.489991] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1217.489991] program syz-executor.4 not setting count and/or reply_len properly 10:07:41 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xf401, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:07:41 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000000)={0x77359400}, 0x10) timer_create(0x2, &(0x7f0000000b80)={0x0, 0x6, 0x0, @tid=r0}, &(0x7f0000000bc0)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000100)={{r2, r3+60000000}, {0x0, 0x3938700}}, &(0x7f0000000180)) r4 = epoll_create(0x7fff) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000240)) signalfd(r5, &(0x7f0000000140), 0x8) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x10) 10:07:41 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)) signalfd(r0, &(0x7f0000000140), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r1 = epoll_create(0x7fff) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) signalfd(r2, &(0x7f0000000140), 0x8) r3 = epoll_create(0x7fff) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) signalfd(r4, &(0x7f0000000140), 0x8) r5 = epoll_create(0x7fff) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)) signalfd(r6, &(0x7f0000000140), 0x8) 10:07:41 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x2000000) 10:07:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 10:07:41 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x3) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000100)) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f00000000c0)={0x3f, 0x10000}) r1 = epoll_create(0x7fff) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) signalfd(r2, &(0x7f0000000140), 0x8) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x1, 0x600) epoll_pwait(r3, &(0x7f0000000340)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000380), 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = epoll_create(0x7fff) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)) signalfd(r7, &(0x7f0000000140), 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r7) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x30, r5, 0x1, 0x0, 0x0, {{0x55}, {@val={0x8, 0x1, 0x80}, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe8, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nr0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0e3a325ad8e215d450c614ce030aa9d4a5d06042ee76ff10"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "24cec25418e5209b3d3885fa8ba4bef385d45f1ac8d2000c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}]}, 0xe8}, 0x1, 0x0, 0x0, 0x5}, 0xd0) 10:07:41 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x3c000000) 10:07:41 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:07:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x4, 0x2202) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) 10:07:41 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x3000000) 10:07:41 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x40000000) 10:07:41 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:07:41 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfc00, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:07:41 executing program 7: ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000240)) r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(0x0, r1, 0x29, &(0x7f0000000740)={0x17, 0x7, 0x6}) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000800)={r1, 0x0, 0x49d6}) ptrace$peeksig(0x4209, r1, &(0x7f0000000cc0)={0x0, 0x0, 0x5}, &(0x7f0000000d00)=[{}, {}, {}, {}, {}]) clone3(&(0x7f00000001c0)={0x298124000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x3f}, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=""/78, &(0x7f0000000180)=[r0, r1], 0x2}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) fcntl$getownex(r2, 0x10, &(0x7f0000000280)={0x0, 0x0}) ptrace$peeksig(0x4209, r3, &(0x7f00000000c0)={0xed7, 0x1, 0x6}, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}]) 10:07:41 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)) signalfd(r0, &(0x7f0000000140), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r1 = epoll_create(0x7fff) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) signalfd(r2, &(0x7f0000000140), 0x8) r3 = epoll_create(0x7fff) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) signalfd(r4, &(0x7f0000000140), 0x8) r5 = epoll_create(0x7fff) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)) 10:07:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000340)) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x0, 0xfffffffffffffffc, 0xa7, 0xa, @buffer={0x0, 0x9d, &(0x7f0000000040)=""/157}, &(0x7f0000000100)="102d54579d5e7dc258dbdedd7024d607405d571bf4d98e12ce0f8fdf32305236c8a0de9dfeb32ce477d0bef0c98258e65bd49b458e068696153bcb3c7f69018bb574ae133d1102227990bf25387fc4128526323e520c71057204c3a8378246dd4e94b5d9b1a836120d1309777227d8ccf497bd3fa71fcea70b311a3e4597a74adf2935522ef3cb57d841f6c7cdd8849b5d62a379ec9071a9f02c8828a6d29ff0ff17bfb214989c", &(0x7f00000001c0)=""/184, 0x1, 0x6, 0x1, &(0x7f0000000280)}) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a3123ff502151911381679bef69f219779b596fe1a4daf38ad7126295ea5911eaca"], 0x24) 10:07:41 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x40020000) 10:07:41 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x4000000) [ 1232.052408] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1232.052408] program syz-executor.0 not setting count and/or reply_len properly [ 1232.071489] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1232.071489] program syz-executor.0 not setting count and/or reply_len properly 10:07:41 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan1\x00'}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c1b0000", @ANYRES16=0x0, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r2, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040011) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004011}, 0x4008000) r9 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a3123ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56454225"], 0x2a) 10:07:56 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x7a030000) 10:07:56 executing program 0: r0 = socket(0x10, 0xa, 0x8000) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x8) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) 10:07:56 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x810080, 0x0, 0x0, 0x0, {}, 0x0, 0xfffffffffffffe99, 0x0, 0x0}, 0x58) dup(0xffffffffffffffff) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) 10:07:56 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x8000000) 10:07:56 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)) signalfd(r0, &(0x7f0000000140), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r1 = epoll_create(0x7fff) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) signalfd(r2, &(0x7f0000000140), 0x8) r3 = epoll_create(0x7fff) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) signalfd(r4, &(0x7f0000000140), 0x8) epoll_create(0x7fff) signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) 10:07:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:07:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x4, 0x3a280) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 10:07:56 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfe80, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:07:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x0, 0xfffffffffffffffe, 0x1000, 0x0, @scatter={0x2, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/136, 0x88}, {&(0x7f0000000140)=""/236, 0xec}]}, &(0x7f0000001040)="2d6460da55569b2339a75bb4cc6082b7bc710051880c0d60c2dd79288bad677186824953c8333f2ec93305b30b9da92f1366535addee9e34b1fca151f3aca21576b364db812c7eecc99e35733182ccd28f18ecf01fb9ae530487978600cce0b4bf91ffde5921ed68a7807a0927d4fe328894359e69b84a55d691847df4216ab9e439ae756d6298d0261645db067e8f7693b1d6bb59e0170dfb51d4330aa90a9a4ed453fc91cc65ae28c0657c97cac534073826d4698a9d5c1d4d35e7163c284cf0b923ed5bbf1889043f6fdc2ea33cde0732d42913f52478886221d6d2912aef440cafc25fdfef88ab1ded578ee45457ee3dda0f35640cbca458b36b7f9129b99ba028274f338725bbbb3486b61e1e284412906e91ef3a7d52dfbf79d1b5493c6b116680122c61e196f40b7f9c2037dfff77e956053f14a4b1173107c051644545efafc21cd76f67f7481c514c0585ed45867ff7eccb1256a6233dd154a9f4a1270383ce52624e4e578cb8e9988b5810cbdf65d9490e9b70dff6bdc1583a39b148bf33dc1a4a2127cf4fb9f696762321541573297275ec5e1d531ebe886f4ab3245ebc4323621f6e76417a483d6f26efc0a6e57d568ca0560586a381f1b37e22762e8e83c657c36d368caeb5cd261e122a580e281b2b7f44b803dafbc040664d66270e82fc123ad9de6a55c0721ac16953f3d57c4cbd8ee8325845c0f5725bb6260ae2b6006d5194a2cf7dca1928f70ca1266ad56a55d46ee991ee543677a432e2e00cb9a761a2c8b67985c34545eb36d055c2642cb7b2ed55771859f7f8b1118627628b082f147e2066604444b09d471b67b21ef25aa615f0ba9209703081b252a661d44d87ee4bfe02d80931d660b01328540bda5fc3102bd0b44396fffddf9315322d0d883c64a3e5a9c95e016a4d189b1910cab87fd22471a0aca3398c9ad5b9f0f555f162b6fd52c64f405542dacb104edbfdd1b523f60ec87a151d24e681bf853f9e44f548d68090cb56f0e606b7abccf73b11ac99ffbb09a2d638df034cd9ce7c8ab4fba65afedee17950b7faff3de267631320352bb29d606a7cb50f3da6f06648b16cb7a898d4dc8bbba762ef4dde4b419dc96fe2d8b693074275e7c5c413c59583ded9ad596d1df77356ac64b70920aecbda2a2ad75057546f352f43801822441b3f5d0a43cea63e4c509f4f613798f015ecb9d6d3d1dfd56e6a38e8438f0152798062d1254049278f59c6c4e214f3c48804412abd7ba9bf7b13ccc279a866383c40590537505063cddefc577c6b386d212ded7cd5ec691ac246af3cc75d36e73920761b40c2ecb22826d12054b1ddc1674708d93a231bf935f76add4edea03e4c200dafaef760056d2defc6e698ce4d3ab5d43e9441e80590a22ec5eb87e7425d387ce9b9b2a018fa5a3418bf0240f2771319fa79bc6751c403db58bc8106c982829676a5fadad0916c75b6232446f2e908713d4c1ac68f09de1e917dd0a5a2040b00fb908e84b92554a03fd4ec2ff115c897dc88542e5e5dc0bdd372390632e9a5b8958097c27116d9882218fc64dfd20472b65004c419990276a93118380541a98f88539eeb08cd7a0b5e5319fa5726e86af3c07977c0ccc13ca7d19bbc546750babbaf80c0efaab1e32185ded41eeb2a95d01d90484915df6524ba077468819f4d53dc1a3119b70a6217eee650918e4f1131ad4a331d34db78788129ff64afb2450bb14455f25ae60a92315ab8ff015d4cde64f28e5f034dc005f914a557899e58bae85da0ea70ddbac9dffb519fc1305ced8a6655daa4952fee08b55731542d106cc1c9fdbc939ecfeba7977fd87fa678a53e200ff8f478ee343b62c28be831dff2ce1770b6751096c95d740cb64f9e0abc053365bd9928a0790d5077e4edbb2296ba69ce7f1557c0fab6da9d1a521ed16b32e1023f2625172f127f44164b89ad0a8b2c8f7fc1fcf2c4887c5ad5cfb18c673fe6a52d7db540cf7219af7d360095c360dd70ea177826f3b0f14a882e927b910b07d53025d9f4633aa722f05e4834d99fc4ce9499b42ec75c52f889543b752124bcf09f84f0f3a6a6f038c912f0213671f671c277fba05a8d74ee8769f1dd02875b04d00526a8843a9893f5405b62832fb4555c3effa43d703181c784761b2ea6517863311f19812715e38bc0384b9daf76187e0076b684a0e576bf795d074b8fdcc232b4fe7b1ec948d6cbf88d56269c9f267d26e43ed4cd0ab0fc40bc707333b71d0058a3d5815145b76aeecc88c36ea64b6017cd41607c4e42eef806b69c5322bb9382f0b07c7cbca4209ce99576650db193ab9bdc3b5359722e1ebdc7f92451bb995ddf8d6f952d1f5fe0d0ad1cf6c49fcb821df515bba20ac445cddd1d188f3bceabd44b982db623332de727fc29ce78eb0aaefc0d5f9e87f4f4d0ff84dd63de6897105e60e094583933e3c3c8bf10c4bd1a8f4e46c0a1485fb17ce3e1afe8b73d84b3a271f649c955d824ac8d83474bae82e8472d620eb77e1fd52b7f1377fe6b3ba4235e45e5990366d2caf748d76b306e9336086777a772dbd169f9e7e3944d5979ee38ada04a2672be68b890e5ce1c18be90ad788247d728446bba182bfe29cae6e937e97361399b997658d1d4a18ddd126db57ca2e5789a4bb91229c480f0f546bc4915d47f961b0972776650de4f3152dc5714fb9523c6148ed4977505a50c99d0179d16e45a60fdaf9511950731a9f3a9ebe4a2e46ffdeb8cb34f5b8138f4229703653286f78068639887e60e51256bcf0272cad07652fe5259dd2c0d9f1122de0f8ca4b4d37ea1db8ab16ce2a06489d5e6dd3a6927ebc04b03af643e42725b5ec15f6f1f7e5f473f44bf1fd3ceb5aaa6536240d1f8e753b6b89458787088774c81d584ff15c754aecb44e20c971f6a6c7fb13d6eed3edcf3efb43877ef206139ddf9a041b962fc07daf058a60b48f9d47cad9c27b4174fc1ef1494b6d342c142ca450b7788328bc89b6f6e873d286e2459696a3ae6b0b6c71daa4a38d2adf79495cb602ea5b0e6e8698942428067abcb5c2f8c93f8f4225502532883934dad70a69feac78db11c3b2b73bdf22b8a4a6e9e224d132517d071e34c2e9660d57f74fa309b0cd33b86affa599bbb980635831351a8217efe3605b7ba42799142d5e84bbf16ea6d5fe775b7668ec0b83bed5d3169fed2d391459b00db6d054080f1f86a14fc9a4af799dc41c74f30c06067701a636a34644b3d6557d3fbed7ea30142d30a8674ffdf0f4fe0860d44831f8584ac205d79f3e6c6d98c2f224ba4a77dcb4c130977a2d101a5b3ff78f6927f6fa7fa7f41fff33546deb7c3a7962abfeb6bcac576f100d9c4dd4537604338bc8aeea4d9fc8a975e5e0adc126dd9c3e14ccd693e036ea1b87aae10f5167ba666e300fc0d72d2097719e0d04c1d909cfa56e379fc7ab205b75cdbe5e822459b51dd5ae928e7c2efd21dd6545672e7bd12738257118487afbe8d2943b8eebc73724334f19d1513a71ef498d9bfd98cb0dfc37f99e7d03f3c8771ae6b079992abe31e2dfd46543ab182eebc0d2d6c34cc520b05fb484e5832d141dbac95e39eae3329dcdd0df96b9836834c2c9c488824e3f76ad64de962b4cdafd5ed3ee24c13ea7204b59edafcc6fd31682d0c93ac55a5fd951050d531f794c1518af812c2af2d7c64a8877d3062621c0554183dbb68eede3106699ebf5f3b758b9dd696764cd5653ecd0b976ed954907c729db0d1ccaf080cc429d81251eb0d294ebe1f04f92e4ecc7ea6adf1ac7dac6a62486d069c07a0c1f99c4f2b35067ff4d029f329d995ced29015242fca55794cf07a9ef6885c93a8a0f4a06ff47a9ab846c2deaf102b36cdebc24b6a386685abd38ef0c1696b07d8ff51ccbbc48e075e221c015af45caa1fae257ac9335fdc7401948a2cdf5954c4cce80ee2ebcebd192fca2097be16c1a927485c736f03422528db2b43742da8240d781acca71ee67ea5c858e18e59660abc7e6e6860ebd2668f30b8738ee9d2bdc4cc89485cad73e9cfbbcc4ce742022ffe0e23a8c23d30c12df7fe5242a126e779a421c828fc3f5dcca348fe1bd05ef894709d030b9ca1cd5f98c415194e183948547f964ee8a470027fe233f05133b42d21a3ccf917c49959710ac3ac77fa9ae0871d50c2ae225f69db3eff850bae9a403a9c43617be436b778bf1de8c4009998070625098e32be8450bed6b3134b38819d7e37cd538576cbb39ca2915df99f0bee30ec23b31495a0ea0996274d6b03e67123d632de6ed7aa40ac9d544a40241c29d88080903bc25c24d9267dbcb43dedb4aafdb409a51170a1b2dda9319918bbabd00b31fd2c86dd16979fb6b76299c1228cc1eb9bb6bf3d7f5508c051d800f28cbeabf0d2993e6e29c26456ad16d00418063bca4a6a80173bf0999ff347fd774d6756790319dc571096ad866b7d03f47210b9feab486cfa152b6ce2123b35467ed252d0ba728e0c41e5d8ff8b52cdd8235145948051d17d962c37d8ede6440502529b61ba694e916b33b9f129dba2225db880b2deb37677a796a7ed633cb503dffafc7ed707820d4eee0bf34e02cea42f76e079990ba45c34218a86bb1f10625ab0d023da7dd435eab796d1df297746b9dfdc6acf1d77de0ef0a59dc80e65a0359d58dcb2d23f009e698533231cd1394159a3d5f9dd2b3dfa1a6183116454318e239f784ec1ebd44f51c209e0ff85db06160971b7a80014ced7000abd9061eb8edd5150f2fad9db3fd949656b7187266c55f20bcd469bd2f955a1bdaa72e3b812faf2098864994b37d3afb0609d6f46d3c0d659bc2941b782540adb2e908a7c0e3eb7d8e42aee3452f6bac6491df7b4b5e7333da32101bec4b474c1d2491699616baef30769208d4ae21479db1ce55329ab15d8917c964690bd755a171055474426e07df23c7f1abfa6b2784c5cd125a1e2059920a4661bd164085a0b884b2323c5c4c81d090d243e6712dcb9704d310526a9e8e773d6453fad640dcb7a09ff6409a28b8c2f87531d0e76b14c624f9f3c79ffd4c1e88ab7c0bc524934bcb4d84066623108b8617cfbd1cd75ce4ae6f2b0c6f1f2fec58c9e71f2e21f02800b730bf339bc864d49ea1d64ff4d76c076d30f64102fbecaa51988dc2e93a58f8db1feedd682478fa3c0ab1fd35e71e760976210affbaf9ad53bfd147ce14979581b17dff2d4864206574f220ac23dc851ad08d029538fa4686d895bb60c9e490f847260d705d7e28f2a81280b21d8a24e2fa09c36f95d87815c7de38208c1d99432ba7f2519f16dd4a7dd3d43e1d81b05c757fe248cc55e3795452c88c5b482a250f8f3b3c00baeb0a800a96393acd9606e7469594519ef86a4507540ffc2fd764f84a087645136054178f99e8de96d9c67b7e5bc813e03a62fe9c5fcd9ee01662f9a39f7d6db43f5d8a5ccafa14c0361e44f20dffb3dad15959e85578994deac40a280e9cc70d2fa765607c3c1497ac6c453e85d09dafd2c57dbc202c75cdb60ac716741c201fdcb43820d1052b076c8cf0aa2c3d05f73cc9ddb0da2e5c3c619eebb0189fdbc9a6e248cbf1d5de0ce545f312050a97d8756d52f4f2dc8539eb4e08b5a201c4d687fa747d3c0227d266f7cda646ca44c73b4888022e6b694bc5a612a93a6be5df7d3b82f2c93e2a5311f68f291d9e142322557fbe8187272639714060fd609b7b492898b00f2d1e2ac3658372c3157e10d6d755d746b35ddc373c2da225d61ae3a7cd18765ef1c1ca8519ffa9a7918e1e77d95ffee53b69e3eb4", &(0x7f0000000280)=""/152, 0x1, 0x20, 0x3, &(0x7f0000000340)}) 10:07:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0xfffffffffffffffe, 0x141202) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 10:07:56 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xd3720900) 10:07:56 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xe000000) [ 1246.746936] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1246.746936] program syz-executor.0 not setting count and/or reply_len properly 10:07:56 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(r0, &(0x7f0000000000)='environ\x00') timer_create(0x0, &(0x7f0000000b80)={0x0, 0x28, 0x1, @thr={&(0x7f0000000140)="7d11fedc53f29213d474c7173703b200e0d6085eb078479dcc148cd72d60e4d40dd437f3d0de117887ebe331b178afdbafa0a321ebc0d3988c21f8e691ee5c961fdb0468bbfd4c889637f867228523e1c0a64a8cfaf265be5e695ffeb5c6678b380536ba7dfef11ba46a0c7f855d2a0c17b46bcb7da198c41bee21ae8339ffccbca48b77a58a66a58321b1e42a6880cd97688fafdc584f718b5eb2edc607c847b3b6b7757eb63d5f43e1ed2711675eab704b2b5e095c66c878ef3fb70e94738955cf3b78d2f65d1f6e1da91c69ac20a9c5f64c550d992c6ef5407599cd6580bf4f", &(0x7f0000000100)="af4934e404c7f8fa07cbe28dd63d05b0ac69b155"}}, &(0x7f0000000bc0)) 10:07:56 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfec0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:07:56 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)) signalfd(r0, &(0x7f0000000140), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r1 = epoll_create(0x7fff) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) signalfd(r2, &(0x7f0000000140), 0x8) r3 = epoll_create(0x7fff) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) signalfd(r4, &(0x7f0000000140), 0x8) epoll_create(0x7fff) 10:07:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a3123ff5021519113a1009bef69f2f53e414533a5bda98f1662c42fc357cc779b0e4fe1a4daf38a"], 0x2a) 10:07:56 executing program 0: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'ipvlan1\x00'}) 10:07:56 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xe8030000) 10:07:56 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x10000000) 10:07:56 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="060000e4ff0000002e2f66696c653000"]) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000080)) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 10:07:56 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040)) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) 10:08:10 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:08:10 executing program 0: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 10:08:10 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xff00, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:08:10 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)) signalfd(r0, &(0x7f0000000140), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r1 = epoll_create(0x7fff) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) signalfd(r2, &(0x7f0000000140), 0x8) r3 = epoll_create(0x7fff) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) signalfd(r4, &(0x7f0000000140), 0x8) 10:08:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797a3123ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f5645522500b5c9be130991004d65fbb41452b60e66805586cc13dd436ebb96e13a4fc0aea54bb18eda1bac198813b210b1df345f2c2335009cebb68c4aedc1345f702e5fc4ab7b702e885b026bdf3d7a70db063a1913757d25a75bb19c69d32f561df617b94ca4d98f80d59a337cb736c666415d"], 0x2a) tee(r0, r0, 0x0, 0x2) 10:08:10 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xf4010000) 10:08:10 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x12880a00) 10:08:10 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x24) 10:08:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000140)) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000180)=0x5) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)={0x8e, 0x3, 0x401, "2d3db01cbe29c54c32ec8123015e3c34e20cca458efd7b7fa7389e8896bb1ee75abb4c62434e22c1d6cb4e4247da31d61b8c97dd37f9bc770b09fb1c6e75263906afbe0016cc268c9c6cf093db7d519669269ecd38434a9d53847f2bf720baa645eb754f3fe62636c08eae6db6f0c2a8c648323b2dcc1fb2400b1807ad6645d970c770cc0c06f22aa01257851d70"}) 10:08:10 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xf5ffffff) 10:08:10 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)) signalfd(r0, &(0x7f0000000140), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r1 = epoll_create(0x7fff) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) signalfd(r2, &(0x7f0000000140), 0x8) epoll_create(0x7fff) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) signalfd(r3, &(0x7f0000000140), 0x8) 10:08:10 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x1f000000) [ 1260.522761] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1260.522761] program syz-executor.4 not setting count and/or reply_len properly [ 1260.536897] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1260.536897] program syz-executor.4 not setting count and/or reply_len properly 10:08:24 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:08:24 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)) signalfd(r0, &(0x7f0000000140), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r1 = epoll_create(0x7fff) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) signalfd(r2, &(0x7f0000000140), 0x8) epoll_create(0x7fff) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) signalfd(r3, &(0x7f0000000140), 0x8) 10:08:24 executing program 4: fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_access\x00') r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 10:08:24 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xfc000000) 10:08:24 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x3c000000) 10:08:24 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:08:24 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, &(0x7f0000000080)) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r2, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) timer_create(0x3, 0x0, &(0x7f0000000480)=0x0) timer_delete(r3) timer_settime(r3, 0x0, &(0x7f00000000c0)={{0x77359400}}, &(0x7f0000000100)) timer_create(0x7, &(0x7f0000000140)={0x0, 0x2e, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000200)={{r5, r6+60000000}, {0x0, 0x989680}}, &(0x7f0000000240)) fremovexattr(r2, &(0x7f0000000000)=@random={'system.', '.^^\x00'}) 10:08:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r2, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) fcntl$setstatus(r2, 0x4, 0x2800) [ 1274.397299] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1274.397299] program syz-executor.0 not setting count and/or reply_len properly [ 1274.419709] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1274.419709] program syz-executor.0 not setting count and/or reply_len properly 10:08:24 executing program 0: pwrite64(0xffffffffffffffff, &(0x7f0000000100)="07e8a330aad9b827f2e91ef151f9bdee1d388d4c7907494c2a83d399d9317c4e61e5e57b0e56aad5353e44d11960741d35363497be84775b6e97058b35e2e6027223cb212161efb149dfaaf5852489e6d09092ad868b028410b72a02d43c0b293312007d15f03e9374c505a01cae9dff057ad6660e11d70742b080b92811d5d061e0b8", 0x83, 0xffffffff) r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="73797a312316af5cc6cd5b6de14c79a81b5b6b18ff502151911381679bef69f2cc779b59ebcce5a5d4e40b0b0b3f18d9a9ebfa301232ee5c53b491d5685f501822db49cc5c7090b445c65ed16febbb57fe3b"], 0x24) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040), &(0x7f0000000280), 0x2, 0x1) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f00000002c0)={0xeb00, 0x7f80, 0x9}) 10:08:24 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xfe800000) 10:08:24 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x40000000) 10:08:24 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x2, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) [ 1274.559054] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1274.559054] program syz-executor.0 not setting count and/or reply_len properly [ 1274.591846] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1274.591846] program syz-executor.0 not setting count and/or reply_len properly 10:08:24 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) process_mrelease(0xffffffffffffffff, 0x0) 10:08:24 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)) signalfd(r0, &(0x7f0000000140), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r1 = epoll_create(0x7fff) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) signalfd(r2, &(0x7f0000000140), 0x8) epoll_create(0x7fff) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) signalfd(r3, &(0x7f0000000140), 0x8) 10:08:24 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a3a1124c36a0bfb4597f83123ff0400000000000000ef69f2cc779b594fe1a4daf38ad7126295ea5911eaca07006b58400e51867bc4870eb0d699bb89eff1c591c50834c658c32f628680b1352c7dd8974b1ba5e1a1a13d7d71c463ace2f3f8c009c5f7c01898243968bac372189b5c04ead9e21e8c2ac2afbd1e59d0e17f0c8ccefcd0a1d7538846bc3cd34d14043032056703c614b4b65026f909aef5a79aab8d5c9c3356b1889523a8bc54f8d30076afde96da01012c32d40de1a635f7cb68670cb75a7ea5c82ec6b343a6ea10c538"], 0x24) r1 = epoll_create(0x7fff) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r6, @ANYBLOB="06001200000000000a0006"], 0x30}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) signalfd(r2, &(0x7f0000000140), 0x8) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000000)) 10:08:24 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:08:24 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xfe950100) 10:08:40 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x3, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:08:40 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:08:40 executing program 7: r0 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r0}, &(0x7f0000000bc0)) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0xa503, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r3 = epoll_create(0x7fff) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) signalfd(r4, &(0x7f0000000140), 0x8) clone3(&(0x7f0000000300)={0x100000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x5}, &(0x7f0000000180)=""/135, 0x87, &(0x7f0000000240)=""/95, &(0x7f00000002c0)=[r0], 0x1, {r4}}, 0x58) write$binfmt_misc(r2, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000080)={0x1, {0x9, 0x5, 0x7ff, 0x1, 0x6}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="06000000000000f22d2f4c696c653000"]) 10:08:40 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x40020000) 10:08:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a3123ff1381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca00000000"], 0x24) sendmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="e664eecef244157a695fc2f5caf4c0356a2b11f288dc796f460cb35efd300aee8f0950501829151afd5574fff6de35e7c2c82a09195640", 0x37}, {&(0x7f0000000080)="f20c7ad9105bdd9c8dcdb9dcb7335b9049b3f3bade5da8be9475c485daacb2895c496cb04182051cf846f022341428797571babf9e02b5b8b7022f3d971effe15a31feee8d37b18d9c05208460a9e2890940f8cbe51128d4a21764082cded65a3ed09dfacde2f849024667d19b92520382f792ae2a444b6305ee384632a7d12809abeacd7545e616b63c013781b2dc80c4851db78797e234cfff9a9e7232503ce3a01722983ff2a56d5d4b3b3a6c8bd52b276691e94515bfe01cc60a6d882868ff57291f7c9206bf992b", 0xca}, {&(0x7f0000000180)="860f66b19698a39de0375221c8fab566ee3aa6c91f8c8443e502fb22f6a8bed436c6bb7535a6baa1", 0x28}, {&(0x7f00000001c0)="331b0d6692f3d27cb1a7ee472fd557fa20e2976231557b8445c1d54268873b3ba4b54c1bde267125889e961e80af8c8f2626c4cc7c7b4cceb82c49f2aee7e4b2b31851a3f6962e2c75982b0b28854892fcb692cb6018c5853bfe1eff593fda387ac665267337674befe77e3d17e73bc3e30035d849cb4c43e5aa40834ade294155e006c2c83ffda56b0d4b06c0004129f737a3e7aae1814224cf01a3b8dfae4025f6c5e2541fdab107a325aaeb42ab5eb8a5a9215d8a0b32b8c6fec080", 0xbd}, {&(0x7f0000001040)="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", 0x1000}], 0x5, &(0x7f0000000300)=[{0xb0, 0x107, 0x4, "ab256e16ea6b1a54d4b9e20bfda8d7cf08e5bc688931717c1e42db33f7ffd574a67284354cc34421e4920e797f31999957ae574db1062bea600e243ae5151cee0fbb7be045ea4c362b6fbbee9b883df372f5ab6ed55bc91609b5bd37c54843347d4d645daa1e55f25efb482ccbacbb32b1adeebd81b62c80e6c4bbc5bdb11cb24c834ab98ff73ee1e412c8b0208ad96a6a4c0b503537eeb2190db050ffd5f4"}, {0x100, 0x148, 0x10001, "588b82451eb660b36a2a6903b11d5c5da6110b265b0ca578b08df8e97b56d9f848c82a958d20763f72aafde0c6b65e37bf4e7d36d56b06b0891f53f2c6590d2a420a6d9449afa9d288977c7483671ab0c0c1f6d7449075d88dc845e30aed78ffd79af37aa857d059deb52d95fa9004f59725cd979bb2bd3c4e948d82111b7c0ba37801addc12ad05ad5a4f9eba4518133816d2efdb546b98adcd946c25bdd4c95c1ce716e2ec1c0d53954e187b92fb6930eacc5721a69f8056bc982d0f9927bf840ecf7a20a64676d95ddc7431864b6e38ccf1794accb1f90a3fd4a3343474373b9be28cc2b88eed0744"}], 0x1b0}}], 0x1, 0x40) 10:08:40 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)) signalfd(r0, &(0x7f0000000140), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r1 = epoll_create(0x7fff) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) signalfd(r2, &(0x7f0000000140), 0x8) r3 = epoll_create(0x7fff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000240)) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) 10:08:40 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xfec00000) 10:08:40 executing program 4: syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004042}, 0x4) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = epoll_create(0x7fff) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) signalfd(r4, &(0x7f0000000140), 0x8) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000b00)={0x18c, 0x0, 0x100, 0x70bd2a, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6b}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x8001}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x81}, {0x8}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x66f}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x7}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0xffff}, {0x8, 0x13, 0x3}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0x80}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8891}, 0x4044089) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000240)) open(&(0x7f0000000ac0)='./file0\x00', 0x204000, 0x1) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe8, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffff9}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x544}, {0x6, 0x11, 0x2}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4014) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000040)={0x80000001, 0x2, 0x9}, 0xc) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000780)={0x53, 0xfffffffffffffffd, 0xe8, 0xd0, @scatter={0x2, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=""/149, 0x95}, {&(0x7f0000000500)=""/25, 0x19}]}, &(0x7f0000000580)="5aeeb3ef6057defb67978813d4d1ef150be0a63d0b1803cf37e462116e1811398c98132f4f1a8949acfd47eb3aab5a01a7eafa364620545044b9ec4f360de7aa58687a453a17463fecfb0748682c760850a2d6a0f50eb11fb46cf735df16676ebe93e7f238bfd66258b1e16d7512da504a128b749094ece0ebba025595376141ac644bb36ce190361dd86f57c75129c71c622e050cff9c225096dd968e5cfe18aabed783fa3c7767c3cc6a8207b8e758a53944d30277cff3670271406a491af6dd3d65c54572ba2413ee87dd622b75df5c0ff92773766473df8177e018932d71e987448bfa78317e", &(0x7f0000000680)=""/170, 0x800, 0x0, 0x0, &(0x7f0000000740)}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000080)) 10:08:40 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) r3 = epoll_create(0x7fff) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)) signalfd(r4, &(0x7f0000000140), 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r5, 0x0, r1, 0x3, 0xb3e4245057d282b1}) write$binfmt_misc(r2, &(0x7f0000000000)={'syz1', "23a6632151911381679aef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) r6 = epoll_create(0x7fff) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000240)) io_uring_setup(0xd0b, &(0x7f0000000280)={0x0, 0xbb94, 0x0, 0x2, 0x2fb, 0x0, r4}) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x4]}, 0x8) r8 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="73797a3123ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d5613103067005c11a3c3ebcde0e701ee4de94ba335d2bd2749ad1630e601cff7030cb369bf6d056843b9105c778bfe9fb27b478a096fdd2febf8ca704f09398ef2eeab37884e50a11983bb9ff6c2143ab160fbbc189b3caf5c0980a940c982eb4200de52aa9a845a6e0b4d4822d5903bfe3f4a94fa79d0540b3a2bcbebb336a4dcdc4cfd4525a7581e51ba1ae41c"], 0x2f) fcntl$addseals(r8, 0x409, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000010086f080166bf2", @ANYRES32=r0, @ANYBLOB="ff010000000000002e2f66696c653000"]) 10:08:40 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x74080000) 10:08:40 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:08:40 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xff000000) 10:08:40 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x4, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) [ 1290.733772] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1290.733772] program syz-executor.0 not setting count and/or reply_len properly [ 1290.779450] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1290.779450] program syz-executor.0 not setting count and/or reply_len properly 10:08:40 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)) signalfd(r0, &(0x7f0000000140), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r1 = epoll_create(0x7fff) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) signalfd(r2, &(0x7f0000000140), 0x8) r3 = epoll_create(0x7fff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000240)) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) 10:08:40 executing program 7: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x181000) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0xd, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c804}, 0x80) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x20}, 0x1, 0x0, 0x0, 0xc881}, 0x0) r1 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = epoll_create(0x7fff) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)) signalfd(r3, &(0x7f0000000140), 0x8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r1}, &(0x7f0000000bc0)) [ 1290.853644] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1290.853644] program syz-executor.0 not setting count and/or reply_len properly 10:08:40 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:08:55 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x5, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:08:55 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xe8030000) 10:08:55 executing program 7: clock_gettime(0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x105802, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, &(0x7f00000002c0)="553b40b19b652f1a8b17387be890112f6ef8", 0x12, 0x0, 0x0, 0x1}]) io_getevents(r3, 0x10001, 0x7, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)={r0, r1+10000000}) r4 = clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x200040, 0x89) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x26, 0x4, @tid=r4}, &(0x7f0000000bc0)) 10:08:55 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)) signalfd(r0, &(0x7f0000000140), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r1 = epoll_create(0x7fff) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) signalfd(r2, &(0x7f0000000140), 0x8) r3 = epoll_create(0x7fff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000240)) signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) 10:08:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000040)) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 10:08:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x1000, 0xf7, @scatter={0x5, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/189, 0xbd}, {&(0x7f0000000100)=""/67, 0x43}, {&(0x7f0000000180)=""/238, 0xee}, {&(0x7f0000000280)=""/185, 0xb9}, {&(0x7f0000000340)=""/16, 0x10}]}, &(0x7f0000001040)="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", &(0x7f0000000400)=""/201, 0x3dab4153, 0x1, 0xffffffffffffffff, &(0x7f0000000500)}) 10:08:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:08:55 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xff0f0000) [ 1305.458655] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1305.458655] program syz-executor.0 not setting count and/or reply_len properly [ 1305.467609] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1305.467609] program syz-executor.0 not setting count and/or reply_len properly 10:08:55 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xfffffff5) 10:08:55 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xf4010000) 10:08:55 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eaca"}, 0x24) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r1, &(0x7f0000000080)={'syz1', "23ff0700000000000000ef69f2cc779b594fe1a4daf38ad7126274ea5911eacac78f564552256a2d561310cf81e5b56bdb08c7021fc59da1964092890b387071339d2f5cad6e3726c949341a229874f9432168da416f4589d5f0757eb87fe7b43529bd112f484bdef6c59adb77f557f8f4c610bc3d21c8f205709fa5f393a3b9342e69a874708e28a8a2aa0cb333980db984631d232ce6f0000000008da65dde29327445c5329fa82b0e3bb9e6f9eb1eba8eae36946f5658158cd8954e170beec1ddd3a066906952c064ac50847f944601010000aa61dad98646f1009794e84c68aeeceb973085c1f6c3f4994d5c5351e480d3603d2433623c49a2ac1192e7207c816ad989affac58498c918ba318023419a266e74426dba3320167c6318fd4dd75f0be8a0fc9ed297eabace24dd95b0539597c7c0413a157e8205c147c02dd2729068c2645b2fdd2e9c532e6470d9bd15757f77"}, 0x158) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)={{r1}, {@val, @actul_num={@val=0x2d, 0x8, 0x67}}}) 10:08:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x4902) write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="73797a3123ff56262453c7502151911381679bef69f2cc779b594fe166daf38ad7126295ea5911eacac741be30cda66b80429ff6c95b3a7475b7411f7c2ed85bf6c655e6d5b7410f31f10f9c89469920ffb895db4c549dd932c7e7231287c8c5e58a00e381d977fb07f4c49d2c7134bb51cc9ea215b101d59983061914910ec3e78a1a9c2d4fa7c19c202c94009870715ccf814ca8ed5a106a6bc85f85dd5b6b98d3a1b34a3316773629698c00cf7ee12ebf670ccaf41e9b07526dfcfbe81a395e899da50537c3dd1f8355e512d45d685fe4e77e7406ddb6780e1f8bb9a2236dad11a9bae18c852c"], 0x2a) 10:08:55 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x6, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) 10:08:55 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)) signalfd(r0, &(0x7f0000000140), 0x8) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r1 = epoll_create(0x7fff) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) signalfd(r2, &(0x7f0000000140), 0x8) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000240)) signalfd(r3, &(0x7f0000000140), 0x8) [ 1305.722638] sg_write: data in/out 524031/298 bytes for SCSI command 0xc7-- guessing data in; [ 1305.722638] program syz-executor.0 not setting count and/or reply_len properly 10:08:55 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xf5ffffff) 10:08:55 executing program 7: clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) pidfd_send_signal(r0, 0x2, &(0x7f0000000040)={0x32, 0x5, 0x130}, 0x0) r1 = epoll_create(0x7fff) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)) signalfd(r2, &(0x7f0000000140), 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="717c21917adeca0e1b1d72848a0a981f5ad7010400400000000060f3a3f169e7cdceb6d4f3bed6b9b3fd2279503725f876c482c00e542a09e0bbd7d564943e2b442e144a5db2f11f43fbbe58f23935bda5fc30ecff6403c9ff345d801634834700"]) timer_create(0x0, &(0x7f0000000b80)={0x0, 0x27, 0x2, @thr={&(0x7f0000000100)="840b63fa75575ca7e1d4a84cd4bbb0b65259cae00e635ef6b9808fc916c597c8e1f019469c2cb84b4716594b43f063", &(0x7f0000000180)="2406b92cf08d2105fd"}}, &(0x7f0000000bc0)) [ 1305.745604] ------------[ cut here ]------------ [ 1305.746114] WARNING: CPU: 1 PID: 16500 at lib/iov_iter.c:644 _copy_from_iter+0x2f1/0x1320 [ 1305.746823] Modules linked in: [ 1305.747134] CPU: 1 PID: 16500 Comm: syz-executor.0 Not tainted 6.4.0-rc1-next-20230510 #1 [ 1305.747764] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1305.748430] RIP: 0010:_copy_from_iter+0x2f1/0x1320 [ 1305.748871] Code: 92 ff ff 89 c3 e9 1f ff ff ff e8 aa 09 36 ff be 88 02 00 00 48 c7 c7 e0 d4 9e 84 e8 f9 13 5a ff e9 13 fe ff ff e8 8f 09 36 ff <0f> 0b 45 31 f6 e9 67 ff ff ff e8 80 09 36 ff 31 ff 89 ee e8 b7 04 [ 1305.750345] RSP: 0018:ffff888034b87608 EFLAGS: 00010216 [ 1305.750772] RAX: 00000000000033a7 RBX: 0000000000000000 RCX: ffffc90002bd9000 [ 1305.751386] RDX: 0000000000040000 RSI: ffffffff8215e211 RDI: 0000000000000001 [ 1305.751964] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1305.752563] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000001000 [ 1305.753152] R13: ffffea0000819a00 R14: 0000000000001000 R15: ffff888034b87838 [ 1305.753725] FS: 00007f0b88539700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 1305.754409] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1305.754900] CR2: 0000555555c4bc58 CR3: 00000000436b8000 CR4: 0000000000350ee0 [ 1305.755491] Call Trace: [ 1305.755711] [ 1305.755946] ? __pfx__copy_from_iter+0x10/0x10 [ 1305.756347] ? bio_add_pc_page+0xbc/0x100 [ 1305.756707] copy_page_from_iter+0xe3/0x180 [ 1305.757104] blk_rq_map_user_iov+0xb39/0x16c0 [ 1305.757498] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 1305.757988] blk_rq_map_user_io+0x1d1/0x200 [ 1305.758370] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 1305.758803] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1305.759279] ? sg_build_indirect.isra.0+0x3b2/0x640 [ 1305.759693] sg_common_write.constprop.0+0xd8d/0x15f0 [ 1305.760162] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 1305.760648] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1305.761100] sg_write.part.0+0x698/0xac0 [ 1305.761479] ? __pfx_sg_write.part.0+0x10/0x10 [ 1305.761930] ? __lock_acquire+0xc29/0x64f0 [ 1305.762304] ? wake_up_q+0x8f/0xf0 [ 1305.762607] ? inode_security+0x105/0x140 [ 1305.762985] ? avc_policy_seqno+0x9/0x20 [ 1305.763349] ? selinux_file_permission+0x96/0x510 [ 1305.763765] sg_write+0x8d/0xe0 [ 1305.764082] vfs_write+0x2b8/0xd40 [ 1305.764385] ? __pfx_sg_write+0x10/0x10 [ 1305.764729] ? __pfx_vfs_write+0x10/0x10 [ 1305.765099] ? __fget_files+0x270/0x480 [ 1305.765451] ? __fget_light+0xe5/0x280 [ 1305.765814] ksys_write+0x12b/0x260 [ 1305.766479] ? __pfx_ksys_write+0x10/0x10 [ 1305.766825] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1305.767306] do_syscall_64+0x3f/0x90 [ 1305.767682] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 1305.768164] RIP: 0033:0x7f0b8afc3b19 [ 1305.768464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1305.769903] RSP: 002b:00007f0b88539188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1305.770557] RAX: ffffffffffffffda RBX: 00007f0b8b0d6f60 RCX: 00007f0b8afc3b19 [ 1305.771138] RDX: 0000000000000158 RSI: 0000000020000080 RDI: 0000000000000004 [ 1305.771692] RBP: 00007f0b8b01df6d R08: 0000000000000000 R09: 0000000000000000 [ 1305.772282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1305.772900] R13: 00007fff58e73e0f R14: 00007f0b88539300 R15: 0000000000022000 [ 1305.773500] [ 1305.774119] irq event stamp: 1007 [ 1305.774399] hardirqs last enabled at (1017): [] __up_console_sem+0x78/0x80 [ 1305.775098] hardirqs last disabled at (1028): [] __up_console_sem+0x5d/0x80 [ 1305.775792] softirqs last enabled at (394): [] __irq_exit_rcu+0xcc/0x110 [ 1305.776507] softirqs last disabled at (385): [] __irq_exit_rcu+0xcc/0x110 [ 1305.777200] ---[ end trace 0000000000000000 ]--- 10:08:55 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x8000000000) 10:08:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x1, 0x12902) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 10:08:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="3d723d21de619cce", 0x8, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000340)) 10:08:55 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7, @empty}, 0x1c) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000340)) [ 1305.926716] sg_write: data in/out 524031/298 bytes for SCSI command 0xc7-- guessing data in; [ 1305.926716] program syz-executor.0 not setting count and/or reply_len properly 10:08:55 executing program 1: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0xfc000000) 10:08:55 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) r1 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_misc(r1, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f564552256a2d561310"}, 0x2f) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000040)=0x6) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "23ff502151911381679bef69f2cc779b594fe1a4daf38ad7126295ea5911eacac78f56455225"}, 0x2a) 10:08:55 executing program 3: r0 = syz_io_uring_setup(0x4041, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) connect$inet6(r1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000780)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8080) close_range(r0, 0xffffffffffffffff, 0x2000000000000) [ 1306.046521] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1306.046521] program syz-executor.4 not setting count and/or reply_len properly [ 1306.051540] sg_write: data in/out 558956287/1 bytes for SCSI command 0xc7-- guessing data in; [ 1306.051540] program syz-executor.4 not setting count and/or reply_len properly VM DIAGNOSIS: 10:08:55 Registers: info registers vcpu 0 RAX=0000000080000001 RBX=ffff88802053fad8 RCX=0000000000000000 RDX=ffff8880442451c0 RSI=ffffffff8174531e RDI=0000000000000004 RBP=00000000000001fe RSP=ffff88802053f6b0 R8 =0000000000000004 R9 =00000000000000c1 R10=00000000000001fe R11=0000000000000001 R12=0000000000000000 R13=ffffea0000d18a40 R14=ffff88802053fb00 R15=00000000000000c1 RIP=ffffffff814bebc0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f0b88518718 CR3=000000001a1ca000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000004 RCX=ffffffff812d07b2 RDX=fffffbfff0ef2747 RSI=0000000000000008 RDI=ffffffff87793a30 RBP=00000000000003a1 RSP=ffff8880169ef490 R8 =0000000000000000 R9 =ffffffff87793a37 R10=fffffbfff0ef2746 R11=0000000000000001 R12=ffff888019294070 R13=ffff888019293680 R14=dffffc0000000000 R15=0000000000000000 RIP=ffffffff812d06cd RFL=00000247 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555c42400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9630fc7f64 CR3=0000000016754000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000