executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x140, 0x39, 0x100, 0x70bd2c, 0x25dfdbf8, {0xa}, [@nested={0x84, 0x55, 0x0, 0x1, [@typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="b46ce315e1fbb98abe1454ab1d6bb1760215822ef8423f6698e947700bd03a08379fb1f574c3cf1e47354b27611eba816634a616d233dc89c8f89061", @typed={0x8, 0x8e, 0x0, 0x0, @ipv4=@private=0xa010102}, @typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x4, 0x81}, @generic="6b2389ccbc180e26647d2bbc46d549aa"]}, @nested={0x85, 0x17, 0x0, 0x1, [@generic="268ad7069e12fa9c009828f7fc6c42a77c7a907a441b71bde609d677351112755ba6a90f46d1d391cd9bea456914780c3531ac82df06fc00c8b665140a7af5ab1616b937b64e0040b684ace5f95771f37ce5fbba292ea2b8aa3334f42322e0df3a9ef75f3a50246ea4065413ef4642a47fe73f4573f6013dd8c421c58a9bf0b3cf"]}, @typed={0x1d, 0x75, 0x0, 0x0, @binary="78528aef6617b71b5cc55ad1e69c9f4714f4fa0303a557bde1"}]}, 0x140}, 0x1, 0x0, 0x0, 0x40040080}, 0xc004) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000640)={&(0x7f0000000480), 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xec, r9, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x64}}}}, [@NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff3c}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xc6}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xdc}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0x84, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_IE={0x69, 0x3, "f5a00433398fe80bd7535cc8bc77565f30e587cdda1c9b2c5c420eb048ff8237da01e22b12c0809fd2dd77ae966a05e9f1965097f735c33fcc0f1657fef397728b6eef883c7e3061572bf517e14558289a952c8153dde7c8731a7115a8f654f77ed360c0a3"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000895) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x64}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008940}, 0x1) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) [ 2349.331645] blktrace: Concurrent blktraces are not allowed on sg0 [ 2349.335520] blktrace: Concurrent blktraces are not allowed on sg0 [ 2349.347031] blktrace: Concurrent blktraces are not allowed on sg0 15:11:08 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) r1 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x200, 0xfa5d}}, './file0\x00'}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000340)={{r0}, r3, 0x2, @inherit={0x68, &(0x7f00000002c0)={0x1, 0x4, 0x4, 0x7f, {0x22, 0x0, 0x4, 0x6, 0x9f9}, [0x7, 0x7fff, 0x1, 0xe3b8]}}, @subvolid}) 15:11:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f00000000c0)={0xa271, 0x101, 0xeb, 0x7ff, 0x0, "2cd81d54a71d4e15f2696031d653e02c7c0a36", 0x9, 0x9}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = dup2(r4, r0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) 15:11:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x80000000, 0x0) r2 = dup2(r1, r0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={'\x00', 0x4, 0xfffffffe, 0x6f7e9d48, 0x0, 0x7}) 15:11:08 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000140)=0xffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48, 0x0, 0x936}) ioctl$TCSBRKP(r3, 0x5425, 0xfff) 15:11:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ppoll(&(0x7f00000000c0)=[{r1, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x99}, {r0, 0x4}, {0xffffffffffffffff, 0x440}], 0x6, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:11:08 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:11:08 executing program 7: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x100}}, './file0\x00'}) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000080)={0xfff, 0x3f, 0x2, 0xaaf6, 0x2, 0x5}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r2, r1) 15:11:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_dump={0x11, 0x0, 0x0, 0xfd, "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"}}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r2, r3, r0, r1, r4], 0x5) r5 = dup2(r1, r0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) [ 2359.046082] blktrace: Concurrent blktraces are not allowed on sg0 [ 2359.053288] blktrace: Concurrent blktraces are not allowed on sg0 [ 2359.065130] audit: type=1326 audit(1762787468.132:272): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=31687 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f9de4b19 code=0x0 [ 2359.075872] blktrace: Concurrent blktraces are not allowed on sg0 [ 2359.086882] audit: type=1326 audit(1762787468.152:273): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=31691 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 [ 2359.103106] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2359.110284] blktrace: Concurrent blktraces are not allowed on sg0 15:11:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ppoll(&(0x7f00000000c0)=[{r1, 0x4000}, {0xffffffffffffffff, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x99}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x440}], 0x6, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:11:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) 15:11:08 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x8477, 0x400000) ioctl$CDROM_SELECT_SPEED(r1, 0x5322, 0x401) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TCSBRK(r1, 0x5409, 0xdfb3) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="11000000000000000006000000000000"]}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0x4000200a}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) 15:11:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48, 0xab6b, 0x2000000000000000}) 15:11:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCNXCL(r1, 0x540d) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) [ 2359.315768] blktrace: Concurrent blktraces are not allowed on sg0 [ 2359.335131] blktrace: Concurrent blktraces are not allowed on sg0 [ 2359.348232] blktrace: Concurrent blktraces are not allowed on sg0 15:11:08 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) [ 2359.367284] blktrace: Concurrent blktraces are not allowed on sg0 15:11:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_pts(r0, 0x242000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000000c0)="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") 15:11:08 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) clone3(&(0x7f0000001300)={0x1a4000000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0, {0x2c}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000000180)=""/209, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48, 0x7, 0x0, r3}) [ 2359.479617] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2359.560835] blktrace: Concurrent blktraces are not allowed on sg0 [ 2359.622791] blktrace: Concurrent blktraces are not allowed on sg0 [ 2359.920323] audit: type=1326 audit(1762787468.988:274): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=31691 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 15:11:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ppoll(&(0x7f00000000c0)=[{r1, 0x4000}, {0xffffffffffffffff, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x99}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x440}], 0x6, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:11:17 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x3}, 0xcc03, 0x0, 0x55e38f36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() ptrace(0x10, r0) r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x10000, 0x1) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x3, 0x6, 0x3, 0x4, 0x0, 0xe1, 0x51012, 0x10, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xdc60, 0x4, @perf_bp, 0x2249, 0x1, 0x9, 0x9, 0x4, 0xffffff00, 0xffff, 0x0, 0x5}, r0, 0xc, r1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x40, 0x3, 0x0, 0x8, 0x0, 0x6, 0x40, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000001c0), 0x2}, 0x8280, 0x0, 0x1, 0x3, 0x40, 0x7, 0x8194, 0x0, 0x1, 0x0, 0x1f}, r0, 0xa, 0xffffffffffffffff, 0x0) 15:11:17 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:11:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x2}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) 15:11:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x40000000, 0x80000) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x4) dup2(r1, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={'\x00', 0xfffd, 0x1, 0x6e7e9d46, 0x3, 0x7}) 15:11:17 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0x5, 0x2, 0x8de, 0x3, 0x38, "9c12cce0964dd2f1447262a8bb395846c28279", 0x17a, 0x55b}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) fcntl$setstatus(r3, 0x4, 0x2c00) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48, 0xe1}) 15:11:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x4080) r2 = dup2(r1, r0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = dup2(r4, r3) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000300)={0xa3, "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"}) 15:11:17 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) r1 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x200, 0xfa5d}}, './file0\x00'}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) [ 2368.633084] blktrace: Concurrent blktraces are not allowed on sg0 [ 2368.638126] blktrace: Concurrent blktraces are not allowed on sg0 15:11:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000000c0)=0x1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) [ 2368.679863] audit: type=1326 audit(1762787477.745:275): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=31956 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f9de4b19 code=0x0 15:11:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000000c0)) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = dup2(r4, r3) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x84801, 0x0) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="610000007d010000004200bf920800000008000000000500000000000000000011410200000002000000060000000000002cef000f002f6465762f736e642f74696d6572000000000000000a006d61705f66696c657300", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0xee01], 0x61) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbff, 0x8000}, 0xc, &(0x7f0000001880)=[{&(0x7f0000000600)={0x11c8, 0x31, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x195, 0x48, 0x0, 0x1, [@typed={0x8, 0x41, 0x0, 0x0, @u32}, @generic="f398cd9da2adc2eaee707bafdfd5ec65854f709ddbfbe6bbc4f01fe262e0bc251a44905b89503d75e578a23bdcb3f72eba062f6eeab3fdd95805cde6a5b75cfda52f4a58a1ad3d5940f677876a4f575537f182383032db8969bfc4074070ef2da6f46907faad2ddf7bef8fe60137fba3eb80ca81ebfbd81590b279ade09c3b91048ab5e106a81510a468852e906529cdcdc3ee55ca09ea86a47d7332c2336238970fae1a039c8f8557f7b358d4271dc960e3d2247460cd5a180d64ac6391dd2f9c947aa1b7", @typed={0x4, 0x57, 0x0, 0x0, @binary}, @typed={0x4, 0x39}, @typed={0xc, 0x71, 0x0, 0x0, @u64=0x5}, @typed={0x5, 0x71, 0x0, 0x0, @str='\x00'}, @generic="d265c5ac5c5e9d8f8d9af131971d0a821be91139786eb7ae488c45147bfb7096d681f23cabf1521984eb419211a726ac63fa269592404574a83173cdf7103ff3559a82ce4f6c27c444d0e82abdf58b0b88741a8aee90958ad55f571450d46c28e0004096cda241d272140157a2b9d435fd36df2c66c1c0e1f69ac657541d024c8e5e428e021050157ebab3192c7b42ff89f82d4cb0763b72", @typed={0x10, 0x15, 0x0, 0x0, @str='/dev/random\x00'}]}, @nested={0x101d, 0x81, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @pid}, @generic="dc7507cd2e", @typed={0x8, 0x70, 0x0, 0x0, @pid}, @typed={0x1004, 0xf, 0x0, 0x0, @binary="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"}]}]}, 0x11c8}, {&(0x7f0000001800)={0x74, 0x2e, 0x10, 0x70bd2a, 0x25dfdbfb, "", [@generic="bbae17b45662da2753e57e93dc6a237d2cf306f9d21c66287a4805a982f810ca07deda61de1434f8fb84cb6e111987748ddeaf5b824edc22cc0c799d6a640940dc0c943fed7c7f381ef78c423d92cbe3d1d2d51fae1858df826a7737277c89dd72"]}, 0x74}], 0x2, &(0x7f0000001980)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r4, r4, r3, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, 0xee00}}}], 0x78, 0x20000894}, 0x44) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r8, {r9}}, './file0\x00'}) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) r10 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r10, 0xf507, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2282, &(0x7f0000000100)) [ 2368.694586] blktrace: Concurrent blktraces are not allowed on sg0 [ 2368.708289] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2368.718278] blktrace: Concurrent blktraces are not allowed on sg0 [ 2368.725255] blktrace: Concurrent blktraces are not allowed on sg0 [ 2368.734556] blktrace: Concurrent blktraces are not allowed on sg0 [ 2368.756753] blktrace: Concurrent blktraces are not allowed on sg0 [ 2368.773706] audit: type=1326 audit(1762787477.838:276): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=31953 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 [ 2368.781282] blktrace: Concurrent blktraces are not allowed on sg0 [ 2368.787734] blktrace: Concurrent blktraces are not allowed on sg0 15:11:17 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0xffffffffffffffff, 0x791300) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3}, @NL80211_ATTR_MESH_SETUP={0x18, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x3f}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}]}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x880}, 0x20004004) r4 = dup2(r1, r0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) r5 = syz_open_pts(r4, 0xa00) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000000c0)={0x0, 0x4, 0x1, 0x80}) 15:11:17 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) 15:11:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f00000000c0)) 15:11:17 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0xf8, 0xc4, 0x20, 0x40, 0x0, 0x4d, 0x20000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0xd}, 0x2011, 0x1, 0x9, 0x2, 0x0, 0x3, 0xa906, 0x0, 0x1, 0x0, 0x20}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.allow\x00', 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) r7 = dup2(r6, r0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) [ 2368.859095] blktrace: Concurrent blktraces are not allowed on sg0 [ 2368.866054] blktrace: Concurrent blktraces are not allowed on sg0 15:11:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) io_setup(0x7, &(0x7f00000000c0)=0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000440)=@ethtool_dump={0x11}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="7ffff1575c3edf243de92c935d34f8a87a2c77f908fd83d525"]}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r9 = dup2(r8, r7) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) io_submit(r3, 0x3, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2, r4, &(0x7f0000000100)="31c0c36cf60000df438bfcbb3b73220bf90f6f74c47da856e5c2cb9832e91cd4c53b7c05d543c96305bae33ec3dca99b5ce739bc002e486739958f2b195cde4a9da0b29ec6e19850f2688cb8c8133347027eacecf2ce4ca6bf343e8b0b881afbe6", 0x61, 0x5, 0x0, 0x2, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x3, r5, &(0x7f00000001c0)="91cd2e46e8dbf4f238b6175cf65831dac80335032cf7e186813d70897b1c3ed8e4ca3a70a5ceace87b7a755822b1f89dce6cc089a39dcc631cfedcf95b3ccf527dbcd701b8935ff48475f1c8776b1d2f97b55dca1c18e123673562068e9f4517debcb87101f4e999c17f8944f3cef4bcb755d4dbe6dc84ea211c9971c61c58c8d172639e970505d1270dc94a10a34574cbed6ed250dfc8e73f5b741d3bb361382caa8eac4dbb43771125c3a9c4876258", 0xb0, 0x9, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x9, r6, &(0x7f0000000300)="0b6620f6d277806fdb779111d54e91485109d9804f29081aba23317465ec5f3536be182c52260d99111435ad47d3e2341d007e14a381442fe2c976491b5b6cd9d36cb317b907399058466ed6a7a7fc5cecfe791ba631a359b46afea38f31699c06c5969462e1cdc5af83", 0x6a, 0x9, 0x0, 0x3, r9}]) 15:11:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000006200)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0}}], 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f00000000c0)) dup2(r2, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff7, 0x1, 0x6f7e9d48, 0x65f, 0x3}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f00000001c0)="c8bf0de1ac9930f96eff61820486d2b8a3efc64d45cfd07e71", 0x19, 0xfffffffffffffffa}, {&(0x7f0000000300)="46d1fa11486e2b7ac1b4e9c8d8a2a71150f3cce5503c2dfe1fce6a61374fd8a0fe369fc2f737fbb1957372cc9eff9c27bc0e9611084e9d38944d345854bb5f95250634b5bd526a14bd8989429e3a3e24cea93bda7b99476e4097dfb8d8b062756ec895df2aad0846b4394696a546aca48c1b8e2826b18b854b80dec752cf6e77b98c23e1e49989bcda20056b701c29fbd1bc3510d1a3d6b176e0ba3ab0ff9cfec6c2f2babbd4b0ba29cce2f99f7d40854de98c17f9058266f6103038bca17a226c9f6a201850519b01234b9cdb30b5ff4015fd1679142048e76001c5be78ce76a11d239cdcca2ddc318e4cfdca2b596b0e2c382d0383d3677bf02741ffca6f", 0xff, 0x85}, {&(0x7f0000000400)="82738b8dcda9667d500034d6eb8283d61eb1736044ca2ddd794b5e29439b1c71758b1d4ca2d2c024324897309375075741a590a34b7437c885818f228774cab77dc586e72e0ccc2152a15df0e1435bc4b09c07bc4d5bf8a4071e00eb4f4a7ad4c7d8cc0e9f4bd9559b5cac7864262e1e6722f18b6060daeb528d3f11e131586102947fce049922c6907f75ae508df600305ada8969a577dd170ca52cb2c52533b6fe37de1667e4f736a2f7b4f7613a2afb6378897b44d94e108b05e24608e2b36df3d01b0c720fe856985595bd09f504eb3d720001c52589bb6ee8", 0xdb, 0x1ff}], 0x80c02, &(0x7f0000000500)={[{@mpol={'mpol', 0x3d, {'interleave', '', @void}}}, {@huge_never}, {}, {@nr_blocks={'nr_blocks', 0x3d, [0x2d, 0x39, 0x32, 0x33, 0x37, 0x39]}}, {@huge_always}], [{@smackfsfloor={'smackfsfloor', 0x3d, '!'}}, {@audit}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@smackfshat={'smackfshat', 0x3d, '\x1f'}}]}) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000280)) dup2(r4, r3) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000100)) [ 2368.963419] blktrace: Concurrent blktraces are not allowed on sg0 [ 2368.993476] blktrace: Concurrent blktraces are not allowed on sg0 [ 2369.014717] blktrace: Concurrent blktraces are not allowed on sg0 [ 2369.015895] blktrace: Concurrent blktraces are not allowed on sg0 [ 2369.058429] loop3: detected capacity change from 0 to 16383 [ 2369.080257] blktrace: Concurrent blktraces are not allowed on sg0 15:11:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:11:28 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x600000) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x44a800, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) pidfd_getfd(r3, r4, 0x0) 15:11:28 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:11:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ppoll(&(0x7f00000000c0)=[{r1, 0x4000}, {0xffffffffffffffff, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x99}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x440}], 0x6, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:11:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = dup2(r2, r0) mq_notify(r3, &(0x7f0000000200)={0x0, 0x28, 0x4, @thr={&(0x7f00000000c0)="5e0cbd1c789a64e05ff46c4998d30451277c4899a2323a045d77ecd88b3b1ea3af60d7c491d9ef908bfc8896fae89e475f7e6aedaf37ecd38a642f47cdc4353300bba1b489b99c78c3a8c9458653e721c6f93366cb96b60f8e78dd52c0cc822262ffa8ef6342f91ed027e9666a9fb42c94d18d2e334cbb22eb7be9c9747a7a3a2f46c6d025f1a8e31d2bc0f746f17eba5b495a25fcf27c3f1543084727e2718f304015d9f1d6", &(0x7f0000000180)="ad4f1f5defc2a091af6084a1d08efd5ecbe42c2ad29495214241b58ac42158fd1237f85dbe4b0fab8d456e01992bd29c764bcfda2456bb443cf5c18c302b3d4b3527a9ab6a41f8b433f45ff7e005aae2"}}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="1100b9e30000f000200000800000000484ed05dd69ff5c8d00000000faf4e38c42f742c975fa71a6cac45fc50aaead5c91314aa186f1531494996fa2002af8b4b385911ab0a6d624ed1c6f2817cab977168c80da772aa62515f5ddcc87259197002e473dc1965e17"]}) dup2(r5, r0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000340)={0x398, 0x4264, 0x1, 0xd19, 0x23, "1a3f398ec08e2e0000000000000100", 0xfffffff7}) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r6, r4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x4) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r9 = dup2(r8, r7) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) r10 = openat$sr(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000040)={'\x00', 0xac, 0x1, 0x6f7e9f48, 0xfffffffffffffffd, 0x1}) 15:11:28 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x3, 0x3}]}) 15:11:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x80202) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) 15:11:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x513100, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) [ 2379.262467] audit: type=1326 audit(1762787488.329:277): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32110 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f9de4b19 code=0x0 [ 2379.265523] blktrace: Concurrent blktraces are not allowed on sg0 [ 2379.274712] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2379.279993] audit: type=1326 audit(1762787488.337:278): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32115 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 [ 2379.280717] blktrace: Concurrent blktraces are not allowed on sg0 [ 2379.309290] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2379.321532] blktrace: Concurrent blktraces are not allowed on sg0 15:11:28 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000080)={@loopback, r2}, 0x14) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="0f5c72560ecedc0b12810f6978a0de99f649e8582804370505e9d04e5ad86f857e80849fdab3d5f1e0c71f86d75818887e88aa6e5a6592dfdc691d9709b195ddebe270f1d2aee1be7788011a4b98c34b76de54023a70597e4422536cd83ec07015e4c773f79422b42725ebcf9d52ab6d61ec506d3d13b29cd1844332e599dd8a82f5a48a396e8c3287de1657fc0f6bc97ece65f90cb1c12043ed3c27e2c9e84af5d9ea2294f2951795c7d1308da8cc2d9df4586326c627361c71", 0xba, 0x44004, &(0x7f0000000180)={0x11, 0x1b, r2, 0x1, 0x20, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x14) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', r2, 0x29, 0x1, 0x85, 0x7, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x80, 0x7, 0xc95f, 0x5}}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={@local, 0x2e, r5}) r6 = dup2(r4, r3) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) 15:11:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) dup2(r1, r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r2) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000240)=0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r6, r5) r7 = getpid() r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r9 = dup2(r8, 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x4, 0x7ff, 0x6f7e9d48, 0x0, 0xfffffffffffffffe}) ioctl$TCSETAW(r9, 0x5407, &(0x7f0000000300)={0x8, 0x1, 0x79df, 0x2, 0x7, "d8f9131dc344f8dc"}) pidfd_open(r7, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={'\x00', 0x3, 0x1, 0x7, 0x9, 0x100000000000000, r7}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000280)=0x57) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000000c0)) 15:11:28 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x0, 0xfffffffffffffffe, 0x9b, 0x40, @buffer={0x0, 0x4e, &(0x7f00000000c0)=""/78}, &(0x7f0000000140)="7d7de25628b43bebf3cee50421f3f9b82b61bd52ed7963a61c92f8c67a69277a5b42ee7cdbf1266baede6796bb71d1aac2c18a20fd0b80d1560919b15e1c24a50d0c32a7fb3900c090ae46c4d1d2ff33552dbccf5c912d90b1fedd244cbb81edbdc1134f1a757e24a6604ca259a572cce0b2572284764785b8a5cd0556b883f07ecd9e71d1f88b0e1d0dfc7668c2d619312749a5dcb0e4fbd514ab", &(0x7f0000000300)=""/4096, 0x1000, 0x10000, 0x0, &(0x7f0000000200)}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000001300)={'\x00', 0x0, 0x1, 0x6f7e9d48}) [ 2379.390164] blktrace: Concurrent blktraces are not allowed on sg0 15:11:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:11:28 executing program 5: getpeername$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000000)=0x6e) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) [ 2379.452072] blktrace: Concurrent blktraces are not allowed on sg0 [ 2379.468757] blktrace: Concurrent blktraces are not allowed on sg0 [ 2379.472445] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2379.507349] blktrace: Concurrent blktraces are not allowed on sg0 [ 2379.515724] audit: type=1326 audit(1762787488.583:279): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32139 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 [ 2379.515941] blktrace: Concurrent blktraces are not allowed on sg0 [ 2379.530987] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2379.547667] blktrace: Concurrent blktraces are not allowed on sg0 15:11:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'macvlan0\x00', &(0x7f0000000100)=@ethtool_dump={0x11, 0x0, 0x0, 0x25, "27a1acddcfdc8d8167c405d056a8a85313da16f891833632349fec42193e9f000000000000"}}) r3 = dup2(r0, r1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) 15:11:28 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r3, r2) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f00000000c0)={0x400, 0x2, 0xfffffff8, 0x7, 0x0, "65df5c4c1401607d088d799d42bb52d4834b39", 0x8000, 0xfffff427}) r4 = dup2(r1, r0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) [ 2379.627632] audit: type=1326 audit(1762787488.693:280): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32139 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 15:11:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x2081, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) socket$netlink(0x10, 0x3, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x60000, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000001c0)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x6}) openat$cgroup_procs(r4, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) r7 = dup2(r1, r0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) [ 2379.788219] blktrace: Concurrent blktraces are not allowed on sg0 [ 2379.848864] blktrace: Concurrent blktraces are not allowed on sg0 [ 2379.979692] blktrace: Concurrent blktraces are not allowed on sg0 15:11:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) 15:11:38 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:11:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x99}, {r0, 0x4}, {0xffffffffffffffff, 0x440}], 0x6, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:11:38 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) r2 = dup2(r1, r0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="1100"/16]}) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f00000000c0)=0x1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f00000003c0)="b29b56e515bc16e7b60c04d66b13ac8eb2016d780c4d777d2a11114b6dfda5f9aad7ac050b24052fd194148d7bedb2ffa1c896f5f4209170c2f31177f7a69d929d777bf579198527ff336e8711983689ff33b4e4a691f5164e06c41f6ab6218ad4783c5e3eb7ee223b0e7e857b75d28688106d49b024874ca388827424d338a5ebace32aeae77105030000005092f5efc1f71ea616c4f474aac074aa0e269c565766f097e0feb5d1adc2360385dcb36645dd9884c6", 0xb5}, {&(0x7f0000000180)="98e3ebaafcd69fdc3d514503f086c55217a78b924bfae9a0c92a501f6821b9571c67da997c6b612d321766f937a9f3d2d001000000000000437dcb714caf13e1219f8482f3d023309fbcfc5d4925e2d4b37388c3bc2cea004553ea2ccfe82c5225bc41b298c9390563d8c0ca0b9446e0628618105f53a8445c852bc7844aa336e9d789329f16871329114f9072c4", 0x8e}, {&(0x7f0000000300)="956fb0aee44c0486cd9f5c126279c7cc9a10bec385e9457ec2eca53be3f2de65a5110060a16a9df53e944efd5cc5abec154d58de77a6f8a7a28c898ec6c2a9336fadac0c69dd4967b33f3dc1dd5b03945b194c2efa570a4e3ec77f62c293d1f09fedbc8ce8cbd6dbacfb8290710d228ccf8b31eaef036f3747bbd5bfb513ac258e99ba50040c9bb556c3e17d6b", 0x8d}], 0x3, 0x24, 0x178, 0x1) 15:11:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) ioctl$TCFLSH(r4, 0x540b, 0x0) r5 = dup2(r1, r0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) 15:11:38 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:11:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) 15:11:38 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) dup2(r1, r2) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000000)) [ 2389.591101] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2389.593160] blktrace: Concurrent blktraces are not allowed on sg0 [ 2389.609979] blktrace: Concurrent blktraces are not allowed on sg0 [ 2389.610165] audit: type=1326 audit(1762787498.675:281): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32282 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f9de4b19 code=0x0 [ 2389.611683] blktrace: Concurrent blktraces are not allowed on sg0 [ 2389.616070] blktrace: Concurrent blktraces are not allowed on sg0 [ 2389.625060] blktrace: Concurrent blktraces are not allowed on sg0 [ 2389.625716] audit: type=1326 audit(1762787498.675:282): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32281 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 [ 2389.626217] blktrace: Concurrent blktraces are not allowed on sg0 [ 2389.631315] blktrace: Concurrent blktraces are not allowed on sg0 [ 2389.647542] blktrace: Concurrent blktraces are not allowed on sg0 [ 2389.654254] blktrace: Concurrent blktraces are not allowed on sg0 15:11:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000000c0)=0x1) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) r3 = dup2(r0, r2) dup(r3) 15:11:38 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0x9) close_range(r3, r0, 0x2) 15:11:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000000c0)) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) 15:11:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x8, 0x200000) fcntl$setstatus(r0, 0x4, 0x60400) r3 = dup2(r2, r0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d4d, 0xffffffffffffffff, 0x80000000}) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000100)=0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) ioctl$DVD_WRITE_STRUCT(r6, 0x5390, &(0x7f0000000300)=@copyright={0x1, 0x2, 0x5, 0x7}) [ 2389.761446] blktrace: Concurrent blktraces are not allowed on sg0 [ 2389.764393] blktrace: Concurrent blktraces are not allowed on sg0 [ 2389.772065] blktrace: Concurrent blktraces are not allowed on sg0 15:11:38 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) [ 2389.798704] blktrace: Concurrent blktraces are not allowed on sg0 [ 2389.802880] blktrace: Concurrent blktraces are not allowed on sg0 15:11:38 executing program 0: syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x41c082) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) [ 2389.821607] blktrace: Concurrent blktraces are not allowed on sg0 15:11:38 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000900)={'\x00', 0x78c, 0x0, 0xc34, 0x7f, 0x7f}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = dup2(r4, r0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) r6 = syz_open_dev$loop(&(0x7f00000007c0), 0x100000001, 0x60001) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000008c0)=ANY=[@ANYBLOB="0100000f0b92e76c211a24172961021c74190001000000ff030000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000740)={0x53, 0xffffffffffffffff, 0x1b, 0xeb, @scatter={0x7, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/50, 0x32}, {&(0x7f0000000140)=""/242, 0xf2}, {&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000000280)=""/17, 0x11}, {&(0x7f0000000300)=""/209, 0xd1}, {&(0x7f0000000400)=""/174, 0xae}, {&(0x7f00000004c0)=""/97, 0x61}]}, &(0x7f00000005c0)="48382115c97c32e61a794233b971f9211ad9b250540a92a871ebf9", &(0x7f0000000600)=""/203, 0x7fff, 0x4, 0x0, &(0x7f0000000700)}) ioctl$LOOP_GET_STATUS(r6, 0x4c03, &(0x7f0000000800)) [ 2389.878933] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2389.894176] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2389.911212] blktrace: Concurrent blktraces are not allowed on sg0 [ 2389.915464] blktrace: Concurrent blktraces are not allowed on sg0 [ 2389.929874] blktrace: Concurrent blktraces are not allowed on sg0 15:11:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x203) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000080)) ioctl$TIOCL_SETSEL(r2, 0x4b4a, 0x0) r3 = dup2(r1, r0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000140)={'\x00', 0x1, 0x2, 0x6f7e9d48, 0x0, 0x3}) 15:11:48 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:11:48 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x4001, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x3, 0x8000, 0x401}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) r2 = eventfd(0x400) copy_file_range(r1, &(0x7f0000000000)=0x1, r2, &(0x7f0000000100)=0x4, 0x400, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) signalfd(r3, &(0x7f0000000140)={[0x8001]}, 0x8) 15:11:48 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x1, 0x1, 0x6f7e9d48, 0x2, 0x100000000}) 15:11:48 executing program 1: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000, 0x5}}, './file0\x00'}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x5, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) 15:11:48 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:11:48 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000140)={0x789000000, 0x0, [0x6850, 0x3, 0x1, 0x8], &(0x7f0000000100)}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = dup2(r2, r1) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) ioctl$TCGETA(r3, 0x5405, &(0x7f00000000c0)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000100)) r5 = dup2(r4, r0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) 15:11:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x99}, {r0, 0x4}, {0xffffffffffffffff, 0x440}], 0x6, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) [ 2399.598061] blktrace: Concurrent blktraces are not allowed on sg0 [ 2399.599590] blktrace: Concurrent blktraces are not allowed on sg0 [ 2399.602763] audit: type=1326 audit(1762787508.660:283): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32428 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f9de4b19 code=0x0 15:11:48 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x101000) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) [ 2399.627017] audit: type=1326 audit(1762787508.662:284): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32429 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 [ 2399.661894] blktrace: Concurrent blktraces are not allowed on sg0 [ 2399.663403] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 15:11:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="1100000000000000000000000000000079d7a3831c8c5dd3256f1f48faed200331fa1f5a4689009ecc9d3054990ac163f0013ca23536a7a437ce337ac3a9dae8166e51a3ebac132b8a7486e000bea904a09cc02676e8c9a8842fb53928ab23bed8fbdc0abb9643b8c451bf6d228542ff455baf371c28e68dcb2f9aa953e731d98c9a30ae29814abf155f21affc9d17fbd3a95ac9822bcba7b8c4ec1cf6c332be1a11f0ce0be082d12edb7dbed97e1b75755e15430e5d6cb5f41104e1d9a7511c8412774ed42645097c595c8ea3617acc97e2cf1f2058f640529648c4c4bfd9a1cd07478884d6a8b11d76ed2d468318b8c2"]}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="ba000000ff010000ff7f0000f9b1fecd4433403ebf036b1dbad4bc5a0eee2b606a0f5f8c73993316d4f36d93988f1eca8d36bbda2b6504925c61eef5bb4bd164affcdd37993c02afbc9a98aab8c386e931ecf67f4a612a2ae9d842c4d80f8655cccc88cae063e13ac379062863e3abb0d1eabe0ce5a7dc5bd770831640d3e49b37843d8c3fa12db0485dd6ecc3cb1e45b765a8cdc59bc6fc9f6b1405144c3ef73671f4a12e433f90ad43b8a2bc408719671555fdde2b617c01bb47db2b3e203c7db83cd053c8"]) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x4001, 0x0) r6 = dup2(r3, r5) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0x7) syz_open_pts(r5, 0x4002) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'veth0_to_hsr\x00', &(0x7f0000000000)=ANY=[@ANYRES16]}) fsetxattr$security_capability(r7, &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0x7f, 0xd25}, {0x0, 0x9c1}]}, 0x14, 0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x1f) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000500)=0x3f) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="15000000750000007d39c5f2978d72ce2af50d"]) [ 2399.742093] blktrace: Concurrent blktraces are not allowed on sg0 15:11:48 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0x3, 0xff, 0x9, 0x1, 0x12, "4185bab35cef6ad2"}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = dup2(r2, r0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) 15:11:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) dup2(r1, r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r2) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000240)=0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r6, r5) r7 = getpid() r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r9 = dup2(r8, 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x4, 0x7ff, 0x6f7e9d48, 0x0, 0xfffffffffffffffe}) ioctl$TCSETAW(r9, 0x5407, &(0x7f0000000300)={0x8, 0x1, 0x79df, 0x2, 0x7, "d8f9131dc344f8dc"}) pidfd_open(r7, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={'\x00', 0x3, 0x1, 0x7, 0x9, 0x100000000000000, r7}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000280)=0x57) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000000c0)) [ 2399.807623] blktrace: Concurrent blktraces are not allowed on sg0 15:11:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) r3 = socket$nl_generic(0x10, 0x3, 0x10) open_by_handle_at(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="280000004e0000006a000000000000010000006b0400000000000000a800000400000000000000"], 0x301402) [ 2399.839908] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2399.860744] blktrace: Concurrent blktraces are not allowed on sg0 [ 2399.878985] blktrace: Concurrent blktraces are not allowed on sg0 15:11:48 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) [ 2399.906134] blktrace: Concurrent blktraces are not allowed on sg0 [ 2399.939135] blktrace: Concurrent blktraces are not allowed on sg0 [ 2399.969194] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 15:11:49 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x70d946, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r0, r0) 15:11:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x2, 0x6f7e9d48}) [ 2400.011345] blktrace: Concurrent blktraces are not allowed on sg0 15:11:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) dup2(r1, r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r2) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000240)=0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r6, r5) r7 = getpid() r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r9 = dup2(r8, 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x4, 0x7ff, 0x6f7e9d48, 0x0, 0xfffffffffffffffe}) ioctl$TCSETAW(r9, 0x5407, &(0x7f0000000300)={0x8, 0x1, 0x79df, 0x2, 0x7, "d8f9131dc344f8dc"}) pidfd_open(r7, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={'\x00', 0x3, 0x1, 0x7, 0x9, 0x100000000000000, r7}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000280)=0x57) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000000c0)) [ 2400.048831] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2400.056108] blktrace: Concurrent blktraces are not allowed on sg0 [ 2400.447688] audit: type=1326 audit(1762787509.515:285): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32429 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 15:11:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) dup2(r1, r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r2) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000240)=0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r6, r5) r7 = getpid() r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r9 = dup2(r8, 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x4, 0x7ff, 0x6f7e9d48, 0x0, 0xfffffffffffffffe}) ioctl$TCSETAW(r9, 0x5407, &(0x7f0000000300)={0x8, 0x1, 0x79df, 0x2, 0x7, "d8f9131dc344f8dc"}) pidfd_open(r7, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={'\x00', 0x3, 0x1, 0x7, 0x9, 0x100000000000000, r7}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000280)=0x57) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f00000000c0)) 15:11:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)={0x28, 0x10, 0x3, 0x0, 0x0, "", [@nested={0x4}, @nested={0x4}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x4}, @typed={0x8, 0x2e, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x1, 0x85e, 0x0, 0x80, 0x5}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) 15:11:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x99}, {r0, 0x4}, {0xffffffffffffffff, 0x440}], 0x6, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:11:58 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x38, 0x5, 0x9, "6c451b9c86cadf54c355584b9ae2a47626193bcb91b161badf727fdf192f261bede6520cc0b5b7bc1ea2dee60e75525078d5c5553af61b54"}) r2 = dup2(r1, r0) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000200)) r3 = openat$cgroup_devices(r2, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000180)=@ethtool_dump={0x3e, 0x2, 0x0, 0x32, "f7354b774afa4b937fd347830297fc76968ce588da11c99305db7d77e84ef0a3cb23e36d911c1772bb48cdd05e7caad8d14f"}}) dup3(r3, r4, 0x80000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) dup(r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x2300) r8 = dup2(r7, r6) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000240)=[r1], 0x1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) 15:11:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:11:58 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:11:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x203) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000080)) ioctl$TIOCL_SETSEL(r2, 0x4b4a, 0x0) r3 = dup2(r1, r0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000140)={'\x00', 0x1, 0x2, 0x6f7e9d48, 0x0, 0x3}) 15:11:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) dup(r1) r2 = dup2(r0, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) [ 2409.268890] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2409.312055] audit: type=1326 audit(1762787518.376:286): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32690 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f9de4b19 code=0x0 [ 2409.316930] program syz-executor.7 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2409.323688] blktrace: Concurrent blktraces are not allowed on sg0 [ 2409.325205] blktrace: Concurrent blktraces are not allowed on sg0 [ 2409.329059] audit: type=1326 audit(1762787518.386:287): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32695 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 [ 2409.330471] program syz-executor.7 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2409.332511] blktrace: Concurrent blktraces are not allowed on sg0 [ 2409.348098] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 15:11:58 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x420901, 0x0) syz_open_pts(r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x6e, 0x220000) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000180)) r2 = dup2(r0, r0) signalfd4(r2, &(0x7f0000000140)={[0xb32]}, 0x8, 0x800) open_by_handle_at(r2, &(0x7f00000001c0)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x80, 0x8, 0x800, 0x3}}, 0x831e4b0725125bde) r3 = dup2(r1, r0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x81) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) 15:11:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) dup2(r1, r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r2) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000240)=0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r6, r5) r7 = getpid() r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r9 = dup2(r8, 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x4, 0x7ff, 0x6f7e9d48, 0x0, 0xfffffffffffffffe}) ioctl$TCSETAW(r9, 0x5407, &(0x7f0000000300)={0x8, 0x1, 0x79df, 0x2, 0x7, "d8f9131dc344f8dc"}) pidfd_open(r7, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={'\x00', 0x3, 0x1, 0x7, 0x9, 0x100000000000000, r7}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000280)=0x57) 15:11:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x140, 0x39, 0x100, 0x70bd2c, 0x25dfdbf8, {0xa}, [@nested={0x84, 0x55, 0x0, 0x1, [@typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="b46ce315e1fbb98abe1454ab1d6bb1760215822ef8423f6698e947700bd03a08379fb1f574c3cf1e47354b27611eba816634a616d233dc89c8f89061", @typed={0x8, 0x8e, 0x0, 0x0, @ipv4=@private=0xa010102}, @typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x4, 0x81}, @generic="6b2389ccbc180e26647d2bbc46d549aa"]}, @nested={0x85, 0x17, 0x0, 0x1, [@generic="268ad7069e12fa9c009828f7fc6c42a77c7a907a441b71bde609d677351112755ba6a90f46d1d391cd9bea456914780c3531ac82df06fc00c8b665140a7af5ab1616b937b64e0040b684ace5f95771f37ce5fbba292ea2b8aa3334f42322e0df3a9ef75f3a50246ea4065413ef4642a47fe73f4573f6013dd8c421c58a9bf0b3cf"]}, @typed={0x1d, 0x75, 0x0, 0x0, @binary="78528aef6617b71b5cc55ad1e69c9f4714f4fa0303a557bde1"}]}, 0x140}, 0x1, 0x0, 0x0, 0x40040080}, 0xc004) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000640)={&(0x7f0000000480), 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xec, r9, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x64}}}}, [@NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff3c}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xc6}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xdc}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0x84, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_IE={0x69, 0x3, "f5a00433398fe80bd7535cc8bc77565f30e587cdda1c9b2c5c420eb048ff8237da01e22b12c0809fd2dd77ae966a05e9f1965097f735c33fcc0f1657fef397728b6eef883c7e3061572bf517e14558289a952c8153dde7c8731a7115a8f654f77ed360c0a3"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000895) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x64}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008940}, 0x1) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) [ 2409.421618] blktrace: Concurrent blktraces are not allowed on sg0 [ 2409.427653] audit: type=1326 audit(1762787518.495:288): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32695 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 [ 2409.482380] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2409.510786] blktrace: Concurrent blktraces are not allowed on sg0 15:11:58 executing program 3: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000001}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/cpufreq', 0x400341, 0x100) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)={0x40000000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) [ 2409.557564] blktrace: Concurrent blktraces are not allowed on sg0 [ 2409.576173] blktrace: Concurrent blktraces are not allowed on sg0 15:11:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) dup2(r1, r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r2) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000240)=0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r6, r5) r7 = getpid() r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r9 = dup2(r8, 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x4, 0x7ff, 0x6f7e9d48, 0x0, 0xfffffffffffffffe}) ioctl$TCSETAW(r9, 0x5407, &(0x7f0000000300)={0x8, 0x1, 0x79df, 0x2, 0x7, "d8f9131dc344f8dc"}) pidfd_open(r7, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={'\x00', 0x3, 0x1, 0x7, 0x9, 0x100000000000000, r7}) 15:11:58 executing program 7: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x1b7a02, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) 15:11:58 executing program 5: r0 = getpid() r1 = pidfd_open(r0, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfc75, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r0, 0x0, 0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) open_by_handle_at(r1, &(0x7f0000000000)=@reiserfs_3={0xc, 0x3, {0x83f, 0xffff, 0xfffffdfd}}, 0x7011c0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000180)) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x8, 0x6, 0x5, 0x1, 0x0, 0x5, 0x4000, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x80000001, 0x2}, 0x2404, 0x9, 0x10000, 0x6, 0x9, 0x800005, 0xb2f3, 0x0, 0x3, 0x0, 0x800}, 0xffffffffffffffff, 0xb, r2, 0x2) 15:11:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:11:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x140, 0x39, 0x100, 0x70bd2c, 0x25dfdbf8, {0xa}, [@nested={0x84, 0x55, 0x0, 0x1, [@typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="b46ce315e1fbb98abe1454ab1d6bb1760215822ef8423f6698e947700bd03a08379fb1f574c3cf1e47354b27611eba816634a616d233dc89c8f89061", @typed={0x8, 0x8e, 0x0, 0x0, @ipv4=@private=0xa010102}, @typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x4, 0x81}, @generic="6b2389ccbc180e26647d2bbc46d549aa"]}, @nested={0x85, 0x17, 0x0, 0x1, [@generic="268ad7069e12fa9c009828f7fc6c42a77c7a907a441b71bde609d677351112755ba6a90f46d1d391cd9bea456914780c3531ac82df06fc00c8b665140a7af5ab1616b937b64e0040b684ace5f95771f37ce5fbba292ea2b8aa3334f42322e0df3a9ef75f3a50246ea4065413ef4642a47fe73f4573f6013dd8c421c58a9bf0b3cf"]}, @typed={0x1d, 0x75, 0x0, 0x0, @binary="78528aef6617b71b5cc55ad1e69c9f4714f4fa0303a557bde1"}]}, 0x140}, 0x1, 0x0, 0x0, 0x40040080}, 0xc004) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000640)={&(0x7f0000000480), 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xec, r9, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x64}}}}, [@NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff3c}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xc6}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xdc}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0x84, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_IE={0x69, 0x3, "f5a00433398fe80bd7535cc8bc77565f30e587cdda1c9b2c5c420eb048ff8237da01e22b12c0809fd2dd77ae966a05e9f1965097f735c33fcc0f1657fef397728b6eef883c7e3061572bf517e14558289a952c8153dde7c8731a7115a8f654f77ed360c0a3"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000895) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x64}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008940}, 0x1) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) [ 2409.652408] audit: type=1326 audit(1762787518.719:289): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32818 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cf8c77b19 code=0x0 [ 2409.660590] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2409.666049] audit: type=1326 audit(1762787518.730:290): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32819 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 [ 2409.680752] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2409.690646] blktrace: Concurrent blktraces are not allowed on sg0 [ 2409.709422] blktrace: Concurrent blktraces are not allowed on sg0 [ 2409.720482] blktrace: Concurrent blktraces are not allowed on sg0 [ 2410.517390] audit: type=1326 audit(1762787519.585:291): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32819 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 15:12:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$int_in(r2, 0x5421, &(0x7f00000000c0)=0x200) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) 15:12:08 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:12:08 executing program 7: bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) 15:12:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x140, 0x39, 0x100, 0x70bd2c, 0x25dfdbf8, {0xa}, [@nested={0x84, 0x55, 0x0, 0x1, [@typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="b46ce315e1fbb98abe1454ab1d6bb1760215822ef8423f6698e947700bd03a08379fb1f574c3cf1e47354b27611eba816634a616d233dc89c8f89061", @typed={0x8, 0x8e, 0x0, 0x0, @ipv4=@private=0xa010102}, @typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x4, 0x81}, @generic="6b2389ccbc180e26647d2bbc46d549aa"]}, @nested={0x85, 0x17, 0x0, 0x1, [@generic="268ad7069e12fa9c009828f7fc6c42a77c7a907a441b71bde609d677351112755ba6a90f46d1d391cd9bea456914780c3531ac82df06fc00c8b665140a7af5ab1616b937b64e0040b684ace5f95771f37ce5fbba292ea2b8aa3334f42322e0df3a9ef75f3a50246ea4065413ef4642a47fe73f4573f6013dd8c421c58a9bf0b3cf"]}, @typed={0x1d, 0x75, 0x0, 0x0, @binary="78528aef6617b71b5cc55ad1e69c9f4714f4fa0303a557bde1"}]}, 0x140}, 0x1, 0x0, 0x0, 0x40040080}, 0xc004) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = dup2(r6, r5) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000640)={&(0x7f0000000480), 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xec, r9, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x64}}}}, [@NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff3c}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xc6}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xdc}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x7}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0x84, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_IE={0x69, 0x3, "f5a00433398fe80bd7535cc8bc77565f30e587cdda1c9b2c5c420eb048ff8237da01e22b12c0809fd2dd77ae966a05e9f1965097f735c33fcc0f1657fef397728b6eef883c7e3061572bf517e14558289a952c8153dde7c8731a7115a8f654f77ed360c0a3"}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000895) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x64}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008940}, 0x1) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) 15:12:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) dup2(r1, r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r3, r2) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000240)=0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r5, r4) r6 = getpid() r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r8 = dup2(r7, 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x4, 0x7ff, 0x6f7e9d48, 0x0, 0xfffffffffffffffe}) ioctl$TCSETAW(r8, 0x5407, &(0x7f0000000300)={0x8, 0x1, 0x79df, 0x2, 0x7, "d8f9131dc344f8dc"}) pidfd_open(r6, 0x0) 15:12:08 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r2) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400"/16]}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) io_submit(r1, 0x5, &(0x7f0000000540)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x4, r0, &(0x7f0000000100)="a289d00a67c90649f6ae7aed03750f2da4f913aa432ddd6f50214d5a1f441c37871d9871331cf240fda90724222da04636c2ef1cf0f5bb6b8d62dcaf32f068d7a0c0455965770f37c41bb5d1c83b801a90b238d2abf288773552f9a70cb8164366dfbd05c6956678c5ac02ade995e636dfc48138dd694fafd2b8d5577bb1237e62cbbcc1b761ffbf9794a8272132256ebcd8ee794e5bde566e08bfac3224ced94d8a9a126749a4d77664ca84c97093436506f5c43b7049b526d918e7f4fb6085901d5960890a82ff558c2dead8184b60030c85806ff0d366d0b979a6f5b9cc1890747dd0717ed6d96a", 0xe9, 0x9, 0x0, 0x3, r4}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x4, r0, &(0x7f0000000240)="ecec530a9f3cad6cb657e2d57abf34a25eb5468c8e2c5982eb270db691acbf73e71fb51807bad253a3d3c46960922ea333bd36f7080f37c51bbe146dc40debfc7d33a13d5a895881e75f003c0fe4fa7d6a95e10b160b2f5ef1a68afaf9e47fc4276b56c9f58aeb5746bbb1b4cbea9c22dc7f04b8e09fb89395dfb9a06dbe7a70c3e982b3e44f3b", 0x87, 0xd4b4}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x1, r5, &(0x7f0000000340)="743cd107cba0e381d440abf7906794ff89a9e91d9e106e3566d1a1c98efe6a479a39cbf761dd3331a1fcde6968525f3b144506a7d39d0602359101190ec04258a2e955349aae197292a2d44464a37cdf97e3aaa6cfdd254d99227bcf04c90d6307", 0x61, 0x3, 0x0, 0x1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x4, r6, &(0x7f0000000440)="3ffe10c50a9ec1d4a1ddf53a9d4039dfcc69947fe57187cbd40e1117e7bfcdd10ace0343290c2ac6b9f48e1856fbd39cd7afc778c2166be1c1", 0x39, 0x3, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x101, r7, &(0x7f00000004c0)="e5d49f35d942b14567ac4b4fc7f34af3549ba7770a0c539793890222c8873cd6512da096b88c210d73c5d73d67b7", 0x2e, 0xa4}]) 15:12:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x99}, {r0, 0x4}, {0xffffffffffffffff, 0x440}], 0x6, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:12:08 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) [ 2419.857666] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2419.880101] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2419.881352] blktrace: Concurrent blktraces are not allowed on sg0 [ 2419.886605] blktrace: Concurrent blktraces are not allowed on sg0 15:12:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) dup2(r1, r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r3, r2) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000240)=0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r5, r4) getpid() r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = dup2(r6, 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x4, 0x7ff, 0x6f7e9d48, 0x0, 0xfffffffffffffffe}) ioctl$TCSETAW(r7, 0x5407, &(0x7f0000000300)={0x8, 0x1, 0x79df, 0x2, 0x7, "d8f9131dc344f8dc"}) [ 2419.933640] blktrace: Concurrent blktraces are not allowed on sg0 [ 2419.933786] audit: type=1326 audit(1762787529.000:292): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32963 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 15:12:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x99}, {r0, 0x4}, {0xffffffffffffffff, 0x440}], 0x6, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) [ 2419.953874] blktrace: Concurrent blktraces are not allowed on sg0 [ 2419.965304] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2419.969021] blktrace: Concurrent blktraces are not allowed on sg0 15:12:09 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x8, &(0x7f0000000000)=[{0x6, 0xfc, 0x7, 0x3}, {0x8, 0xa8, 0x1, 0x5}, {0x7f, 0x3, 0x5f, 0x8}, {0xae8, 0x7e, 0x0, 0x1c0}, {0x8001, 0x8, 0x8, 0xff}, {0x20, 0x2, 0x80, 0xeada}, {0xfffe, 0xff, 0x6, 0x28dd}, {0x4, 0x7f, 0x1f, 0x7}]}) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) 15:12:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48, 0x0, 0x3001}) 15:12:09 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:12:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) (fail_nth: 1) 15:12:09 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:12:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) dup2(r1, r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r3, r2) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000240)=0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r5, r4) getpid() r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r6, 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x4, 0x7ff, 0x6f7e9d48, 0x0, 0xfffffffffffffffe}) 15:12:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x99}, {r0, 0x4}, {0xffffffffffffffff, 0x440}], 0x6, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) [ 2420.175395] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2420.179453] blktrace: Concurrent blktraces are not allowed on sg0 [ 2420.192589] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2420.214995] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:12:09 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) [ 2420.788675] audit: type=1326 audit(1762787529.856:293): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=32963 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 15:12:18 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) (fail_nth: 1) 15:12:18 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001a40), 0x408200, 0x0) perf_event_open(&(0x7f00000019c0)={0x5, 0x80, 0xfc, 0x0, 0x4, 0xda, 0x0, 0x3, 0x200, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x5727}, 0x410, 0x0, 0x1, 0x2, 0x6, 0x5e1, 0x8, 0x0, 0xd44, 0x0, 0x5}, 0x0, 0xd, r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001940)={0x53, 0xfffffffffffffffd, 0xdd, 0x1f, @scatter={0x9, 0x0, &(0x7f0000001700)=[{&(0x7f0000000100)=""/86, 0x56}, {&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000000280)=""/143, 0x8f}, {&(0x7f0000000340)=""/100, 0x64}, {&(0x7f00000003c0)=""/119, 0x77}, {&(0x7f0000000440)=""/130, 0x82}, {&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/196, 0xc4}]}, &(0x7f00000017c0)="dc84895527268858ba4b33efd9ccc8c0f7074d860bd14c171502a091136e7af013890688abb52219796eb1339126e0ec1fa0b81d5e61d3e7e84a0404ed1aa7716ad5ededd40def6d9ff0a242e93c72de6b4941137cdd9892882d4f844b69a8a603839683f9ed3c10ac407ff2cc90abea4d638b8ba95d29a5176eb5d420a5fd7773d92f3f3dcc2070c0c2cba3ccbf2ecc308f5f47474875a2e676ab3c8660e702a94087ff9a08e60dc4f4645398e067972722c5d1d05322aab7b7b19fb6bb1bc469eafde8654a5d9e8e35c7ae47580d36118067f19894595940aa5ffd45", &(0x7f00000018c0)=""/78, 0xfff, 0x10023, 0x1}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) close_range(r1, r2, 0x0) 15:12:18 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:12:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) (fail_nth: 2) 15:12:18 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 1) 15:12:18 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:12:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) dup2(r1, r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r3, r2) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000240)=0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r5, r4) getpid() r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r6, 0xffffffffffffffff) 15:12:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ppoll(&(0x7f00000000c0)=[{r1, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x99}, {r0, 0x4}, {0xffffffffffffffff, 0x440}], 0x6, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) [ 2429.824043] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2429.851156] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2429.853449] audit: type=1326 audit(1762787538.921:294): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=33090 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f9de4b19 code=0x0 [ 2429.858896] FAULT_INJECTION: forcing a failure. [ 2429.858896] name failslab, interval 1, probability 0, space 0, times 0 [ 2429.860581] CPU: 1 UID: 0 PID: 33100 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2429.860611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2429.860625] Call Trace: [ 2429.860633] [ 2429.860642] dump_stack_lvl+0xfa/0x120 [ 2429.860690] should_fail_ex+0x4d7/0x5e0 [ 2429.860717] ? getname_flags.part.0+0x48/0x540 [ 2429.860749] should_failslab+0xc2/0x120 [ 2429.860776] kmem_cache_alloc_noprof+0x80/0x690 [ 2429.860822] ? getname_flags.part.0+0x48/0x540 [ 2429.860849] getname_flags.part.0+0x48/0x540 [ 2429.860880] __x64_sys_mkdir+0xdb/0x140 [ 2429.860905] do_syscall_64+0xbf/0x430 [ 2429.860930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2429.860954] RIP: 0033:0x7f9cf8c76c27 [ 2429.860971] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2429.860993] RSP: 002b:00007f9cf61ecfa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2429.861014] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf8c76c27 [ 2429.861029] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000140 [ 2429.861043] RBP: 00007f9cf61ed040 R08: 0000000000000000 R09: 0000000000000000 [ 2429.861056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000100 [ 2429.861070] R13: 0000000020000140 R14: 00007f9cf61ed000 R15: 00000000200004c0 [ 2429.861101] [ 2429.864088] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2429.869656] FAULT_INJECTION: forcing a failure. [ 2429.869656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2429.887648] CPU: 1 UID: 0 PID: 33096 Comm: syz-executor.7 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2429.887681] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2429.887694] Call Trace: [ 2429.887703] [ 2429.887712] dump_stack_lvl+0xfa/0x120 [ 2429.887757] should_fail_ex+0x4d7/0x5e0 [ 2429.887785] _copy_from_user+0x30/0xd0 [ 2429.887817] move_addr_to_kernel.part.0+0x40/0x120 [ 2429.887845] __sys_bind+0x14b/0x2b0 [ 2429.887871] ? __pfx___sys_bind+0x10/0x10 [ 2429.887895] ? find_held_lock+0x2b/0x80 [ 2429.887921] ? __might_fault+0x138/0x190 [ 2429.887954] ? lock_release+0xc8/0x290 [ 2429.887986] ? __might_fault+0xe0/0x190 [ 2429.888018] ? find_held_lock+0x2b/0x80 [ 2429.888042] ? syscall_trace_enter+0x1cf/0x240 [ 2429.888075] ? lock_release+0xc8/0x290 [ 2429.888112] __x64_sys_bind+0x73/0xb0 [ 2429.888137] do_syscall_64+0xbf/0x430 [ 2429.888162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2429.888184] RIP: 0033:0x7fe895831b19 [ 2429.888202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2429.888225] RSP: 002b:00007fe892da7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2429.888247] RAX: ffffffffffffffda RBX: 00007fe895944f60 RCX: 00007fe895831b19 [ 2429.888261] RDX: 000000000000006e RSI: 0000000020000040 RDI: 0000000000000004 [ 2429.888275] RBP: 00007fe892da71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2429.888289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2429.888302] R13: 00007fff4c63c17f R14: 00007fe892da7300 R15: 0000000000022000 [ 2429.888335] [ 2429.920862] audit: type=1326 audit(1762787538.982:295): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=33095 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 15:12:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ppoll(&(0x7f00000000c0)=[{r1, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x99}, {r0, 0x4}, {0xffffffffffffffff, 0x440}], 0x6, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:12:19 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 2) 15:12:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) (fail_nth: 3) [ 2429.977031] msdos: Bad value for 'time_offset' 15:12:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) dup2(r1, r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r3, r2) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000240)=0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r5, r4) getpid() syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 15:12:19 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 3) 15:12:19 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:12:19 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) (fail_nth: 2) [ 2430.081937] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2430.091563] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2430.097094] FAULT_INJECTION: forcing a failure. [ 2430.097094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2430.098844] CPU: 0 UID: 0 PID: 33111 Comm: syz-executor.0 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2430.098874] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2430.098888] Call Trace: [ 2430.098896] [ 2430.098904] dump_stack_lvl+0xfa/0x120 [ 2430.098951] should_fail_ex+0x4d7/0x5e0 [ 2430.098978] _copy_from_user+0x30/0xd0 [ 2430.099003] scsi_ioctl+0xec6/0x15e0 [ 2430.099031] ? __pfx_scsi_ioctl+0x10/0x10 [ 2430.099055] ? avc_has_perm_noaudit+0x150/0x3d0 [ 2430.099089] ? avc_has_perm+0x12b/0x1d0 [ 2430.099117] ? __pfx_avc_has_perm+0x10/0x10 [ 2430.099144] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2430.099177] sg_ioctl+0xeb7/0x2720 [ 2430.099204] ? inode_has_perm+0x16e/0x1c0 [ 2430.099236] ? __pfx_sg_ioctl+0x10/0x10 [ 2430.099259] ? __fget_files+0x34/0x3b0 [ 2430.099294] ? __pfx_file_has_perm+0x10/0x10 [ 2430.099326] ? lock_release+0xc8/0x290 [ 2430.099367] ? selinux_file_ioctl+0xb9/0x280 [ 2430.099405] ? __pfx_sg_ioctl+0x10/0x10 [ 2430.099432] __x64_sys_ioctl+0x18f/0x210 [ 2430.099465] do_syscall_64+0xbf/0x430 [ 2430.099490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2430.099513] RIP: 0033:0x7f426faf7b19 [ 2430.099531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2430.099552] RSP: 002b:00007f426d06d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2430.099574] RAX: ffffffffffffffda RBX: 00007f426fc0af60 RCX: 00007f426faf7b19 [ 2430.099589] RDX: 00000000200000c0 RSI: 0000000000000001 RDI: 0000000000000003 [ 2430.099603] RBP: 00007f426d06d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2430.099617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2430.099629] R13: 00007fff9cf4968f R14: 00007f426d06d300 R15: 0000000000022000 [ 2430.099661] [ 2430.112685] FAULT_INJECTION: forcing a failure. [ 2430.112685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2430.126759] CPU: 1 UID: 0 PID: 33114 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2430.126796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2430.126810] Call Trace: [ 2430.126819] [ 2430.126828] dump_stack_lvl+0xfa/0x120 [ 2430.126877] should_fail_ex+0x4d7/0x5e0 [ 2430.126905] strncpy_from_user+0x3b/0x2f0 [ 2430.126941] getname_flags.part.0+0x8d/0x540 [ 2430.126976] __x64_sys_mkdir+0xdb/0x140 [ 2430.127001] do_syscall_64+0xbf/0x430 [ 2430.127026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2430.127050] RIP: 0033:0x7f9cf8c76c27 [ 2430.127067] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2430.127089] RSP: 002b:00007f9cf61ecfa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2430.127110] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf8c76c27 [ 2430.127125] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000140 [ 2430.127138] RBP: 00007f9cf61ed040 R08: 0000000000000000 R09: 0000000000000000 [ 2430.127152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000100 [ 2430.127165] R13: 0000000020000140 R14: 00007f9cf61ed000 R15: 00000000200004c0 [ 2430.127197] [ 2430.264057] FAULT_INJECTION: forcing a failure. [ 2430.264057] name failslab, interval 1, probability 0, space 0, times 0 [ 2430.266048] CPU: 1 UID: 0 PID: 33133 Comm: syz-executor.7 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2430.266078] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2430.266095] Call Trace: [ 2430.266105] [ 2430.266116] dump_stack_lvl+0xfa/0x120 [ 2430.266183] should_fail_ex+0x4d7/0x5e0 [ 2430.266225] should_failslab+0xc2/0x120 [ 2430.266266] __kmalloc_noprof+0xcd/0x680 [ 2430.266296] ? selinux_socket_bind+0x151/0x9b0 [ 2430.266330] ? unix_create_addr+0x1f/0xe0 [ 2430.266368] unix_create_addr+0x1f/0xe0 [ 2430.266400] unix_bind+0x25f/0x12f0 [ 2430.266419] ? __might_fault+0x138/0x190 [ 2430.266451] ? lock_release+0xc8/0x290 [ 2430.266484] ? __might_fault+0xe0/0x190 [ 2430.266517] ? __pfx_unix_bind+0x10/0x10 [ 2430.266548] __sys_bind+0x1dd/0x2b0 [ 2430.266575] ? __pfx___sys_bind+0x10/0x10 [ 2430.266609] ? find_held_lock+0x2b/0x80 [ 2430.266633] ? syscall_trace_enter+0x1cf/0x240 [ 2430.266666] ? lock_release+0xc8/0x290 [ 2430.266702] __x64_sys_bind+0x73/0xb0 [ 2430.266726] do_syscall_64+0xbf/0x430 [ 2430.266751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2430.266774] RIP: 0033:0x7fe895831b19 [ 2430.266798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2430.266820] RSP: 002b:00007fe892da7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2430.266842] RAX: ffffffffffffffda RBX: 00007fe895944f60 RCX: 00007fe895831b19 [ 2430.266857] RDX: 000000000000006e RSI: 0000000020000040 RDI: 0000000000000004 [ 2430.266871] RBP: 00007fe892da71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2430.266884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2430.266898] R13: 00007fff4c63c17f R14: 00007fe892da7300 R15: 0000000000022000 [ 2430.266930] [ 2430.711269] audit: type=1326 audit(1762787539.779:296): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=33095 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 15:12:29 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000}, 0x0, 0xd, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) 15:12:29 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:12:29 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 4) 15:12:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ppoll(&(0x7f00000000c0)=[{r1, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x99}, {r0, 0x4}, {0xffffffffffffffff, 0x440}], 0x6, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:12:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) (fail_nth: 4) 15:12:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) dup2(r1, r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r3, r2) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000240)=0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r5, r4) getpid() 15:12:29 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) (fail_nth: 3) 15:12:29 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00f0ff", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) [ 2439.979866] FAULT_INJECTION: forcing a failure. [ 2439.979866] name failslab, interval 1, probability 0, space 0, times 0 [ 2439.981936] CPU: 1 UID: 0 PID: 33228 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2439.981967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2439.981981] Call Trace: [ 2439.981988] [ 2439.981996] dump_stack_lvl+0xfa/0x120 [ 2439.982039] should_fail_ex+0x4d7/0x5e0 [ 2439.982066] ? __d_alloc+0x31/0xa10 [ 2439.982087] should_failslab+0xc2/0x120 [ 2439.982112] kmem_cache_alloc_lru_noprof+0x84/0x690 [ 2439.982142] ? __d_lookup+0x255/0x490 [ 2439.982180] ? __d_alloc+0x31/0xa10 [ 2439.982200] __d_alloc+0x31/0xa10 [ 2439.982228] d_alloc+0x4a/0x1e0 [ 2439.982253] lookup_one_qstr_excl+0x174/0x270 [ 2439.982280] ? mnt_want_write+0x153/0x420 [ 2439.982312] filename_create+0x1ca/0x480 [ 2439.982345] ? __pfx_filename_create+0x10/0x10 [ 2439.982376] ? __virt_addr_valid+0x2e8/0x5d0 [ 2439.982414] do_mkdirat+0x94/0x2f0 [ 2439.982438] ? __pfx_do_mkdirat+0x10/0x10 [ 2439.982470] __x64_sys_mkdir+0xf3/0x140 [ 2439.982494] do_syscall_64+0xbf/0x430 [ 2439.982518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2439.982540] RIP: 0033:0x7f9cf8c76c27 [ 2439.982557] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2439.982578] RSP: 002b:00007f9cf61ecfa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2439.982599] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf8c76c27 [ 2439.982614] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000140 [ 2439.982627] RBP: 00007f9cf61ed040 R08: 0000000000000000 R09: 0000000000000000 [ 2439.982640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000100 [ 2439.982653] R13: 0000000020000140 R14: 00007f9cf61ed000 R15: 00000000200004c0 [ 2439.982686] [ 2440.052387] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2440.060254] audit: type=1326 audit(1762787549.119:297): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=33231 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f9de4b19 code=0x0 [ 2440.071861] audit: type=1326 audit(1762787549.138:298): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=33234 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 15:12:29 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 5) 15:12:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x99}, {r0, 0x4}, {0xffffffffffffffff, 0x440}], 0x6, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) [ 2440.112548] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2440.127660] FAULT_INJECTION: forcing a failure. [ 2440.127660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2440.129664] CPU: 0 UID: 0 PID: 33259 Comm: syz-executor.0 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2440.129700] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2440.129716] Call Trace: [ 2440.129725] [ 2440.129735] dump_stack_lvl+0xfa/0x120 [ 2440.129785] should_fail_ex+0x4d7/0x5e0 [ 2440.129824] _copy_from_user+0x30/0xd0 [ 2440.129863] scsi_ioctl+0xf3c/0x15e0 [ 2440.129896] ? __pfx_scsi_ioctl+0x10/0x10 [ 2440.129923] ? avc_has_perm_noaudit+0x150/0x3d0 [ 2440.129962] ? avc_has_perm+0x12b/0x1d0 [ 2440.129995] ? __pfx_avc_has_perm+0x10/0x10 [ 2440.130026] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2440.130064] sg_ioctl+0xeb7/0x2720 [ 2440.130095] ? inode_has_perm+0x16e/0x1c0 [ 2440.130131] ? __pfx_sg_ioctl+0x10/0x10 [ 2440.130158] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2440.130200] ? irqentry_exit+0x17b/0x650 [ 2440.130242] ? trace_irq_disable.constprop.0+0xc2/0x100 [ 2440.130292] ? __pfx_sg_ioctl+0x10/0x10 [ 2440.130328] ? __pfx_sg_ioctl+0x10/0x10 [ 2440.130360] __x64_sys_ioctl+0x18f/0x210 [ 2440.130399] do_syscall_64+0xbf/0x430 [ 2440.130428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2440.130454] RIP: 0033:0x7f426faf7b19 [ 2440.130474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2440.130499] RSP: 002b:00007f426d06d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2440.130525] RAX: ffffffffffffffda RBX: 00007f426fc0af60 RCX: 00007f426faf7b19 [ 2440.130542] RDX: 00000000200000c0 RSI: 0000000000000001 RDI: 0000000000000003 [ 2440.130558] RBP: 00007f426d06d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2440.130574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2440.130589] R13: 00007fff9cf4968f R14: 00007f426d06d300 R15: 0000000000022000 [ 2440.130626] 15:12:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) dup2(r1, r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r3, r2) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000240)=0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r5, r4) [ 2440.201248] msdos: Bad value for 'time_offset' 15:12:29 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) (fail_nth: 4) [ 2440.293935] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:12:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3900c600", @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000000c0006000100000001000000"], 0x20}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x844}, 0x24008800) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7ce}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3f}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x34, r2, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x480000d1}, 0x4000800) 15:12:29 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000200", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) [ 2440.370488] FAULT_INJECTION: forcing a failure. [ 2440.370488] name failslab, interval 1, probability 0, space 0, times 0 [ 2440.372309] CPU: 1 UID: 0 PID: 33352 Comm: syz-executor.7 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2440.372340] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2440.372353] Call Trace: [ 2440.372360] [ 2440.372369] dump_stack_lvl+0xfa/0x120 [ 2440.372413] should_fail_ex+0x4d7/0x5e0 [ 2440.372438] ? getname_kernel+0x52/0x390 [ 2440.372463] should_failslab+0xc2/0x120 [ 2440.372487] kmem_cache_alloc_noprof+0x80/0x690 [ 2440.372515] ? __kasan_kmalloc+0x7f/0x90 [ 2440.372540] ? trace_kmalloc+0x1f/0xb0 [ 2440.372565] ? getname_kernel+0x52/0x390 [ 2440.372587] getname_kernel+0x52/0x390 [ 2440.372613] start_creating_path+0x24/0x80 [ 2440.372648] unix_bind+0x290/0x12f0 [ 2440.372671] ? lock_release+0xc8/0x290 [ 2440.372703] ? __might_fault+0xe0/0x190 [ 2440.372736] ? __pfx_unix_bind+0x10/0x10 [ 2440.372767] __sys_bind+0x1dd/0x2b0 [ 2440.372801] ? __pfx___sys_bind+0x10/0x10 [ 2440.372836] ? ksys_write+0x1a3/0x240 [ 2440.372856] ? __pfx_ksys_write+0x10/0x10 [ 2440.372883] __x64_sys_bind+0x73/0xb0 [ 2440.372908] do_syscall_64+0xbf/0x430 [ 2440.372931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2440.372954] RIP: 0033:0x7fe895831b19 [ 2440.372971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2440.372992] RSP: 002b:00007fe892da7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 2440.373013] RAX: ffffffffffffffda RBX: 00007fe895944f60 RCX: 00007fe895831b19 [ 2440.373028] RDX: 000000000000006e RSI: 0000000020000040 RDI: 0000000000000004 [ 2440.373042] RBP: 00007fe892da71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2440.373055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2440.373068] R13: 00007fff4c63c17f R14: 00007fe892da7300 R15: 0000000000022000 [ 2440.373100] 15:12:39 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:12:39 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000300", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:12:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x99}, {r0, 0x4}, {0xffffffffffffffff, 0x440}], 0x6, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:12:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) dup2(r1, r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r3, r2) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000240)=0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 15:12:39 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 6) 15:12:39 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) (fail_nth: 5) 15:12:39 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) (fail_nth: 5) 15:12:39 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) [ 2450.818227] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2450.828035] FAULT_INJECTION: forcing a failure. [ 2450.828035] name failslab, interval 1, probability 0, space 0, times 0 [ 2450.829961] CPU: 0 UID: 0 PID: 33473 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2450.829992] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2450.830005] Call Trace: [ 2450.830013] [ 2450.830021] dump_stack_lvl+0xfa/0x120 [ 2450.830064] should_fail_ex+0x4d7/0x5e0 [ 2450.830091] ? ext4_alloc_inode+0x28/0x640 [ 2450.830121] should_failslab+0xc2/0x120 [ 2450.830145] kmem_cache_alloc_lru_noprof+0x84/0x690 [ 2450.830183] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 2450.830216] ? ext4_alloc_inode+0x28/0x640 [ 2450.830244] ext4_alloc_inode+0x28/0x640 [ 2450.830274] ? __pfx_ext4_alloc_inode+0x10/0x10 [ 2450.830303] alloc_inode+0x67/0x250 [ 2450.830330] new_inode+0x1e/0x160 [ 2450.830359] __ext4_new_inode+0x35d/0x4d10 [ 2450.830395] ? avc_has_perm_noaudit+0x150/0x3d0 [ 2450.830429] ? __pfx___ext4_new_inode+0x10/0x10 [ 2450.830458] ? __pfx_avc_has_perm+0x10/0x10 [ 2450.830484] ? __pfx___dquot_initialize+0x10/0x10 [ 2450.830529] ext4_mkdir+0x331/0xb30 [ 2450.830572] ? __pfx_ext4_mkdir+0x10/0x10 [ 2450.830602] ? security_inode_permission+0x72/0xe0 [ 2450.830635] vfs_mkdir+0x606/0x950 [ 2450.830671] do_mkdirat+0x101/0x2f0 [ 2450.830695] ? __pfx_do_mkdirat+0x10/0x10 [ 2450.830727] __x64_sys_mkdir+0xf3/0x140 [ 2450.830750] do_syscall_64+0xbf/0x430 [ 2450.830775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2450.830805] RIP: 0033:0x7f9cf8c76c27 [ 2450.830822] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2450.830843] RSP: 002b:00007f9cf61ecfa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2450.830864] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf8c76c27 [ 2450.830879] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000140 [ 2450.830892] RBP: 00007f9cf61ed040 R08: 0000000000000000 R09: 0000000000000000 [ 2450.830906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000100 [ 2450.830919] R13: 0000000020000140 R14: 00007f9cf61ed000 R15: 00000000200004c0 [ 2450.830951] [ 2450.860218] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2450.864504] FAULT_INJECTION: forcing a failure. [ 2450.864504] name failslab, interval 1, probability 0, space 0, times 0 [ 2450.866245] CPU: 0 UID: 0 PID: 33471 Comm: syz-executor.0 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2450.866274] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2450.866286] Call Trace: [ 2450.866293] [ 2450.866302] dump_stack_lvl+0xfa/0x120 [ 2450.866341] should_fail_ex+0x4d7/0x5e0 [ 2450.866368] should_failslab+0xc2/0x120 [ 2450.866390] __kmalloc_noprof+0xcd/0x680 [ 2450.866414] ? lock_acquire+0x15e/0x2f0 [ 2450.866445] ? __might_fault+0xe0/0x190 [ 2450.866477] ? bio_kmalloc+0x3e/0x70 [ 2450.866497] ? trace_cap_capable+0x156/0x1b0 [ 2450.866522] bio_kmalloc+0x3e/0x70 [ 2450.866543] blk_rq_map_kern+0x1cb/0x6f0 [ 2450.866572] ? security_capable+0x2f/0x90 [ 2450.866610] scsi_ioctl+0x10c0/0x15e0 [ 2450.866638] ? __pfx_scsi_ioctl+0x10/0x10 [ 2450.866661] ? avc_has_perm_noaudit+0x150/0x3d0 [ 2450.866693] ? avc_has_perm+0x12b/0x1d0 [ 2450.866721] ? __pfx_avc_has_perm+0x10/0x10 [ 2450.866749] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2450.866780] sg_ioctl+0xeb7/0x2720 [ 2450.866815] ? inode_has_perm+0x16e/0x1c0 [ 2450.866847] ? __pfx_sg_ioctl+0x10/0x10 [ 2450.866870] ? __fget_files+0x34/0x3b0 [ 2450.866903] ? __pfx_file_has_perm+0x10/0x10 [ 2450.866934] ? lock_release+0xc8/0x290 [ 2450.866973] ? selinux_file_ioctl+0xb9/0x280 [ 2450.867010] ? __pfx_sg_ioctl+0x10/0x10 [ 2450.867038] __x64_sys_ioctl+0x18f/0x210 [ 2450.867069] do_syscall_64+0xbf/0x430 [ 2450.867093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2450.867114] RIP: 0033:0x7f426faf7b19 [ 2450.867131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2450.867151] RSP: 002b:00007f426d06d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2450.867172] RAX: ffffffffffffffda RBX: 00007f426fc0af60 RCX: 00007f426faf7b19 [ 2450.867186] RDX: 00000000200000c0 RSI: 0000000000000001 RDI: 0000000000000003 [ 2450.867199] RBP: 00007f426d06d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2450.867212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2450.867225] R13: 00007fff9cf4968f R14: 00007f426d06d300 R15: 0000000000022000 [ 2450.867257] 15:12:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x99}, {r0, 0x4}, {0xffffffffffffffff, 0x440}], 0x6, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:12:39 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) (fail_nth: 6) 15:12:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) dup2(r1, r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r3, r2) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000240)=0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) [ 2450.949288] audit: type=1326 audit(1762787560.006:299): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=33469 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 [ 2450.978002] audit: type=1326 audit(1762787560.025:300): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=33468 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f9de4b19 code=0x0 15:12:40 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 7) 15:12:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) (fail_nth: 6) 15:12:40 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) [ 2451.063753] audit: type=1326 audit(1762787560.131:301): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=33469 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 [ 2451.067934] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2451.083638] FAULT_INJECTION: forcing a failure. [ 2451.083638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2451.085692] CPU: 1 UID: 0 PID: 33554 Comm: syz-executor.7 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2451.085726] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2451.085742] Call Trace: [ 2451.085751] [ 2451.085761] dump_stack_lvl+0xfa/0x120 [ 2451.085817] should_fail_ex+0x4d7/0x5e0 [ 2451.085848] _copy_to_user+0x32/0xd0 [ 2451.085877] simple_read_from_buffer+0xe0/0x180 [ 2451.085935] proc_fail_nth_read+0x18a/0x240 [ 2451.085966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2451.085995] ? security_file_permission+0x22/0x90 [ 2451.086028] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2451.086056] vfs_read+0x1eb/0xc70 [ 2451.086087] ? __pfx_vfs_read+0x10/0x10 [ 2451.086111] ? lock_release+0xc8/0x290 [ 2451.086154] ? __fget_files+0x20d/0x3b0 [ 2451.086205] ksys_read+0x121/0x240 [ 2451.086227] ? __pfx_ksys_read+0x10/0x10 [ 2451.086262] do_syscall_64+0xbf/0x430 [ 2451.086290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2451.086316] RIP: 0033:0x7fe8957e469c [ 2451.086335] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2451.086360] RSP: 002b:00007fe892da7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2451.086384] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fe8957e469c [ 2451.086400] RDX: 000000000000000f RSI: 00007fe892da71e0 RDI: 0000000000000005 [ 2451.086415] RBP: 00007fe892da71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2451.086430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2451.086445] R13: 00007fff4c63c17f R14: 00007fe892da7300 R15: 0000000000022000 [ 2451.086482] 15:12:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(0x0, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:12:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) dup2(r1, r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r3, r2) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f0000000240)=0x1) [ 2451.195139] msdos: Bad value for 'time_offset' [ 2451.203894] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2451.206303] audit: type=1326 audit(1762787560.273:302): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=33576 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f9de4b19 code=0x0 15:12:40 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x402000}, 0x18) dup(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) 15:12:40 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000400", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:12:40 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:12:40 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) (fail_nth: 7) [ 2451.318066] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2451.330171] audit: type=1326 audit(1762787560.397:303): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=33597 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 [ 2451.392731] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2451.394989] FAULT_INJECTION: forcing a failure. [ 2451.394989] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2451.396425] CPU: 0 UID: 0 PID: 33611 Comm: syz-executor.0 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2451.396448] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2451.396459] Call Trace: [ 2451.396465] [ 2451.396471] dump_stack_lvl+0xfa/0x120 [ 2451.396508] should_fail_ex+0x4d7/0x5e0 [ 2451.396529] should_fail_alloc_page+0xe0/0x110 [ 2451.396550] prepare_alloc_pages+0x1eb/0x550 [ 2451.396582] __alloc_frozen_pages_noprof+0x17f/0x1f10 [ 2451.396603] ? blk_rq_map_kern+0x1cb/0x6f0 [ 2451.396623] ? scsi_ioctl+0x10c0/0x15e0 [ 2451.396640] ? sg_ioctl+0xeb7/0x2720 [ 2451.396659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2451.396679] ? perf_trace_lock_acquire+0xc9/0x700 [ 2451.396711] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2451.396738] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2451.396767] ? do_raw_spin_lock+0x123/0x260 [ 2451.396790] ? find_held_lock+0x2b/0x80 [ 2451.396808] ? __create_object+0x59/0x80 [ 2451.396828] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2451.396849] ? policy_nodemask+0xeb/0x4e0 [ 2451.396874] alloc_pages_mpol+0xed/0x340 [ 2451.396896] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2451.396917] ? __kmalloc_noprof+0x274/0x680 [ 2451.396935] ? lock_acquire+0x15e/0x2f0 [ 2451.396958] ? __might_fault+0xe0/0x190 [ 2451.396986] alloc_pages_noprof+0x9d/0x180 [ 2451.397009] blk_rq_map_kern+0x257/0x6f0 [ 2451.397036] scsi_ioctl+0x10c0/0x15e0 [ 2451.397055] ? __pfx_scsi_ioctl+0x10/0x10 [ 2451.397072] ? avc_has_perm_noaudit+0x150/0x3d0 [ 2451.397098] ? avc_has_perm+0x12b/0x1d0 [ 2451.397119] ? __pfx_avc_has_perm+0x10/0x10 [ 2451.397139] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2451.397162] sg_ioctl+0xeb7/0x2720 [ 2451.397182] ? inode_has_perm+0x16e/0x1c0 [ 2451.397205] ? __pfx_sg_ioctl+0x10/0x10 [ 2451.397222] ? __fget_files+0x34/0x3b0 [ 2451.397248] ? __pfx_file_has_perm+0x10/0x10 [ 2451.397271] ? lock_release+0xc8/0x290 [ 2451.397301] ? selinux_file_ioctl+0xb9/0x280 [ 2451.397329] ? __pfx_sg_ioctl+0x10/0x10 [ 2451.397350] __x64_sys_ioctl+0x18f/0x210 [ 2451.397375] do_syscall_64+0xbf/0x430 [ 2451.397393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2451.397410] RIP: 0033:0x7f426faf7b19 [ 2451.397422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2451.397438] RSP: 002b:00007f426d06d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2451.397455] RAX: ffffffffffffffda RBX: 00007f426fc0af60 RCX: 00007f426faf7b19 [ 2451.397467] RDX: 00000000200000c0 RSI: 0000000000000001 RDI: 0000000000000003 [ 2451.397477] RBP: 00007f426d06d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2451.397487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2451.397497] R13: 00007fff9cf4968f R14: 00007f426d06d300 R15: 0000000000022000 [ 2451.397521] [ 2451.437926] audit: type=1326 audit(1762787560.501:304): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=33597 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 15:12:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x2, './file0\x00'}, 0x6e) 15:12:51 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 8) 15:12:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(0x0, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:12:51 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:12:51 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x8, &(0x7f0000000000)=[{0x8, 0x1, 0xfb, 0x7}, {0x5, 0xcc, 0x80, 0x3f}, {0x3, 0x1, 0x9}, {0x1, 0x9, 0x36, 0x5}, {0xfff9, 0x54, 0x3, 0xfffffffa}, {0x200, 0x7f, 0x7, 0x2}, {0x8, 0x0, 0x0, 0xa2}, {0x6, 0x1, 0x3, 0x2}]}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x8000) copy_file_range(r0, &(0x7f0000000140)=0x1, r1, &(0x7f00000001c0)=0xbe5c, 0x81, 0x0) 15:12:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) (fail_nth: 8) 15:12:51 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000500", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:12:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) dup2(r1, r0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r3, r2) [ 2462.066717] audit: type=1326 audit(1762787571.134:305): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=33723 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f9de4b19 code=0x0 [ 2462.073190] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2462.079495] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2462.084136] FAULT_INJECTION: forcing a failure. [ 2462.084136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2462.084328] FAULT_INJECTION: forcing a failure. [ 2462.084328] name failslab, interval 1, probability 0, space 0, times 0 [ 2462.085896] CPU: 0 UID: 0 PID: 33730 Comm: syz-executor.0 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2462.085926] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2462.085939] Call Trace: [ 2462.085958] [ 2462.085966] dump_stack_lvl+0xfa/0x120 [ 2462.086009] should_fail_ex+0x4d7/0x5e0 [ 2462.086035] _copy_to_user+0x32/0xd0 [ 2462.086060] scsi_ioctl+0x11f3/0x15e0 [ 2462.086088] ? __pfx_scsi_ioctl+0x10/0x10 [ 2462.086112] ? avc_has_perm_noaudit+0x150/0x3d0 [ 2462.086145] ? avc_has_perm+0x12b/0x1d0 [ 2462.086173] ? __pfx_avc_has_perm+0x10/0x10 [ 2462.086201] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2462.086233] sg_ioctl+0xeb7/0x2720 [ 2462.086261] ? inode_has_perm+0x16e/0x1c0 [ 2462.086292] ? __pfx_sg_ioctl+0x10/0x10 [ 2462.086315] ? __fget_files+0x34/0x3b0 [ 2462.086349] ? __pfx_file_has_perm+0x10/0x10 [ 2462.086380] ? lock_release+0xc8/0x290 [ 2462.086421] ? selinux_file_ioctl+0xb9/0x280 [ 2462.086459] ? __pfx_sg_ioctl+0x10/0x10 [ 2462.086489] __x64_sys_ioctl+0x18f/0x210 [ 2462.086524] do_syscall_64+0xbf/0x430 [ 2462.086549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2462.086571] RIP: 0033:0x7f426faf7b19 [ 2462.086588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2462.086609] RSP: 002b:00007f426d06d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2462.086630] RAX: ffffffffffffffda RBX: 00007f426fc0af60 RCX: 00007f426faf7b19 [ 2462.086645] RDX: 00000000200000c0 RSI: 0000000000000001 RDI: 0000000000000003 [ 2462.086658] RBP: 00007f426d06d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2462.086671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2462.086684] R13: 00007fff9cf4968f R14: 00007f426d06d300 R15: 0000000000022000 [ 2462.086715] [ 2462.113730] CPU: 1 UID: 0 PID: 33745 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2462.113760] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2462.113772] Call Trace: [ 2462.113779] [ 2462.113793] dump_stack_lvl+0xfa/0x120 [ 2462.113832] should_fail_ex+0x4d7/0x5e0 [ 2462.113856] ? security_inode_alloc+0x3e/0x130 [ 2462.113876] should_failslab+0xc2/0x120 [ 2462.113900] kmem_cache_alloc_noprof+0x80/0x690 [ 2462.113929] ? __pfx_map_id_range_down+0x10/0x10 [ 2462.113979] ? security_inode_alloc+0x3e/0x130 [ 2462.113999] security_inode_alloc+0x3e/0x130 [ 2462.114022] inode_init_always_gfp+0xc9d/0xff0 [ 2462.114064] alloc_inode+0x8d/0x250 [ 2462.114091] new_inode+0x1e/0x160 [ 2462.114120] __ext4_new_inode+0x35d/0x4d10 [ 2462.114156] ? avc_has_perm_noaudit+0x150/0x3d0 [ 2462.114189] ? __pfx___ext4_new_inode+0x10/0x10 [ 2462.114218] ? __pfx_avc_has_perm+0x10/0x10 [ 2462.114245] ? __pfx___dquot_initialize+0x10/0x10 [ 2462.114289] ext4_mkdir+0x331/0xb30 [ 2462.114333] ? __pfx_ext4_mkdir+0x10/0x10 [ 2462.114363] ? security_inode_permission+0x72/0xe0 [ 2462.114396] vfs_mkdir+0x606/0x950 [ 2462.114431] do_mkdirat+0x101/0x2f0 [ 2462.114456] ? __pfx_do_mkdirat+0x10/0x10 [ 2462.114488] __x64_sys_mkdir+0xf3/0x140 [ 2462.114512] do_syscall_64+0xbf/0x430 [ 2462.114536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2462.114557] RIP: 0033:0x7f9cf8c76c27 [ 2462.114573] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2462.114595] RSP: 002b:00007f9cf61ecfa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2462.114616] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf8c76c27 [ 2462.114630] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000140 [ 2462.114644] RBP: 00007f9cf61ed040 R08: 0000000000000000 R09: 0000000000000000 [ 2462.114657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000100 [ 2462.114671] R13: 0000000020000140 R14: 00007f9cf61ed000 R15: 00000000200004c0 [ 2462.114704] 15:12:51 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x2) 15:12:51 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) (fail_nth: 9) [ 2462.213989] audit: type=1326 audit(1762787571.280:306): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=33725 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 [ 2462.252230] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2462.257411] FAULT_INJECTION: forcing a failure. [ 2462.257411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2462.259180] CPU: 0 UID: 0 PID: 33833 Comm: syz-executor.0 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2462.259210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2462.259223] Call Trace: [ 2462.259231] [ 2462.259239] dump_stack_lvl+0xfa/0x120 [ 2462.259281] should_fail_ex+0x4d7/0x5e0 [ 2462.259309] _copy_to_user+0x32/0xd0 [ 2462.259334] simple_read_from_buffer+0xe0/0x180 [ 2462.259369] proc_fail_nth_read+0x18a/0x240 [ 2462.259396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2462.259421] ? security_file_permission+0x22/0x90 [ 2462.259450] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2462.259474] vfs_read+0x1eb/0xc70 [ 2462.259501] ? __pfx_vfs_read+0x10/0x10 [ 2462.259522] ? lock_release+0xc8/0x290 [ 2462.259559] ? __fget_files+0x20d/0x3b0 [ 2462.259604] ksys_read+0x121/0x240 [ 2462.259623] ? __pfx_ksys_read+0x10/0x10 [ 2462.259654] do_syscall_64+0xbf/0x430 [ 2462.259678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2462.259701] RIP: 0033:0x7f426faaa69c [ 2462.259718] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2462.259739] RSP: 002b:00007f426d06d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2462.259760] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f426faaa69c [ 2462.259775] RDX: 000000000000000f RSI: 00007f426d06d1e0 RDI: 0000000000000005 [ 2462.259795] RBP: 00007f426d06d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2462.259808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2462.259822] R13: 00007fff9cf4968f R14: 00007f426d06d300 R15: 0000000000022000 [ 2462.259854] [ 2462.968604] audit: type=1326 audit(1762787572.036:307): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=33725 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 15:13:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) dup2(r1, r0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 15:13:02 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 9) 15:13:02 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000600", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:13:02 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="11000000010000dd4100000000000000"]}) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) r1 = getpid() pidfd_open(r1, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{0x800, 0x4, 0xc5, 0x7}, {0xd0, 0x80, 0x0, 0x1}, {0x5, 0x1f, 0x7c, 0x2c380a9c}, {0x80, 0x7, 0x0, 0x401}]}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) dup2(r2, r3) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000180)="915f9bb5", 0x4}, {&(0x7f00000001c0)="00b2850927bef4ae46e69787c9b3c1ae22271c6dda5624c8dcbd4b8034e6d1f125bfa5ef8ab7dc679dbf97ab7777d70cdb592903ff8ada74ab44b2d24d3c65bb9f1aa2dcd6c67d196e46b83251214b618d7feb0dc8a548acef8ffe86ba1725cd5bfcd949bd55c81f", 0x68}], 0x2, 0x3, 0x4, 0x12) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x6, 0x7, 0x4, 0x27, 0x0, 0x3f3, 0x8825, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x1, 0x6629, 0x40, 0x4, 0x5, 0x9, 0xff, 0x0, 0x8, 0x0, 0x1f}, r1, 0xe, r2, 0x9) 15:13:02 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:13:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:13:02 executing program 7: setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000100)={{0x8, @rand_addr=0x64010100, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0x9, 0x7}, {@broadcast, 0x4e20, 0x4, 0x1, 0x7ff, 0x99}}, 0x44) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x1) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:13:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(0x0, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) [ 2473.525763] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2473.529898] msdos: Bad value for 'time_offset' [ 2473.537155] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2473.537404] audit: type=1326 audit(1762787582.602:308): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=33850 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f9de4b19 code=0x0 [ 2473.557578] audit: type=1326 audit(1762787582.617:309): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=33853 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 15:13:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:13:02 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) dup2(r0, r1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) r2 = syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r4 = fcntl$getown(r2, 0x9) r5 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xba, 0xfc, 0x5, 0x20, 0x0, 0x10001, 0x1000, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x1ff, 0x6}, 0xa300, 0x800, 0x101, 0x8, 0x2, 0x4, 0x3b74, 0x0, 0x233f480e, 0x0, 0x370}, r4, 0x6, r5, 0x3) 15:13:02 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 10) 15:13:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) dup2(r1, r0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 15:13:02 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000700", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) [ 2473.728739] FAULT_INJECTION: forcing a failure. [ 2473.728739] name failslab, interval 1, probability 0, space 0, times 0 [ 2473.730408] CPU: 1 UID: 0 PID: 33972 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2473.730435] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2473.730447] Call Trace: [ 2473.730454] [ 2473.730461] dump_stack_lvl+0xfa/0x120 [ 2473.730507] should_fail_ex+0x4d7/0x5e0 [ 2473.730533] ? jbd2__journal_start+0x193/0x6b0 [ 2473.730563] should_failslab+0xc2/0x120 [ 2473.730587] kmem_cache_alloc_noprof+0x80/0x690 [ 2473.730619] ? lock_is_held_type+0x9e/0x120 [ 2473.730653] ? jbd2__journal_start+0x193/0x6b0 [ 2473.730681] jbd2__journal_start+0x193/0x6b0 [ 2473.730715] __ext4_journal_start_sb+0x325/0x5d0 [ 2473.730745] __ext4_new_inode+0x2ca1/0x4d10 [ 2473.730791] ? __pfx___ext4_new_inode+0x10/0x10 [ 2473.730816] ? __pfx_avc_has_perm+0x10/0x10 [ 2473.730840] ? __pfx___dquot_initialize+0x10/0x10 [ 2473.730867] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2473.730879] ext4_mkdir+0x331/0xb30 [ 2473.730918] ? __pfx_ext4_mkdir+0x10/0x10 [ 2473.730946] ? security_inode_permission+0x72/0xe0 [ 2473.730976] vfs_mkdir+0x606/0x950 [ 2473.731007] do_mkdirat+0x101/0x2f0 [ 2473.731029] ? __pfx_do_mkdirat+0x10/0x10 [ 2473.731058] __x64_sys_mkdir+0xf3/0x140 [ 2473.731078] do_syscall_64+0xbf/0x430 [ 2473.731099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2473.731119] RIP: 0033:0x7f9cf8c76c27 [ 2473.731134] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2473.731154] RSP: 002b:00007f9cf61ecfa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2473.731172] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf8c76c27 [ 2473.731186] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000140 [ 2473.731198] RBP: 00007f9cf61ed040 R08: 0000000000000000 R09: 0000000000000000 [ 2473.731209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000100 [ 2473.731221] R13: 0000000020000140 R14: 00007f9cf61ed000 R15: 00000000200004c0 [ 2473.731250] [ 2473.731318] EXT4-fs error (device sda) in __ext4_new_inode:1086: Out of memory 15:13:02 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x3, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:13:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) dup2(r1, r0) 15:13:02 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xfff, 0x5}}, './file0\x00'}) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x81, 0xff, 0x8, 0x7, 0x0, 0x3775c6a2, 0x4804, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp, 0x40800, 0x7fff, 0x1, 0x2, 0x291f, 0x3, 0x8, 0x0, 0x6, 0x0, 0x7}, 0x0, 0x2, r1, 0x1) r2 = socket$unix(0x1, 0x2, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x3c) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:13:03 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000800", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:13:03 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 11) [ 2473.994379] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2474.043500] msdos: Bad value for 'time_offset' [ 2474.389470] audit: type=1326 audit(1762787583.457:310): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=33853 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 15:13:12 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) 15:13:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x4, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:13:12 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000900", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:13:12 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 12) 15:13:12 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x20000, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:13:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x99}, {r0, 0x4}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:13:12 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:13:12 executing program 5: r0 = fsopen(&(0x7f0000000000)='ncpfs\x00', 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x95e73a16b80dd5cb, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='-\xf5*)@\x00', &(0x7f0000000200)=')\x00', 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000100)={0x7, 0x6}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x34bf}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="110000000000000000000000000000b57bd12da953a226c475687e5cef364a3149362cfac8539fbfba31f89760cdfc82a3d7fb5e3edc31df664323a50248afaf68ba7cb3d62fefec8b7f1763359a7b625f23be10517c64928057bfa7b245662e915114d9a2aceb1bed8a7911d2b00514b7f23ce36cfa90ba33d1648f22651b0a61f43d085ce9fb8aa1b3ce381bdc29b3f5f2a3855b7ea78e1f334511334eff41c6f585cc15510fc2e35a323fa308db9bdff4597bba49b0395f73cc9cc33ee7e30feb"]}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) r5 = eventfd2(0xa5d, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000280)={0x1ff, 0x0, &(0x7f0000000240)=[r2, r3, r0, r4, r5, r0]}, 0x6) r6 = syz_open_dev$mouse(&(0x7f00000002c0), 0x100, 0x400000) r7 = accept4$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10, 0x80000) close_range(r0, r7, 0x2) [ 2483.763161] FAULT_INJECTION: forcing a failure. [ 2483.763161] name failslab, interval 1, probability 0, space 0, times 0 [ 2483.764975] CPU: 0 UID: 0 PID: 34199 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2483.765004] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2483.765016] Call Trace: [ 2483.765024] [ 2483.765032] dump_stack_lvl+0xfa/0x120 [ 2483.765077] should_fail_ex+0x4d7/0x5e0 [ 2483.765103] should_failslab+0xc2/0x120 [ 2483.765128] __kmalloc_noprof+0xcd/0x680 [ 2483.765155] ? posix_acl_create.part.0+0x29a/0x4e0 [ 2483.765190] ? security_inode_init_security+0x113/0x370 [ 2483.765229] security_inode_init_security+0x113/0x370 [ 2483.765262] ? __pfx_ext4_initxattrs+0x10/0x10 [ 2483.765295] ? __pfx_security_inode_init_security+0x10/0x10 [ 2483.765332] ? crc32c+0x1ae/0x350 [ 2483.765366] __ext4_new_inode+0x3917/0x4d10 [ 2483.765410] ? __pfx___ext4_new_inode+0x10/0x10 [ 2483.765440] ? __pfx___dquot_initialize+0x10/0x10 [ 2483.765484] ext4_mkdir+0x331/0xb30 [ 2483.765527] ? __pfx_ext4_mkdir+0x10/0x10 [ 2483.765556] ? security_inode_permission+0x72/0xe0 [ 2483.765589] vfs_mkdir+0x606/0x950 [ 2483.765625] do_mkdirat+0x101/0x2f0 [ 2483.765648] ? __pfx_do_mkdirat+0x10/0x10 [ 2483.765680] __x64_sys_mkdir+0xf3/0x140 [ 2483.765703] do_syscall_64+0xbf/0x430 [ 2483.765728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2483.765750] RIP: 0033:0x7f9cf8c76c27 [ 2483.765767] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2483.765796] RSP: 002b:00007f9cf61ecfa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2483.765818] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf8c76c27 [ 2483.765832] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000140 [ 2483.765845] RBP: 00007f9cf61ed040 R08: 0000000000000000 R09: 0000000000000000 [ 2483.765858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000100 [ 2483.765871] R13: 0000000020000140 R14: 00007f9cf61ed000 R15: 00000000200004c0 [ 2483.765903] [ 2483.833103] audit: type=1326 audit(1762787592.900:311): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=34205 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f9de4b19 code=0x0 [ 2483.852913] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:13:12 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 13) [ 2483.915004] audit: type=1326 audit(1762787592.982:312): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=34202 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 15:13:13 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) 15:13:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:13:13 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) dup2(r0, r1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x3f) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:13:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x99}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) [ 2484.004078] msdos: Bad value for 'time_offset' 15:13:13 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 14) 15:13:13 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000f00", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:13:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x6, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:13:13 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) [ 2484.118026] msdos: Bad value for 'time_offset' 15:13:13 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 15) [ 2484.222722] msdos: Bad value for 'time_offset' [ 2484.723539] audit: type=1326 audit(1762787593.791:313): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=34202 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 15:13:23 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x6, 0x8, &(0x7f00000007c0)=[{&(0x7f0000000140)="930ffc6f302a732a7b5352a290a53f41359dbde3f29f5c324eee6fad58030a125e2970c305b50fc495659d9b33fbb1be6b8822936a983c435eb3fde8e86858c897f43f2568a6e72f09aca8e5b54f6020e72103c041a6577165c5deadc5b97d01ea324966be5ca04671784103a61519ea2d52be3ca229af718c1e89a3bd505e9268b53f6ae36f4efb64327227c3ed6f823e3a89963830d1ad40aef9fc6df00089c4e345c8f5034c6f041fe97b272c897df6bb68563aa7fe3fe18e2f75688e49f216e9fa325139a0fe1220906e175d8e42d42ce70ac1563863372236bd905cf28dc998903c5cda29dff0a0c214d70ce1eb7fde2a83c8438896", 0xf8, 0x7}, {&(0x7f0000000240)="766a86b4d62c9aa805faab71386de72c4730d1f74ccb38f51e62390dfe2e3697db5dc040ec1872152a332e659b924f3793de4b3d602e18cebbf1fae8fc0320c9451168407e8a31a497eb480fcf64db9d4835c6ff09c37d308c51d874c777706a0eb75ef7203ce2e5eb3a025c402d84992cd17b1eac50fb68c6066e365d2de1782bbd03092e4486dfc7fd0fc008b9", 0x8e, 0x7}, {&(0x7f0000000300)="c3297f40afb526cc8a2c452b8cd5748efadf483947c7293930f9379033826eb701bdffbe61d3e345992c07cbafb22d38b1b9743ea54d475556c1a553de12e6acf80fb65687a34e8b77ea9c55fbddd828303bab7a2622c2738858a99b330b65eb1c8dd03abf279466baade5ab223178552ac4ed47d54328669771e8e05d08defd9a5f1822be837b721284338a3192e08a35ccbbcd1dca07cf5d3c62796cb6bcdc09f58a3457048125e2e9c88c8533a4500b260289b5b883a1ca034e0cd3080684cce6bdb6d9d6bbc01279d3305731352f3336a8ace0a37a046db6b29fac7442e9c0981434daa9b0b4443896f855413f2462", 0xf1, 0x1ff}, {&(0x7f0000000400)="a0e3b3e09774c680c93d7bfaf7a97011fc215ae9e25597ab5889ec579bdb1bea4c2d4c8f96b6345151aefe2675eef3adfa21c27ce82d13a1037137a3d78a5ab216341d6deecf61602b005c2ff104a6b5530d091e7cca1b470a1a88f9cb1278e76ddb908474115902e9eb291f1f2f6389e26d7f78d35bef69fdd559a8a3bc92442adb678a87b3fc2803ced504b890f4e063ffc9573b2f373a5e2a434ef192cfa0c708b6199ca2e06d30f2f05488972b4fc92c11fcf219b633d47ad519195932c3d5476bb0b76d9393bd594c5aa8b499597ab89388de331f74ebb8614a0f28a8", 0xdf, 0x91a}, {&(0x7f0000000500)="0ae5eda1a93a04920f5fed605a5cd5c34863404543047bcc754492a26d3d311bb1f814a00c8a2325b14cf45e22a66a18b5858bc95c840e5a31e859f2a5d3c738aa61601e124b86f9048c44b0d2991a3c8cb15b66a3", 0x55, 0x70b}, {&(0x7f0000000580)="6809df6d01056bd3ded438279c3255402828101d37aa38311bfdcaf61040f39b87b9cfafc6563ebe12f9b005126ef0a23c30b352584f299b1916f0ed2fd418ee285fa83dee3ce8990fda8d94c2386c7166a91c1c5a0f5199344211af03343fed90e5ce91da697d6cf6c3e68f41cdde8be85615b3c711f0d4ebfc3777", 0x7c, 0x2}, {&(0x7f0000000600)="6a7fd306176ff779e305e13181db939c74c040258139d7c1718678923797aa3bdcbd21addbc9f296e2d9b3cd23f772d5ecbdffe59d7efec51cca694fe6091a4ce465272ccc0851a8e8e3ad933fbbd06a7bb66b10d82ff8b953782b086320f18b414bdcd5583eb1631e8926dc7b73184ddc658bc9fe25a678ce2e706bae4e1735610faadc0985300edc068c98e87a93ade9d75ae40bb792b4d09c62b31f7ea32308", 0xa1, 0x1}, {&(0x7f00000006c0)="ac4ca7eb4c2574116a8ae1418bec5f8946bc47c042503b5629414cfd24bddc92d81b43761b5f600280c749efffce2d487c6423999872c3d90d2100c5a5a63e618d791f7b490719df9aa35350ea4787485ba09ad0c777117534e22b9ad3426a750bd2d778a55cc73d4426121830f2d68100960209344fb1985505b4218980022efca1bdb3f162daf82d6e8dc175e4800b3385b920fd16e7c75d83e84eafc990fbb736809c2461df34653d97eb021474015f5677415199072a122f4fc48a90c281988698a0f41c813c9a69f31c975c4100e01ff14f31865906ef85a0905b0d8593d8298a462ff6", 0xe6, 0x7fffffff}], 0x80020, &(0x7f0000000880)={[{@huge_never}, {@huge_never}, {@huge_always}, {@huge_within_size}, {@nr_blocks={'nr_blocks', 0x3d, [0x34, 0x65, 0x65, 0x38, 0x70, 0x70, 0x31]}}, {@gid={'gid', 0x3d, 0xee00}}], [{@appraise_type}, {@seclabel}, {@smackfstransmute={'smackfstransmute', 0x3d, '&.#\\+^{)$.{\'{@\xf0.\x8d@/'}}, {@appraise_type}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x30, 0x62, 0x38, 0x0, 0x30, 0x67, 0x39], 0x2d, [0x63, 0x39, 0x65, 0x61], 0x2d, [0x37, 0x38, 0x39, 0x39], 0x2d, [0x37, 0x36, 0x1, 0x37], 0x2d, [0x63, 0x39, 0x33, 0x34, 0x65, 0x61, 0x32, 0x61]}}}]}) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r2, {0x100}}, './file0\x00'}) move_mount(r1, &(0x7f0000000d80)='./file0\x00', r3, &(0x7f0000000e00)='./file0\x00', 0x4) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000980)={0x0, 0x1ff, 0xc00000000000, 0xe206766104e0c115}) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:13:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x99}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:13:23 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() pidfd_open(r0, 0x0) syz_open_procfs(r0, &(0x7f0000000100)='net/softnet_stat\x00') creat(&(0x7f0000000000)='./file0\x00', 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) socket$inet6_tcp(0xa, 0x1, 0x0) 15:13:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x7, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:13:23 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) 15:13:23 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 16) 15:13:23 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00f000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:13:23 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) [ 2494.013172] audit: type=1326 audit(1762787603.079:314): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=34453 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f9de4b19 code=0x0 [ 2494.017496] loop7: detected capacity change from 0 to 264192 [ 2494.027255] loop7: detected capacity change from 0 to 264192 15:13:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x9, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2494.065767] FAULT_INJECTION: forcing a failure. [ 2494.065767] name failslab, interval 1, probability 0, space 0, times 0 [ 2494.067690] CPU: 0 UID: 0 PID: 34469 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2494.067720] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2494.067732] Call Trace: [ 2494.067740] [ 2494.067748] dump_stack_lvl+0xfa/0x120 [ 2494.067795] should_fail_ex+0x4d7/0x5e0 [ 2494.067827] should_failslab+0xc2/0x120 [ 2494.067852] __kmalloc_noprof+0xcd/0x680 [ 2494.067877] ? perf_trace_lock_acquire+0xc9/0x700 [ 2494.067911] ? find_held_lock+0x2b/0x80 [ 2494.067935] ? ext4_find_extent+0x7f5/0xa00 [ 2494.067972] ext4_find_extent+0x7f5/0xa00 [ 2494.068009] ext4_ext_map_blocks+0x1cc/0x5f30 [ 2494.068046] ? lock_is_held_type+0x9e/0x120 [ 2494.068091] ? bdev_getblk+0xd6/0x660 [ 2494.068118] ? perf_trace_lock_acquire+0xc9/0x700 [ 2494.068151] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2494.068194] ? perf_trace_lock_acquire+0xc9/0x700 [ 2494.068225] ? register_lock_class+0x41/0x560 [ 2494.068262] ? __lock_acquire+0xc65/0x1b70 [ 2494.068308] ? lock_acquire+0x15e/0x2f0 [ 2494.068337] ? ext4_map_blocks+0x4a8/0x1510 [ 2494.068366] ext4_map_query_blocks+0x110/0x900 [ 2494.068403] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 2494.068434] ? do_raw_read_unlock+0x44/0xe0 [ 2494.068456] ? __pfx_down_read+0x10/0x10 [ 2494.068477] ? ext4_es_lookup_extent+0xcd/0xbb0 [ 2494.068508] ext4_map_blocks+0x4bc/0x1510 [ 2494.068540] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2494.068562] ? __pfx_ext4_initxattrs+0x10/0x10 [ 2494.068596] ? __pfx_security_inode_init_security+0x10/0x10 [ 2494.068635] ? crc32c+0x1ae/0x350 [ 2494.068666] ? __brelse+0x7f/0xa0 [ 2494.068697] ? __ext4_new_inode+0x116/0x4d10 [ 2494.068728] ext4_append+0x1af/0x530 [ 2494.068758] ? __pfx_ext4_append+0x10/0x10 [ 2494.068787] ? __pfx___ext4_new_inode+0x10/0x10 [ 2494.068824] ext4_init_new_dir+0x13c/0x240 [ 2494.068855] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 2494.068898] ext4_mkdir+0x3c5/0xb30 [ 2494.068936] ? __pfx_ext4_mkdir+0x10/0x10 [ 2494.068966] ? security_inode_permission+0x72/0xe0 [ 2494.068999] vfs_mkdir+0x606/0x950 [ 2494.069035] do_mkdirat+0x101/0x2f0 [ 2494.069059] ? __pfx_do_mkdirat+0x10/0x10 [ 2494.069092] __x64_sys_mkdir+0xf3/0x140 [ 2494.069116] do_syscall_64+0xbf/0x430 [ 2494.069140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2494.069162] RIP: 0033:0x7f9cf8c76c27 [ 2494.069179] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2494.069200] RSP: 002b:00007f9cf61ecfa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2494.069221] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf8c76c27 [ 2494.069235] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000140 [ 2494.069248] RBP: 00007f9cf61ed040 R08: 0000000000000000 R09: 0000000000000000 [ 2494.069261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000100 [ 2494.069274] R13: 0000000020000140 R14: 00007f9cf61ed000 R15: 00000000200004c0 [ 2494.069307] 15:13:23 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) r4 = gettid() clone3(&(0x7f0000001bc0)={0x80, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000001740), {0x9}, &(0x7f0000001780)=""/168, 0xa8, &(0x7f0000001840)=""/15, &(0x7f0000001b80)=[0x0, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4], 0x5}, 0x58) r5 = syz_io_uring_complete(0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000014c0)={0x8, 'hsr0\x00', {'vlan1\x00'}, 0xa2f}) setsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f0000002fc0)=0xfff, 0x4) syz_mount_image$nfs4(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x3, 0x3, &(0x7f0000001440)=[{&(0x7f0000000340)="8fd3f5a3fb86091d9f2e1b80ad161fad7e91cb70830ede96dff0c26ff8fbae6de6d10136c9aa7a4b4f60213c4232e9da4da2e21274e1715cf1b4fa626b7f08ba8e513b29caaf7f07065cc7ae1a201f08dc73fcd8", 0x54, 0x7}, {&(0x7f00000003c0)="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", 0x1000, 0x1}, {&(0x7f00000013c0)="886ee72b117d05ef013da18966060f15c451f5ec047ca688be8b3291f7b4ba7c77bebfd90ff38e07a411f1198aa8216f94f9e822a56cf6c0a3e79d715a6030359207be04a5", 0x45, 0x401}], 0x200034, &(0x7f0000001540)=ANY=[@ANYBLOB="402a7b2c7065726d69745f646972650900696f2c7065726d69745f646972656374696f2c00097bd35fb6c5db90a810724d88aebdca899d7427842d49a6e6df0854303a33d76fa0ece2e7999eb076038be40f84f723615cd9a3284a8464d302ead4eed44fa04b13869d2d24a88f88476e3b76"]) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r6) 15:13:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x10, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:13:23 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) [ 2494.146743] audit: type=1326 audit(1762787603.213:315): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=34460 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 [ 2494.186254] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2494.219879] loop7: detected capacity change from 0 to 8 15:13:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x25, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:13:23 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) 15:13:23 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 17) [ 2494.263406] audit: type=1326 audit(1762787603.331:316): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=34460 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 15:13:23 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000003", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:13:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1267, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2494.340376] msdos: Bad value for 'time_offset' 15:13:33 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x3, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) 15:13:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x99}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:13:33 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:13:33 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) 15:13:33 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 18) 15:13:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1274, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:13:33 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000005", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) [ 2504.062830] FAULT_INJECTION: forcing a failure. [ 2504.062830] name failslab, interval 1, probability 0, space 0, times 0 [ 2504.064031] CPU: 0 UID: 0 PID: 34710 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2504.064048] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2504.064056] Call Trace: [ 2504.064060] [ 2504.064065] dump_stack_lvl+0xfa/0x120 [ 2504.064094] should_fail_ex+0x4d7/0x5e0 [ 2504.064110] ? __es_insert_extent+0xed2/0x1370 [ 2504.064129] should_failslab+0xc2/0x120 [ 2504.064143] kmem_cache_alloc_noprof+0x80/0x690 [ 2504.064161] ? do_syscall_64+0xbf/0x430 [ 2504.064177] ? __es_insert_extent+0xed2/0x1370 [ 2504.064194] __es_insert_extent+0xed2/0x1370 [ 2504.064214] ? __pfx_do_raw_write_lock+0x10/0x10 [ 2504.064234] ext4_es_insert_extent+0x438/0x1090 [ 2504.064252] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 2504.064268] ? lock_acquire+0x15e/0x2f0 [ 2504.064286] ? find_held_lock+0x2b/0x80 [ 2504.064299] ? ext4_es_find_extent_range+0x1cf/0x500 [ 2504.064319] ? lock_release+0xc8/0x290 [ 2504.064337] ? do_raw_read_unlock+0x44/0xe0 [ 2504.064353] ext4_ext_map_blocks+0x1797/0x5f30 [ 2504.064381] ? bdev_getblk+0xd6/0x660 [ 2504.064398] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2504.064415] ? perf_trace_lock_acquire+0xc9/0x700 [ 2504.064435] ? look_up_lock_class+0x56/0x150 [ 2504.064452] ? perf_trace_lock_acquire+0xc9/0x700 [ 2504.064470] ? register_lock_class+0x41/0x560 [ 2504.064487] ? perf_trace_lock_acquire+0xc9/0x700 [ 2504.064504] ? register_lock_class+0x41/0x560 [ 2504.064524] ? __lock_acquire+0xc65/0x1b70 [ 2504.064541] ? __lock_acquire+0xc61/0x1b70 [ 2504.064564] ? lock_acquire+0x15e/0x2f0 [ 2504.064580] ? ext4_map_blocks+0x4a8/0x1510 [ 2504.064597] ext4_map_query_blocks+0x110/0x900 [ 2504.064621] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 2504.064638] ? do_raw_read_unlock+0x44/0xe0 [ 2504.064650] ? __pfx_down_read+0x10/0x10 [ 2504.064662] ? ext4_es_lookup_extent+0xcd/0xbb0 [ 2504.064678] ext4_map_blocks+0x4bc/0x1510 [ 2504.064695] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2504.064708] ? __pfx_ext4_initxattrs+0x10/0x10 [ 2504.064727] ? __pfx_security_inode_init_security+0x10/0x10 [ 2504.064749] ? crc32c+0x1ae/0x350 [ 2504.064767] ? __brelse+0x7f/0xa0 [ 2504.064789] ? __ext4_new_inode+0x116/0x4d10 [ 2504.064806] ext4_append+0x1af/0x530 [ 2504.064823] ? __pfx_ext4_append+0x10/0x10 [ 2504.064839] ? __pfx___ext4_new_inode+0x10/0x10 [ 2504.064859] ext4_init_new_dir+0x13c/0x240 [ 2504.064876] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 2504.064899] ext4_mkdir+0x3c5/0xb30 [ 2504.064919] ? __pfx_ext4_mkdir+0x10/0x10 [ 2504.064935] ? security_inode_permission+0x72/0xe0 [ 2504.064953] vfs_mkdir+0x606/0x950 [ 2504.064974] do_mkdirat+0x101/0x2f0 [ 2504.064988] ? __pfx_do_mkdirat+0x10/0x10 [ 2504.065006] __x64_sys_mkdir+0xf3/0x140 [ 2504.065019] do_syscall_64+0xbf/0x430 [ 2504.065031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2504.065044] RIP: 0033:0x7f9cf8c76c27 [ 2504.065054] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2504.065066] RSP: 002b:00007f9cf61ecfa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2504.065078] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf8c76c27 [ 2504.065085] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000140 [ 2504.065093] RBP: 00007f9cf61ed040 R08: 0000000000000000 R09: 0000000000000000 [ 2504.065100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000100 [ 2504.065107] R13: 0000000020000140 R14: 00007f9cf61ed000 R15: 00000000200004c0 [ 2504.065126] [ 2504.092879] msdos: Bad value for 'time_offset' [ 2504.110973] audit: type=1326 audit(1762787613.173:317): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=34705 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 15:13:33 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 19) 15:13:33 executing program 1: r0 = syz_open_dev$sg(0x0, 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) [ 2504.150624] audit: type=1326 audit(1762787613.218:318): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=34739 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f9de4b19 code=0x0 [ 2504.177159] FAULT_INJECTION: forcing a failure. [ 2504.177159] name failslab, interval 1, probability 0, space 0, times 0 [ 2504.179132] CPU: 1 UID: 0 PID: 34781 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2504.179164] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2504.179178] Call Trace: [ 2504.179185] [ 2504.179194] dump_stack_lvl+0xfa/0x120 [ 2504.179239] should_fail_ex+0x4d7/0x5e0 [ 2504.179267] ? __es_insert_extent+0xed2/0x1370 [ 2504.179301] should_failslab+0xc2/0x120 [ 2504.179327] kmem_cache_alloc_noprof+0x80/0x690 [ 2504.179361] ? do_syscall_64+0xbf/0x430 [ 2504.179391] ? __es_insert_extent+0xed2/0x1370 [ 2504.179424] __es_insert_extent+0xed2/0x1370 [ 2504.179463] ? __pfx_do_raw_write_lock+0x10/0x10 [ 2504.179500] ext4_es_insert_extent+0x438/0x1090 [ 2504.179536] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 2504.179567] ? lock_acquire+0x15e/0x2f0 [ 2504.179602] ? find_held_lock+0x2b/0x80 [ 2504.179627] ? ext4_es_find_extent_range+0x1cf/0x500 [ 2504.179665] ? lock_release+0xc8/0x290 [ 2504.179700] ? do_raw_read_unlock+0x44/0xe0 [ 2504.179732] ext4_ext_map_blocks+0x1797/0x5f30 [ 2504.179795] ? bdev_getblk+0xd6/0x660 [ 2504.179828] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2504.179859] ? perf_trace_lock_acquire+0xc9/0x700 [ 2504.179899] ? perf_trace_lock_acquire+0xc9/0x700 [ 2504.179934] ? look_up_lock_class+0x66/0x150 [ 2504.179970] ? perf_trace_lock_acquire+0xc9/0x700 [ 2504.180003] ? register_lock_class+0x41/0x560 [ 2504.180043] ? __lock_acquire+0xc65/0x1b70 [ 2504.180076] ? __lock_acquire+0xc61/0x1b70 [ 2504.180121] ? lock_acquire+0x15e/0x2f0 [ 2504.180153] ? ext4_map_blocks+0x4a8/0x1510 [ 2504.180183] ext4_map_query_blocks+0x110/0x900 [ 2504.180223] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 2504.180257] ? do_raw_read_unlock+0x44/0xe0 [ 2504.180279] ? __pfx_down_read+0x10/0x10 [ 2504.180302] ? ext4_es_lookup_extent+0xcd/0xbb0 [ 2504.180335] ext4_map_blocks+0x4bc/0x1510 [ 2504.180369] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2504.180393] ? __pfx_ext4_initxattrs+0x10/0x10 [ 2504.180429] ? __pfx_security_inode_init_security+0x10/0x10 [ 2504.180470] ? crc32c+0x1ae/0x350 [ 2504.180503] ? __brelse+0x7f/0xa0 [ 2504.180536] ? __ext4_new_inode+0x116/0x4d10 [ 2504.180570] ext4_append+0x1af/0x530 [ 2504.180602] ? __pfx_ext4_append+0x10/0x10 [ 2504.180632] ? __pfx___ext4_new_inode+0x10/0x10 [ 2504.180671] ext4_init_new_dir+0x13c/0x240 [ 2504.180704] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 2504.180751] ext4_mkdir+0x3c5/0xb30 [ 2504.180792] ? __pfx_ext4_mkdir+0x10/0x10 [ 2504.180824] ? security_inode_permission+0x72/0xe0 [ 2504.180860] vfs_mkdir+0x606/0x950 [ 2504.180898] do_mkdirat+0x101/0x2f0 [ 2504.180924] ? __pfx_do_mkdirat+0x10/0x10 [ 2504.180960] __x64_sys_mkdir+0xf3/0x140 [ 2504.180985] do_syscall_64+0xbf/0x430 [ 2504.181010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2504.181033] RIP: 0033:0x7f9cf8c76c27 [ 2504.181051] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2504.181074] RSP: 002b:00007f9cf61ecfa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2504.181097] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf8c76c27 [ 2504.181112] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000140 [ 2504.181127] RBP: 00007f9cf61ed040 R08: 0000000000000000 R09: 0000000000000000 [ 2504.181141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000100 [ 2504.181155] R13: 0000000020000140 R14: 00007f9cf61ed000 R15: 00000000200004c0 [ 2504.181191] 15:13:33 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000006", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:13:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1275, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2504.259578] msdos: Bad value for 'time_offset' 15:13:33 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) read(r0, &(0x7f0000000100)=""/106, 0x6a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) [ 2504.427728] audit: type=1326 audit(1762787613.494:319): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=34931 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 [ 2505.259381] audit: type=1326 audit(1762787614.327:320): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=34931 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 15:13:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) 15:13:42 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 20) 15:13:42 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f00000002c0)=[0xffffffffffffffff, 0xee01, 0xee00, 0xee00]) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@gid={'gid', 0x3d, r5}}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) statx(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x800, 0x40, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@gid={'gid', 0x3d, r9}}]}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {0x1, 0x4}, [{0x2, 0x2, 0xee00}, {0x2, 0x3, r2}, {0x2, 0x4, 0xee00}, {0x2, 0x0, 0xee01}, {0x2, 0x4, 0xffffffffffffffff}], {}, [{0x8, 0x4, r3}, {0x8, 0x6, r5}, {0x8, 0x2, r6}, {0x8, 0x3, r7}, {0x8, 0x2}, {0x8, 0x4, r9}, {0x8, 0x6}, {0x8, 0x2, 0xee01}], {0x10, 0x7}}, 0x8c, 0x5) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:13:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1276, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:13:42 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000007", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:13:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x99}, {0xffffffffffffffff, 0x4}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:13:42 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:13:42 executing program 5: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000001, 0x110, 0xffffffffffffffff, 0x8000000) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x10010, 0xffffffffffffffff, 0x10000000) r2 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x1c, 0x0, r4) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00', 0x2, 0x101080, 0x12345, {0x0, r4}}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r6) ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f0000000000)) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f00000002c0)=0x1) write$9p(0xffffffffffffffff, &(0x7f0000000100)="d238436c3dd4485f8c8c912d62e827662572bfe9b3544d2d58fd7aa521af535e6a90a976de75e6fb1593b6003013473529f6eb5d12766cd63c219697cddb77ebdfa65f17c3ab4794db418a87f4028cafbdcfca743fcf4caa92258b46a351c913eadbf964da6a51ee5a34630769bfd7a4fb73a6b5aac1e28e7b578f292212db250b447fd9820863da0524cc61ea7e26f727a731c881b0210f1b7423a18ef8d69d5589a127d64dbd3fb8d6c05262a3b48b2ca44dfeca9148f79c9413b388a9fbaca2be673c67f9486d14ae4f32", 0xcc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) [ 2513.320070] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2513.335242] audit: type=1326 audit(1762787622.402:321): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=34942 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f9de4b19 code=0x0 [ 2513.340890] tmpfs: Invalid gid '0x00000000ffffffff' [ 2513.342623] tmpfs: Invalid gid '0x00000000ffffffff' [ 2513.351631] FAULT_INJECTION: forcing a failure. [ 2513.351631] name failslab, interval 1, probability 0, space 0, times 0 [ 2513.353767] CPU: 0 UID: 0 PID: 34947 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2513.353805] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2513.353819] Call Trace: [ 2513.353826] [ 2513.353835] dump_stack_lvl+0xfa/0x120 [ 2513.353880] should_fail_ex+0x4d7/0x5e0 [ 2513.353908] should_failslab+0xc2/0x120 [ 2513.353934] __kmalloc_noprof+0xcd/0x680 [ 2513.353964] ? mark_held_locks+0x49/0x80 [ 2513.353996] ? ext4_find_extent+0x7f5/0xa00 [ 2513.354035] ext4_find_extent+0x7f5/0xa00 [ 2513.354075] ext4_ext_map_blocks+0x1cc/0x5f30 [ 2513.354141] tmpfs: Invalid gid '0x00000000ffffffff' [ 2513.354131] ? perf_trace_lock_acquire+0xc9/0x700 [ 2513.354164] ? perf_trace_lock_acquire+0xc9/0x700 [ 2513.354218] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2513.354268] ? lock_acquire+0x15e/0x2f0 [ 2513.354299] ? ext4_map_blocks+0x564/0x1510 [ 2513.354338] ? down_write+0x119/0x1f0 [ 2513.354362] ? __pfx_down_write+0x10/0x10 [ 2513.354395] ext4_map_blocks+0x62d/0x1510 [ 2513.354425] ? __up_read+0x197/0x750 [ 2513.354447] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2513.354469] ? __pfx___up_read+0x10/0x10 [ 2513.354492] ? lock_release+0xc8/0x290 [ 2513.354533] ? ext4_map_blocks+0x1e9/0x1510 [ 2513.354566] ext4_getblk+0x67d/0x8e0 [ 2513.354592] ? __pfx_ext4_getblk+0x10/0x10 [ 2513.354614] ? __pfx_security_inode_init_security+0x10/0x10 [ 2513.354655] ? crc32c+0x1ae/0x350 [ 2513.354695] ext4_bread+0x2e/0x1a0 [ 2513.354721] ext4_append+0x21d/0x530 [ 2513.354753] ? __pfx_ext4_append+0x10/0x10 [ 2513.354784] ? __pfx___ext4_new_inode+0x10/0x10 [ 2513.354823] ext4_init_new_dir+0x13c/0x240 [ 2513.354856] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 2513.354902] ext4_mkdir+0x3c5/0xb30 [ 2513.354943] ? __pfx_ext4_mkdir+0x10/0x10 [ 2513.354975] ? security_inode_permission+0x72/0xe0 [ 2513.355011] vfs_mkdir+0x606/0x950 [ 2513.355049] do_mkdirat+0x101/0x2f0 [ 2513.355075] ? __pfx_do_mkdirat+0x10/0x10 [ 2513.355110] __x64_sys_mkdir+0xf3/0x140 [ 2513.355135] do_syscall_64+0xbf/0x430 [ 2513.355162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2513.355185] RIP: 0033:0x7f9cf8c76c27 [ 2513.355203] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2513.355226] RSP: 002b:00007f9cf61ecfa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2513.355249] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf8c76c27 [ 2513.355264] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000140 [ 2513.355278] RBP: 00007f9cf61ed040 R08: 0000000000000000 R09: 0000000000000000 [ 2513.355292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000100 [ 2513.355306] R13: 0000000020000140 R14: 00007f9cf61ed000 R15: 00000000200004c0 [ 2513.355342] [ 2513.377374] tmpfs: Invalid gid '0x00000000ffffffff' 15:13:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) 15:13:42 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) [ 2513.429288] audit: type=1326 audit(1762787622.497:322): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=34976 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 15:13:42 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000009", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:13:42 executing program 7: perf_event_open(&(0x7f0000000080)={0x5, 0xffffff6e, 0x7b, 0x0, 0x0, 0xff, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x80000001}, 0x42924, 0xfffffffffffffffc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:13:42 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 21) 15:13:42 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r3 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x5, 0x8, 0x6, 0x6, 0x0, 0x836, 0x1, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x6, 0xfffffffffffffc00}, 0x808, 0x5, 0x3, 0x3, 0xfff, 0x4, 0x4, 0x0, 0x5, 0x0, 0x80}, 0xffffffffffffffff, 0xa, r0, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x40, 0x97, 0x60, 0xcb, 0x0, 0x80, 0x40000, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x48, 0x2, @perf_config_ext={0xcb7, 0x5}, 0x0, 0x0, 0x8000, 0x6, 0xebbf, 0x2, 0x8, 0x0, 0x6}, r2, 0xf, r3, 0xc) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) connect$unix(r4, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) [ 2513.513557] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:13:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2201, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2513.554255] audit: type=1326 audit(1762787622.622:323): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=34976 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 15:13:42 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x80, 0x2, 0x80, 0xff, 0x0, 0x8000, 0x20322, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3d, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x2000, 0x8, 0x101, 0x6, 0x40, 0x1abe0000, 0x0, 0x0, 0x8, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0x8) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) mknodat$loop(r1, &(0x7f0000000100)='./file0\x00', 0x8000, 0x1) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) [ 2513.615967] msdos: Bad value for 'time_offset' 15:13:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) 15:13:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2202, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:13:42 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00c00e", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:13:42 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x404000, 0x56) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000100)={0x6c, ""/108}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) [ 2513.703688] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2513.771403] audit: type=1326 audit(1762787622.839:324): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=35248 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 [ 2513.897047] audit: type=1326 audit(1762787622.963:325): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=35248 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 15:13:53 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 22) 15:13:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2203, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:13:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x99}, {0xffffffffffffffff, 0x4}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:13:53 executing program 1: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) 15:13:53 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:13:53 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000f", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:13:53 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x9, &(0x7f0000000140)=[{0x1, 0x3f, 0x1f, 0x4}, {0x2, 0x81, 0x0, 0x9}, {0x1ff, 0xe8, 0xfd, 0x1ff}, {0x3f, 0x2, 0x1f, 0x1}, {0x2, 0x4}, {0x20, 0x8, 0x0, 0x7}, {0x7, 0x0, 0x5, 0x100}, {0x9, 0x4, 0x3, 0xe0}, {0x9, 0x81, 0x6, 0x40}]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="dd20816fd929751fb56a44e6bec1eb63a89c670e2bbe49304702d1c51e53c691", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00,/file0\x00']) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={0x0, 0x2, r0, 0x8000, 0x80000}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="11000000000000100000000000000000cd3f0624a14fe4fe656d40e07ae6004d58df8ac30aee070ae76aa0604703542c25246f2df6321ec08d6a86ef204bb950b6ef0bf4e8c98e7801f4120bb91f428b0e41462182a42aa22ae2994660d785597a5f3bb390d1db229edb8012190e1de0905f40588592ee4dd7341283598b4f69c438da3804ff894f5010d73479d3a8c6cf53597c78a6a6831894a51e2c9240f26d1a1a7e9f5aa105338a23be55b253251aba6eab29"]}) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0', [{0x20, '@&}{'}, {0x20, '))'}, {}, {0x20, '#[#'}, {0x20, '@'}, {0x20, '.\'-.$-!\\'}, {}, {}, {0x20, '#[#'}], 0xa, "50163065584fb3b525565fee657f1fdd34791abf87c6998374bbfee2a0e470aed3bb59aa7d3d9f0c6a6d8a687424a9fa5019eb867823ef0f2eacb76f8c1d937b12293672e219076d1d768711f84589c05ab37985f23d111f4c344e8878c3bc451e816c628d4d9ff6f18ce3c0054be6a4c0aaf5aaed38e477397630fab0aca3909a376fb32716ef31bc95b8da7068ac9d478ff5580839375213bdba1166c9ccbdc7b12ac74931abf21def6a87356e732cd55cb161b70a27ab25022acdbd704a142d32a5dbc1e4c27170773c52be365bbbfef5d3a4d85eefac5c5a3e2035c17abfc0294e0eb1d8e0d414d344271a8bdd486ac38cf5edadc47e49"}, 0x122) 15:13:53 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x80}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x11820e0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0x1) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = dup2(r5, r3) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x20102, 0x0) move_mount(r7, &(0x7f0000000100)='./file0\x00', r6, &(0x7f0000000140)='./file0\x00', 0x30) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:13:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2205, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2524.066847] FAULT_INJECTION: forcing a failure. [ 2524.066847] name failslab, interval 1, probability 0, space 0, times 0 [ 2524.068318] CPU: 1 UID: 0 PID: 35314 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2524.068347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2524.068360] Call Trace: [ 2524.068367] [ 2524.068375] dump_stack_lvl+0xfa/0x120 [ 2524.068415] should_fail_ex+0x4d7/0x5e0 [ 2524.068439] ? ext4_mb_new_blocks+0x64e/0x4580 [ 2524.068459] should_failslab+0xc2/0x120 [ 2524.068481] kmem_cache_alloc_noprof+0x80/0x690 [ 2524.068515] ? ext4_mb_new_blocks+0x64e/0x4580 [ 2524.068534] ext4_mb_new_blocks+0x64e/0x4580 [ 2524.068564] ? kasan_save_track+0x14/0x30 [ 2524.068584] ? __kasan_kmalloc+0x7f/0x90 [ 2524.068603] ? trace_kmalloc+0x1f/0xb0 [ 2524.068619] ? __kmalloc_noprof+0x274/0x680 [ 2524.068641] ? mark_held_locks+0x49/0x80 [ 2524.068669] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 2524.068690] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2524.068715] ? ext4_inode_to_goal_block+0x323/0x430 [ 2524.068743] ext4_ext_map_blocks+0x1c55/0x5f30 [ 2524.068792] ? perf_trace_lock_acquire+0xc9/0x700 [ 2524.068820] ? perf_trace_lock_acquire+0xc9/0x700 [ 2524.068851] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2524.068890] ? lock_acquire+0x15e/0x2f0 [ 2524.068914] ? ext4_map_blocks+0x564/0x1510 [ 2524.068946] ? __pfx_down_write+0x10/0x10 [ 2524.068974] ext4_map_blocks+0x62d/0x1510 [ 2524.068997] ? __up_read+0x197/0x750 [ 2524.069015] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2524.069033] ? __pfx___up_read+0x10/0x10 [ 2524.069050] ? lock_release+0xc8/0x290 [ 2524.069082] ? ext4_map_blocks+0x1e9/0x1510 [ 2524.069108] ext4_getblk+0x67d/0x8e0 [ 2524.069128] ? __pfx_ext4_getblk+0x10/0x10 [ 2524.069144] ? __pfx_security_inode_init_security+0x10/0x10 [ 2524.069176] ? crc32c+0x1ae/0x350 [ 2524.069208] ext4_bread+0x2e/0x1a0 [ 2524.069228] ext4_append+0x21d/0x530 [ 2524.069258] ? __pfx_ext4_append+0x10/0x10 [ 2524.069281] ? __pfx___ext4_new_inode+0x10/0x10 [ 2524.069312] ext4_init_new_dir+0x13c/0x240 [ 2524.069338] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 2524.069374] ext4_mkdir+0x3c5/0xb30 [ 2524.069405] ? __pfx_ext4_mkdir+0x10/0x10 [ 2524.069430] ? security_inode_permission+0x72/0xe0 [ 2524.069458] vfs_mkdir+0x606/0x950 [ 2524.069488] do_mkdirat+0x101/0x2f0 [ 2524.069509] ? __pfx_do_mkdirat+0x10/0x10 [ 2524.069536] __x64_sys_mkdir+0xf3/0x140 [ 2524.069556] do_syscall_64+0xbf/0x430 [ 2524.069576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2524.069595] RIP: 0033:0x7f9cf8c76c27 [ 2524.069610] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2524.069627] RSP: 002b:00007f9cf61ecfa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2524.069645] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf8c76c27 [ 2524.069657] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000140 [ 2524.069669] RBP: 00007f9cf61ed040 R08: 0000000000000000 R09: 0000000000000000 [ 2524.069680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000100 [ 2524.069691] R13: 0000000020000140 R14: 00007f9cf61ed000 R15: 00000000200004c0 [ 2524.069719] [ 2524.112096] audit: type=1326 audit(1762787633.137:326): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=35304 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f9de4b19 code=0x0 15:13:53 executing program 1: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) 15:13:53 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 23) 15:13:53 executing program 1: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) [ 2524.328687] msdos: Bad value for 'time_offset' 15:14:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2270, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:14:04 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:14:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x99}, {0xffffffffffffffff, 0x4}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:14:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 15:14:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000200)={r2, 0xbe, 0x2}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="11008100bc4cb4c80000000000000000"]}) ioctl$FIONCLEX(r3, 0x5450) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)) 15:14:04 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00c617", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:14:04 executing program 7: r0 = syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') bind$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = signalfd4(r0, &(0x7f0000000100)={[0x44b6]}, 0x8, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 15:14:04 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 24) [ 2535.644946] FAULT_INJECTION: forcing a failure. [ 2535.644946] name failslab, interval 1, probability 0, space 0, times 0 [ 2535.646315] CPU: 0 UID: 0 PID: 35438 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2535.646349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2535.646358] Call Trace: [ 2535.646364] [ 2535.646370] dump_stack_lvl+0xfa/0x120 [ 2535.646403] should_fail_ex+0x4d7/0x5e0 [ 2535.646423] ? ext4_mb_new_blocks+0x241e/0x4580 [ 2535.646440] should_failslab+0xc2/0x120 [ 2535.646459] kmem_cache_alloc_noprof+0x80/0x690 [ 2535.646488] ? ext4_mb_new_blocks+0x241e/0x4580 [ 2535.646504] ext4_mb_new_blocks+0x241e/0x4580 [ 2535.646530] ? kasan_save_track+0x14/0x30 [ 2535.646547] ? __kasan_kmalloc+0x7f/0x90 [ 2535.646563] ? trace_kmalloc+0x1f/0xb0 [ 2535.646576] ? __kmalloc_noprof+0x274/0x680 [ 2535.646593] ? update_load_avg+0x17d/0x1ef0 [ 2535.646615] ? perf_trace_lock_acquire+0xc9/0x700 [ 2535.646641] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 2535.646659] ? ext4_ext_search_right+0x2e8/0xbd0 [ 2535.646681] ? ext4_inode_to_goal_block+0x323/0x430 [ 2535.646704] ext4_ext_map_blocks+0x1c55/0x5f30 [ 2535.646736] ? mark_held_locks+0x49/0x80 [ 2535.646761] ? perf_trace_lock_acquire+0xc9/0x700 [ 2535.646794] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 2535.646831] ? lock_acquire+0x15e/0x2f0 [ 2535.646853] ? ext4_map_blocks+0x564/0x1510 [ 2535.646880] ? __pfx_down_write+0x10/0x10 [ 2535.646905] ext4_map_blocks+0x62d/0x1510 [ 2535.646925] ? __up_read+0x197/0x750 [ 2535.646940] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2535.646955] ? __pfx___up_read+0x10/0x10 [ 2535.646970] ? lock_release+0xc8/0x290 [ 2535.646997] ? ext4_map_blocks+0x1e9/0x1510 [ 2535.647019] ext4_getblk+0x67d/0x8e0 [ 2535.647037] ? __pfx_ext4_getblk+0x10/0x10 [ 2535.647051] ? __pfx_security_inode_init_security+0x10/0x10 [ 2535.647079] ? crc32c+0x1ae/0x350 [ 2535.647114] ext4_bread+0x2e/0x1a0 [ 2535.647136] ext4_append+0x21d/0x530 [ 2535.647165] ? __pfx_ext4_append+0x10/0x10 [ 2535.647192] ? __pfx___ext4_new_inode+0x10/0x10 [ 2535.647229] ext4_init_new_dir+0x13c/0x240 [ 2535.647260] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 2535.647292] ext4_mkdir+0x3c5/0xb30 [ 2535.647319] ? __pfx_ext4_mkdir+0x10/0x10 [ 2535.647340] ? security_inode_permission+0x72/0xe0 [ 2535.647364] vfs_mkdir+0x606/0x950 [ 2535.647391] do_mkdirat+0x101/0x2f0 [ 2535.647408] ? __pfx_do_mkdirat+0x10/0x10 [ 2535.647432] __x64_sys_mkdir+0xf3/0x140 [ 2535.647448] do_syscall_64+0xbf/0x430 [ 2535.647466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2535.647482] RIP: 0033:0x7f9cf8c76c27 [ 2535.647495] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2535.647510] RSP: 002b:00007f9cf61ecfa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2535.647526] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf8c76c27 [ 2535.647536] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000140 [ 2535.647546] RBP: 00007f9cf61ed040 R08: 0000000000000000 R09: 0000000000000000 [ 2535.647555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000100 [ 2535.647565] R13: 0000000020000140 R14: 00007f9cf61ed000 R15: 00000000200004c0 [ 2535.647588] 15:14:04 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c008e24", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) [ 2535.698345] audit: type=1326 audit(1762787644.765:327): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=35433 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f9de4b19 code=0x0 15:14:04 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 25) [ 2535.728539] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:14:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 15:14:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2271, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:14:04 executing program 7: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', r3, 0x29, 0xc1, 0x84, 0xd8a, 0x24, @dev={0xfe, 0x80, '\x00', 0x25}, @mcast1, 0x40, 0x8, 0x8, 0x7}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000400)={r4, 0x1, 0x6, @local}, 0x10) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000080)={@loopback, r3}, 0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x100, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x10001}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2a7a}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40}, 0x200000d0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) openat2(r5, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x10000, 0x2e, 0x1a}, 0x18) bind$unix(r6, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) [ 2535.827544] msdos: Bad value for 'time_offset' 15:14:04 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00248e", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:14:04 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 26) 15:14:04 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd53}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) pwritev2(r1, &(0x7f0000001580)=[{&(0x7f0000000100)="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", 0xfc}, {&(0x7f0000000200)="201cc87988623096a868d98b4142453220bcf3c8ce5fc081d8902aaaf69ce50332f26292287429d86aff2133c5c4468b8fef80c4b4ead5ac6d23e0fb6dc96fda17ef8d92c0c6f208c4df65dc7a9c20c3ad6e", 0x52}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="21c3b630778df30efca94dbd5f1fab478558a31ad8bdd426d21778206741bbc7f2f621d4e96f79caffc2b83b1414925f68a61d0970ea718cba82e857bb9d39579bbba43d68a43e10b2f41bd8b8f53f0417d8d90f1726e5b0124d14b3070da0ef01f660805032fbfa0c7e5f274864875d68a928729cb3c36d18bd08fecd5887d14f347809d1b4afa9001b0396a08a7b75aea929dd375c891f4d336c", 0x9b}, {&(0x7f0000001340)="c9eeebf5d89321ff24a8c828ae04d8089ef3b532a90ecb986796f4c23026a4fc9e86345e856a984576cf77a4d3666380bb1059bfc7722ebfcfbb44a3a94c86f3bd543b1636bdd9bde30a863623086e81e7b85a12a3a35aa685d3838a", 0x5c}, {&(0x7f00000013c0)="1716c202126c5d1e199b60a6007e3f8a0e8ff006fe37a98658216ce29498c5552e9a104862f823e14d9ad09d594e1d5e9e0893bc7955b849dc86844a425a98a4cb9bd05d61f2e7388d82ac69850f0f8a141eed5ea76fff7ca09a1364e899fb8a145bc7e215f5a9999e0e7e0a7da3dcae2c78ee2b4fcdd23a27cba72f8c18a65b840d1fcd37b3814a98a7eda6de60e1a6023e437057e37f38536ffc7d094ff189241320097eda39c629b2d20b009d387b74d3fb1b73b0609fb4414e4e76c821db08daefc8e93d50a5ce", 0xc9}, {&(0x7f00000014c0)="5922e6119228aec2fc3652b9abb68ba9304d868917539432157c70e4182e831899e57a58e59eae2adbc38587a5f31c55630c84dde5e85d62ab5fa25a1dcda4db561efa91f6b2eb9c1c2cff63d1f0e523e4763c380dc223fc98ac1e51956bdb27236bc7038c4aaca4f183c5737752b1f868d6d4de43a50946ea9134beeb40dd2d3b70e1e5544a64b8016cc20560ed9d52b2b07a7f85", 0x95}], 0x7, 0x7ff, 0x2, 0x9) [ 2535.917150] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2535.979348] FAULT_INJECTION: forcing a failure. [ 2535.979348] name failslab, interval 1, probability 0, space 0, times 0 [ 2535.980575] CPU: 0 UID: 0 PID: 35567 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2535.980592] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2535.980600] Call Trace: [ 2535.980605] [ 2535.980609] dump_stack_lvl+0xfa/0x120 [ 2535.980636] should_fail_ex+0x4d7/0x5e0 [ 2535.980648] ? __es_remove_extent+0x53f/0x1570 [ 2535.980670] ? __es_insert_extent+0xed2/0x1370 [ 2535.980687] should_failslab+0xc2/0x120 [ 2535.980701] kmem_cache_alloc_noprof+0x80/0x690 [ 2535.980720] ? __pfx___es_remove_extent+0x10/0x10 [ 2535.980742] ? __es_insert_extent+0xed2/0x1370 [ 2535.980761] __es_insert_extent+0xed2/0x1370 [ 2535.980797] ext4_es_insert_extent+0x438/0x1090 [ 2535.980816] ? __pfx_ext4_es_insert_extent+0x10/0x10 [ 2535.980828] ? lock_acquire+0x15e/0x2f0 [ 2535.980846] ? ext4_map_blocks+0x564/0x1510 [ 2535.980867] ? __pfx_down_write+0x10/0x10 [ 2535.980886] ext4_map_blocks+0x808/0x1510 [ 2535.980902] ? __up_read+0x197/0x750 [ 2535.980914] ? __pfx_ext4_map_blocks+0x10/0x10 [ 2535.980925] ? __pfx___up_read+0x10/0x10 [ 2535.980937] ? lock_release+0xc8/0x290 [ 2535.980958] ? ext4_map_blocks+0x1e9/0x1510 [ 2535.980976] ext4_getblk+0x67d/0x8e0 [ 2535.980989] ? __pfx_ext4_getblk+0x10/0x10 [ 2535.981000] ? __pfx_security_inode_init_security+0x10/0x10 [ 2535.981023] ? crc32c+0x1ae/0x350 [ 2535.981044] ext4_bread+0x2e/0x1a0 [ 2535.981057] ext4_append+0x21d/0x530 [ 2535.981074] ? __pfx_ext4_append+0x10/0x10 [ 2535.981090] ? __pfx___ext4_new_inode+0x10/0x10 [ 2535.981110] ext4_init_new_dir+0x13c/0x240 [ 2535.981128] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 2535.981152] ext4_mkdir+0x3c5/0xb30 [ 2535.981173] ? __pfx_ext4_mkdir+0x10/0x10 [ 2535.981190] ? security_inode_permission+0x72/0xe0 [ 2535.981208] vfs_mkdir+0x606/0x950 [ 2535.981230] do_mkdirat+0x101/0x2f0 [ 2535.981243] ? __pfx_do_mkdirat+0x10/0x10 [ 2535.981262] __x64_sys_mkdir+0xf3/0x140 [ 2535.981275] do_syscall_64+0xbf/0x430 [ 2535.981289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2535.981302] RIP: 0033:0x7f9cf8c76c27 [ 2535.981312] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2535.981324] RSP: 002b:00007f9cf61ecfa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2535.981336] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf8c76c27 [ 2535.981344] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000140 [ 2535.981351] RBP: 00007f9cf61ed040 R08: 0000000000000000 R09: 0000000000000000 [ 2535.981359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000100 [ 2535.981366] R13: 0000000020000140 R14: 00007f9cf61ed000 R15: 00000000200004c0 [ 2535.981385] [ 2536.024108] msdos: Bad value for 'time_offset' [ 2536.043282] audit: type=1326 audit(1762787645.101:328): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=35566 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 [ 2536.868090] audit: type=1326 audit(1762787645.935:329): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=35566 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 15:14:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2272, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:14:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:14:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 15:14:14 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 27) 15:14:14 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000ec0", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:14:14 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:14:14 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) 15:14:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x99}, {r0}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) [ 2545.723775] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2545.726296] msdos: Bad value for 'time_offset' [ 2545.744009] audit: type=1326 audit(1762787654.811:330): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=35677 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 15:14:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xf6, 0x0, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) 15:14:14 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 28) 15:14:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2275, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:14:14 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) [ 2545.882415] audit: type=1326 audit(1762787654.949:331): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=35677 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 15:14:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)={0x204000, 0x124, 0x8}, 0x18) write(0xffffffffffffffff, &(0x7f0000000100)="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", 0xfa) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) [ 2545.915259] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2545.942423] FAULT_INJECTION: forcing a failure. [ 2545.942423] name failslab, interval 1, probability 0, space 0, times 0 [ 2545.944542] CPU: 1 UID: 0 PID: 35802 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2545.944574] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2545.944587] Call Trace: [ 2545.944594] [ 2545.944602] dump_stack_lvl+0xfa/0x120 [ 2545.944649] should_fail_ex+0x4d7/0x5e0 [ 2545.944676] ? jbd2_journal_add_journal_head+0x367/0x5d0 [ 2545.944709] should_failslab+0xc2/0x120 [ 2545.944734] kmem_cache_alloc_noprof+0x80/0x690 [ 2545.944763] ? fs_reclaim_acquire+0xae/0x150 [ 2545.944815] ? jbd2_journal_add_journal_head+0x367/0x5d0 [ 2545.944845] jbd2_journal_add_journal_head+0x367/0x5d0 [ 2545.944882] jbd2_journal_get_create_access+0x44/0x560 [ 2545.944905] ? lock_is_held_type+0x9e/0x120 [ 2545.944944] __ext4_journal_get_create_access+0x54/0x1b0 [ 2545.944979] ext4_getblk+0x3c5/0x8e0 [ 2545.945004] ? __pfx_ext4_getblk+0x10/0x10 [ 2545.945024] ? __pfx_security_inode_init_security+0x10/0x10 [ 2545.945063] ? crc32c+0x1ae/0x350 [ 2545.945101] ext4_bread+0x2e/0x1a0 [ 2545.945125] ext4_append+0x21d/0x530 [ 2545.945155] ? __pfx_ext4_append+0x10/0x10 [ 2545.945184] ? __pfx___ext4_new_inode+0x10/0x10 [ 2545.945221] ext4_init_new_dir+0x13c/0x240 [ 2545.945252] ? __pfx_ext4_init_new_dir+0x10/0x10 [ 2545.945295] ext4_mkdir+0x3c5/0xb30 [ 2545.945334] ? __pfx_ext4_mkdir+0x10/0x10 [ 2545.945363] ? security_inode_permission+0x72/0xe0 [ 2545.945396] vfs_mkdir+0x606/0x950 [ 2545.945432] do_mkdirat+0x101/0x2f0 [ 2545.945457] ? __pfx_do_mkdirat+0x10/0x10 [ 2545.945489] __x64_sys_mkdir+0xf3/0x140 [ 2545.945513] do_syscall_64+0xbf/0x430 [ 2545.945537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2545.945560] RIP: 0033:0x7f9cf8c76c27 [ 2545.945577] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2545.945598] RSP: 002b:00007f9cf61ecfa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2545.945620] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf8c76c27 [ 2545.945634] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000000020000140 [ 2545.945648] RBP: 00007f9cf61ed040 R08: 0000000000000000 R09: 0000000000000000 [ 2545.945661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000100 [ 2545.945674] R13: 0000000020000140 R14: 00007f9cf61ed000 R15: 00000000200004c0 [ 2545.945708] [ 2545.981670] ENOMEM in journal_alloc_journal_head, retrying. 15:14:15 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0017c6", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) [ 2546.045105] msdos: Bad value for 'time_offset' 15:14:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2276, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:14:15 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:14:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)) 15:14:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xf6, 0x0, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) [ 2546.199659] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2546.222310] audit: type=1326 audit(1762787655.290:332): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=35814 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 [ 2547.052512] audit: type=1326 audit(1762787656.120:333): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=35814 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd28c5bbb19 code=0x0 15:14:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1276, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:14:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x99}, {r0}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:14:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2279, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:14:26 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 29) 15:14:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xf6, 0x0, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) 15:14:26 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:14:26 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000f0", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:14:26 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x4cf7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x12, 0xffffffffffffffff, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000140)=' ', 0x1, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x0, &(0x7f0000000000), 0x0, 0x4) r3 = syz_io_uring_complete(r2) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) r5 = fsmount(r3, 0x1, 0x6) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x8, 0x5, 0x1f, 0x7, 0x0, 0x91, 0x100, 0x5, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9e, 0x2, @perf_config_ext={0x7fffffff, 0x9}, 0x900, 0x3, 0x7, 0x5, 0x3ff, 0x9b, 0x8, 0x0, 0xcb4, 0x0, 0x401}, r4, 0x1, r5, 0x8) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000000)={0xc0000010}) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) [ 2557.113130] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2557.120171] msdos: Bad value for 'time_offset' 15:14:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x0, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) 15:14:26 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 30) 15:14:26 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:14:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1276, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:14:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x227a, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2557.296089] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:14:26 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000014c0)={0x0, 0xfffffffffffffffc, 0x2}) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="610000007d010000004200bf920800000008000000000500000000000000000011410200000002000000060000000000002cef000f002f6465762f736e642f74696d6572000000000000000a006d61705f66696c657300", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0xee01], 0x61) r3 = getuid() mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x2a46080, &(0x7f0000000140)={[{@clone_children}, {@name={'name', 0x3d, '}!{'}}], [{@fowner_eq={'fowner', 0x3d, r2}}, {@fsname={'fsname', 0x3d, '$(..'}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_user={'subj_user', 0x3d, '(/'}}, {@context={'context', 0x3d, 'root'}}]}) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:14:26 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x0, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) [ 2557.487957] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:14:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x99}, {r0}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:14:35 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xff}}, './file0\x00'}) bind$unix(r1, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 15:14:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1276, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:14:35 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 31) 15:14:35 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:14:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x227b, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:14:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x0, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) 15:14:35 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) [ 2566.410640] msdos: Bad value for 'time_offset' 15:14:35 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 32) [ 2566.444611] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:14:35 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:14:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x71d}) [ 2566.499412] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2566.500878] FAULT_INJECTION: forcing a failure. [ 2566.500878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2566.500905] CPU: 1 UID: 0 PID: 36086 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2566.500922] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2566.500929] Call Trace: [ 2566.500934] [ 2566.500939] dump_stack_lvl+0xfa/0x120 [ 2566.500968] should_fail_ex+0x4d7/0x5e0 [ 2566.500984] _copy_from_user+0x30/0xd0 [ 2566.500999] memdup_user+0x7e/0xe0 [ 2566.501014] strndup_user+0x78/0xe0 [ 2566.501028] __x64_sys_mount+0x136/0x310 [ 2566.501042] ? __pfx___x64_sys_mount+0x10/0x10 [ 2566.501060] do_syscall_64+0xbf/0x430 [ 2566.501074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2566.501088] RIP: 0033:0x7f9cf8c7904a [ 2566.501098] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2566.501110] RSP: 002b:00007f9cf61ecfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2566.501123] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf8c7904a [ 2566.501131] RDX: 0000000020000100 RSI: 0000000020000140 RDI: 0000000000000000 [ 2566.501139] RBP: 00007f9cf61ed040 R08: 00007f9cf61ed040 R09: 0000000020000100 [ 2566.501147] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000100 [ 2566.501155] R13: 0000000020000140 R14: 00007f9cf61ed000 R15: 00000000200004c0 [ 2566.501173] 15:14:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x227c, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:14:35 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 33) [ 2566.549832] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:14:35 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xf6, 0x1, 0x0, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd18608b"}) [ 2566.603273] FAULT_INJECTION: forcing a failure. [ 2566.603273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2566.604249] CPU: 1 UID: 0 PID: 36095 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) 15:14:35 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) [ 2566.604266] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2566.604274] Call Trace: [ 2566.604279] [ 2566.604284] dump_stack_lvl+0xfa/0x120 [ 2566.604309] should_fail_ex+0x4d7/0x5e0 [ 2566.604325] _copy_from_user+0x30/0xd0 [ 2566.604339] memdup_user+0x7e/0xe0 [ 2566.604354] strndup_user+0x78/0xe0 [ 2566.604368] __x64_sys_mount+0x136/0x310 [ 2566.604383] ? __pfx___x64_sys_mount+0x10/0x10 [ 2566.604401] do_syscall_64+0xbf/0x430 [ 2566.604415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2566.604428] RIP: 0033:0x7f9cf8c7904a [ 2566.604438] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2566.604450] RSP: 002b:00007f9cf61ecfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 15:14:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x71d}) [ 2566.604462] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf8c7904a [ 2566.604471] RDX: 0000000020000100 RSI: 0000000020000140 RDI: 0000000000000000 [ 2566.604479] RBP: 00007f9cf61ed040 R08: 00007f9cf61ed040 R09: 0000000020000100 [ 2566.604487] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000100 [ 2566.604494] R13: 0000000020000140 R14: 00007f9cf61ed000 R15: 00000000200004c0 [ 2566.604512] [ 2566.662505] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2566.675044] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:14:44 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 34) 15:14:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x227d, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:14:44 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000100)="2882b5766c614b088d6ed46cd66d19343e7c4ea775a58176444a8f60c5605a9bd102a790d07b869b7a1f6cb65da51846a389fc01fdb5a73afd9e51aa196ced4b380b1461563643d12cf3dea188e2c2eb932e1a2e40c62a1d6eaca4e73e946e044c1b6473b55441cf0c62b0d90d98316940a6249c450c023a173ab00d6d1c935ac4746b1adf36220f98bd81e825d0a1e831680159de61d1d6dd758bba991221e33d95bf74aa482ef48c949f92f566ce2e6c19f60e47356f7de15e666d60c0977d91e4", 0xc2) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) splice(r1, &(0x7f0000000000)=0x9, r1, &(0x7f0000000200)=0x9, 0x7, 0x4) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:14:44 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:14:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x71d}) 15:14:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1275, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:14:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {r0, 0x4}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:14:44 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00ffff", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) [ 2575.923114] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2575.948332] msdos: Bad value for 'time_offset' 15:14:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x7b, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8"}) 15:14:45 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{}]}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:14:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x227e, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2576.016404] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:14:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1275, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:14:45 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 35) 15:14:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x7b, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8"}) 15:14:45 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{}]}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:14:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00ffff", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:14:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x4}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) [ 2576.119225] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:14:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x7b, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8"}) [ 2576.181161] FAULT_INJECTION: forcing a failure. [ 2576.181161] name fail_usercopy, interval 1, probability 0, space 0, times 0 15:14:45 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000002c0), 0x4001, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x1000) r2 = syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) getsockname$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000000)=0x6e) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x3, 0x8, 0x6, 0xd8, 0x0, 0x1ff, 0x200, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000200), 0xf}, 0x1000, 0x8, 0xfa, 0x7, 0x2c, 0x401, 0xdf77, 0x0, 0x7, 0x0, 0x7}, r4, 0x10, 0xffffffffffffffff, 0x3) openat$cdrom(0xffffffffffffff9c, &(0x7f0000001b80), 0x801, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_debug_messages', 0x103000, 0x20a) recvmmsg$unix(r3, &(0x7f0000001e00)=[{{&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f00000003c0)=""/243, 0xf3}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/45, 0x2d}, {&(0x7f0000000600)=""/134, 0x86}, {&(0x7f00000006c0)=""/162, 0xa2}, {&(0x7f0000000780)=""/207, 0xcf}, {&(0x7f0000000880)=""/73, 0x49}], 0x7}}, {{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/106, 0x6a}, {&(0x7f0000001a80)=""/54, 0x36}, {&(0x7f0000001ac0)=""/50, 0x32}, {&(0x7f0000001b00)=""/122, 0x7a}, {&(0x7f0000001b80)}, {&(0x7f0000001bc0)=""/18, 0x12}, {&(0x7f0000001c00)=""/96, 0x60}], 0x8, &(0x7f0000001d00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}], 0x2, 0x40, &(0x7f0000001e80)={0x77359400}) mkdirat(r2, &(0x7f0000000180)='./file0\x00', 0x22) [ 2576.183002] CPU: 0 UID: 0 PID: 36397 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2576.183034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2576.183048] Call Trace: [ 2576.183057] [ 2576.183067] dump_stack_lvl+0xfa/0x120 [ 2576.183112] should_fail_ex+0x4d7/0x5e0 [ 2576.183141] _copy_from_user+0x30/0xd0 [ 2576.183168] copy_mount_options+0x76/0x180 [ 2576.183207] __x64_sys_mount+0x1ab/0x310 [ 2576.183233] ? __pfx___x64_sys_mount+0x10/0x10 [ 2576.183270] do_syscall_64+0xbf/0x430 [ 2576.183297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2576.183322] RIP: 0033:0x7f9cf8c7904a [ 2576.183340] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2576.183364] RSP: 002b:00007f9cf61ecfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2576.183387] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf8c7904a [ 2576.183404] RDX: 0000000020000100 RSI: 0000000020000140 RDI: 0000000000000000 [ 2576.183419] RBP: 00007f9cf61ed040 R08: 00007f9cf61ed040 R09: 0000000020000100 [ 2576.183434] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000100 [ 2576.183461] R13: 0000000020000140 R14: 00007f9cf61ed000 R15: 00000000200004c0 [ 2576.183508] 15:14:45 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{}]}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x9, 0x6, 0xc9, 0x0, 0x3, 0x1440, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x102e4, 0xb0, 0x9, 0x0, 0x400, 0x2, 0x4, 0x0, 0x1, 0x0, 0x14600}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) [ 2576.236308] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2576.267145] msdos: Bad value for 'time_offset' 15:14:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1275, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:14:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x4}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:14:55 executing program 7: r0 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x9, 0x3f, 0x0, 0x1, 0x0, 0xff, 0x400, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0xa0, 0x1f, 0x4, 0x3, 0x7ff, 0x101, 0x1, 0x0, 0x6c65283d, 0x0, 0x3f}, 0x0, 0xb, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1c}, 0x0, 0x0, r0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:14:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xb9, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f4799"}) 15:14:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:14:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x227f, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:14:55 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:14:55 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 36) [ 2586.561620] FAULT_INJECTION: forcing a failure. [ 2586.561620] name failslab, interval 1, probability 0, space 0, times 0 [ 2586.562684] CPU: 0 UID: 0 PID: 36470 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2586.562701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2586.562709] Call Trace: [ 2586.562714] [ 2586.562718] dump_stack_lvl+0xfa/0x120 [ 2586.562748] should_fail_ex+0x4d7/0x5e0 [ 2586.562763] ? getname_flags.part.0+0x48/0x540 [ 2586.562788] should_failslab+0xc2/0x120 [ 2586.562802] kmem_cache_alloc_noprof+0x80/0x690 [ 2586.562830] ? getname_flags.part.0+0x48/0x540 [ 2586.562847] getname_flags.part.0+0x48/0x540 [ 2586.562864] getname_flags+0x95/0xe0 [ 2586.562884] user_path_at+0x27/0x90 [ 2586.562903] __x64_sys_mount+0x1fb/0x310 [ 2586.562918] ? __pfx___x64_sys_mount+0x10/0x10 [ 2586.562936] do_syscall_64+0xbf/0x430 [ 2586.562950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2586.562964] RIP: 0033:0x7f9cf8c7904a [ 2586.562974] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2586.562986] RSP: 002b:00007f9cf61ecfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2586.562998] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf8c7904a [ 2586.563006] RDX: 0000000020000100 RSI: 0000000020000140 RDI: 0000000000000000 [ 2586.563014] RBP: 00007f9cf61ed040 R08: 00007f9cf61ed040 R09: 0000000020000100 [ 2586.563022] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000100 [ 2586.563030] R13: 0000000020000140 R14: 00007f9cf61ed000 R15: 00000000200004c0 [ 2586.563047] 15:14:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2282, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2586.605300] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2586.607525] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2586.612756] audit: type=1326 audit(1762787695.678:334): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=36462 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f9de4b19 code=0x0 15:15:04 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 37) 15:15:04 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x2020}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140), 0x8) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:15:04 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:15:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {0xffffffffffffffff, 0x4}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:15:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1274, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:15:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xb9, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f4799"}) 15:15:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2283, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:15:04 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) [ 2595.484184] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2595.485865] audit: type=1326 audit(1762787704.552:335): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=36492 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f9de4b19 code=0x0 [ 2595.493316] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2595.494659] msdos: Bad value for 'time_offset' 15:15:04 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @remote, @val={@void}, {@ipv4={0x800, @tipc={{0x5, 0x2, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @dev}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x2, 0x1, 0x0, 0x0, 0x5, 0x10, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb5, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x8}, 0x800, 0x1, 0x7, 0x3, 0x9, 0xb4bd, 0x8001, 0x0, 0x8, 0x0, 0x100000000}, r1, 0x4, r0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000001c0)) 15:15:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) r4 = gettid() clone3(&(0x7f0000001bc0)={0x80, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000001740), {0x9}, &(0x7f0000001780)=""/168, 0xa8, &(0x7f0000001840)=""/15, &(0x7f0000001b80)=[0x0, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4], 0x5}, 0x58) r5 = syz_io_uring_complete(0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000014c0)={0x8, 'hsr0\x00', {'vlan1\x00'}, 0xa2f}) setsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f0000002fc0)=0xfff, 0x4) syz_mount_image$nfs4(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x3, 0x3, &(0x7f0000001440)=[{&(0x7f0000000340)="8fd3f5a3fb86091d9f2e1b80ad161fad7e91cb70830ede96dff0c26ff8fbae6de6d10136c9aa7a4b4f60213c4232e9da4da2e21274e1715cf1b4fa626b7f08ba8e513b29caaf7f07065cc7ae1a201f08dc73fcd8", 0x54, 0x7}, {&(0x7f00000003c0)="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", 0x1000, 0x1}, {&(0x7f00000013c0)="886ee72b117d05ef013da18966060f15c451f5ec047ca688be8b3291f7b4ba7c77bebfd90ff38e07a411f1198aa8216f94f9e822a56cf6c0a3e79d715a6030359207be04a5", 0x45, 0x401}], 0x200034, &(0x7f0000001540)=ANY=[@ANYBLOB="402a7b2c7065726d69745f646972650900696f2c7065726d69745f646972656374696f2c00097bd35fb6c5db90a810724d88aebdca899d7427842d49a6e6df0854303a33d76fa0ece2e7999eb076038be40f84f723615cd9a3284a8464d302ead4eed44fa04b13869d2d24a88f88476e3b76"]) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r6) 15:15:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xb9, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f4799"}) 15:15:04 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 38) 15:15:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:15:04 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) [ 2595.675119] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2595.694301] FAULT_INJECTION: forcing a failure. [ 2595.694301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2595.696270] CPU: 1 UID: 0 PID: 36621 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2595.696304] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2595.696319] Call Trace: [ 2595.696327] [ 2595.696336] dump_stack_lvl+0xfa/0x120 [ 2595.696386] should_fail_ex+0x4d7/0x5e0 [ 2595.696416] strncpy_from_user+0x3b/0x2f0 [ 2595.696454] getname_flags.part.0+0x8d/0x540 [ 2595.696491] getname_flags+0x95/0xe0 [ 2595.696529] user_path_at+0x27/0x90 [ 2595.696567] __x64_sys_mount+0x1fb/0x310 [ 2595.696596] ? __pfx___x64_sys_mount+0x10/0x10 [ 2595.696632] do_syscall_64+0xbf/0x430 [ 2595.696659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2595.696685] RIP: 0033:0x7f9cf8c7904a [ 2595.696704] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2595.696729] RSP: 002b:00007f9cf61ecfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2595.696752] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf8c7904a [ 2595.696769] RDX: 0000000020000100 RSI: 0000000020000140 RDI: 0000000000000000 [ 2595.696792] RBP: 00007f9cf61ed040 R08: 00007f9cf61ed040 R09: 0000000020000100 [ 2595.696807] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000100 [ 2595.696822] R13: 0000000020000140 R14: 00007f9cf61ed000 R15: 00000000200004c0 [ 2595.696856] [ 2595.717510] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:15:04 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:15:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2285, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:15:04 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:15:04 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xd8, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf"}) [ 2595.794500] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2595.796756] loop5: detected capacity change from 0 to 8 [ 2595.883976] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:15:14 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:15:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {r0}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:15:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2286, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:15:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xd8, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf"}) 15:15:14 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:15:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) r4 = gettid() clone3(&(0x7f0000001bc0)={0x80, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000001740), {0x9}, &(0x7f0000001780)=""/168, 0xa8, &(0x7f0000001840)=""/15, &(0x7f0000001b80)=[0x0, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4], 0x5}, 0x58) r5 = syz_io_uring_complete(0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000014c0)={0x8, 'hsr0\x00', {'vlan1\x00'}, 0xa2f}) setsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f0000002fc0)=0xfff, 0x4) syz_mount_image$nfs4(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x3, 0x3, &(0x7f0000001440)=[{&(0x7f0000000340)="8fd3f5a3fb86091d9f2e1b80ad161fad7e91cb70830ede96dff0c26ff8fbae6de6d10136c9aa7a4b4f60213c4232e9da4da2e21274e1715cf1b4fa626b7f08ba8e513b29caaf7f07065cc7ae1a201f08dc73fcd8", 0x54, 0x7}, {&(0x7f00000003c0)="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", 0x1000, 0x1}, {&(0x7f00000013c0)="886ee72b117d05ef013da18966060f15c451f5ec047ca688be8b3291f7b4ba7c77bebfd90ff38e07a411f1198aa8216f94f9e822a56cf6c0a3e79d715a6030359207be04a5", 0x45, 0x401}], 0x200034, &(0x7f0000001540)=ANY=[@ANYBLOB="402a7b2c7065726d69745f646972650900696f2c7065726d69745f646972656374696f2c00097bd35fb6c5db90a810724d88aebdca899d7427842d49a6e6df0854303a33d76fa0ece2e7999eb076038be40f84f723615cd9a3284a8464d302ead4eed44fa04b13869d2d24a88f88476e3b76"]) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r6) 15:15:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:15:14 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 39) [ 2605.562511] audit: type=1326 audit(1762787714.628:336): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=36741 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f9de4b19 code=0x0 [ 2605.603349] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2605.611993] FAULT_INJECTION: forcing a failure. [ 2605.611993] name failslab, interval 1, probability 0, space 0, times 0 [ 2605.613662] CPU: 0 UID: 0 PID: 36754 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2605.613693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2605.613707] Call Trace: [ 2605.613715] [ 2605.613724] dump_stack_lvl+0xfa/0x120 [ 2605.613768] should_fail_ex+0x4d7/0x5e0 [ 2605.613802] should_failslab+0xc2/0x120 [ 2605.613827] __kmalloc_cache_noprof+0x81/0x6b0 [ 2605.613856] ? find_held_lock+0x2b/0x80 [ 2605.613882] ? __get_fs_type+0xe6/0x160 [ 2605.613905] ? alloc_fs_context+0x58/0x9e0 [ 2605.613946] ? alloc_fs_context+0x58/0x9e0 [ 2605.613978] ? _raw_read_unlock+0x1e/0x40 [ 2605.614009] alloc_fs_context+0x58/0x9e0 [ 2605.614051] path_mount+0xd8d/0x2140 [ 2605.614075] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2605.614115] ? __pfx_path_mount+0x10/0x10 [ 2605.614138] ? kmem_cache_free+0x2a4/0x550 [ 2605.614169] ? putname.part.0+0xc0/0x160 [ 2605.614196] ? getname_flags.part.0+0x1c6/0x540 [ 2605.614228] ? putname.part.0+0xc0/0x160 [ 2605.614259] __x64_sys_mount+0x293/0x310 [ 2605.614284] ? __pfx___x64_sys_mount+0x10/0x10 [ 2605.614318] do_syscall_64+0xbf/0x430 [ 2605.614343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2605.614366] RIP: 0033:0x7f9cf8c7904a [ 2605.614385] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2605.614406] RSP: 002b:00007f9cf61ecfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2605.614428] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf8c7904a [ 2605.614443] RDX: 0000000020000100 RSI: 0000000020000140 RDI: 0000000000000000 [ 2605.614458] RBP: 00007f9cf61ed040 R08: 00007f9cf61ed040 R09: 0000000020000100 [ 2605.614472] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000100 [ 2605.614486] R13: 0000000020000140 R14: 00007f9cf61ed000 R15: 00000000200004c0 [ 2605.614518] [ 2605.649129] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 15:15:14 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0xcc, 0x53, 0x0, 0x8000, 0x800, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc480, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x608, 0x80000001, 0x9df0, 0x4, 0x1, 0xfffffff9, 0x247, 0x0, 0x1, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x5, r0, 0x2) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:15:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2287, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:15:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xd8, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf"}) 15:15:14 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 40) [ 2605.783188] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:15:14 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:15:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2288, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:15:14 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xe7, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a"}) 15:15:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000000)=0x8, 0x4) write(r1, 0x0, 0x0) recvmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) [ 2605.919438] FAULT_INJECTION: forcing a failure. [ 2605.919438] name failslab, interval 1, probability 0, space 0, times 0 [ 2605.921164] CPU: 1 UID: 0 PID: 36870 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2605.921195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2605.921208] Call Trace: [ 2605.921217] [ 2605.921226] dump_stack_lvl+0xfa/0x120 [ 2605.921269] should_fail_ex+0x4d7/0x5e0 [ 2605.921296] should_failslab+0xc2/0x120 [ 2605.921322] __kmalloc_cache_noprof+0x81/0x6b0 [ 2605.921350] ? find_held_lock+0x2b/0x80 [ 2605.921376] ? __get_fs_type+0xe6/0x160 [ 2605.921400] ? alloc_fs_context+0x58/0x9e0 [ 2605.921441] ? alloc_fs_context+0x58/0x9e0 [ 2605.921473] ? _raw_read_unlock+0x1e/0x40 [ 2605.921504] alloc_fs_context+0x58/0x9e0 [ 2605.921548] path_mount+0xd8d/0x2140 [ 2605.921574] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2605.921613] ? __pfx_path_mount+0x10/0x10 [ 2605.921636] ? kmem_cache_free+0x2a4/0x550 [ 2605.921667] ? putname.part.0+0xc0/0x160 [ 2605.921695] ? getname_flags.part.0+0x1c6/0x540 [ 2605.921726] ? putname.part.0+0xc0/0x160 [ 2605.921758] __x64_sys_mount+0x293/0x310 [ 2605.921789] ? __pfx___x64_sys_mount+0x10/0x10 [ 2605.921824] do_syscall_64+0xbf/0x430 [ 2605.921849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2605.921872] RIP: 0033:0x7f9cf8c7904a [ 2605.921891] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2605.921913] RSP: 002b:00007f9cf61ecfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2605.921937] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf8c7904a [ 2605.921953] RDX: 0000000020000100 RSI: 0000000020000140 RDI: 0000000000000000 [ 2605.921968] RBP: 00007f9cf61ed040 R08: 00007f9cf61ed040 R09: 0000000020000100 [ 2605.921982] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000100 [ 2605.921996] R13: 0000000020000140 R14: 00007f9cf61ed000 R15: 00000000200004c0 [ 2605.922028] [ 2605.949939] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2605.957635] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2606.111432] loop5: detected capacity change from 0 to 8 15:15:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xe7, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a"}) 15:15:24 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 41) 15:15:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2289, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:15:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) r4 = gettid() clone3(&(0x7f0000001bc0)={0x80, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000001740), {0x9}, &(0x7f0000001780)=""/168, 0xa8, &(0x7f0000001840)=""/15, &(0x7f0000001b80)=[0x0, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4], 0x5}, 0x58) r5 = syz_io_uring_complete(0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000014c0)={0x8, 'hsr0\x00', {'vlan1\x00'}, 0xa2f}) setsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f0000002fc0)=0xfff, 0x4) syz_mount_image$nfs4(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x3, 0x3, &(0x7f0000001440)=[{&(0x7f0000000340)="8fd3f5a3fb86091d9f2e1b80ad161fad7e91cb70830ede96dff0c26ff8fbae6de6d10136c9aa7a4b4f60213c4232e9da4da2e21274e1715cf1b4fa626b7f08ba8e513b29caaf7f07065cc7ae1a201f08dc73fcd8", 0x54, 0x7}, {&(0x7f00000003c0)="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", 0x1000, 0x1}, {&(0x7f00000013c0)="886ee72b117d05ef013da18966060f15c451f5ec047ca688be8b3291f7b4ba7c77bebfd90ff38e07a411f1198aa8216f94f9e822a56cf6c0a3e79d715a6030359207be04a5", 0x45, 0x401}], 0x200034, &(0x7f0000001540)=ANY=[@ANYBLOB="402a7b2c7065726d69745f646972650900696f2c7065726d69745f646972656374696f2c00097bd35fb6c5db90a810724d88aebdca899d7427842d49a6e6df0854303a33d76fa0ece2e7999eb076038be40f84f723615cd9a3284a8464d302ead4eed44fa04b13869d2d24a88f88476e3b76"]) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r6) 15:15:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0254, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:15:24 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:15:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:15:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {r0}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) [ 2615.397290] audit: type=1326 audit(1762787724.464:337): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=36991 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f9de4b19 code=0x0 [ 2615.412936] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:15:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x4b47, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:15:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xe7, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a"}) [ 2615.464100] FAULT_INJECTION: forcing a failure. [ 2615.464100] name failslab, interval 1, probability 0, space 0, times 0 [ 2615.466310] CPU: 0 UID: 0 PID: 37004 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2615.466343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2615.466357] Call Trace: [ 2615.466365] [ 2615.466374] dump_stack_lvl+0xfa/0x120 [ 2615.466424] should_fail_ex+0x4d7/0x5e0 [ 2615.466451] should_failslab+0xc2/0x120 [ 2615.466477] __kmalloc_cache_noprof+0x81/0x6b0 [ 2615.466506] ? __create_object+0x59/0x80 [ 2615.466536] ? fat_init_fs_context+0x4d/0x640 [ 2615.466573] ? trace_kmalloc+0x1f/0xb0 [ 2615.466598] ? fat_init_fs_context+0x4d/0x640 [ 2615.466633] fat_init_fs_context+0x4d/0x640 [ 2615.466672] msdos_init_fs_context+0x19/0x70 [ 2615.466699] ? __pfx_msdos_init_fs_context+0x10/0x10 [ 2615.466725] alloc_fs_context+0x570/0x9e0 [ 2615.466770] path_mount+0xd8d/0x2140 [ 2615.466818] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2615.466861] ? __pfx_path_mount+0x10/0x10 [ 2615.466884] ? kmem_cache_free+0x2a4/0x550 [ 2615.466915] ? putname.part.0+0xc0/0x160 [ 2615.466944] ? getname_flags.part.0+0x1c6/0x540 [ 2615.466976] ? putname.part.0+0xc0/0x160 [ 2615.467008] __x64_sys_mount+0x293/0x310 [ 2615.467032] ? __pfx___x64_sys_mount+0x10/0x10 [ 2615.467074] do_syscall_64+0xbf/0x430 [ 2615.467113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2615.467149] RIP: 0033:0x7f9cf8c7904a [ 2615.467176] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2615.467211] RSP: 002b:00007f9cf61ecfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2615.467245] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf8c7904a [ 2615.467269] RDX: 0000000020000100 RSI: 0000000020000140 RDI: 0000000000000000 [ 2615.467292] RBP: 00007f9cf61ed040 R08: 00007f9cf61ed040 R09: 0000000020000100 [ 2615.467315] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000100 [ 2615.467337] R13: 0000000020000140 R14: 00007f9cf61ed000 R15: 00000000200004c0 [ 2615.467392] [ 2615.480094] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2615.488692] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 15:15:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x1) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:15:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x4b49, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:15:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xef, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac"}) 15:15:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x5309, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2615.605355] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:15:24 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 42) [ 2615.687180] msdos: Bad value for 'time_offset' [ 2615.705039] loop5: detected capacity change from 0 to 8 15:15:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x438}, {r0}], 0x4, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:15:34 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:15:34 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:15:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x5319, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:15:34 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4340, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1008, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) inotify_add_watch(r2, &(0x7f0000000180)='./file0\x00', 0x1000000) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r4, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000000)=0x8, 0x4) write(r4, 0x0, 0x0) recvmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) connect$unix(r4, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:15:34 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xef, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac"}) 15:15:34 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 43) 15:15:34 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) r4 = gettid() clone3(&(0x7f0000001bc0)={0x80, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000001740), {0x9}, &(0x7f0000001780)=""/168, 0xa8, &(0x7f0000001840)=""/15, &(0x7f0000001b80)=[0x0, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4], 0x5}, 0x58) r5 = syz_io_uring_complete(0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000014c0)={0x8, 'hsr0\x00', {'vlan1\x00'}, 0xa2f}) setsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f0000002fc0)=0xfff, 0x4) syz_mount_image$nfs4(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x3, 0x3, &(0x7f0000001440)=[{&(0x7f0000000340)="8fd3f5a3fb86091d9f2e1b80ad161fad7e91cb70830ede96dff0c26ff8fbae6de6d10136c9aa7a4b4f60213c4232e9da4da2e21274e1715cf1b4fa626b7f08ba8e513b29caaf7f07065cc7ae1a201f08dc73fcd8", 0x54, 0x7}, {&(0x7f00000003c0)="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", 0x1000, 0x1}, {&(0x7f00000013c0)="886ee72b117d05ef013da18966060f15c451f5ec047ca688be8b3291f7b4ba7c77bebfd90ff38e07a411f1198aa8216f94f9e822a56cf6c0a3e79d715a6030359207be04a5", 0x45, 0x401}], 0x200034, &(0x7f0000001540)=ANY=[@ANYBLOB="402a7b2c7065726d69745f646972650900696f2c7065726d69745f646972656374696f2c00097bd35fb6c5db90a810724d88aebdca899d7427842d49a6e6df0854303a33d76fa0ece2e7999eb076038be40f84f723615cd9a3284a8464d302ead4eed44fa04b13869d2d24a88f88476e3b76"]) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) [ 2625.829016] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2625.829053] audit: type=1326 audit(1762787734.892:338): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=37134 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f9de4b19 code=0x0 15:15:34 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) [ 2625.875016] FAULT_INJECTION: forcing a failure. [ 2625.875016] name failslab, interval 1, probability 0, space 0, times 0 [ 2625.876024] CPU: 0 UID: 0 PID: 37145 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2625.876042] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2625.876050] Call Trace: [ 2625.876055] [ 2625.876060] dump_stack_lvl+0xfa/0x120 [ 2625.876088] should_fail_ex+0x4d7/0x5e0 [ 2625.876104] should_failslab+0xc2/0x120 [ 2625.876119] __kmalloc_node_track_caller_noprof+0xc6/0x690 [ 2625.876141] ? find_held_lock+0x2b/0x80 [ 2625.876155] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 2625.876175] ? __create_object+0x59/0x80 [ 2625.876193] kmemdup_nul+0x3b/0xa0 [ 2625.876208] vfs_parse_fs_qstr+0x112/0x1c0 [ 2625.876227] ? __create_object+0x59/0x80 [ 2625.876244] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 2625.876271] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 2625.876289] vfs_parse_monolithic_sep+0x198/0x220 [ 2625.876310] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 2625.876328] ? msdos_init_fs_context+0x52/0x70 [ 2625.876343] ? alloc_fs_context+0x5c0/0x9e0 [ 2625.876366] path_mount+0x6d6/0x2140 [ 2625.876380] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2625.876402] ? __pfx_path_mount+0x10/0x10 [ 2625.876415] ? kmem_cache_free+0x2a4/0x550 [ 2625.876431] ? putname.part.0+0xc0/0x160 [ 2625.876447] ? getname_flags.part.0+0x1c6/0x540 [ 2625.876464] ? putname.part.0+0xc0/0x160 [ 2625.876481] __x64_sys_mount+0x293/0x310 [ 2625.876494] ? __pfx___x64_sys_mount+0x10/0x10 [ 2625.876512] do_syscall_64+0xbf/0x430 [ 2625.876526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2625.876539] RIP: 0033:0x7f9cf8c7904a [ 2625.876549] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2625.876561] RSP: 002b:00007f9cf61ecfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2625.876573] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf8c7904a [ 2625.876582] RDX: 0000000020000100 RSI: 0000000020000140 RDI: 0000000000000000 [ 2625.876589] RBP: 00007f9cf61ed040 R08: 00007f9cf61ed040 R09: 0000000020000100 [ 2625.876597] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000100 [ 2625.876604] R13: 0000000020000140 R14: 00007f9cf61ed000 R15: 00000000200004c0 [ 2625.876622] [ 2625.884351] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2625.910742] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 15:15:34 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 44) 15:15:35 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:15:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x5380, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2625.998927] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 15:15:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xef, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac"}) [ 2626.041391] FAULT_INJECTION: forcing a failure. [ 2626.041391] name failslab, interval 1, probability 0, space 0, times 0 [ 2626.043116] CPU: 1 UID: 0 PID: 37223 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2626.043149] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2626.043165] Call Trace: [ 2626.043174] [ 2626.043184] dump_stack_lvl+0xfa/0x120 [ 2626.043230] should_fail_ex+0x4d7/0x5e0 [ 2626.043259] should_failslab+0xc2/0x120 [ 2626.043286] __kmalloc_node_track_caller_noprof+0xc6/0x690 [ 2626.043325] ? find_held_lock+0x2b/0x80 [ 2626.043352] ? vfs_parse_fs_qstr+0x112/0x1c0 [ 2626.043389] ? __create_object+0x59/0x80 [ 2626.043426] kmemdup_nul+0x3b/0xa0 [ 2626.043454] vfs_parse_fs_qstr+0x112/0x1c0 [ 2626.043490] ? __create_object+0x59/0x80 [ 2626.043519] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 2626.043573] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 2626.043608] vfs_parse_monolithic_sep+0x198/0x220 [ 2626.043650] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 2626.043688] ? msdos_init_fs_context+0x52/0x70 [ 2626.043718] ? alloc_fs_context+0x5c0/0x9e0 [ 2626.043766] path_mount+0x6d6/0x2140 [ 2626.043800] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2626.043844] ? __pfx_path_mount+0x10/0x10 15:15:35 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00ffff", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) [ 2626.043869] ? kmem_cache_free+0x2a4/0x550 [ 2626.043903] ? putname.part.0+0xc0/0x160 [ 2626.043933] ? getname_flags.part.0+0x1c6/0x540 [ 2626.043967] ? putname.part.0+0xc0/0x160 [ 2626.044001] __x64_sys_mount+0x293/0x310 [ 2626.044026] ? __pfx___x64_sys_mount+0x10/0x10 [ 2626.044064] do_syscall_64+0xbf/0x430 [ 2626.044092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2626.044118] RIP: 0033:0x7f9cf8c7904a [ 2626.044137] Code: 48 c7 c2 bc ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2626.044162] RSP: 002b:00007f9cf61ecfa8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 2626.044187] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf8c7904a [ 2626.044203] RDX: 0000000020000100 RSI: 0000000020000140 RDI: 0000000000000000 [ 2626.044220] RBP: 00007f9cf61ed040 R08: 00007f9cf61ed040 R09: 0000000020000100 [ 2626.044235] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000020000100 [ 2626.044250] R13: 0000000020000140 R14: 00007f9cf61ed000 R15: 00000000200004c0 [ 2626.044286] [ 2626.146546] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:15:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x5381, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2626.159017] loop5: detected capacity change from 0 to 8 15:15:35 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 45) [ 2626.286979] msdos: Bad value for 'time_offset' 15:15:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x5382, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:15:45 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xf3, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd"}) 15:15:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:15:45 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0x0) syncfs(r0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:15:45 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) r4 = gettid() clone3(&(0x7f0000001bc0)={0x80, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000001740), {0x9}, &(0x7f0000001780)=""/168, 0xa8, &(0x7f0000001840)=""/15, &(0x7f0000001b80)=[0x0, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4], 0x5}, 0x58) r5 = syz_io_uring_complete(0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000014c0)={0x8, 'hsr0\x00', {'vlan1\x00'}, 0xa2f}) setsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f0000002fc0)=0xfff, 0x4) syz_mount_image$nfs4(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x3, 0x3, &(0x7f0000001440)=[{&(0x7f0000000340)="8fd3f5a3fb86091d9f2e1b80ad161fad7e91cb70830ede96dff0c26ff8fbae6de6d10136c9aa7a4b4f60213c4232e9da4da2e21274e1715cf1b4fa626b7f08ba8e513b29caaf7f07065cc7ae1a201f08dc73fcd8", 0x54, 0x7}, {&(0x7f00000003c0)="e695d1eff36f8cf5c028636fa089dcaf674b44be29ef6cfd7867a8579f0487a28edd0c2159f35921de4f381db8a8342b63cf0a0a00913fe281ab39aa89cc965d6814c83248250ca066c8a0ec990cae2c8a265bbcf2394bbb38cddbef4123dc24e77e97e58981bd3033fdc6ecc480e0876ad821ca7e717980219cbfc8f37dba9bb49c70f1d7eec9abe2b4c27eb57007e1637f6a1bb98036c47d76e1270dd8bd3e57c9fa283d6977c709a63951b6e6ea56d67832e11703eacd82fc03c69016bd1351fb9869747e7cf31ca38b1ff866178e1acef2b7c53dcc5af45aa33d676095057c82052154185cfcb5b4d223ebce41fe3cf82823d99bbd4b61dc710d5c8a7fe0cc9d78da264389757330e4dac5da02ea102b0f9b29976454bf1a81629e3b6d18f3cb850005fe7c4d05c03953dca3b49ba7f18374ca16526120141381c6e5e3a6fd8c75697440659e6a599c800c63aefc41f2bc81a7d7aa6329834abaa552ed2540cb79e2ed60390e2a76177d7915b023743c23b166ba054eac3f71ae41caa5e18eefa5953b8deccfd41d6c289c8f63ed522e8c631cd4e35dda01e0142adf2365972f8f920290c07645a327c8f83995d807b847b531846a1ce81680f591394bbd4c1ee7f7328ca41c4811eb0d104d5e8b91dd7c38dd53cf7e846b7950e3039929259e9b793652f033ef1b0436f2528cc471354bb15e6f20fb52408db00389a1707ce4cd7cb2ad906147e7e58ead8ba6ff8ee2bd2658b70ef9f9820f7bb9b59c72e30cd97d81fa989b1e6994cdb1fe5caa5b26b4604ea7e08fc2e7329645909d170627f93d021c517b2ccf931b8823ad92c01eab7d45e73c3e840523d0953a12959113e1aff134cc6a8b8df3eb4481025470858aa3d15a5eb175d2cdb68100b83e01815d7da5c0dbe39de55d2a5775f609b199f9a5277a6f6e7a0ec7f5f432edcb021a60d589287449267aed7921d80bad8bf2eb82cc4e4cf844209268ecd45e7c569e9dd036eeb59d19ae02457672c1b5956de86669ac0cc5b908d9de8acae8122801cf5326a7ffb23247e92ec1ebe5fda890ba54f96c166ea9d142110eaf90e38d6b5d891bd5362aa28c924397ede077e8aec5e4809c7a135d4aae76a46a9ef8fb264c31a4d5ab2b9d85a208e2d044b740d5c49fba4e558df6c1a7fc2d4703d92c61470979aaa49544940a1d64868fda102f4ad3d8c067b3579dddf0a50803793039f9d1c1ce5daf6f69e0e9aa982522c0a1af0b4756898b850def9126b19af520f6868fa14ea86471ae26a95a369b5f3084f62893f821fcf8b16624103b1cf39526026de58d19d9c7178fd458a32e2fbdbe9c08ac338c9ecd713593cc0efe4c7905d4d9e2055c766f5b9e0c7d9cf8d2b97a50048b3c3d61dd8b5d44101b5450a43a0324f3567be1e22530756eedb83b41b465eb280a05d9b4125c140de4507c2c3823bde4bae35c11d0993a4ba387989cd4208f0d85f21f402382237de2aa2d96d0a6f77124b9c3254958bfc303f630d6775f29857453309616d5850c7bfa6a56db4ffaf1ab8145a8faf8994eb90c740f7713a5799aa6f7d6d1450ea705f70cbeddacfc816921af9b3d2b8a7b4c08915ced605188cfc857327ee4999f470b082e991f3006dff1a7f41adba18f835bf61bd557d43682de6a4ba3456b3af74da28629c2f944e5734ecb8bcdef47bdcedd1240a4485522cb9edfeae7250f6a38c0429f6e8d3d789e172bc05c7914ce636ed103a8a63441b6d1493c12200c35dbfa5316f7f5c46720db463ab5b4ba062405e99edf2b9e62c4f6f0aa1a25a85bb8ba56a289ee149d532b54a18c7ded1992dc6e18baef0b30b3287ca439860fa920de3739a5577ec3230bce4269f8963e983f9b7f3610a47eea72ccfe28e28aac151f31a5cb85d08427857780459771f178a3fb1030486608192a16eb0b0748df9d99e06c002e7bb0c549846814dcfb887cdfbb84c22c99fb7c7ffa49b3d0f51a4404b8a81f052734fa66dcd487c66ae3fe4bdef239d97e5b6ce7699b1608e9935c875762ded17eda1822ff56c1a9f2cad25dd2d0fd9bb9ab98cbeba87b72f84b37fe160b116517b2d23a07bfd492bd348df861f1abb5e3c60424251b52832bafc4836557924af5dca628806fe66c57a8950b7e4a3e8bede663188dad5ec5f0d6fab92bec0cc5b8b83c8b0d7f7e73c8d68a7679f2ab3622a03b219d8a34598beb650be243f29df467a622831bb0b723087bd959873d3193bb2401972b877913ea8e3c799fa329661f60cc98fd7496d042e757d39691f390d55edb98d394537cc26da4db1ecd14034a642afbb02557abd077396e01fc0eb46dd0056c068b92bfa6b513af627c335152bfa2c9520877d3ec4a1a7b17d2a4797a64917cb2599341654e54272dec2a84ffa115e1613565c2f5086cff6a08586b25d1eef3446468aee9d6903a7ecd7e04db5b33081733f6be01dd94ec765d9a35df0904b9ec5973d9c83cbb928122b195d56df93e00bde20686a5df58bc2cc8ccd447f1ccc5db2164a44b1b354143827061342ea35a9da683beb30cfad03461e784561b76f4a48edd0196cd16e880e8aec1b767e2f9034928ef5a370e8aea26dfab39f05e963bbdedfe02cff0517d0298b3976b3c4ce0418038ef78db59ca428c2b155076b3221cf289fd3df95d85a590e301b27c2451826c0e9edcbd960dd945b672e1ce35363500ccaeae7314587ad1d8799e48d5fe22d057e55092e67220b23bc58ca0f1359323e90b7bbf469da229a000dc11c249cb84ba084965577653329e2ab700ed687d44608fe8d900998409306e555608205ff02bc99114fdab667a815a557dbce729110305953c0b7c84ce3045e5d840b3c357d8141baecb5ba10d02bcd6955409a776630efc42378eaba3e4f646488e6ecdeb36021dec33dcfc2e092d1fd71fcd96f1bbbcca180b364b14babf5edb4a8662c26bf9f8bec19d64aeb3e5dd83347c2ff9ec72bf8ea0d5e00285d4b95f45029265820a81192fdc6be9fbcc24189a12d0177af21b64e71f82fac8b723d0f526ebf37c007730a493a845cc059e3cb17ddd6ed21a801faf340240ebd8f6fc7fec593d7ba50736b145ec35f6d910c9cf4f110c5f945ff0350fd93f12075d89158805d60b40df12503a2d78877b98b0a615c58df15fe467336c799e97c826672644134ebb9afeead50e4ef2d936db5be29be006a63e78f39030fcb93a2324a78633bb155b1d80ad0fb0f5fe33c1c29832d3f528a52d3b489bf5dfa1ae189e37cab9cc9c7ecf0e674b90f9d075d3ea8aacf71db6c2c73d9cb9b1e0d7893c36370b168c97ce4fa94175a56b2b1dbe784a34be602aff268c79e17233391cac23dd401682b69ecccb7cba69a2b44976a07e3a666737b09d3fc25cb14dcd1d2a6f7eb641968ecb87ecec9948070651e42d17758304ec8a4a165fb18c4269fc33e79840fba6ccc809290b0ad613ae7adb378c383cd958404b9658b3b4dea0cd61155da911cf4afbd86fb8ba779b0555637e10ac327a8fd349393c97f5cb117a39f8bd022981d42ccd1c7b750cb12f1078975c9e5b45dffd6a0d12424fe0266c777fb05a046c37ebf7d05e66b0e2377ec6c415dc1957a520d6ddc74ab2d996ff10d384e1fd57af31ee9293bfee287ecc66188ca047fe2d2c67a80e00d0992a3fca29f3ab0ce7498054db3a471f2c6232deb9f21e34278f9c648cb5bdfa749b710396b9fdf815383e1ad557d5828036f6f24178e7e78ce6c49b0e020a660c86aa90be2eed08529d3ace89729e59e056fa3d028f4c4c33514b95a0f722e55cc1c5afbf789ed7466fe68309d8fd153bf54fdab71c146ff4923f8898cae0ead99882333b7c8fcba25b62c265c5351f9dda6cf17ab0707929493c173c56d83d7264bc783374379726f7904b79ded0403b98161976aa3adf9753efadedccaf774d9d0806741748f899c08505a0bf582f85d6ff7d414fff6c10cbcb4be7066e40f0f53fdc50da9de2ef62e5ffe82e02782a601297c07a99a78a490e1556c600388dbf46f3ce3ed1b396bac72a517d1d4fc273611a260b8e8c128e88f8486c6b43d8678556864026da4a82ad1d119b65b3f9a85d339bc88cf221ba667a63704db4232e4e952a0b32b4840bb6d2025a9304368259951b6b250bbf1465776a42247f31699231740ea5d8e302a1f4d6159d8e117a7f3efaf336ff01459672fdea4b314f57a173b8f7339725935e0a055333829e230e22b276e3f60253f9a284c27782ecba05dc7030f10708f4d12803d69fdf43c448ea90a8f83b84b041a7aa2b6a12a938ccfeb1b6a6e1ac5f5d18b8f7a3c225c7794093ad532150da0c1b5e547337cf523815dbea60cfb60ca33a03a17e0a454558beedfc0d1872c3ab1f3c8024ce8aa59a0b54c2a31b7cb6172b90cbd2b1689d37de4f6c9916939324d53d94cdfd752febe1ca8110fbc3fe855957ae1d4d7b572d4a6c63597d7f6b598ae55c4d3f4af8b830b87dc6e4a252a9f90e225f7533ef956621ca5330e1b0725ee1032a2d2f754c8389c7770d553f6940b1b16251e164484c249343cc6780662da99410122a827e16f7f7ec4c37405f6bcad26ccb674649e3ec9fdfc07dea2e6d0d0fb9400949b3cd51a07e36943d218315231b57d8e7f8086bbc7c2558538a711f25bcfca0097408632f7f3eaa6a344a7fa841a508f912831ac5269a73ebe8f5e299e27c5aa7fbb4bd2278f67db29c71e1937310113b44b2c54b648919f223e091dcdef16e01be8c332494330f020e25fd0cc05f66a1be10b68fa23a6f6b6405f73f43204f71a4acf5976533d61998c49495c352d475ac2c30caed20c68e496c5fc6ef0e43bb337e240a4648e0656b42b9e8d4789f5d8f79ab5124502eb068ffbf0e5bec3579e363a5f27ee9eba8dbc4dcfe52eda0918f738f1753899cdd38b1ad1df53bb867bbce8c4a6e8d4e149d77c80f4709ba87b619df84ea0d069ebac2dc178790fab6dc74ee1e5364cb33bd31c7a014efc263dece3877ab3e4bf9b48bc639a34dc16b196c1610955f27f9486187bdb4cd7620486efc992e818440dd3135cad991fcaa6cca7b4e5d4c2ed2f6ed48151c809f69caad2ba0187b497754203458165fcb1717b5e2b7526c7eea1a26b730bb22b5b7ec4f342b5f18e451a9b950681f6a97329f6fc75c704e9acc831dfc9b0268e7c8b1375949b9b50de335f61807cd92a50c8a8717919aa32c6ac94d0eded034549b79207b3122b80b8b84a7c2ddb65f1d3a68e33c4e6da00745dbf9ca92c0c38a6d5832d03f08127d0f7d1858aafcc81c8b725af49f12168721369060cb6a7192e6b12731e6c8edf9a89f83d4164e910173b86e97a5698c5fb097c9e53c8dba808f1cfd3e424f34153e929e35f2cd44650fe76795b085007db43a663d288b84b209b83d0059dcfce08d27f2f597cfde4ff5364066e8e666c1e3aba703a19641d7468d586a5b0edb365d3f04fc015626c952371c4daad7acb86afa6a444fb0ee47c31f82725edcabbf085c3a4c732d5c2c29bf4f7eb46a0983189c2961920e2764a9b5ba35eef7e43a82c165b6de175c10e27d6f59d23f3768a955168a8c17decdeabe50d37b1bb395504b5a29edcf3f361227ad440f6532bb1ab182b4833d1c00dc4b1f73df89dc0c6b4ad3390db20f352f194dc93572df2b15d412ae1bfcd03dc9b8a325e2bfd9a5d18e96564fd9ad2cc664d631772ea85364ea586ba98eeeee91ec64c0bbf5973dc7af56d74028c23463f3c2f0bd2c3addf0026f9c88df6ed5f483767fe93a21deb665e783", 0x1000, 0x1}, {&(0x7f00000013c0)="886ee72b117d05ef013da18966060f15c451f5ec047ca688be8b3291f7b4ba7c77bebfd90ff38e07a411f1198aa8216f94f9e822a56cf6c0a3e79d715a6030359207be04a5", 0x45, 0x401}], 0x200034, &(0x7f0000001540)=ANY=[@ANYBLOB="402a7b2c7065726d69745f646972650900696f2c7065726d69745f646972656374696f2c00097bd35fb6c5db90a810724d88aebdca899d7427842d49a6e6df0854303a33d76fa0ece2e7999eb076038be40f84f723615cd9a3284a8464d302ead4eed44fa04b13869d2d24a88f88476e3b76"]) socket$nl_generic(0x10, 0x3, 0x10) 15:15:45 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000001c0)={"fca5c51b9fe38184a4510055e8f31a37", 0x0, 0x0, {0x3, 0x2}, {0x7}, 0x955, [0x1ff, 0x60000000000, 0x10001, 0x100000001, 0x7ab4, 0x506, 0x1, 0x1, 0x18000000, 0x3, 0x3, 0x2, 0x7fffffff, 0x9, 0x77b]}) 15:15:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {r0, 0x4}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:15:45 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) (fail_nth: 46) [ 2636.738023] audit: type=1326 audit(1762787745.804:339): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=37381 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f9de4b19 code=0x0 [ 2636.773852] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2636.778935] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2636.800487] msdos: Bad value for 'time_offset' [ 2636.805129] FAULT_INJECTION: forcing a failure. [ 2636.805129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2636.807594] CPU: 1 UID: 0 PID: 37397 Comm: syz-executor.3 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2636.807643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2636.807663] Call Trace: [ 2636.807676] [ 2636.807691] dump_stack_lvl+0xfa/0x120 [ 2636.807758] should_fail_ex+0x4d7/0x5e0 [ 2636.807812] _copy_from_user+0x30/0xd0 [ 2636.807857] kstrtouint_from_user+0xbd/0x180 [ 2636.807904] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2636.807952] ? __lock_acquire+0xc65/0x1b70 [ 2636.808034] proc_fail_nth_write+0x7b/0x220 [ 2636.808074] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2636.808119] ? lock_is_held_type+0x9e/0x120 [ 2636.808184] vfs_write+0x2b7/0x1150 [ 2636.808214] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2636.808265] ? __pfx_vfs_write+0x10/0x10 [ 2636.808302] ? lock_release+0xc8/0x290 [ 2636.808362] ? __fget_files+0x20d/0x3b0 [ 2636.808438] ksys_write+0x121/0x240 [ 2636.808471] ? __pfx_ksys_write+0x10/0x10 [ 2636.808524] do_syscall_64+0xbf/0x430 [ 2636.808565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2636.808601] RIP: 0033:0x7f9cf8c2a5ff [ 2636.808628] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 2636.808662] RSP: 002b:00007f9cf61ed170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2636.808695] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cf8c2a5ff [ 2636.808718] RDX: 0000000000000001 RSI: 00007f9cf61ed1e0 RDI: 0000000000000003 [ 2636.808740] RBP: 00007f9cf61ed1d0 R08: 0000000000000000 R09: 0000000020000100 [ 2636.808763] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 2636.808784] R13: 00007ffd119f073f R14: 00007f9cf61ed300 R15: 0000000000022000 [ 2636.808843] 15:15:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x5385, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2636.898358] loop5: detected capacity change from 0 to 8 15:15:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x4}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:15:45 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:15:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xf3, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd"}) 15:15:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x5386, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:15:46 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) r4 = gettid() clone3(&(0x7f0000001bc0)={0x80, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000001740), {0x9}, &(0x7f0000001780)=""/168, 0xa8, &(0x7f0000001840)=""/15, &(0x7f0000001b80)=[0x0, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4], 0x5}, 0x58) r5 = syz_io_uring_complete(0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000014c0)={0x8, 'hsr0\x00', {'vlan1\x00'}, 0xa2f}) setsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f0000002fc0)=0xfff, 0x4) syz_mount_image$nfs4(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x3, 0x3, &(0x7f0000001440)=[{&(0x7f0000000340)="8fd3f5a3fb86091d9f2e1b80ad161fad7e91cb70830ede96dff0c26ff8fbae6de6d10136c9aa7a4b4f60213c4232e9da4da2e21274e1715cf1b4fa626b7f08ba8e513b29caaf7f07065cc7ae1a201f08dc73fcd8", 0x54, 0x7}, {&(0x7f00000003c0)="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", 0x1000, 0x1}, {&(0x7f00000013c0)="886ee72b117d05ef013da18966060f15c451f5ec047ca688be8b3291f7b4ba7c77bebfd90ff38e07a411f1198aa8216f94f9e822a56cf6c0a3e79d715a6030359207be04a5", 0x45, 0x401}], 0x200034, &(0x7f0000001540)=ANY=[@ANYBLOB="402a7b2c7065726d69745f646972650900696f2c7065726d69745f646972656374696f2c00097bd35fb6c5db90a810724d88aebdca899d7427842d49a6e6df0854303a33d76fa0ece2e7999eb076038be40f84f723615cd9a3284a8464d302ead4eed44fa04b13869d2d24a88f88476e3b76"]) 15:15:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2637.047891] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:15:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x5387, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:15:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) [ 2637.126319] msdos: Bad value for 'time_offset' [ 2637.153644] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 15:15:46 executing program 7: r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@loopback, r2}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000080)={@loopback, r5}, 0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001d40)=[{{&(0x7f0000000580)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f00000005c0)="b031b911e09f4ac053919cdf8d6ab465887411bdb305d48bfb25e7e1f93051185dfee11db3ec234f15ca9688240c63694ef7e432e04192e1eb73292cbaa62ef627cafee81bacbff4b33ca1f55449ab88e28eebd9b922ae98609f9e015dbd239a442be4dcba4c9d9b0fb44f488f340286fea68a531494cccac6fe98", 0x7b}, {&(0x7f0000000640)='*n_', 0x3}, {&(0x7f0000000680)="4dd1c7046b00ee8ba43f5fcac215401f100014d2636a72fa9666e17230982939d90ed621865fe2f782075ae8a48ed4417aa75d056eb585644d9ea5780d1d659501b24a394841e55e70dabb78f16998cdd668a882c6e27f592e040742cb4ca478b5568988bb77e4aac46d59c143c64bd7264b9fa2b6d9da9588199a8582f799", 0x7f}], 0x3}}, {{&(0x7f0000000740)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000780)="c694b8acd7bdd625dfa28b11a0676a", 0xf}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000000000000100000000000000000000001c000000000000000000000008000000", @ANYRESOCT, @ANYBLOB="0a0101017f0000010000000014000000000000000000000002000000ff7f0000000000001801000000000000000000000700000044186a5000000100000000020000007a800000000000000944045860830709ac1e01014414c0537f000001000071b7ac1414bb000000ea442cc071e0000002000000077f00000100000001e0000002000004006401010200000006ac1e000100000040867d000000010212f7ad3216cdfdcf9527d07baebeb1d114050d9ea773c5ec763921b6e32d050804ccff0ee94f000c46ffcf33ff98fd288dd1020d0fa6244fb80cd69b2229e8010376060aa41f18e7ff4b106106109c1694fdfe7ffb772e45ad78ef54000812d9886846b107122268f74a10d9bc48519fcd910422e2f68207e40960ff66891f2cac1414aaac1e0101e00000016401010000000000e00000020a01010000001400000000000000000000000100000064010000000000001100000000000000000000000100000008000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e00000017f000001000000001c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="e000000264010102000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="52e213f2e000000100000000"], 0x1f8}}, {{&(0x7f0000000cc0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000d00)="327d760fe51031b6f1baba3304d25e9e8180963c0a27b3b335b85f0ccd50a95b5c5a5a467eef08080e6a50951e26bd1be6d9f892c760163577d97ad3baa8c1626fcfc386b0e1f5e7aeab2ad921047f5207a717f10d9cdf4b439deaaa08c56b051646f1f59ef529f1edd28fc5e1a4b98db9d867cb887f0c3a8bb52171aacf81c31e977e07cc36fd65d35b5033ddbc26b3bf3b39ae25c4ea4da7cafe044b487c59f9553373110fd86604cd0aed95754eb4610442a1a19dd05e948f89a91a4271d9db9e8557ae1b4b14", 0xc8}, {&(0x7f0000000e00)}], 0x2, &(0x7f0000000e80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x30}}, {{&(0x7f0000000ec0)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000000f00)="030e9a1091e19979ccdb146ae67a568c2c07b7b9e2dc4eae780251bec21df13ab9aed5c01a4fbbe323d7708bfaa084b976c8e13ec7907afbc1f82d48c30d3af253d53a4e448cb7e63501d132310dfd01e6e7c860f3adb3a37a42a1d842c53d734bc55cc85490a7f659aa6ec56814c519fdec6246c53d0129", 0x78}, {&(0x7f0000000f80)}], 0x2, &(0x7f0000001000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @private=0xa010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x40}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}], 0xd8}}, {{&(0x7f0000001100)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001140)="9678531d05c4b880398f9d96b9b0a09c439b176ddd5228eafb88ebb1639f6ba7952464c1b301de643ca1b0b1a52b36dab5f7b31cb6db559645e9f9bb19e93132fb31db7e5a71178ff441361d99d7f8a650c60731ed9e9756", 0x58}, {&(0x7f00000011c0)="45db8b904d1f3df4f422dd93b9486fcafbf421025c5361a54702858ab879f5f79a9c87c7e8abe8f2633ecab0475bd31f7fec5481c174276e92ffbc12c32b6ee2265652172372e92496c8e41ea8b65e6ffbefc609095fd5432f9f5350e9c5fd8be8df44497bcb2061990657d9b3c01b1a78445726522c21a58746c174550d5b0197f2235a4e2c9af6f9b5fe503abb7c970fda7a9c9bcb2f16c4e83b8d9d44e0f3019605c3e3394732e3eba159e2ef6533cb49b520f53f928b5633583964426b731b748f7319b3b83e0b281e5ea0cfcd4425ea970f702989c93a4048360eed6c996535ea2547b65c17e3e3076879b93a274ad4671ac3291549", 0xf8}, {&(0x7f00000012c0)="5fdec0606b7dc5f823bbb58892f73c54ec32f2c6458f370c146c498a1412b5ee45126e7cf514eb9c8f0e5d5e4e003de581db7b66589dfb6595ab9bc80c4f50d99c506ec65351f8eac6364081df713e07e5da594d7ca653c9beb73e6f1c77a6fa7066bb7cc77117eea47586fae5bc123755c693ae3bc6afb7bb6d7b9e4482e211b38b41dc3b9ea275cc5e2e661adf91db894c28e1bd8e5849216657efff9d9acaba6239f0a1fec95c5b58cdd1a656821870f3afcedcd3cad0234d207cbd9a146178755253daee7b42c9caa517fc230a18e09b55354b3df83befa6737491f9", 0xde}, {&(0x7f00000013c0)="c2fb21e9e6c2bd575542da99bc8383820dc15dcd2c121a9156044772eeb70b84442c5ffe0e8785c0b13b7c324eebe15e986d5df7242d66946656ccf57049643ee8bbde78a92fa2b3aa90ae4cc713935382b31f2e9b3f21764406107a05dc937bc6c5752172872c9790dd", 0x6a}, {&(0x7f0000001440)="c068699091a5e3ed29f09116fc48b3cc0fd55e02aa52935831e417def432633e553ab3b8d58578bb92194bf7d72c41e7419d4c92580e5e605b27f2233640869df81a9ca49fb5ba0b0814e1706d944f7b85c882b87271c1a9", 0x58}, {&(0x7f00000014c0)="d265ba2e110045aad20236f03bb6bc17134cee6d8216c4f1ee1539906dcc1e45a295f5ec4b9f43e57f6eedf656cc3d61538a1b406a6e47f88c9e263e9230c3605e592385599f82f71021c6eeb45e6431d5fecb9e362a5e9011ed74a9602b48c3a77aff44c6d266a72445a104e1796bb4a07f481f95d81d8ea7050db5ff0362403e13dc345ae88c0f4aa241ef4d84648565682ca01ef45e0c440d3401edbff5d9a2efc0a5269d6f441f4629f0fd22a8e54cab469e8f3fef21fb0851c9efe2ca654650606808", 0xc5}], 0x6, &(0x7f0000001640)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x54, 0x0, 0x7, {[@generic={0x88, 0xa, "ccc2796b34152943"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0xe4, 0x3, 0x9, [{@multicast2, 0x7}, {@remote, 0x1000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@empty, 0x2}, {@broadcast}, {@private=0xa010101, 0x8b48}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x88}}, {{&(0x7f0000001700)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001740)="e5258783b9e10b40070811b2eed816df91f91fbcb726f42baf219a6803d094cb87293555221e485cd03fbf088740c8844ea68a8d72201641eadd7f88bf9bd64f1f71a6a346f3bcb08f1382f96a012f9ee6c520989456b7cd166b0f9158639ebc79967f17bc6c73130cac6991893994fffb477b99542a3cd8758950a3b8b487e7214f0e79b3021294ff89545fe3c42f4199116d18f1e10fb5d059ac801e00426466d985cd662fb9d02b091248893ee05687b16fd5", 0xb4}, {&(0x7f0000001800)="76c87ebac579756bb89edb44a3cf56bf75321d0c8084294c9690e340f57e1cde67aa496776acf4b36744ad1dca601f19f7fb0fb16cce55212c0450de153ad7378e35508a2eb3d8b771f4fd92ca5287605521c7d5be2486a3d7c8c695f518095d900889c18323b081026f57cb8576e638f5715af39c9ef40b4b879e3d824490a05e21c22ed54118ad95a393491f835f6bb584cf5dee76b6f2a38d81c531bf865d2af7879f201fa9945f62462379bb19af574f0e7b", 0xb4}], 0x2, &(0x7f0000001900)=[@ip_retopts={{0x74, 0x0, 0x7, {[@end, @cipso={0x86, 0x5b, 0x2, [{0x1, 0xd, "9abf48bfeef69998f10f3f"}, {0x6, 0x7, "53d6f08ec2"}, {0x0, 0xf, "6d99c332a4d95080f5253bf741"}, {0x6, 0xf, "c8ec3eedfa074dad2e374e1f7d"}, {0x0, 0xa, "951a2651e60c9e00"}, {0x6, 0xd, "f0ea6de5fe65531914d14d"}, {0x7, 0x6, "e7252480"}, {0x7, 0x6, "cb9ccf45"}]}, @lsrr={0x83, 0x7, 0xd0, [@rand_addr=0x64010101]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x18df}}, @ip_tos_u8={{0x11}}], 0xa8}}, {{&(0x7f00000019c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000001a00)="bda11c7550bdcb7ddfb112399b05eec014722cf90609ee5a8c3283210db2fc71be4ad142a556f766a82b57e4b90337a54ae3e06696e6a33e2985456ad7c915057f12cac6653208398ef9358925588202dba0b0455f78ea777f01ed119e2656018e9c2bb774dd", 0x66}, {&(0x7f0000001a80)="98ceb7e866d24d6116afd9dbedbfa56d321b0cb573fa7936827e8327fe34869b5b9c38aaf8c472e5d6adf352635072fbb161cac75d4803fb5a6e1b5a5a98c9d759128a27e7", 0x45}, {&(0x7f0000001b00)="8ad2f29cdb37b056b5775294dd6ffedcf2fd02e487bab3fdd8008fb340cf0d1b71659cf57d2c5803b4db462627506a36752c87705088115b68b859f2fbe018a80106e001739a58b3e3614129440aaa854201891e8c99c4cc7e04be4e39749ce5d980831f9a244229d465797d4922b821338b23f516ba5b28e253b0265d9011ac95816078f6e1261a80e2c8d9b79602f7d14335885dbb6262af281d339e5f0b1d88705bcfeff38c", 0xa7}], 0x3, &(0x7f0000001c00)=ANY=[@ANYBLOB="110000000000000000000000010000000500000000000000b8000000000000000000000007000000862800000002060cd8451e3d8ad9360c06e70009d0c082655eaa4a0602070bae9e55a644f0fc9af0890f52ac1e000164010102640101024420767000000003000002000000ffff000000070000ffff000000400000004044141f01ac1414aa00000006ac1414bb0000000e8307fbac1414aa443429110000000000007d177f00000100000003ac1414aa00000800ac1e0001000004000a01010000000006ac1414bb0000000500001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0a010100e00000010000000014000000000000000000000001000000a00000000000000014000000000000000000000001000000560f000000000000110000000000000000000000010000000400000000000000"], 0x138}}], 0x7, 0x404c041) close_range(0xffffffffffffffff, r0, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0xfd, 0x4, 0x9, 0x0, 0x0, 0xc898, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) r7 = fcntl$dupfd(r0, 0x0, r0) r8 = syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x7ff, 0x4, &(0x7f0000000440)=[{&(0x7f0000000240)="6cafc1e3d8304f6fa7591b02906697784863a43025b4fb5d950ef2fd29da2827e6dec312054149a46631819daada21c375ce260970e3fdd3383c87102a331744190fcb84f9624005f4e09b70e1fdc18168830534b39ea87ac04a836b1dfe85a6cc851c706257b735ccd1e97512e8b251a5beeb45b3e7335f4e652f4aa4d88770a8e0", 0x82, 0x196}, {&(0x7f0000000300)="fe6099524566e8472b4337b4d6c6bbf2c63da80c", 0x14, 0x7}, {&(0x7f0000000340)="e93b7db6787777624182b786135f1cdc5b1abe981578cd32fa7e98b1002f2012f4a79cb9d6c1db1b17a41f0273d3da18d9c363e80afc5cdb92cf025c7aa60034ab7912b7574a3ca50c0d9c326cddaa398e65dfbde9a62c911d979fe4ad7de6d96fc1ae42382df7832453d8471959aa155b0a1a7b7563d669b0830c07ee503e25df65a5d1372e4b64e57d", 0x8a, 0x1}, {&(0x7f0000000400)="9ad760deec26a7564d526a34a3bfcf9172648cdf1bdb8039f602d850f59e23ecc59d74da1d1bbb52300067efb6", 0x2d}], 0x32, &(0x7f00000004c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646f6e745f61707072616973652c736c61636b6673666c6f6f723d5d2c6e745f61707072000400002c5a707072616973655f747970653d696d617369672c657569643d", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) move_mount(r7, &(0x7f0000000180)='./file0\x00', r8, &(0x7f0000000540)='./file0\x00', 0x20) bind$unix(r6, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(r6, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 15:15:46 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xf3, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd"}) 15:15:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x5393, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2637.198098] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2637.202674] loop7: detected capacity change from 0 to 3 15:15:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2637.216150] loop7: detected capacity change from 0 to 3 [ 2637.307755] loop5: detected capacity change from 0 to 8 [ 2637.316107] msdos: Bad value for 'time_offset' [ 2637.322028] msdos: Bad value for 'time_offset' 15:15:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xf5, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd1860"}) 15:15:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x541b, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:15:55 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xd909, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="d6d69f9bab5c27520d4f4970f48ae7d17df9c6676013fb1fab36dcba16cd17c2689a8b736f0ae907a43b65892473f792646f172584eab7f961c08fbfa5cd26cea56e6d2d63497bc13f16ae7ba4d13b58d481b3f9db2e78ed47485cc41440ff279d7465356c7db299d31af44ae15405a142cddc22d6f1f800a411be2b7caee60a6b0dd5dd7d85339384b136f04f9c69cca93f0df17e0e8d751b44185c4df7ffe77bb0d688a60635a5d5faa9197155237e3eab15a9b32b97f454a10887848fde4f4d1f4683b631814c0b0f59e5eebbc0b34d39d459044ad1f152cf225e", 0xdc, 0x19ef}], 0x2020080, &(0x7f0000000280)={[{@noacl}, {@discard}, {@lazytime}, {@discard}, {@jqfmt_vfsv0}, {@oldalloc}, {@minixdf}], [{@dont_appraise}, {@subj_role={'subj_role', 0x3d, '/]]'}}, {@smackfsdef={'smackfsdef', 0x3d, '.@{-#'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@subj_user}, {@fowner_lt}]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:15:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00ffff", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:15:55 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) r4 = gettid() clone3(&(0x7f0000001bc0)={0x80, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000001740), {0x9}, &(0x7f0000001780)=""/168, 0xa8, &(0x7f0000001840)=""/15, &(0x7f0000001b80)=[0x0, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4], 0x5}, 0x58) r5 = syz_io_uring_complete(0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000014c0)={0x8, 'hsr0\x00', {'vlan1\x00'}, 0xa2f}) setsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f0000002fc0)=0xfff, 0x4) 15:15:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x4}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:15:55 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 15:15:55 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2646.243220] loop7: detected capacity change from 0 to 108 15:15:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x5421, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2646.258070] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2646.270940] audit: type=1326 audit(1762787755.338:340): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=37648 comm="syz-executor.4" exe="/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4f9de4b19 code=0x0 [ 2646.288194] loop7: detected capacity change from 0 to 108 [ 2646.293680] msdos: Bad value for 'time_offset' [ 2646.298089] msdos: Bad value for 'time_offset' 15:15:55 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xf5, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd1860"}) [ 2646.386376] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:16:05 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000e0", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:16:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x5450, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:16:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {0xffffffffffffffff, 0x4}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:16:05 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xf5, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac474c33bd1860"}) 15:16:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) r4 = gettid() clone3(&(0x7f0000001bc0)={0x80, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000001740), {0x9}, &(0x7f0000001780)=""/168, 0xa8, &(0x7f0000001840)=""/15, &(0x7f0000001b80)=[0x0, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4], 0x5}, 0x58) syz_io_uring_complete(0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000014c0)={0x8, 'hsr0\x00', {'vlan1\x00'}, 0xa2f}) 15:16:05 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r3, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000000)=0x8, 0x4) write(r3, 0x0, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r4, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000000)=0x8, 0x4) write(r4, 0x0, 0x0) recvmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000e5c0)=[{{&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000280)="f94f6e3f44baa73122219d495413963e0b40b39102df478c96428b719c3487ca30fff82352effea63397c03fb4556091699e146ffbebb1a7a616c0b362f48962f36ba6dbb2589807090df37a33c6c3b100415d6a4f3a0162ef836a8dd5883262e8f6c96e9f80c3ab6610e0aa00149f1142d28441b458843eae8ede3623316beddf41e801e3631c2660dd3afaf573fc04ed91919466e4", 0x96}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000000340)="75ba2d53630496e4f8c2c8b7bf13cf37c462b4e03dd7fa5d4df1c1b73518c2d83560ddc2514f6d92163aa717963b5fa38bf74c57ab18cebd7e436e9a917a15a9d3df4671a1e33f26b58d73c89ad8eb3d6dcbfa7762e2252bf17db29637b1078c5984e5243585bffabeba836de8042ab4bec8925b029bde7539efba688633a81cc4bc594174cd4e6e313072e7ba03e81ac60cbe9f33e5fb19b74e99b47e519ee2c62798eb2ecfcddf7e86f3151d2e3a8b16c25172c8f66c204233877b3aa81c5d3e9275f86f452f188552416b7751e85b565268f201803ff2bfdc6368d4cdfb1a243b", 0xe2}, {&(0x7f0000000440)="2c3171119fffee082bd557712c5d5e9b66dd0ec9d1b174ea9d075d0a75a0cdc3bff9c86e2b6785013dbd65618153dc0b715c6a8d4b4400848f23632110fb57bfe186ef52e13b1a4c728ddc9dc4a2a6650b30f63f05904b19f4665fa97ee71574159b15fabb85f2d80a3fa901", 0x6c}, {&(0x7f00000004c0)="485ecf2f5ea74a99682e3586b6ab6531154ea0c238ff89bbe1f3be261f2e634bd4a9d76a9b468643acd9450ea41a61e207591e2e52f71e7cde6c4afcf34a9910f5ec37e98ffa1693c13fc7aa00316817afe17b7a1a00dcf38bfd45b3d06bb828e5fb9c36a02715ce321650524f5dd0f534ab98c617de63c92c2c0eded1c257b4a34a71b484bf6010f245885f31424466fe6fcee63c51995fc7e4bc", 0x9b}, {&(0x7f0000001600)="0d9df1a0e39a322c8327af9f3935962ce966cea05049f2eb0494c3fce80f433af90e5e285e9c43d58dd0b190e77e323519c44152bb03da2fb06d61a62c6ac5820b50d85e5decdbc4eaa0d31791a5b427e5ccc027a7b5b3087b46316c0929da50bebe2d77912f8254408b7310edb5632e576fa0de43c7f2265e09ac3765f9e86a8ca3080faceeb4fab6bed4a3ccf386fdf0b49b413ceea4425d1d7e0b7dd005f072", 0xa1}, {&(0x7f00000016c0)="169d71c091aff6f3151edc39bc3af33512ec7602c3b16bac7c3575faa9caf9d40d6df7cd9714a493899e38b690eeada4f65af12494fed25dca0f1ae1b9d3901221d1b5d147e9fdd549d29b2b04cb82f2b8a2e5f7a71b13db5f4f6bf0e2774bfa888634d50518b066c683f2ac8d3c6cbe7f62212542a156ea2b50f8e79eb25c3ac0927c7a663e3de05927a1b93268538d41e3ee844005219aec3ed19b281a4480457adf3d97843a5cc150a6927c787c0ad06f8bdab3f2cba96e02d1118681329d357187657d65e338ca139e7a1e817d2640ff5aead942", 0xd6}], 0x7, &(0x7f0000002e80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, r3, r3, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c}}], 0x110, 0x80010}}, {{&(0x7f0000002fc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003280)=[{&(0x7f0000003040)="51e2ac9e88c22703daec08647dee1b4a8d7344a62c57f0340bdec91a309d3bc10e6e4d20d0c65338b8018758653b3c425ecc9922e7e276b30d4861c3788a589c9da8d1053bad349b06a5175184869aaa8aad1a9271b8656c7fce116cce000e6869927dd3b7da68aaa86534f328e3588b9e8fc26176eb0439f24402938f767bc9881c216d26177d6018aa35372f4936b81af4a190e644478bfc29e87085932c1b274f2b1cc1e8ffebe25a2b156eb0dd90e4e8fb84c2eed26574ab9367ab64a81c205975b198929a8e0a18837244d3a458", 0xd0}, {&(0x7f0000003140)="107f6f2c2552d4611c239b18ad0064185e8adab8fa61fb61faa2f63bf96ca3465cbec5888b6810455aaf99cf339e37128067f57ffc4fe80941a8951f6a2fb32d12db50b3c1dd180523b474ae0a4512f24525126432ff3066a5b77ec328a027f50c2f6e4ec9eb91401eb111572e0bf6573166fb73bf67476d9f5ef99a9e76edafc6d3d5ed308507fbe0c18ea56e677bd7d2126b574ea0adcd2c11c20be67fe34eb0077d4fe90ac5db4fba3d3471", 0xad}, {&(0x7f0000003200)="07594052de21bf28c00ba72b714fb788bb48391e391519f0900a98892808c1c644581e9e670452bd5c99d9583d34277da7ff2ff482730793c92a2689f4d531751c25abf0d0070ed844a85ff8d6ab75ca9c25fd5e1c9db18ea5734f57ab15", 0x5e}], 0x3, &(0x7f0000006d80)=[@rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r2, r1, r3, 0xffffffffffffffff, r2]}}, @rights={{0x34, 0x1, 0x1, [r4, r3, r2, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xa8, 0x4000000}}, {{&(0x7f0000006e40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f000000b040)=[{&(0x7f0000006ec0)="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", 0x1000}, {&(0x7f0000007ec0)="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", 0x1000}, {&(0x7f0000008ec0)="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", 0x1000}, {&(0x7f0000009ec0)="1d08a7dd9db097164d4f152f8700884607ac0d8294ac04bafedfeb5b6086a01e14c96277c70a7e224011970fd2dc761c1a71ba6009030d3031ffb24be806cc2714a1f6da623c1c639767140e5f7edb7f746336bd43c8a72651d09d8e04db1c25688bfa0c763430abe66a374d7f3fca863fb08cb7b262e343db7e1b1898a51ffb90cfc5974264efd02fc76ff7cb9d8e4ae404c925077c41942045d652070c30040e246688eb796f638a75f3c85f2f79a93255638d04a1d2c7ad6513848ccb480e65", 0xc1}, {&(0x7f0000009fc0)="f7b14787c9ea0762c9e3f4efa399472a18079a32cca0a79faee39d8d40e02164c2f21aa27c6e955b0910d9ab5f1b5c61dc45f738bf4054f77e48006ed1fe3616b0ddcbe057fa2ca17367fec88700815170b07a5ee8d461d1246de4d44d2f93c99853bd0581f6d6caf66447a4b668cf7eebdbd6cd5d02663845af9c42909d", 0x7e}, {&(0x7f000000a040)="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", 0x1000}], 0x6, 0x0, 0x0, 0x10}}, {{0x0, 0x0, &(0x7f000000b380)=[{&(0x7f000000b0c0)="bf1c348bf0bfa876c52a0032a40ad273b35c35aa19d2ec2fd0397b6e77588ff72d3ffb0857f8d7afc50cb080fb7f735096856be9d4c43442daec8844b75d15cdbc68efb60bfd44ec12ca2a1435b26df235b9db734a4feb430833a38263a99fbeec5f2d", 0x63}, {&(0x7f000000b140)="0286692c6c74d15cbf98d7fcd32c0c714b772c4ecc03c55923de99413014928ae3f477e47c21541d0e51dba39acb", 0x2e}, {&(0x7f000000b180)="b720deb2f04cc092e4d41a0779492bc13b40d1e1f8b023ed7660cff6cf39fb9a182854af3d18b9bbf15b6cc96dda33b8eac24b22b3ac4d9d55c22627a6846c0950e40e3e8c09f6bac40cc5a883a027a03da16c7f8ea6e43790a63977c713d8da1bae94a53ddb6d67e7064b7282fb9c34b005387be9c01ae4a87108ec03e22fcc2bbb9a32342950e3c8c1c66b341d149606a4e2ad0cfac554a126f6d9bc14203d69f8e4714bc8da047bc7053c3fb8b4590f9a6bc728c65b5785cf2aabd5c04d82aff71d3598aaf2a4b3359006ac81ed44270cdcf7aa304e3b2af5fca0aa3e66a5b3298663", 0xe4}, {&(0x7f000000b280)="e852efc76adf28ef2e19e5debcef2bf32f981cc95baa1440dd0f8d43b85cb760fce00275e8a96d622efa5a460c4b1f3e9f6bdbb945ce19bae867492cc3d061582a102c49b233b504c024b4282c8e0bc94f9809e3c615d473fd8596b344ff8704cdb229f6ef25fa1c4edb02db9014ec2684349d05cc9140027b02696b06c3966cb9d37decb92e7d479fd1da25243180fb7989fe4c0a21fd8f1a99cd2836c5e95e2ee15587a98237e6ace2040d27e59be0e2d892fa3475cc1ad39834d849b1daa23ee3e346d611ae17574729bf269cae84525c244c594577133e4df836e64c9f24be17a204b69b9469c447daf750d9a37c65580f6a3a207f6e1d", 0xf9}], 0x4, &(0x7f000000b6c0)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r2, r2, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r4, 0xffffffffffffffff, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8, 0x4}}, {{&(0x7f000000b7c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000cc40)=[{&(0x7f000000b840)="ea08283105f1e3f861a5fd98d0b475964a7b2dd60c941d2d90b5df8ba63a33c5a9419567faf1d1282ade51d5313a715d30813ac1be79faea0da036dedacfb1ec95786415f0dc69866767aefb6af7", 0x4e}, {&(0x7f000000b8c0)="2fc65de247bef7b6cee522df1f1bcd2acaea8afd0ada877676738e9edc97e4e94e218d186b513493cf063ad803fdfb5ac3d8b22b9aa433bbc8d88ff036bde372cb4bb7", 0x43}, {&(0x7f000000b940)="9fee19a782943fb960658f12c25a927a2f0ced0e55646de6b9736deb3d5e17acd3d49e4d3da0c74e760f4827105ee601d0fd90baf2df5837d4f03ee2186c75cb804ce085af559e5fc6aff96848c64a9ce8149df4b13d4efa6a6822c796876bbabb4e5ea44d3035e510166703b13e7f17d06818af698f3f9f2b4bd43474bff29af0a1537e60fa2fdaba40ad6992deff05bfa63372b185143e8460a8bc28cda5263e49aade53301ad8ed1691998339f52fb3c91aa8cdf61d45a71c6561e15ebdb457f97ee31b2e45d8301d6b41e1202376b67868fa0e0c04e55a82e37b0dccb8961dedd21fe99c373a07f7d1ac3a538618b962dccaae75d68a6010ff88debd7fb32016296879c9e9479927bc6a8752c326375c024550a3d5e4d29f12d72a145781e477bfc6883fd033b1e024e7773af80e9fdc8a197b68a113b3893e5088b1d852fec51fd0fb30a712b9114e44826c03641f4fce35b4934f5a81489d98368164af4caf9e495d673ca526b38ef7fb008a3bbf298297a611ddd71016b40577083cb5ff63665b3a9e2d6e5e8dd404fa7ea3425276b897f2d4a200f4e27ae3d82e29ba674632f715e7ad889ee3b483366f920aa462a5d9520f53afa6f949ce2862dcbc57e5e8717298d06c2faf459767d242b516fcf717b3cfa3dc23ab4a414d753d51066b58f3a04940c98e9b174a75ff9ee0c1fc3ea750230d956b8831926ab34e70255a98bba57d26c220d8751479bb27061b88c425d2707c298bc9ee1a4dce10badd0642252570bfa20e9c899dd435efdff85aea4e6564d6b51cff02b100e38c2ca16fe2c5f27e669c6d7761f17c23550b0dc79eaec131ed8b85855d06526afda35339f651c9f34cb0bf105b60f3c9fb94bb39bef4aeca4df619939fcc5512ad5e105d77bf386d6053e6593ec4635d090db38f1e593a93d5025e9c70ed706f4a238f33fc67ed913368b0ed4ac2aa23ca12ce043be33563e117f0c1aa4b0aa2294e580306f30a87f563c60efcfa0ca879ad256f945200b137fcb704e3b9565a6c33576a7b5712e2a95e1cd114dd204c7bfcf83ade0978b588c52a37573f181b26dd296bdb92d76afcfbacfc22b5cc5fe3013a400266b2c2c2cddf863a5673366f7f009a6cdf531849ac47f70acf3a7044c7324500513129551924f118976a8ccb0dccca79d3eb9c9fdeaceeac3c0586fb468e7e3a913ac809c6ad6d003faffcd67622372f1778aa7987b342efe559159035ff557f46f59fd81e4fd2e885754a4be00b7bff46337efeffd73d7b16074e214d3a9a77f228d98013dd25a9c6763baf08d2d2601989e2a68e14ade1f25a74d36a725d68b0fb3debb4b14d8681430ed316c26d4d984b720908cb7fb9a64c95dee878da9bad05e85f057a7a147303495d78108bcbcff12e2096898c08dd38f99dbfa90f016d2bb4e39d4097b4ed0b4a06e2432a32f4f1263e26a8deba8eafab25ca3fcf452ea12a1aa3f4f5cb4a17a81c3ae723b174ff822ff27d241da229b6ec857bf7b21faff7f46c589139574577c24b338b39a19a72f3e3b43b3c8d96096d8c090b72caf7f9320a67de8016f053f620a0273adf0e618b299f228179fbd603f2fee65d0287f5d40550a15c3db369cf6e3b417ba4b7b441e6bbd86fbcba642a433af5ca65ab0a341affdaee7bfa937ac2bc1c606a718e75ee8a3e1625e9cb47bdcf7181214b776d2c1371b4335c581727a368ae32a447edaac50cae794a3fa28f508061fc639968229b6b4b0eb9f9f3ee46ef9ad31a653c455eb83f77d00c5610082fe40563c6307f33f97a784d831d2cf2a577effe5f1d938a8a595e11d65cd5e77e0e6757d23d2ee8532ac431d9f97ece45c250b5978ee0b1f1efd7f3905541aa7b76b226367ee6f761de73fc96e943eff64ec4025855113d6d6e59a3c174ba861195b15622371d1a0c7b54a9bce697f8e49d4935f3f4de0789934d76d4553161a38deda2d12f6aafd979f5af6a55038c6ac6b11ad1a21bfc5b7197aef83102b33b92acce0ccd66d8d36fda498671f60eb4c9b5014ae9e008ab16f301f5d90941f6ad9b327a54235c8a7ec521c04169f4ff88faccc4ff216f03560d48ed8d167d23afa3d27c663d7dad9123c4951fad0b50c6957b6198405f1782525dda472d88bee2c2ad9b79196b087eb5b3801529e369486ee70a55452d14ebd4ec21ed8f8a5b56722cea13cee0100b9d6de4ed1e42351759d961da09aea1f9765a0fc271596af2c838149d085bc565f320500966cd754b67e047cd0773ff3e176d9a559253f1647978e5f595a8f15b7aa3aaa4b7e4b80686d79449e0fcd59b2bffce8725663e123f744f96e9d3d2d4abf5930f3c5412188c6fd1c4ad8fcd7ba3ab9bf0d1fa3e8a75a80e3dfaad35b2b70f7044648decdc2d1fc2f082a2146106e3b6127b02807ec1ae335550be89c20747f8167a307cd6bcfdbda4f346dd04799c24b24050520110efa0c950c3cb400a77185bc858f8c7675713622116ec6a4b88eed95aa3d5b571a0af7c981a4e927ce6d79d0349e9285451238a0457822d6880fb3de49a648b94e6553769b6e148482d034891f8388efaba1a95d9da8f8a56dd0f743d9fa4317bf242837674f9b0b2704dfd0961f33d0d2d745afbc19a3d360077611296b27baf2e11c60001ed788c9a8ac64838cae163d89678802002506c50007f8b36f2205d5915c33134269acc05f94d556b298ec8d6033048dbc2aac73c4bd5b9b8cbc53fc3eeb8bb0e6e40783994dfe0c748028dcefd207a681b8e5678832aca76229e335057df0b8f1e690ac2c94d0b5fa0c9b3b5a3115cd952d639dc9c29771ebe69788d2c2854cdbfd2b3e3f2273eab17031be192bcc6ab3462ef03a81a0f04eaa5967325793bf585c6b4d1fae4e70f6d8ab7bc8990854431419471c0e1defaf7855acea646e68fd5474e29c26432e3235f5758e577a66c0dee9135ba1ac5b4a8dc6077205812876cb34eebfdbd7f8e653aacdd8b83e28ef64c0d8cb77a86c743b6eba8a78ec6044050f1b615a0447bde2163b98356f315edc265ad881a51a48e3d0d4dec6559912c9fbd513e1ec2c04d4cfabf341e72d32d9cf4dbc76ba6c05ef1c7dd740c8b0e40b5cb1745b2a22f0432a58691f62bbb4d85ae138f2632d12cc17b73c493c86cc39632001c3b0f837ca876c79a38dbe12b4969d94aeeb44972df3e034c8ce42fadfdccccebd97e8a364bd94952d9b72149627d4fd4c3217d358cab2a1f8d69fc5eeb725f470ca7fce018c45864a81c50578caa6ae475e7678e2e39ea12d94e0f0739888c883a115bd1b38218739a8cc4934ee473db02b484e5344ef822363a72ad1866a9918372bd7c0f3474da426efff2b83b3cc458615443d7da5c59249d30217232e52abbc46ff098070e33abe54831a8d0ecf3f93aa8077207b9f0ec0dd55d35ef69f51913893389f828e2c640e91b827dcdc67cbe67f2c83f3d42ab936c83e00d41d8d0cc9afd6b1e3c3870cd264c76b54278584855aab360b74d91f71934d91f38d9d85ffdb28f9a11ec44b3cabd30e73280a77102a4da018c8bcb6c027bf74e63269f5addd83ab642339567a7d9743918a1a591494f760ec8020ee72662c29c122eb48b6a7fc35ba84a99f5848ab463f58a1282ca9b14681b3870373aba624e73b8f0d5873142e4dcfc6fb3a1e6401525b6ff58cfc54941af41c7674c974732d69a1aaecb870116e1b4e8e16fd59c1b0ec3a1875d6212835aee1537f4c6a6893621ab67cedffa9463ecdf68cf72b5e4f2c608b6bcf44b66ad54193abb9080d2935126dd5e085ecbed3097591ac3ee6baa83bbcebc6694001880f44dac9c696e7a8b450a24a19fa5cbc0253989b8906dc5bc5f981050e814c6cafe740d763e2dcbe2bcd427760e6ce40d41a7e5db9986a8532a7cee3bc0dc877745d5df6a7a8225514268be4e9f9936abfd9f9a9f70d316cecc60b8cea0182a4ebfa3a85da48c7fca43d4957bf5fca0be2dca35ab10d52b396185b72cfb361f3b1306b91bbdb480319996fe7212dc025313516284233b98626d3a48676f453068e19e609eb20c00fe34898f1a9e939488f9e8b0af1596069abc97e458332b356e1de43f5b47fb631a6b9e6875276be8020a658f8070116eac0813f6fd18e5a63d3bee6f08fb426c2dd76487707763da47e1decd0974f3ad9606aac2925756ed236b0906332997fd2df5784acb9b08da5beef33f64d7a533d3ec9a4dfb7cfbffef5e565afceb75978081ce89a858f74771b046a5b6472b20c41d65db9a7ec75dd11a16041acb027bc166b4b07733e9bf4db72ff062e74848a10fa95a878edcdbe13e69227aacb1ace79a675d23eddd509a1be5f01e13e605d813997f48dcac4a31b646fe0ecb48af03985e3847c60d2263efddc3ea02ef3428a39b3bd9749e67cec016cd5ad3876238bc4b13831eb179c5d08978d5d8cbada68f7ed905296695a2701f4b734b27c5ba252617a7b4dc76cf63a26ff3be3d85769d35397cde42a35939451ff1cfe3ca5f828f4438e1f4e116f0dcd4af1d21f96c86a729d0b126a5a1af2d75153c4b8ec844d132c3a9380bd605dadea24e385b9eb453db5d4ff5f7ef92e2bae6ee0ec6df3aba794890e0e7de572dc910e1de3ca0363dc3d40f064b61ac6bd62688da7c47a27b6e3a656cf7f52a35d9f2867685368f221b44784c6ab39a63cb5ad062d38eac334bfa2c599d001ac822b2e8716e0b80abb84638b3a74e0e295b2e4bdec9c2ad3a0f8db5c1b98bd89b229794739bda808699f9234d846839ce473e6c2840779062eada72ab49656d5ab53d2ee9552e987419b39b4900386978e71d625895f17a25face02c925c36ca5ca5b4877602640dd5313ddd31889d51cbd2ca83f6e1f0d9ca84b58e196b7aa9cc9432d68463799caf7b47e115dc3b4517b87bc1e1f2ef515c2c86446af9e8a60dc8aab43e54b60282a66efdea628bb4435259eb253c73d1cc802c938f7025522632af75dbacff231b7922d371d23ccc736c4524d0b1404bdad3b38e94e2c3f79744b19367082f1640ec591539062fe3068038a84a37bafdaeeb64d53a759a7dac8a2ff0335bf28fa2fc7f52b48fc5775c40d2880f2efda0954103d80255795b4dfa25a6ca3e62888d48e551392d4a1ddb6ee991035028f30fecce2e29a3b9729302f86b5c94f21ebe978b74d8c87ce90d561efdad1f096f6980791ebe31b1e5997fa036730a88afa6ed77a4cfbdc0a6ab495a4f77af88579241920003607679807c01bdd6711ba48751de9bfaf56cd78f69ccb8fa00282ac4d1566f7d72e4c2d2754536ac4afaccf1aec2efae820bdd5d328b171fd0b7277cfde4266ad09cb2a38f4632428f0fc7699a7456c9131477513320dc1bc3c5f366999870f4d0effa17753e54cb991bb2e8e5f61dd8bfd5ab58eb197a8feb4542428b7fd9c2a953dddd3b73be62358cf8b383eac44423a3c61c0b6b1c6e2707aa242bfa7dd09a02a2085a5eb6520292d9edd631789e2d1c26bda687dd6b3456196c33afa4c08bc0a7bd03d641f47c524aa7576194d96359f628301915a4376826de515d2544ea74ff043bdd35de6519c4e3dd1bb383af2447988e3d9cc2adde39a88249834d7d4772d0248093fd2fb7f1e724867a56870d6afd773e85c55f774a522e7c833251db082b5258520be39779c60e85e663040a6334a8aace85b3fd4a69d1db654be55c688311c9f11983ee9c58badb15af083268957e133d143358da5c2f188db243ccd10b9409a54f9550656eae7aae5d302607b293372057aafa67e", 0x1000}, {&(0x7f000000c940)="117b165d363f3af47df45edc7f8a1796a3c5e5da720372698ead6075978e0176a346985c9f8cb8136b96d4a1313470f6c500d66760e5d8f3f67925e7dad9154d65b6224b37b7f49eee59a5aa705b548e8aaf07ed727f5bc1079bf79f1361c2c9c0a63e1067058304c6196b70b134db411a51a61c14fd6b3dc64dc15bf05f7b51e190cfa7241ce2507db35266b728dd372a0879b22e1b9c593e42612c7deb552a02e0009907", 0xa5}, {&(0x7f000000ca00)="b2ab76e35d1ed93554baf3ad85e4a4ff5711543010a4f1d442814e9a3e2e4ef2dd91e639437d1869", 0x28}, {&(0x7f000000ca40)="c07a1dd5131a0a1db70edfabade862571c2d4972be9ae3fe7e02c2acb13731f2b4c4ac84d03b567b02546b50df82131f2f88cf7c9d36b4267ec16b25ed8e3139eb315ff0acf28866d6ac5dcc7d43ac910f13676696927fa9d60e3ed36d08d48e0d70d19a7ad0a7f50b0acabc8044d40078deb4ca24ac88355375393bf3d96210d7dae94e9d9da2aecad22758f1b820ede4c02abb41e4606a82d7510d070cfae2a0d11db64ae636930db271dcb84bbb7bc6a2bae9d15eef7a5f3853760434b2533b828c9ab903c315", 0xc8}, {&(0x7f000000cb40)="232a40e713f4826b7fbca003670ba1f304a2c13780621d086fb86b282ee3c873f02e84fb0ae4f043b802e6a8ada26de1602a0e35c6c82221081b1cbb7481c267164c4186a8f5c3c32614e515893b2a56465116583806f3a131ce149257a3a0ea8bdfd655e27569e932a48e74cd18633cc9b60fc2b9537a127c65f97589cd1cde2179ace4f8c11c4dfe024430722c62590f276dc7d31a66f49a38d9c80c4f9900c6af9244a19ec6b06cee7326ae4bf5f175a15347347ba21226d09e5c2fb34969df4c6eefc0471615ddcb91fc7f2d54eabefbb79dfb5fe733944aee44d50210d8c8b14ea556822c893121e0bbd7c5422368a2", 0xf2}], 0x7, &(0x7f000000d240)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r2, r0, 0xffffffffffffffff, 0xffffffffffffffff, r4, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8, 0x4}}, {{0x0, 0x0, &(0x7f000000e440)=[{&(0x7f000000d300)="e485b6a916510b92192841f0e114ae", 0xf}, {&(0x7f000000d340)="51d4db74bdca9fe5aa1f66d2dcfb5370ce8d14373ca98b1c1ef0bb6d7378ef9dc8fb40aaa918a100b31b24a033d790cb1eb0858fc1768c0dd67ef591b80eb85fbb18a1d539847926c7951bfb6993498734a8b9f4ebed17a587debb2778a5dfd159ccb701b872e02dc6ca2ae3f3bbb3d63ddc381c7e51d31099f8d5df9f3f28ed82d4a3a95b94a7ec4902428b6a3d16cfb6ad83d8cb72ca51829de2d3122a52986cdb4c87478defe03c91e0cc3352ab4d2f28ab93fd5438b144ee411e0f163265331b74cef8", 0xc5}, {&(0x7f000000d440)="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", 0x1000}], 0x3, &(0x7f000000e540)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68, 0x1}}], 0x6, 0x8004) recvmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) connect$unix(r3, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000180)={0x6, 0x0, {0x2, 0x2, 0xfc7, 0x0, 0x3ff}, 0x3}) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:16:05 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x4, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:16:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) r4 = gettid() clone3(&(0x7f0000001bc0)={0x80, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000001740), {0x9}, &(0x7f0000001780)=""/168, 0xa8, &(0x7f0000001840)=""/15, &(0x7f0000001b80)=[0x0, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4], 0x5}, 0x58) r5 = syz_io_uring_complete(0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000014c0)={0x8, 'hsr0\x00', {'vlan1\x00'}, 0xa2f}) setsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f0000002fc0)=0xfff, 0x4) syz_mount_image$nfs4(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x3, 0x3, &(0x7f0000001440)=[{&(0x7f0000000340)="8fd3f5a3fb86091d9f2e1b80ad161fad7e91cb70830ede96dff0c26ff8fbae6de6d10136c9aa7a4b4f60213c4232e9da4da2e21274e1715cf1b4fa626b7f08ba8e513b29caaf7f07065cc7ae1a201f08dc73fcd8", 0x54, 0x7}, {&(0x7f00000003c0)="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", 0x1000, 0x1}, {&(0x7f00000013c0)="886ee72b117d05ef013da18966060f15c451f5ec047ca688be8b3291f7b4ba7c77bebfd90ff38e07a411f1198aa8216f94f9e822a56cf6c0a3e79d715a6030359207be04a5", 0x45, 0x401}], 0x200034, &(0x7f0000001540)=ANY=[@ANYBLOB="402a7b2c7065726d69745f646972650900696f2c7065726d69745f646972656374696f2c00097bd35fb6c5db90a810724d88aebdca899d7427842d49a6e6df0854303a33d76fa0ece2e7999eb076038be40f84f723615cd9a3284a8464d302ead4eed44fa04b13869d2d24a88f88476e3b76"]) socket$nl_generic(0x10, 0x3, 0x10) [ 2656.402959] msdos: Bad value for 'time_offset' [ 2656.408096] msdos: Bad value for 'time_offset' 15:16:05 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x5, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2656.475160] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2656.543169] msdos: Bad value for 'time_offset' [ 2656.561943] msdos: Bad value for 'time_offset' 15:16:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x5451, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:16:05 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x6, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:16:05 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0xef, 0x1, 0x71d, "c4c4906dad64c83f46f4ed352ba56615f43a9686e027fee80d20f2cffc1be55b1077dca4b57013fe3a4adc0dae5a348ce94415adfc056794048e6e8a93ef6e2642464d3a754f16337aef17a187304ae2cb3ad8e9dc28429f618065cbba16515c4f1ca0ebccf09f3ac959d315bd9860697e72c6a8fc5e9b2394fba8f201e5da73236e00722057633759ff98a449980ca9b6191e9cb2473ebd275f487a1286673bf9ac52eca9134400200852b022f273e8ff5e82b042aa0f47996f418cd8205a954d6efe85db9af6fcb7eb44a3bf5e6000b6ab02d1335048bf68d851b36e4c5b79a278ce5072397a169dacf36c58c3ac"}) [ 2656.726095] msdos: Bad value for 'time_offset' [ 2656.734075] msdos: Bad value for 'time_offset' [ 2656.745292] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:16:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x5452, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:16:05 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000f0", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:16:05 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:16:05 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) r2 = clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) r3 = gettid() clone3(&(0x7f0000001bc0)={0x80, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000001740), {0x9}, &(0x7f0000001780)=""/168, 0xa8, &(0x7f0000001840)=""/15, &(0x7f0000001b80)=[0x0, 0xffffffffffffffff, r2, 0xffffffffffffffff, r3], 0x5}, 0x58) syz_io_uring_complete(0x0) [ 2656.836268] loop4: detected capacity change from 0 to 8 15:16:05 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x7, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2656.907678] msdos: Bad value for 'time_offset' [ 2656.910362] msdos: Bad value for 'time_offset' [ 2656.933126] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 15:16:06 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2657.015750] msdos: Bad value for 'time_offset' [ 2657.025332] msdos: Bad value for 'time_offset' 15:16:15 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x9, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:16:15 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000040)=@abs={0xc3a00b3f18d8f939, 0x0, 0x4e21}, 0x6e) pidfd_open(0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000014c0)={0x0, 0xfffffffffffffffc, 0x2}) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="610000007d010000004200bf920800000008000000000500000000000000000011410200000002000000060000000000002cef000f002f6465762f736e642f74696d6572000000000000000a006d61705f66696c657300", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0xee01], 0x61) recvmsg$unix(r2, &(0x7f0000005a00)={&(0x7f00000045c0)=@abs, 0x6e, &(0x7f0000005900)=[{&(0x7f0000004640)=""/14, 0xe}, {&(0x7f0000004680)=""/91, 0x5b}, {&(0x7f0000004700)=""/127, 0x7f}, {&(0x7f0000004780)=""/4096, 0x1000}, {&(0x7f0000005780)}, {&(0x7f00000057c0)=""/107, 0x6b}, {&(0x7f0000005840)=""/183, 0xb7}], 0x7, &(0x7f0000005980)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c003127a7cb00000000000000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58}, 0x40) r6 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FITRIM(r6, 0xc0185879, &(0x7f00000014c0)={0x0, 0xfffffffffffffffc, 0x2}) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="610000007d010000004200bf920800000008000000000500000000000000000011410200000002000000060000000000002cef000f002f6465762f736e642f74696d6572000000000000000a006d61705f66696c657300", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0xee01], 0x61) r8 = syz_open_dev$vcsn(&(0x7f0000005a40), 0x15, 0x200) r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000005a80), 0x101440, 0x0) r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000005ac0)='./file0\x00', &(0x7f0000005b00)={0x0, 0x1, 0x15}, 0x18) fcntl$getownex(r2, 0x10, &(0x7f0000005b40)={0x0, 0x0}) recvmsg$unix(r2, &(0x7f0000005e40)={&(0x7f0000005b80), 0x6e, &(0x7f0000005dc0)=[{&(0x7f0000005c00)=""/215, 0xd7}, {&(0x7f0000005d00)=""/176, 0xb0}], 0x2, &(0x7f0000005e00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x40000000) sendmmsg$unix(r2, &(0x7f0000005f80)=[{{&(0x7f0000000100)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000180)="8617c0c4077a887155e37710631ae9ef69fc57be8b9bba822aa2bc6b447aae960715f69f5c756b2610cd05b05302929a9421cc8c0b65fed9aa9c82f80471504acb70200a23c9a47f73d6009dedc801bd24275aa44ff0bd65b41e71141183d4cb7751cca0f852162147ddef853931edc6cd95e5907afa25800a2913e715ad70df0d2eb85469b3f01053dc4932266fad6f5389adcffa51c02d0aa6da8cb416dc88d0e71d6fa9e8b4aadd770d51720ff928b5b80abd803afa19933d83914d477d814a7d055c1d463818e1f09f992963a4962bca", 0xd2}, {&(0x7f0000000000)="ec4f17cb97a06a133ab92da61e4f44cf4cff0168e68c1ff9b6260f95ca9ad4d4c33df412fe17e8e47f0c645c8f33be47c182", 0x32}, {&(0x7f0000000280)="5613c3074b9c0506d3afeef89b159277ed91d6d875d472b20573161f08c5", 0x1e}, {&(0x7f00000002c0)="c07cf303100e7b4683fd2451169dd02390ccd323c52ea15d18e4ed8e5af83261b14bd87454428e19a5fe6821338dc26a74ff7750c84f317f166a9b772eafcd2fd37e8f20019da0ef570b821f3039b61c58007847d1e6b4c839d6c30e2889f29842a072fdffb8d5c73fd7f7a37d4d4ebe5eaec7a6d8bd10057ae5a006c65d3f5a67d4dceb5d0f708946294e60a5f7644d6de13cc32a7a638de8f255cc30a1b5dbf20b0d", 0xa3}], 0x4, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}], 0x20, 0x44}}, {{&(0x7f0000000400)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000000480)="c1a9eecbd34badc0cb0517333925b6dc6a4cc378017ce09c206d42535e8475c2d26aeb75e696df86255f9a474a41be7cbc92ac1f96f9e6b2a2136545a97fec7f3198580180ee80232ad753b0c98b252a93b346102c06973513c70091e9d64f5bc3aafa6c0253202087d9771605d2cd8fe867b9c5a6f00bb2241da2d06c38734d2d26271693404bcc76a82ffd3e666f5a9312dbf2b341d39ed49cb8c50ceb9db3f1bdc96fd8dfea087c7717534eecab27af85caff17b4546aa305bae4ce536ceba9a762aedb1081993f70a783e6e9879ecf0390bf5f", 0xd5}, {&(0x7f0000000580)="17d5d759b59cf09f7bedd9f41e631b7e0e205d07dc2a57bb08c31f5d4e0623ab0eb0ee236497807584ab0a1ff96ea4ab56b9c4c315cb922ecee95fa6d691cbe8bbe49954b7cb72fd59eb96417e5e9a26d4394f33f3f8add9666895b6b0efc9cbd53d2b31e7b555f936e939cb6edbc832b2a47c4bd2c878a3a5412d229c55c344601fea51c7b170a436f710d543eb4e59b748541ee8fd9a57a760b0003fb14219bb9c6cee0497a9a604bcd96ccb1a062abbea06bb742db567513d34a35c173e701e8d450020cf33437d58407c50cb25c02c2e95ea26bd36752745ff58887edd532aaf04", 0xe3}, {&(0x7f0000000680)="eb227778d4fc7f2e1ff0e2d1b58814a2d1fb0baa44039d321c03b870a95e9f3ee9ffe5a1ea448898cacbf13f5ec9f2f73d639c7aa5aebc5d3b13228b6dacc53bd91f61e0802f62c8ecc3b1d40d2d7dcc6c5d60e2bb7ba84097f20cfbb0291083adcff2f963c233bf8320b5ec864f30aad680c91f51a6f3497caa31ffcc47643e5201a43b09ccdf093d4caf53c737fd465e78336ec638c6327cd71afeadf66af09d394c940c006d4a168e49775323767e8edaf1fa70125223876fc6fa9cb2a25ebf6cc1", 0xc3}, {&(0x7f0000000780)="971f38677856e3b730c2136539b1db7065b2cda93e2030af3b61ace7ffa93eb591dd3a6948713d0f8c46f9c7f7c3686d83e70138882dc07ec17619f92022b202aba99f642da1c60aac8c52d389303d7bec8ae0440e84a221c087f0fe2233c1d843e9ff93ace86de8c50f997c11c0939d855c379f67a9046bb48fab2e2066ea7e8da666b78a39dfbc99716289a42ce097e4b7338fc96cb9dc80e9b71605c390978b2adad763b47e971297217cd282b9c3b63ba29af58c453ceb2049526ea2146f090ec88aca8e07a972bcf95ac4c39958d302b44bfc9d762bcf7ebce2243d8dc0a66addd290dfc1c2c1fd1f6c23ab3ae3913932d273e3cc0befe97be8c6883cef71ed4a5ba8162d8fab503726d45749868660eb0ea5a487cb6c86bc494e727c4a4b2ee47f4ebb6b0278b30451282ccbda0b54219a8833c205c0fceb30bf0799ac58d141b881dc4ba87c5bcdc059d023f1b4edc25b019a90caa155325790639d0995f3b59b2e1440174e76ef413b56d61eef815a1d21f2e88eb7f95317d5523de369ab1c63cefc942b28eb05d3731fbe72fc6bfa91668f139d7f8493d901792860c503a815617ef4cd7e51e5c2c149c62ec9a82e92470c121ed6fc96061dbdc7415c810694da545638342883e6cc1351d0cd4421ea15383bcde44cdb5b3b44f3fc21bfc6652009cbf3f73cdc1dc5dfb936003e5de9ce4108d2466ecc1166876e6da21459e7befa32fcb5c56a4507172e2f38ed977b5b755e92cefd52dc61dd24298fc4ac9a616cdc8512cbffefb715aa437cc805ff7dfbb1d6f316ed51e5352d392422e36b11dc5639844fd7dc2a2f1aebd0df4108b31d8fee073cc78e542f67ba11ec553bb1e551c18db4ba6c086bd302bb629df4bb5fc47b78fa5deeea790c68fb29eaa38e5f0174d4b0c04adb3ebfc0cb6ae3a5908e7b56a242e426f52522691c9bd027332d99bf2ad1581d0a3ff415eaa647b69a04a0b5556f4f07f582210918c93cda7bb5f5d72e6f79a8c7b15a4d9d93206e3edfbf0ac8df57a34cb791df7634fcac24f4f5d43e46d580881cdcd7b3544e90d2d9e54bddaf52e1e055764460da15c09e4cd81b6a67eb9f941f4b24a945af4f7404371e1cff17d8e81c87383e0077620a631ed14ec85816a0fa36f72b430fa838d798ab04cead232d45d551ad599b95de3fbe73d4128211fc2018be7357f4574fdde84523ff379e64661e8bd91b3be91ee0ad3a3f3f629be69eb6ee1bfcfbfadf38b0be4849fe09de85b61f30a0e1ebaf27613d2f7d4c851bb65417bc1cc373d65165c271c0e17f5274ea18920c236481dc37f7b16f033ef71917d657def6d1c1c3f83b145c28e980a7488a09a04276cbdb1bee2b44b18b5ecba0118b72e65dcc6343acd081864efb0595c4f8baf7ee6bd30ae8f5cdb3cbc30b298e4a71c5633b37927458d120d6f9b07ca2db5c6ab00fc7a6649dc271132ba68340ed8e6d5ccdb06baf17016e095c5b60a7a6b0da89a4ca3d6b46a0e5e4ec39ec557d5feb8d9b4530021d2a23945b93f757b6f2a92fb203cb90e7e0eb7203e67bd5900b4369d7e61104e1a024e8986b8dbbd3cc3fb35182d99d0b8e453fb6939657787096965e7d727b37911bc4790ac745b2c8975d66bcbdc2894738b61e89c832e7359f5fe761fe54531dce32bb49f07939a087d54f2d8be911499c0bae6c60bbf7d314d68210cb3e3378fe576e5fd429c2ac19a8b6138585f0cfc8315554a904eca694fdd5905694e989339b056a339c3a751675bcced8185d90cb618cbac5602edc5f887de729ad2adaf4a9f1e575452a1a99f890d5f7bc46b1ef2a16eec66748221205b4af7cfcd3edca67964db09b0a2968e811c287991e90a935bab7a9fd3bc61f186864d5054b9e43329b7e186389790c0f8190196e49f2aaabb0386aabac05827c08984fa83f3ac1cbc87a2bdbb0a5cce1b6b0027b6bcd3fb807e4903701821cb3b888a0f69c23672d5b3dccd458f0d3a0fa7c4ec14390a8bbbfaf01f389c271cf34fe67c290376b66fbf3db758b82cb7d9ea5d4d267d52ecb52d30763d12ef7d6b33773afe949e70172cdf739d633bc33b72f4a0b7d9614e4f5244df025bea6f9e067d2cdcfeed8a7b60b73daa4ce92432537cd8611350f4f525981f0b8fee9edc721904ad83e101dd677d2586d5141e065b4dfda1c2e19ebc208bbcc2421ec5bbc89110b196f9b6fd15e78cf078a99dee0cf9ea84184782833365e3b0ef187354c556f581aa5dfa43a507ba2b833b58aeb734dcad2fe69073dc50c62d44fdc48461405724069c9a35c2dda460716b69143affcec6bb14ded724cbb18691e029991215f1a7cd9d69c14688b36e7db0cc17ef5f4e7968207536648934934437d6ee62a7f6beb6724044fb607b8e533f123d3008e4fa27caa6e4c76c96b81cfeca364afaab6738bbec736e08fdb3010e149588cd57f3d2e889d95082570aa6cca1bb02aab829d995b8deebc6a00b8bc1b0db59e295c1408a4f7317e3d5b10432e7aa5248b20a3df68ca9842d3bb9140d3391b520ba193754abf8a3732ca2b8228c4f130f213531b85874b96327e793dc9a26e410f01dbe2a0f0c47b6365769b886f6e3764883174207d9266d398b125664403256ecce9e6076c5f00b0a97f17bc3272142078a5c7a75aedb30b377d6d476d1e3dd04b243093df92229423691a1b6a41c0acd0d93518e43a22e8c542d207145c19bb7eaa260f9154be66c7fc06f3752653fa3f85dab4a3d17fab1cc34052ffffff99c95e9512d43dba61b3be67affabc22a9ce8a644873e977517a114db0a253662b1683b243c6abc617905e4dc499d1f98372a2a45be4db61dd7d607e0dc498feebef1245551a3df0aff4c2298c500c1d60ba937f6e9feb0cf4c9dedbc1cc207af6f2f6d2abba9ea0a6a4e9881786718e02f4eb7b77bd8c817009fde8b6dff33b3c70a967007bac9887573c2036aa09410fdef0b38957fb3855073409dfaea63bbd75bd41c473d714578b979a122e66936f470bf904dee332581efbc0f821e651ef3da6beb36a63a97f2f5869c804f62f49eabbbfa0653e0af29bae02f8fc3ae068ed55525e4b1a985ef7b6c908536acb72d5248acb4ae1cf601efbb291dfe9731ecd3eeee2f269dee27f6b9f8999130472d93227396f01170069ca74f9f3aab80f147fd751babfa490bb9813e742c4b280a7f05a4f582e37fcff6c6a0e438fc5e019f5aaf7c22c6eaa12c0ddecf4ee186ad656364aa4d044a99527b44d5f509b6c03363eeebb16b4787598ca7e267cca30697eb49ae19a2e7cd6b5cbd17013460d3f2274180cc6b2f11b76c70466099fbed90904f5ef3817993f14572dec48339d24e694abbbd53893654b628384d2315c6155250b5db6aacfe8cc6ad42e81713502bd56b88e1516fc84a12385e952d96442582c46fe019527f86d220c3746053024cc5caf64e1a1706936367167339e689a6276cff1b2ee31101c1d0e0c78d8985bbc2bf62a4a9279e036b7e403f40aebc394e648cfa574165fedb30da7d7e450960ac606cc92963b6983e6df3bb45689e84a97bc8bdda769d38e9f28435c7f312bceffeba31695fff90660e03496890566f3a94dc941d78a6d5313dcecf387e1c96c690b875e32f867fdd7af0982f969f6677eb1d733672e89c3486dd28ca8e0b41cc17b45a8b2bfda237a64a36996b9afe37d58f46ea32f5299848b9c65f48ed01f5e1f32dfe80b5c69a0a73a09a9ed30a4553496c8c90271410d2fa4ffc824523400e0aafd5c4fb971e3f045bc8365207d341345108520fa6c570278258e490ea959a7f39688ec6418a4cc157855e420d856b3ab9c37a9a47316e517a3f11426db26e9a7050979c8ab2f4b74a0e820a455c009da5da3b174a12ed9cb54e34792824750ab7825a46fc9b6b703d620ce0b55aa2c44d68531e96b7ce2191b1c44de3ba8e3d7243b9e209d96f3920fce5555b6994acd7377b3faab973fc9a8b5564454d59cb7a82357f60ddcadf0f0666113f0a6d80d9f5f9bc2dcf6cb59c2910ee8ceb839707cc423c79daa8b31840d50d10e6c1aaa7da5b12b4532bdf3694aafae59db40856218b5f02f86787ab4d0cbe4076902f077887d3211b6fff8d576ac246f92114a4a403f9a3bc033ac6e2f32a206cee27ad87a3205844353048bcac287949641d9f802a196c171be0b17e46753129e48df0a30c700bc469015491579cbb5831188e4309df507f79bb749ff53694ce7849f52d5f245337f5dcce5d5ebddfa0e4f1ff15927529826182ba5b926a0bec8455240a01d1191d5edfd0907459b67050e0de647ee6820dde316b883b7a6550a9995c5564bbb3daba36c6ba72a1181acc4955fec57eab2909b33d39478eb2a9da5422bbe8345aa1a8384d440fc6bdaf7726ba3dbc81fa8bb327fb04b7a58808a441618e697b167c6eee7b0b5391ed0fa0f303f7c9eb88b2567547d6fb0a358a7a5815ded8609040c726c029599384d13f161226ff07a0ac0c081f23f6c14a3206a44b279ca02e3a892c0544fe34f6482148b2d97545680e9e7bd9a457aa605ed8aaf7d27543a1a4d0d2400a5b586b131d127c7158d30a0648199bf36461d20e91ad952e6a2df02369b9a806d51876a2c9182fba28e632924c41a4f4af668110d5460a4115494a99b9e3ebaeec7d0f965bbdcda2d0536b55eeb6653ed271ef11ab0ab448feb627f06f58607ccaa93cd3eb29f9e3e1ff6ea891f43548b4b80d28b8721381061f8188b5bf0171b26fb327b491e67d02d4cfb611e5aa5a34b5215063c49f0d5c4349b8ad54d9cf42ab50063616952b60634485a59feb6050befb81bc783a7f3774a4fcbef0f09d3b30579f45e4da5b5e494e5b1fc62d263a98ade262091c0be31cd71d51a821300273bcddc91e608d64168ad6eda17cea520f2bb7e2c9130dfc29a883ddc50074af3d4824673ecc7331884c092c8c2f4cb8abcf0b42248b044479ee7a05c560f6c5bb5b03234651a9280dd9f35e309cab31058564da769fc2ea712a77d2850e412d28bff52e74c6245a8160568a7b6222242d96f4145c50da22ec17d4574347ccdb8dda203a395dbe285f3591abd3e855b36f67a51dd047491845276485504183f69468f22aa787b6063fa1e31b700a93ebbe5c378cd8abf85e1bf21e95f2761ea3eb35724132290df3de5117fa18ed1539b7fc09af827c09e7143e0ebc6c4a5e1178c9c7cb0276fffdd29daebffc3a382bfdda21f368a0c29fa8eae6835d1a3cecf83815091c46c89ded988a354cace8d58a8c611f3a9cc9f87a82e9c568bcd07c3f1eccbaf6c0dcf974ec0f0925ac0b8ee4c7b28c7d0da4e3c1c9032feca588e03d8d0e21544b7a1be525ea7224e967c80fed61a76e7dee495638632f63859ae0274da6ad8d401518527fb8e3bc2955eb9d8798a026474b780c263138ca85cd7a9f30b40690cda9ad3cf26fedf336ac2ebd9c7bcddf67b7dc1872af4b43eacd7e3a0220cd3d9a603f5ae763a62a54f0fa87a53e3824f8acff50d95bd6f72ef700eb54b7f55a8b7c4bc971d0c4fb315880830cd08cf58b27c41bceb0706a85a7be668be72399765df955cccff2e1b50f162ea17239de938d0f7f6b535db16deca7df259eb3d9d5a3a75f6efccc2da74ee20e58abd9a819931bd79645ef1f0bff842590b287b4660d2d4d002879a0d91d8f77b0cb44e575f8519e619afff9b2e73bd6740da756d85bee221cd8c95d12d0218e2fef073d603e96e3027782a354fbeb84ddb67017ebd1f4c42d2614ac4dd7aa0bdf307fc08b3c3eb0e", 0x1000}, {&(0x7f0000001780)="430d89333b1eec76ca988c3b40552cd58073e79499a72d891a512238bb6f8255ee9fc6789b0bfb21f788fc5b61bd0dfe7ff1bc2f39edca75d0084e159c2b9f8b47b8229ba7cd3b30e49532e5fb753d749194314a7df79045624ae68639dd9141cc80cd66aa33719dab3b376f9ad6a9458c04917261ba9c76ad28ea310ba52204475aba37f10cc29b18499bcb16276d3685549aaf416a2676fc233cf997df4ff424c5b3a278099ee02a61d617cff905ecc3445a7803f3044f3be5d216b4bcc94c40efa86593f7bddbbd563daef3d21872a31ded51608677658296804c918a03", 0xdf}], 0x5, 0x0, 0x0, 0x8001}}, {{&(0x7f0000001900)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001c00)=[{&(0x7f0000001980)="c77bdf29ec17cba06b8d88a2730ad74a12acfef8329ffbfbd5ae63e6bd5118d4a9cb7354f62e0e77bf647cbd7241bc1074966291d1ec6b1fc44fb682e300dc1d60e293b345", 0x45}, {&(0x7f0000001a00)="3109a4c69e77218d75112b666121a671fa1431cfa0a59c15f4490e01e5d1693d2555bd619d20fc1eb5ad38bcc5ac8e6ba72d6710671829fcbf998e8be7f263e732946d8e751db11d99a84607c7545702348bd58e1126e83fa860d397df26f5634ffbc1bfce2ec1dfd317a42f0209adcde37080d9f792a6a29303d600ae473f2bc336752d9bb51a7a2ee3b4ebe49d3251927db695a6138e4e336429ae2f516d9bdfaa4cc415bfbc0c773c5e4dded127c0e21056cd114e121d5b2755c56d02f1050172a7da1571a1f316ca0279377df0c21c7841d6f9d28ff0312b5bfd936113b9631689d953430ffbf6775708252430275abd55", 0xf3}, {&(0x7f0000001b00)="2a2a409c0f8dc720aa236da0b7b800a02029603244dd7722d1cdb12410a0ce523a0d9bdbea0aaa6faad9ac1900a89a3831d7564a75e48259b8fdd7cd83467bee4334d9242f8eab64720707b3288807ef14855d7ca68c0ad9ae9221205fe35e7d6bc6bac547d14f8076f2aa02c70673a658cd3a1e9d", 0x75}, {&(0x7f0000001b80)="583fe0478c062219144818b0a9e5fb83d7137816e11e8532ca163c6aac1c8cb2d8b18c7dd2ecdac4a04c86d306b9333e5769439f3f52aef0af59645bd15f3384eb1ddc4ad1c2c138fbb6a3568b5271a384c938ecae37f7722529ed542d4288b15d6a08f576f616fa43b7a8d2934fba2626565514", 0x74}], 0x4, &(0x7f0000001d80)=[@rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x78, 0x40006}}, {{&(0x7f0000001e00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001e80)="401ad4bf3b0267b099fbf6ad4c7d25cff0e7d374eae7fc579ce03a9e260ed5252e121a2d27921cd25759e943bcc870057d46a569a3fc4b7f9079d47f1145492e6c32ef052eb2f26bb7940bc71c34e300732738181bf90186875d77e2427862bdce2e688ecd2142aa0ddc16623e3a69020b5bfbcd", 0x74}, {&(0x7f0000001f00)="1fc0b4f61d50ef39693cd9f934fce381550693a9b955", 0x16}, {&(0x7f0000001f40)="dbd9d1fbdf5ac600ea8d92ca4ca8a026747a69971b7aca22c0a992041b3d01ec8224cfe23b98dde344d268abecb08ff2911015a15e74fd9421e5462d73441afa49", 0x41}], 0x3, &(0x7f0000002380)=[@rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}], 0xa0, 0x800}}, {{&(0x7f0000002440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002540)=[{&(0x7f00000024c0)="cb1a70dc2c1a3b66665e64ebfb33b25c485b40c15c3e35bc2238214a5a2cbf8190bcaa8f8f00d8a9e108750a8a24ad2788879bf6b8858775d07227aaecfbdacd5d191973b519c1d1b5d7afa1afe63b5c71510e3db3b594d79fc7bf8dbabf80", 0x5f}], 0x1, 0x0, 0x0, 0x40}}, {{&(0x7f0000002580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000002600)="fc2427a07696652a9d20f492220245f9bc8b8db13492018921b0360cbf80f9b6376f6934af45c81f349377aff3a4195197662d10b1059b24f1c37b7164df07d6476a4f4612db54aec891b53d32ae554ae51ed1c8ddb572f0b294b2198515d310c2dc081e51125bc29c4a8d23c6a4c004cee58af960c2fe8ba0ef65f867887177f69c27563310d5a4065282a141f2f8baf16bf34f60533229797a3629c0740e2dec186621708fd15d7da3820b1113269bc8ae0deb2f", 0xb5}, {&(0x7f00000026c0)="5a1c00adef61e464540b8d308dac08fbce888c9671aff9bb97e727acaa631943fbea23247d2b61b810586d38cc608f6f50eb88a57614f18c6b8b42eb81bcc89c1f8018a75fc9548ba85a001f950d265d9720a25e0df74d81120d775200d6eae58991280c407c23e0ede99a012563", 0x6e}, {&(0x7f0000002740)="f26f6227862165664047a9f48c2a677ea08cc958b473ffd739ac60143fb9e0ea17dcaa3c644a4fe0e126313f415679eac4974655b6a5427573a2c62d8a386721ae401305b9008bf1a42d74e87dac1853ecc4e27e50a77e041460df994056bf98a2b1c806061b44c29cf2cf4e2ea92c", 0x6f}], 0x3, &(0x7f00000028c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1, r0, r1, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @rights={{0x10}}], 0x100}}, {{&(0x7f00000029c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000002a40)="39a68d20ef0f6d25", 0x8}, {&(0x7f0000002a80)="d9ba3b87d714252ad11b6703bb6744e9e3858b415d57f28e4e58d485cef5f89d5d8bccdc8f86319394ed4a09034319c02aac52f0385f5de547e087a848692a4982a491b86f8f7174251f946fe31e3d182fe27e199ece1e8da6b3d2b6b8187f6b38645677ef10337f2a793d7a80797732513db9f15c71465091fc91542305cd651d8e463119124b4c593f", 0x8a}, {&(0x7f0000002b40)="cc3f817002c2768db7f24f27c73e5123bc8979715ecb2b91087e03e4578f97e78e1859e50fbc707dc5651028ab365232298e57ef2cb38ddb47df59a2daab747a0e7fbd1e7f02546213a5e31b8d395126b639ffb69f0c56fb053bb6bc9ba8b128ce70e08e30762c24d97dd006f6f6bcb0f45c2066183784436194c1c1b551443fec4e032391b9e8de4b51a6ead61dd2059aea141915a769f9b6b417", 0x9b}, {&(0x7f0000002c00)="549c0d25e814daf14bc22e5adc0322035f", 0x11}, {&(0x7f0000002c40)}, {&(0x7f0000002c80)="399005b3061df7a4383043c1581c276152211a900cd5975396f037", 0x1b}, {&(0x7f0000002cc0)="7898b9752fc93bacfee193a448d0c7f2e361222418aac0ccc88984a924569e980eb3928659a7eadfe145bb9d3381ea43942815967ea6fd2ddc7e7cb242fb0cbcad6a13068f42898787fa891652cff74f5b6e380042db32d8b7adf3a152b14235d6b0827956537273e6a67eb48f7af54623cd4720ab05606a9a01dd7574c1b56da5db8ca7b912893f6bc36878200aae73d79f42299201f64b66808371e56ec38c8a84183800a9844564a52cdd5395ca18f05d40c90ca4aa42d49ef20afd16f090aa713e9360063bb14a395a3b0357b9a2", 0xd0}, {&(0x7f0000002dc0)="2dca94dbfa9cb54b28ddb7684be8517c507c86c6c14209489d5837facb1bf43941caac40260c06115d68c64c31d762e929353fbbddf0fe5752587c51375604da17cc21578905d266619a416d257eb03e", 0x50}, {&(0x7f0000002e40)="3d55b9129287ec3d16c94561a4cbe5b78c31c069ee03075dca6ce725e18525ef1b234c70ed60d17f133c9e2b84b2d4add0303b59b0422ed23a30b3b1e62711765b5c51f427731ac9e494", 0x4a}], 0x9, &(0x7f0000002fc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000003040)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000043c0)=[{&(0x7f00000030c0)="061879d67d55d2cc152a790528176ef3db22914ef1ed1c789bfebada12a63d907fc1a067f2cf79927ae0f9fc5ac47cf7312b01f1561e88fe5ae64492ee1622279b4e6cd52b414230b031f1c79a3a4207", 0x50}, {&(0x7f0000003140)="5770641820c6f6f486fa522f7357b24552140f5649625fe8ae082a3fad8780b784da4e01e86581680cb6f4db24486519cd3dc76e5a593c411e459b3154052bbd47c0cfc9ee98c1b9a1e80ab7cd254ffce3c00907a429714f908abaa3", 0x5c}, {&(0x7f00000031c0)="6944d2921825f424268cf4c1dce9ade649b33e63713c294587bd76c20ae34ec65829269136bfe449b31ba6c84baa00df308df8043f227d2e3ee7b78c6d57418b7cf8fff6fd2bdcbe37c3b298ed5e798f056969ee54ac490bc1a3e4a5802000f1a7bffcb52ffee5be808f4be58117ed537d5cef47a7c997ba83340ae4a97166f0c6bd9268feaf769ff259dff9cba23dbbe5b11d96cc15d0d9681675753a76db3699d11d3a02470f95be49b6533fb3f77df73e945fcb6a7175a6c292529f6cc4a9fa525e558af19b5036d8f7605b6e073b4321a80953789cb696e3b95532086bd42779bfb659a002392839ee04a381c16118ad9d680702fac84673783856c484502df4a3a90c7f65a4070d426d9c17d22ab956f4065cf302b68ec9bdd954060a99e2f032a78bf299e3da84a7e97946694dabddbb13d8ea5b82fc760026b9912c6ad2c8e2b65eda896f98895534b3c6af25709e59d26b9887094b43ccd9d4c2b66ec71ea2417757a26dabf3b92f70a1e6b7ae2cd10357c772be9838db9345949781d6fc2a444ec48e0a960802e16c8b1c453e9e70dd14dee4189d0495abcb9cba3fb150f4f2deef9900416555a3c6408e540d1726f0061872889be76125471ad589cce82bb0d766682c4fb868cfe31f2d6410ed22d8e704d1954c909d73588c99092c993f3108ae5ee14884f9dc7ccd57d7aa53ba02e70ad1f401c373300cfa221db98811b588cef9ee4f40c6a8acad76c9a24103f9f36ede4e521038811b249889af94a4f6eec1756ac244bd98fe9d6b24671fb8a002e42fda021f20d93d7e7126946bad850270ac1524e480b7f3dfe0284e93d2ea5b874cd9ff2244f87242ef196a423072f75fbdae963f05a9c281a900210582137da19c292a21b6c312be673ee0d4bd08c33c1025d93f00263d4574c70fcf016967cbf2ccf14d956f39ae16983e3e946d09f19d1cdb509d8209442cc0a91b3f499e28fa5ba4260ad5c3c731361409cc56efebd6f218e6cce33c346d53e5bc30d27a6f21ec615a9c12404a0ff421a35521875ea3c3ee2c89681695487fba4a300c47d887c6f8befa33525804f0a8c78dbd4af69f903eb716b3e30478195b4de7dc20fa449fb1e19366147057711c00968dea8ebf1426497194ef2260dcaa589df86e8b780b4e7c9aefa16a71929e27d61141051e5813f024c35afee08ad331d4b487fc38f2889c1cd77c782f0e1df13ddf69c02c54e74290e110456ca96f5f488c65f9154b77531959afcd1b8bf053ad0d06168576aed20a300a7b0b121c9ce895f21ebf0c9cd965bab869b04790f1856044f03a8b5647824835e9d386379710ff0691fbe85fa8297145bfb2f3df4b5cb7a04195a64f5d557b76a97edf62e60d241d61a96e2bf3791277d4b6445010017e960879b7f4633c099d5d8f4d92918069ff6c7641c884d75405d1d5fad0af3d0ffbe1d9c92c4d61c074e1ad1108cfb894d5bc7f3a779fdc5ecdb98d440287febf43892794571ab0768542d5675e3ed97e92bc230ca4c3bdc921882b8d75ea89a6a6cc6cc18f485816bdf8411ce55929bd1b13f91f1b872130be7d1b9912e5e75d8380eb88334f44c985f342d14f21ea304d480f7e641fc3ab06a8ce1c3e1355374eda64d79034ec18f61af282aba8f3aff135f08796ceac47af7ca2a07ec922ea059e34e3f11d9159999892feda63dce0e890c93aae9b40f58b25023ec9670a075fc33f91286451ecf3eec0d4f9615fda583d6bc0c706216839dee85fb320eed0612d8783ad2c1ab758ec9cc5135179684989d56b0589d375b7b3f5ce8b27ff8a5b9c8951916507e19931917e150ff8dc37f63d7def37232587a617c11bd525a780acaf9720448219923b0d7300325a792e647588eff42cf0c09436f60bb45f61dc367f12392e2cd45e6a07e6d7a6f6d17e2d92647f897bab6fc1e9e9e4731774b4baa337d6323a0534369777e7fac20857c7209d69c6b55939dc645ed2e6afd5bf0d5d35c8d5b4b3ce66857974dc0bc3c2c6e6b3542a248d8268ad91aa82ba35b5108d0478ba9107458f0676d1527ea9e73e91bc7f0ef50dd1c8a7b0f0184246a014e4b17d3e7c503af8ce719d11f36f01740fb7e542be00b90e7ab028a66f65f0deb31993d2362be445f104fb9cb6e1ef203a245c13e7d22108332cb698b2be5884142bb287d2095e8b3a2d669c27051c5685e8f9bbd74ca14b2570c972c6991dcd9c8ddb45b29acf068679a828fa42092a1adb8b9a56faed48805d8302b0f181a81b6aec2bfdca4d50e2c9888c1e5fcd52774796108332a53464d79515b5f2b257f6bfb2e04af08c1cd3f1b89c07ed3133f41bd7b39007bfc27b99fee6ba05917f5b78b71a3c3b9b0e44c39dab644191e21902f9859ed53bfaf3fb64fe82b28f2f8775fbad41e185c38493ead440d548ae2fa88b99ea50846129185bb9af012ad2c7c40cc4d77a00149af7d1db488f8eaf9249d040ea82f909140c85f249424a654c9fecd15bb51bac9126591b56619be16549e73f1ae5a787e570ce1d86bb8023042c42ed6c816bb4070e8f93799a4f22bfc2c6f27c5d2f60c9039470a386c95be8ae4d4ba7ca3b61201ed2294c1fd6888d6493fcaeeb78b8653a9997f95b6f91adc808a552aee6890e93affc6afa7a561320f4bfa0b57d431e6ef0881679fc56a409ad9df21c6437b27ae78ef1ede8f0d5e6f6d506d296a3deeec7dd438899e0cb156059cc2343cc357ccc585fe96907074b6de40afdcfd1054f78fd0c417711f552302659fd3f43e0cba15acf00df229406ff7658b0a36fad69060148f490ece606dac59e1f861bd810131ec107c84b70308ac11d115665726cdd80b0079debe55a1e85f3b8e97e8288e991b60c083018a0ca105fdd1dc93d3ba814510b7129e6de0479465f75adfdb7c24cc76dfa11e0843b37fa3e4a1264f726d1d919ae34d33c014343b755fed1661588e0a4fbd812cdf00c4b61d9b51248c5418f3cfd8aa12136ca2792306abd61d64f78e97caab509dbef7873b71ab6c52c61bbc37f8f82c5a7c6c9fe40b870840a178d32d0823f9ec485ea936889a87cecae270eba847db02ca86fd5d91c1c8617c1204db2b3bc56afb753ba6cc329b87e7d49e0918572f3766aae584db29b8edb965dda93ef598c63b458ff31a41b75e0574c8258d6e146e74a67e4cc776166050eee79278507bdb96bcd5de101b5d7f6cd23538724c3274bc7fcb81f9a29101842c142eab6eddfe0bd5a2fb2dc79e6876b43453b90a6144e0bf2e5a1a25c280fe8ea99b9a0d27177eec9cbc19ec65970724df240c1d6ec4813b1fb52e40935d36e6167c9417da47cebc53cc0690b56595eca2a0a4778ff9f4bc1670d6adc6c641ba22a1e63d3896050b0cf1916da8b7f5c0bf90d81d6f8f64870e327bf284558a5fb0ae63e5248b82423f85f09bb05f5ae9e568eb8308de96b4f25f488a87aa538cdfe9748e810acda94e88d3e56b61e111d90de607cc5fc026539437a57d8b5e877c437a4a566b317202c9b6c218b16f20f5a3137f8072955d1bc36e31e0204d24435722dbdd81ced1dfe87aa6528434997875af29a6716868e1129177e823056b68d5a8e70300b55c4cc8a25e9a10e25833954df081e053aba9a7393a81b41566b2268cf97a68ba6bb96544f0c632957dc7a85a0a6ad37160e4fe79aafda77327a163eb0f261ae66240860c551e7b58476fe53af9c9c2970a4aebb43f2f4e70f6ad35b23e8420fff29df304ba68480b52614540441d802a7b0257d17cd9dd747ca060aee05112ff187bbf68cb64e1731bfaa3fba7a548bfbdb79f73170d08dd553992ea186219935cd29db07d16dbc3475cb8839691fdbd46dc5534aa02c0697fb993a946958b474751d53fa3f833970abf654b96a4d2c7d1560e40cf12ba3a324e0dc71d5bd8c13e93a46df5f0ab12ce1ffbaefdeea808cc3f61ba4317dea6497493b16494a1f6a40fad453cffcff79364712cd82e69bb9ad127f25b3c5376cff1728ad6b6cd25d3aeb3e8e0989728ed9c4f94a167ef0f28a880db6b5127218d104008c5d60180574f0519c71a6a79b85023b01d83d29ab1f44a289d66a2977c760b5418e7c5984a0578b3429795f2b55a6640137364d02e5cb828d73b66d6a4edfb42676b9c7cc7271c444703d10253a0ac8e1db4e25e1ecda9f00c28abd799989ebbc5ef74051379be20287c92f58ff5de1a7a0266d5b9cda93b77335885f5f942f5cc2ca6f8ba487db2dd51f891290091a118c60a125589ddc7c3f9729357b9135a7022271507675699f11e6d941fab3990cfebe29db39dec3ef5905437e2a7848a3008ac515755035715a4f8f07f475a9b7db454c84a484742c2b84e4773e6eecb73335fdbbe5497fa0b1c9b747c6304e21b495c1a41a71cf5c910d5bb7c34bf1b722326c0df0123373def95b09a02bf79bf474e6a6169e07d01ea1fc5d28e090ab32e393ed78aa698c2ae58fadb01b40be5f93b7131f13ea34506bd0cb4dbd76fba7c2dd0998391a8ef09d0e4ae5d3805bd3aed0d51c590c731ee8708b3b78bbbb438ab449e94ca0f1e7780e3477ed3887588868e400f3ded5f66fd99a2b5b81c9e9b026963acc263a3cf3eaae73b3987134c57120b1219ea9cbad6653189bf72022bc5129e04f2a93cb57c9e8dfba4baffb8d1d4dc96da6d9709ebb2dda29541f2e97f4f60414e5945c1539b84ab3b1b2c2db5f32dac89bd59e61e68aa12e0a131090bac2a2f87eb3af65f5906e9227560560b2131bca5570cc546ddc27a2a124df40a9abde60502f6742393cb77e3bd0a1a3bf2f030bb664f0c95df353dc4240e613de26a1ebf1d6cc1e1b33a53aad1292cd9d4100f8d01c5162518ec4d9c9ac2a32f1f2ff5da2f3bdc2f9a98f47078c7a98b56792a6efd0a062b6df4fe660ddbbecb344c66df67d1ac583f58d767993f96c36d48d8cd6775b11efd5952c2ec704b20d083c8b28084f569a2e40905cb90037b30b62bc5999f0aa5e398e27da0f2afb91e49276660fe7dbd2a05ee17cd26e479e3e03804fec1d88d06372ca77aaa73bdf55e8ac6f2ea39ff7bb8abbd0f5469bf290d198cc58c9e574994c7910747c326704bab6f670f528737794bc3f9773b1b613607e74be4bd99a7022a339297976b02888856a6756a696688fc0afa0e3081ce289a150a934aac164b5ff213b5b66b83480397d11b480d05168fd941e86339883aa15171c5bb19559a191f1e0488f89828b7f9881e608a917bf13fb7e41ecd60b63ceba3301197abdf581fe2abfe7a5a67ac519cec9fc6c560a46815552a292c9e2cd3e151e1623abd51d22ac768c5aae7ef618015ceabea0f1d5ea8d5bbcc52c1b27c078732021e8ecb68b047cdd414b447d4b4a37fef4440c0f83aebdfbd1ad3e9eea84f857670d18199cbf5d2391888aa47136642cbd4850aa52d0330f20df48c782669d7c3a23160c85baa66c312d5df7d3094cb494e74ce5eb443aee521825595fc11e5b7b8b128bdd6254c5da97628a113f1515c2792b6e5335b797c37a952e5fda0612d37091e4e0dd38d7ff21f76e35adbf6d630b1767b1e316ba9993fc1b0e1c729b0b72807310a4ae41f53a7b29c9c782504204ecc9e8f640faa3a54de0f064d653e5d1ba6137dabfeb97b46cb4fd21753b55313b3051a0cd7e16a9b1302a0a9727efbf334c87676931c933b5d4a40a333a49c9e68230b47a13cd5aa64e136963ad79837aba8115c04caec58abd1b7d3a6dc9b030f442059c3145d3f1344debadeddd432a6dec3f9a713f971b341b044a7c", 0x1000}, {&(0x7f00000041c0)="92ac952b93f71e14611bcc47530252757f72568240175c6b71d0d1bd38ab7ab373c586f1597794eab790c4b3aaed230f27f41540cbd3e58e8b69469df0fcd96c8e5e4baaf203de17b1762fc8e6783444a318fa7096edac26055c027afdcd5e2c62da26782a68d0bac4c6ff923407af8527db544af28c0344e5129f2fc00a845d00000000", 0x84}, {&(0x7f0000004280)="b9f0e714a01cc164a726f3626df1232b2ab748460a6cbb749169011be2dbce2055bc5e31cc379f0a315c6cac0786b297e22f41df8a687958bdc76a0d9a02b47449ccf100bcc893eb5bd7637944039658da3fcff9720d", 0x56}, {&(0x7f0000004300)="7539c3019658129344f11c96b52abf312f1e02ec42d7bf990b0317e71944e88aabc23fe22d3b226559493a1a6e282212a73e2321854276152d6277b606f4f327600dcd12486d33832be944f1de2198313e77426433a5bc113501c7c2a7eefa3293d5b211117911837810619e04fe15f3094ebb6f3b7b8e8288e8da5b852fc9df96734c0991763674a96cfa7fb420e36ab21c8093aa58", 0x96}], 0x6, &(0x7f0000005e80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=0xee00, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=0x0, @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00'], 0xe8, 0x20000004}}], 0x8, 0x50) 15:16:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x5460, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:16:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) r4 = gettid() clone3(&(0x7f0000001bc0)={0x80, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000001740), {0x9}, &(0x7f0000001780)=""/168, 0xa8, &(0x7f0000001840)=""/15, &(0x7f0000001b80)=[0x0, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4], 0x5}, 0x58) r5 = syz_io_uring_complete(0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000014c0)={0x8, 'hsr0\x00', {'vlan1\x00'}, 0xa2f}) setsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f0000002fc0)=0xfff, 0x4) syz_mount_image$nfs4(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x3, 0x3, &(0x7f0000001440)=[{&(0x7f0000000340)="8fd3f5a3fb86091d9f2e1b80ad161fad7e91cb70830ede96dff0c26ff8fbae6de6d10136c9aa7a4b4f60213c4232e9da4da2e21274e1715cf1b4fa626b7f08ba8e513b29caaf7f07065cc7ae1a201f08dc73fcd8", 0x54, 0x7}, {&(0x7f00000003c0)="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", 0x1000, 0x1}, {&(0x7f00000013c0)="886ee72b117d05ef013da18966060f15c451f5ec047ca688be8b3291f7b4ba7c77bebfd90ff38e07a411f1198aa8216f94f9e822a56cf6c0a3e79d715a6030359207be04a5", 0x45, 0x401}], 0x200034, &(0x7f0000001540)=ANY=[@ANYBLOB="402a7b2c7065726d69745f646972650900696f2c7065726d69745f646972656374696f2c00097bd35fb6c5db90a810724d88aebdca899d7427842d49a6e6df0854303a33d76fa0ece2e7999eb076038be40f84f723615cd9a3284a8464d302ead4eed44fa04b13869d2d24a88f88476e3b76"]) socket$nl_generic(0x10, 0x3, 0x10) 15:16:15 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:16:15 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c007fff", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:16:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) r2 = clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) r3 = gettid() clone3(&(0x7f0000001bc0)={0x80, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000001740), {0x9}, &(0x7f0000001780)=""/168, 0xa8, &(0x7f0000001840)=""/15, &(0x7f0000001b80)=[0x0, 0xffffffffffffffff, r2, 0xffffffffffffffff, r3], 0x5}, 0x58) 15:16:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {r0}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) [ 2666.022530] msdos: Bad value for 'time_offset' [ 2666.028979] msdos: Bad value for 'time_offset' 15:16:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x80000, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2666.058513] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 15:16:15 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xa, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:16:15 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c009eff", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:16:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2286, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:16:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1fffe00, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2666.191280] msdos: Bad value for 'time_offset' [ 2666.204215] msdos: Bad value for 'time_offset' 15:16:15 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xb, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2666.296396] loop4: detected capacity change from 0 to 8 [ 2666.349873] msdos: Bad value for 'time_offset' [ 2666.350904] msdos: Bad value for 'time_offset' 15:16:25 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) gettid() 15:16:25 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00f0ff", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:16:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:16:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) r4 = gettid() clone3(&(0x7f0000001bc0)={0x80, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000001740), {0x9}, &(0x7f0000001780)=""/168, 0xa8, &(0x7f0000001840)=""/15, &(0x7f0000001b80)=[0x0, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4], 0x5}, 0x58) r5 = syz_io_uring_complete(0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000014c0)={0x8, 'hsr0\x00', {'vlan1\x00'}, 0xa2f}) setsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f0000002fc0)=0xfff, 0x4) syz_mount_image$nfs4(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x3, 0x3, &(0x7f0000001440)=[{&(0x7f0000000340)="8fd3f5a3fb86091d9f2e1b80ad161fad7e91cb70830ede96dff0c26ff8fbae6de6d10136c9aa7a4b4f60213c4232e9da4da2e21274e1715cf1b4fa626b7f08ba8e513b29caaf7f07065cc7ae1a201f08dc73fcd8", 0x54, 0x7}, {&(0x7f00000003c0)="e695d1eff36f8cf5c028636fa089dcaf674b44be29ef6cfd7867a8579f0487a28edd0c2159f35921de4f381db8a8342b63cf0a0a00913fe281ab39aa89cc965d6814c83248250ca066c8a0ec990cae2c8a265bbcf2394bbb38cddbef4123dc24e77e97e58981bd3033fdc6ecc480e0876ad821ca7e717980219cbfc8f37dba9bb49c70f1d7eec9abe2b4c27eb57007e1637f6a1bb98036c47d76e1270dd8bd3e57c9fa283d6977c709a63951b6e6ea56d67832e11703eacd82fc03c69016bd1351fb9869747e7cf31ca38b1ff866178e1acef2b7c53dcc5af45aa33d676095057c82052154185cfcb5b4d223ebce41fe3cf82823d99bbd4b61dc710d5c8a7fe0cc9d78da264389757330e4dac5da02ea102b0f9b29976454bf1a81629e3b6d18f3cb850005fe7c4d05c03953dca3b49ba7f18374ca16526120141381c6e5e3a6fd8c75697440659e6a599c800c63aefc41f2bc81a7d7aa6329834abaa552ed2540cb79e2ed60390e2a76177d7915b023743c23b166ba054eac3f71ae41caa5e18eefa5953b8deccfd41d6c289c8f63ed522e8c631cd4e35dda01e0142adf2365972f8f920290c07645a327c8f83995d807b847b531846a1ce81680f591394bbd4c1ee7f7328ca41c4811eb0d104d5e8b91dd7c38dd53cf7e846b7950e3039929259e9b793652f033ef1b0436f2528cc471354bb15e6f20fb52408db00389a1707ce4cd7cb2ad906147e7e58ead8ba6ff8ee2bd2658b70ef9f9820f7bb9b59c72e30cd97d81fa989b1e6994cdb1fe5caa5b26b4604ea7e08fc2e7329645909d170627f93d021c517b2ccf931b8823ad92c01eab7d45e73c3e840523d0953a12959113e1aff134cc6a8b8df3eb4481025470858aa3d15a5eb175d2cdb68100b83e01815d7da5c0dbe39de55d2a5775f609b199f9a5277a6f6e7a0ec7f5f432edcb021a60d589287449267aed7921d80bad8bf2eb82cc4e4cf844209268ecd45e7c569e9dd036eeb59d19ae02457672c1b5956de86669ac0cc5b908d9de8acae8122801cf5326a7ffb23247e92ec1ebe5fda890ba54f96c166ea9d142110eaf90e38d6b5d891bd5362aa28c924397ede077e8aec5e4809c7a135d4aae76a46a9ef8fb264c31a4d5ab2b9d85a208e2d044b740d5c49fba4e558df6c1a7fc2d4703d92c61470979aaa49544940a1d64868fda102f4ad3d8c067b3579dddf0a50803793039f9d1c1ce5daf6f69e0e9aa982522c0a1af0b4756898b850def9126b19af520f6868fa14ea86471ae26a95a369b5f3084f62893f821fcf8b16624103b1cf39526026de58d19d9c7178fd458a32e2fbdbe9c08ac338c9ecd713593cc0efe4c7905d4d9e2055c766f5b9e0c7d9cf8d2b97a50048b3c3d61dd8b5d44101b5450a43a0324f3567be1e22530756eedb83b41b465eb280a05d9b4125c140de4507c2c3823bde4bae35c11d0993a4ba387989cd4208f0d85f21f402382237de2aa2d96d0a6f77124b9c3254958bfc303f630d6775f29857453309616d5850c7bfa6a56db4ffaf1ab8145a8faf8994eb90c740f7713a5799aa6f7d6d1450ea705f70cbeddacfc816921af9b3d2b8a7b4c08915ced605188cfc857327ee4999f470b082e991f3006dff1a7f41adba18f835bf61bd557d43682de6a4ba3456b3af74da28629c2f944e5734ecb8bcdef47bdcedd1240a4485522cb9edfeae7250f6a38c0429f6e8d3d789e172bc05c7914ce636ed103a8a63441b6d1493c12200c35dbfa5316f7f5c46720db463ab5b4ba062405e99edf2b9e62c4f6f0aa1a25a85bb8ba56a289ee149d532b54a18c7ded1992dc6e18baef0b30b3287ca439860fa920de3739a5577ec3230bce4269f8963e983f9b7f3610a47eea72ccfe28e28aac151f31a5cb85d08427857780459771f178a3fb1030486608192a16eb0b0748df9d99e06c002e7bb0c549846814dcfb887cdfbb84c22c99fb7c7ffa49b3d0f51a4404b8a81f052734fa66dcd487c66ae3fe4bdef239d97e5b6ce7699b1608e9935c875762ded17eda1822ff56c1a9f2cad25dd2d0fd9bb9ab98cbeba87b72f84b37fe160b116517b2d23a07bfd492bd348df861f1abb5e3c60424251b52832bafc4836557924af5dca628806fe66c57a8950b7e4a3e8bede663188dad5ec5f0d6fab92bec0cc5b8b83c8b0d7f7e73c8d68a7679f2ab3622a03b219d8a34598beb650be243f29df467a622831bb0b723087bd959873d3193bb2401972b877913ea8e3c799fa329661f60cc98fd7496d042e757d39691f390d55edb98d394537cc26da4db1ecd14034a642afbb02557abd077396e01fc0eb46dd0056c068b92bfa6b513af627c335152bfa2c9520877d3ec4a1a7b17d2a4797a64917cb2599341654e54272dec2a84ffa115e1613565c2f5086cff6a08586b25d1eef3446468aee9d6903a7ecd7e04db5b33081733f6be01dd94ec765d9a35df0904b9ec5973d9c83cbb928122b195d56df93e00bde20686a5df58bc2cc8ccd447f1ccc5db2164a44b1b354143827061342ea35a9da683beb30cfad03461e784561b76f4a48edd0196cd16e880e8aec1b767e2f9034928ef5a370e8aea26dfab39f05e963bbdedfe02cff0517d0298b3976b3c4ce0418038ef78db59ca428c2b155076b3221cf289fd3df95d85a590e301b27c2451826c0e9edcbd960dd945b672e1ce35363500ccaeae7314587ad1d8799e48d5fe22d057e55092e67220b23bc58ca0f1359323e90b7bbf469da229a000dc11c249cb84ba084965577653329e2ab700ed687d44608fe8d900998409306e555608205ff02bc99114fdab667a815a557dbce729110305953c0b7c84ce3045e5d840b3c357d8141baecb5ba10d02bcd6955409a776630efc42378eaba3e4f646488e6ecdeb36021dec33dcfc2e092d1fd71fcd96f1bbbcca180b364b14babf5edb4a8662c26bf9f8bec19d64aeb3e5dd83347c2ff9ec72bf8ea0d5e00285d4b95f45029265820a81192fdc6be9fbcc24189a12d0177af21b64e71f82fac8b723d0f526ebf37c007730a493a845cc059e3cb17ddd6ed21a801faf340240ebd8f6fc7fec593d7ba50736b145ec35f6d910c9cf4f110c5f945ff0350fd93f12075d89158805d60b40df12503a2d78877b98b0a615c58df15fe467336c799e97c826672644134ebb9afeead50e4ef2d936db5be29be006a63e78f39030fcb93a2324a78633bb155b1d80ad0fb0f5fe33c1c29832d3f528a52d3b489bf5dfa1ae189e37cab9cc9c7ecf0e674b90f9d075d3ea8aacf71db6c2c73d9cb9b1e0d7893c36370b168c97ce4fa94175a56b2b1dbe784a34be602aff268c79e17233391cac23dd401682b69ecccb7cba69a2b44976a07e3a666737b09d3fc25cb14dcd1d2a6f7eb641968ecb87ecec9948070651e42d17758304ec8a4a165fb18c4269fc33e79840fba6ccc809290b0ad613ae7adb378c383cd958404b9658b3b4dea0cd61155da911cf4afbd86fb8ba779b0555637e10ac327a8fd349393c97f5cb117a39f8bd022981d42ccd1c7b750cb12f1078975c9e5b45dffd6a0d12424fe0266c777fb05a046c37ebf7d05e66b0e2377ec6c415dc1957a520d6ddc74ab2d996ff10d384e1fd57af31ee9293bfee287ecc66188ca047fe2d2c67a80e00d0992a3fca29f3ab0ce7498054db3a471f2c6232deb9f21e34278f9c648cb5bdfa749b710396b9fdf815383e1ad557d5828036f6f24178e7e78ce6c49b0e020a660c86aa90be2eed08529d3ace89729e59e056fa3d028f4c4c33514b95a0f722e55cc1c5afbf789ed7466fe68309d8fd153bf54fdab71c146ff4923f8898cae0ead99882333b7c8fcba25b62c265c5351f9dda6cf17ab0707929493c173c56d83d7264bc783374379726f7904b79ded0403b98161976aa3adf9753efadedccaf774d9d0806741748f899c08505a0bf582f85d6ff7d414fff6c10cbcb4be7066e40f0f53fdc50da9de2ef62e5ffe82e02782a601297c07a99a78a490e1556c600388dbf46f3ce3ed1b396bac72a517d1d4fc273611a260b8e8c128e88f8486c6b43d8678556864026da4a82ad1d119b65b3f9a85d339bc88cf221ba667a63704db4232e4e952a0b32b4840bb6d2025a9304368259951b6b250bbf1465776a42247f31699231740ea5d8e302a1f4d6159d8e117a7f3efaf336ff01459672fdea4b314f57a173b8f7339725935e0a055333829e230e22b276e3f60253f9a284c27782ecba05dc7030f10708f4d12803d69fdf43c448ea90a8f83b84b041a7aa2b6a12a938ccfeb1b6a6e1ac5f5d18b8f7a3c225c7794093ad532150da0c1b5e547337cf523815dbea60cfb60ca33a03a17e0a454558beedfc0d1872c3ab1f3c8024ce8aa59a0b54c2a31b7cb6172b90cbd2b1689d37de4f6c9916939324d53d94cdfd752febe1ca8110fbc3fe855957ae1d4d7b572d4a6c63597d7f6b598ae55c4d3f4af8b830b87dc6e4a252a9f90e225f7533ef956621ca5330e1b0725ee1032a2d2f754c8389c7770d553f6940b1b16251e164484c249343cc6780662da99410122a827e16f7f7ec4c37405f6bcad26ccb674649e3ec9fdfc07dea2e6d0d0fb9400949b3cd51a07e36943d218315231b57d8e7f8086bbc7c2558538a711f25bcfca0097408632f7f3eaa6a344a7fa841a508f912831ac5269a73ebe8f5e299e27c5aa7fbb4bd2278f67db29c71e1937310113b44b2c54b648919f223e091dcdef16e01be8c332494330f020e25fd0cc05f66a1be10b68fa23a6f6b6405f73f43204f71a4acf5976533d61998c49495c352d475ac2c30caed20c68e496c5fc6ef0e43bb337e240a4648e0656b42b9e8d4789f5d8f79ab5124502eb068ffbf0e5bec3579e363a5f27ee9eba8dbc4dcfe52eda0918f738f1753899cdd38b1ad1df53bb867bbce8c4a6e8d4e149d77c80f4709ba87b619df84ea0d069ebac2dc178790fab6dc74ee1e5364cb33bd31c7a014efc263dece3877ab3e4bf9b48bc639a34dc16b196c1610955f27f9486187bdb4cd7620486efc992e818440dd3135cad991fcaa6cca7b4e5d4c2ed2f6ed48151c809f69caad2ba0187b497754203458165fcb1717b5e2b7526c7eea1a26b730bb22b5b7ec4f342b5f18e451a9b950681f6a97329f6fc75c704e9acc831dfc9b0268e7c8b1375949b9b50de335f61807cd92a50c8a8717919aa32c6ac94d0eded034549b79207b3122b80b8b84a7c2ddb65f1d3a68e33c4e6da00745dbf9ca92c0c38a6d5832d03f08127d0f7d1858aafcc81c8b725af49f12168721369060cb6a7192e6b12731e6c8edf9a89f83d4164e910173b86e97a5698c5fb097c9e53c8dba808f1cfd3e424f34153e929e35f2cd44650fe76795b085007db43a663d288b84b209b83d0059dcfce08d27f2f597cfde4ff5364066e8e666c1e3aba703a19641d7468d586a5b0edb365d3f04fc015626c952371c4daad7acb86afa6a444fb0ee47c31f82725edcabbf085c3a4c732d5c2c29bf4f7eb46a0983189c2961920e2764a9b5ba35eef7e43a82c165b6de175c10e27d6f59d23f3768a955168a8c17decdeabe50d37b1bb395504b5a29edcf3f361227ad440f6532bb1ab182b4833d1c00dc4b1f73df89dc0c6b4ad3390db20f352f194dc93572df2b15d412ae1bfcd03dc9b8a325e2bfd9a5d18e96564fd9ad2cc664d631772ea85364ea586ba98eeeee91ec64c0bbf5973dc7af56d74028c23463f3c2f0bd2c3addf0026f9c88df6ed5f483767fe93a21deb665e783", 0x1000, 0x1}, {&(0x7f00000013c0)="886ee72b117d05ef013da18966060f15c451f5ec047ca688be8b3291f7b4ba7c77bebfd90ff38e07a411f1198aa8216f94f9e822a56cf6c0a3e79d715a6030359207be04a5", 0x45, 0x401}], 0x200034, &(0x7f0000001540)=ANY=[@ANYBLOB="402a7b2c7065726d69745f646972650900696f2c7065726d69745f646972656374696f2c00097bd35fb6c5db90a810724d88aebdca899d7427842d49a6e6df0854303a33d76fa0ece2e7999eb076038be40f84f723615cd9a3284a8464d302ead4eed44fa04b13869d2d24a88f88476e3b76"]) socket$nl_generic(0x10, 0x3, 0x10) 15:16:25 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:16:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {r0}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:16:25 executing program 7: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe}, 0x0, 0x1, 0xffffffffffffffff, 0x2) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:16:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x40049409, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:16:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2676.500445] msdos: Bad value for 'time_offset' [ 2676.507294] msdos: Bad value for 'time_offset' 15:16:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) statx(r0, &(0x7f0000000000)='./file0\x00', 0x2000, 0x20, &(0x7f0000000100)) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:16:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x40086602, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:16:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:16:25 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x300, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:16:25 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) 15:16:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x40087602, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2676.675535] msdos: Bad value for 'time_offset' [ 2676.680302] msdos: Bad value for 'time_offset' 15:16:25 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x500, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:16:25 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:16:25 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2676.776546] msdos: Bad value for 'time_offset' [ 2676.781293] msdos: Bad value for 'time_offset' [ 2676.836163] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2676.861279] loop4: detected capacity change from 0 to 8 15:16:34 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@nl=@proc, &(0x7f0000000000)=0x80, 0x800) dup2(r0, r1) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:16:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x6000}, {r0}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:16:34 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) r4 = gettid() clone3(&(0x7f0000001bc0)={0x80, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000001740), {0x9}, &(0x7f0000001780)=""/168, 0xa8, &(0x7f0000001840)=""/15, &(0x7f0000001b80)=[0x0, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4], 0x5}, 0x58) r5 = syz_io_uring_complete(0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000014c0)={0x8, 'hsr0\x00', {'vlan1\x00'}, 0xa2f}) setsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f0000002fc0)=0xfff, 0x4) syz_mount_image$nfs4(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x3, 0x3, &(0x7f0000001440)=[{&(0x7f0000000340)="8fd3f5a3fb86091d9f2e1b80ad161fad7e91cb70830ede96dff0c26ff8fbae6de6d10136c9aa7a4b4f60213c4232e9da4da2e21274e1715cf1b4fa626b7f08ba8e513b29caaf7f07065cc7ae1a201f08dc73fcd8", 0x54, 0x7}, {&(0x7f00000003c0)="e695d1eff36f8cf5c028636fa089dcaf674b44be29ef6cfd7867a8579f0487a28edd0c2159f35921de4f381db8a8342b63cf0a0a00913fe281ab39aa89cc965d6814c83248250ca066c8a0ec990cae2c8a265bbcf2394bbb38cddbef4123dc24e77e97e58981bd3033fdc6ecc480e0876ad821ca7e717980219cbfc8f37dba9bb49c70f1d7eec9abe2b4c27eb57007e1637f6a1bb98036c47d76e1270dd8bd3e57c9fa283d6977c709a63951b6e6ea56d67832e11703eacd82fc03c69016bd1351fb9869747e7cf31ca38b1ff866178e1acef2b7c53dcc5af45aa33d676095057c82052154185cfcb5b4d223ebce41fe3cf82823d99bbd4b61dc710d5c8a7fe0cc9d78da264389757330e4dac5da02ea102b0f9b29976454bf1a81629e3b6d18f3cb850005fe7c4d05c03953dca3b49ba7f18374ca16526120141381c6e5e3a6fd8c75697440659e6a599c800c63aefc41f2bc81a7d7aa6329834abaa552ed2540cb79e2ed60390e2a76177d7915b023743c23b166ba054eac3f71ae41caa5e18eefa5953b8deccfd41d6c289c8f63ed522e8c631cd4e35dda01e0142adf2365972f8f920290c07645a327c8f83995d807b847b531846a1ce81680f591394bbd4c1ee7f7328ca41c4811eb0d104d5e8b91dd7c38dd53cf7e846b7950e3039929259e9b793652f033ef1b0436f2528cc471354bb15e6f20fb52408db00389a1707ce4cd7cb2ad906147e7e58ead8ba6ff8ee2bd2658b70ef9f9820f7bb9b59c72e30cd97d81fa989b1e6994cdb1fe5caa5b26b4604ea7e08fc2e7329645909d170627f93d021c517b2ccf931b8823ad92c01eab7d45e73c3e840523d0953a12959113e1aff134cc6a8b8df3eb4481025470858aa3d15a5eb175d2cdb68100b83e01815d7da5c0dbe39de55d2a5775f609b199f9a5277a6f6e7a0ec7f5f432edcb021a60d589287449267aed7921d80bad8bf2eb82cc4e4cf844209268ecd45e7c569e9dd036eeb59d19ae02457672c1b5956de86669ac0cc5b908d9de8acae8122801cf5326a7ffb23247e92ec1ebe5fda890ba54f96c166ea9d142110eaf90e38d6b5d891bd5362aa28c924397ede077e8aec5e4809c7a135d4aae76a46a9ef8fb264c31a4d5ab2b9d85a208e2d044b740d5c49fba4e558df6c1a7fc2d4703d92c61470979aaa49544940a1d64868fda102f4ad3d8c067b3579dddf0a50803793039f9d1c1ce5daf6f69e0e9aa982522c0a1af0b4756898b850def9126b19af520f6868fa14ea86471ae26a95a369b5f3084f62893f821fcf8b16624103b1cf39526026de58d19d9c7178fd458a32e2fbdbe9c08ac338c9ecd713593cc0efe4c7905d4d9e2055c766f5b9e0c7d9cf8d2b97a50048b3c3d61dd8b5d44101b5450a43a0324f3567be1e22530756eedb83b41b465eb280a05d9b4125c140de4507c2c3823bde4bae35c11d0993a4ba387989cd4208f0d85f21f402382237de2aa2d96d0a6f77124b9c3254958bfc303f630d6775f29857453309616d5850c7bfa6a56db4ffaf1ab8145a8faf8994eb90c740f7713a5799aa6f7d6d1450ea705f70cbeddacfc816921af9b3d2b8a7b4c08915ced605188cfc857327ee4999f470b082e991f3006dff1a7f41adba18f835bf61bd557d43682de6a4ba3456b3af74da28629c2f944e5734ecb8bcdef47bdcedd1240a4485522cb9edfeae7250f6a38c0429f6e8d3d789e172bc05c7914ce636ed103a8a63441b6d1493c12200c35dbfa5316f7f5c46720db463ab5b4ba062405e99edf2b9e62c4f6f0aa1a25a85bb8ba56a289ee149d532b54a18c7ded1992dc6e18baef0b30b3287ca439860fa920de3739a5577ec3230bce4269f8963e983f9b7f3610a47eea72ccfe28e28aac151f31a5cb85d08427857780459771f178a3fb1030486608192a16eb0b0748df9d99e06c002e7bb0c549846814dcfb887cdfbb84c22c99fb7c7ffa49b3d0f51a4404b8a81f052734fa66dcd487c66ae3fe4bdef239d97e5b6ce7699b1608e9935c875762ded17eda1822ff56c1a9f2cad25dd2d0fd9bb9ab98cbeba87b72f84b37fe160b116517b2d23a07bfd492bd348df861f1abb5e3c60424251b52832bafc4836557924af5dca628806fe66c57a8950b7e4a3e8bede663188dad5ec5f0d6fab92bec0cc5b8b83c8b0d7f7e73c8d68a7679f2ab3622a03b219d8a34598beb650be243f29df467a622831bb0b723087bd959873d3193bb2401972b877913ea8e3c799fa329661f60cc98fd7496d042e757d39691f390d55edb98d394537cc26da4db1ecd14034a642afbb02557abd077396e01fc0eb46dd0056c068b92bfa6b513af627c335152bfa2c9520877d3ec4a1a7b17d2a4797a64917cb2599341654e54272dec2a84ffa115e1613565c2f5086cff6a08586b25d1eef3446468aee9d6903a7ecd7e04db5b33081733f6be01dd94ec765d9a35df0904b9ec5973d9c83cbb928122b195d56df93e00bde20686a5df58bc2cc8ccd447f1ccc5db2164a44b1b354143827061342ea35a9da683beb30cfad03461e784561b76f4a48edd0196cd16e880e8aec1b767e2f9034928ef5a370e8aea26dfab39f05e963bbdedfe02cff0517d0298b3976b3c4ce0418038ef78db59ca428c2b155076b3221cf289fd3df95d85a590e301b27c2451826c0e9edcbd960dd945b672e1ce35363500ccaeae7314587ad1d8799e48d5fe22d057e55092e67220b23bc58ca0f1359323e90b7bbf469da229a000dc11c249cb84ba084965577653329e2ab700ed687d44608fe8d900998409306e555608205ff02bc99114fdab667a815a557dbce729110305953c0b7c84ce3045e5d840b3c357d8141baecb5ba10d02bcd6955409a776630efc42378eaba3e4f646488e6ecdeb36021dec33dcfc2e092d1fd71fcd96f1bbbcca180b364b14babf5edb4a8662c26bf9f8bec19d64aeb3e5dd83347c2ff9ec72bf8ea0d5e00285d4b95f45029265820a81192fdc6be9fbcc24189a12d0177af21b64e71f82fac8b723d0f526ebf37c007730a493a845cc059e3cb17ddd6ed21a801faf340240ebd8f6fc7fec593d7ba50736b145ec35f6d910c9cf4f110c5f945ff0350fd93f12075d89158805d60b40df12503a2d78877b98b0a615c58df15fe467336c799e97c826672644134ebb9afeead50e4ef2d936db5be29be006a63e78f39030fcb93a2324a78633bb155b1d80ad0fb0f5fe33c1c29832d3f528a52d3b489bf5dfa1ae189e37cab9cc9c7ecf0e674b90f9d075d3ea8aacf71db6c2c73d9cb9b1e0d7893c36370b168c97ce4fa94175a56b2b1dbe784a34be602aff268c79e17233391cac23dd401682b69ecccb7cba69a2b44976a07e3a666737b09d3fc25cb14dcd1d2a6f7eb641968ecb87ecec9948070651e42d17758304ec8a4a165fb18c4269fc33e79840fba6ccc809290b0ad613ae7adb378c383cd958404b9658b3b4dea0cd61155da911cf4afbd86fb8ba779b0555637e10ac327a8fd349393c97f5cb117a39f8bd022981d42ccd1c7b750cb12f1078975c9e5b45dffd6a0d12424fe0266c777fb05a046c37ebf7d05e66b0e2377ec6c415dc1957a520d6ddc74ab2d996ff10d384e1fd57af31ee9293bfee287ecc66188ca047fe2d2c67a80e00d0992a3fca29f3ab0ce7498054db3a471f2c6232deb9f21e34278f9c648cb5bdfa749b710396b9fdf815383e1ad557d5828036f6f24178e7e78ce6c49b0e020a660c86aa90be2eed08529d3ace89729e59e056fa3d028f4c4c33514b95a0f722e55cc1c5afbf789ed7466fe68309d8fd153bf54fdab71c146ff4923f8898cae0ead99882333b7c8fcba25b62c265c5351f9dda6cf17ab0707929493c173c56d83d7264bc783374379726f7904b79ded0403b98161976aa3adf9753efadedccaf774d9d0806741748f899c08505a0bf582f85d6ff7d414fff6c10cbcb4be7066e40f0f53fdc50da9de2ef62e5ffe82e02782a601297c07a99a78a490e1556c600388dbf46f3ce3ed1b396bac72a517d1d4fc273611a260b8e8c128e88f8486c6b43d8678556864026da4a82ad1d119b65b3f9a85d339bc88cf221ba667a63704db4232e4e952a0b32b4840bb6d2025a9304368259951b6b250bbf1465776a42247f31699231740ea5d8e302a1f4d6159d8e117a7f3efaf336ff01459672fdea4b314f57a173b8f7339725935e0a055333829e230e22b276e3f60253f9a284c27782ecba05dc7030f10708f4d12803d69fdf43c448ea90a8f83b84b041a7aa2b6a12a938ccfeb1b6a6e1ac5f5d18b8f7a3c225c7794093ad532150da0c1b5e547337cf523815dbea60cfb60ca33a03a17e0a454558beedfc0d1872c3ab1f3c8024ce8aa59a0b54c2a31b7cb6172b90cbd2b1689d37de4f6c9916939324d53d94cdfd752febe1ca8110fbc3fe855957ae1d4d7b572d4a6c63597d7f6b598ae55c4d3f4af8b830b87dc6e4a252a9f90e225f7533ef956621ca5330e1b0725ee1032a2d2f754c8389c7770d553f6940b1b16251e164484c249343cc6780662da99410122a827e16f7f7ec4c37405f6bcad26ccb674649e3ec9fdfc07dea2e6d0d0fb9400949b3cd51a07e36943d218315231b57d8e7f8086bbc7c2558538a711f25bcfca0097408632f7f3eaa6a344a7fa841a508f912831ac5269a73ebe8f5e299e27c5aa7fbb4bd2278f67db29c71e1937310113b44b2c54b648919f223e091dcdef16e01be8c332494330f020e25fd0cc05f66a1be10b68fa23a6f6b6405f73f43204f71a4acf5976533d61998c49495c352d475ac2c30caed20c68e496c5fc6ef0e43bb337e240a4648e0656b42b9e8d4789f5d8f79ab5124502eb068ffbf0e5bec3579e363a5f27ee9eba8dbc4dcfe52eda0918f738f1753899cdd38b1ad1df53bb867bbce8c4a6e8d4e149d77c80f4709ba87b619df84ea0d069ebac2dc178790fab6dc74ee1e5364cb33bd31c7a014efc263dece3877ab3e4bf9b48bc639a34dc16b196c1610955f27f9486187bdb4cd7620486efc992e818440dd3135cad991fcaa6cca7b4e5d4c2ed2f6ed48151c809f69caad2ba0187b497754203458165fcb1717b5e2b7526c7eea1a26b730bb22b5b7ec4f342b5f18e451a9b950681f6a97329f6fc75c704e9acc831dfc9b0268e7c8b1375949b9b50de335f61807cd92a50c8a8717919aa32c6ac94d0eded034549b79207b3122b80b8b84a7c2ddb65f1d3a68e33c4e6da00745dbf9ca92c0c38a6d5832d03f08127d0f7d1858aafcc81c8b725af49f12168721369060cb6a7192e6b12731e6c8edf9a89f83d4164e910173b86e97a5698c5fb097c9e53c8dba808f1cfd3e424f34153e929e35f2cd44650fe76795b085007db43a663d288b84b209b83d0059dcfce08d27f2f597cfde4ff5364066e8e666c1e3aba703a19641d7468d586a5b0edb365d3f04fc015626c952371c4daad7acb86afa6a444fb0ee47c31f82725edcabbf085c3a4c732d5c2c29bf4f7eb46a0983189c2961920e2764a9b5ba35eef7e43a82c165b6de175c10e27d6f59d23f3768a955168a8c17decdeabe50d37b1bb395504b5a29edcf3f361227ad440f6532bb1ab182b4833d1c00dc4b1f73df89dc0c6b4ad3390db20f352f194dc93572df2b15d412ae1bfcd03dc9b8a325e2bfd9a5d18e96564fd9ad2cc664d631772ea85364ea586ba98eeeee91ec64c0bbf5973dc7af56d74028c23463f3c2f0bd2c3addf0026f9c88df6ed5f483767fe93a21deb665e783", 0x1000, 0x1}, {&(0x7f00000013c0)="886ee72b117d05ef013da18966060f15c451f5ec047ca688be8b3291f7b4ba7c77bebfd90ff38e07a411f1198aa8216f94f9e822a56cf6c0a3e79d715a6030359207be04a5", 0x45, 0x401}], 0x200034, &(0x7f0000001540)=ANY=[@ANYBLOB="402a7b2c7065726d69745f646972650900696f2c7065726d69745f646972656374696f2c00097bd35fb6c5db90a810724d88aebdca899d7427842d49a6e6df0854303a33d76fa0ece2e7999eb076038be40f84f723615cd9a3284a8464d302ead4eed44fa04b13869d2d24a88f88476e3b76"]) 15:16:34 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x600, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:16:34 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:16:34 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:16:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x401c5820, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:16:34 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) 15:16:34 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2685.243071] msdos: Bad value for 'time_offset' [ 2685.249995] msdos: Bad value for 'time_offset' [ 2685.290172] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 15:16:34 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x700, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2685.346436] msdos: Bad value for 'time_offset' [ 2685.350476] msdos: Bad value for 'time_offset' 15:16:34 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x900, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:16:34 executing program 7: sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4881a}, 0x4040) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) preadv(r2, &(0x7f0000002100)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000000000)=""/17, 0x11}, {&(0x7f0000001100)=""/4096, 0x1000}], 0x3, 0x2, 0x3f) perf_event_open(&(0x7f0000002180)={0x4, 0x80, 0x0, 0x81, 0x2, 0x5, 0x0, 0x56d3, 0x2608, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000002140), 0x8}, 0x1c408, 0xff, 0x81, 0x2, 0x0, 0x6, 0x1, 0x0, 0x8000000, 0x0, 0x9}, 0x0, 0x2, r0, 0x8) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000002200)=0x5, 0x4) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:16:34 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:16:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x4020940d, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2685.424679] msdos: Bad value for 'time_offset' 15:16:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2685.431623] msdos: Bad value for 'time_offset' 15:16:34 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00ffff", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:16:34 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xa00, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2685.515369] loop4: detected capacity change from 0 to 8 [ 2685.541208] msdos: Bad value for 'time_offset' [ 2685.548169] msdos: Bad value for 'time_offset' 15:16:43 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xb00, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:16:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) 15:16:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0, 0x4}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:16:43 executing program 7: r0 = syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user}, {@loose}], [{@subj_type={'subj_type', 0x3d, '$'}}, {@seclabel}]}}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) r4 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x7c8, 0x6, &(0x7f0000002400)=[{&(0x7f0000000240)="9efb5a1318328b", 0x7, 0x8}, {&(0x7f0000000280)="99e11f45563b153d5ced308335bdea51b35391576d057b2d4e974439c66cddd7642059781f249858190431d834b54248c1ff0ebbc52c961912a0011b8dde30fea082ba5c6cd0bd5743872901a44b9f22d0b577072262bb0d752345151605ef68439714a0b5e1d07db6943fe3e21576e06621d46089b25befe85ccd7d3668374ad0fea6c7f887ef2d7070713d6b1aca8159e3f36cdbe8c5cdc43aad17ef825c5e62543aa3d4a84095b94936e68bc764764276311fb5c195016acdab9a3367717366c07e8399", 0xc5, 0x7fffffff}, {&(0x7f0000000380)="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", 0x1000, 0x2}, {&(0x7f0000001380)="8be9bd13501f9acf98e7e8380d9318db57c2ce5f8bb2c02b02caec4b873e6ed2652c16a335ec40486dd8b47825bbd9bbf02d6c2ceddf23222c328acf8a069bffcca5c0f715217a865f06119e6b6ceda05a3a9be074cc0c86d7d59ca93b0fcf807954df3d079dd6bc0cfcb0c80be407091a156b3e5ce96f9f62f593697c6a2223383bd9b7232653648205e54874a356ed375592c5da3df53b2a721dd24e1125d3edf6cc636acc249b21355f38db5c416d962e05b4465413451278ecde7a69de144edc82b6ddd80850985d7c75295d8047f16e11d9d9e1dd3e79e8fa78a225ecf919143b82e9daff2e5bfcf67e8a72dd4964b1323f0e87805f6dbdc3f4f84bba8f88d5a014a0e6fc56a6490f07d6c7664f601402872f1cd2edadbbd54cee233114892b0b082b5f865ea1300a821daa93c35efc53bc9ee5d356710df39385ab9d69bfeb2f2465f80015682dfb03830c7c8a5a997a07cbefb92c013d4944408957c42a08f8888c2a60cdc1a0e0f3c53e7d199fb1688e431179066a3f0e4e11f324e3976d05d72735f2fb5a57fa7e75a0b392300781eedfb8b1acf2ddff9369c7334650a9a78c05d0b07c08882f3d93359610d456e93271797fdadf11a59c11df23f2dd5a5b80b6825bfd07d7211a66fa72813b2f134d138a03f15b26aef18dacf357bb5667e774174bf99e77d5972d9ca4c64cea73cc5ca43e5f8d6cfc3e52c0c72d6c48a882fb87b38e521f8ae9529f23b1c38627023e3c6be3566654f25c3c777ce30666979f9f14b0dd0d0028ef52a689b2589e0fe9885f02d7adcb7aa38588122afaab1604ee1758d3e11585cca5e4c575ca864fe8f8d9115d2cba5a559f95077318acca2766be5114e97556d75864af87f968833b4d566397aeeb67313411e346b6549d7b8359e6de1eb73409ebae15100499f2b64a571f2de426848511a08038f1ff960f5a3f11b3047c6b0057678d81eb8a1c5912578851a4316a4d63b51065b394f0cf47368cd790dab08018e93e084998b86a2522bef39a409e85891dabbc14e6377366ee86f6416e2395e4992aad4e1b42256953766bbb4a23a9526f91bd184ddd98803f6094eca5d79a942d5d5b72fdefd70fcdc6063ffd045331b3718e463c04da468c0441d2db7d50dd8368ebf4e03f797dde8d99d885a34edc4bbf9eeddb87e9e9b6baffce2b56ed80ceecc35c3ab99e854e851596d60dd086356d9a15df2736e44e805b6c339021bceff61c769fdbe6f9536b0dea35647a096deeda920294e2c1abf794a1300912c4f76fdf9972f3834fdacaf4d2b23ddfa6546e003f29ffebb660bf4d28e8aa91029bfa19b2f8cb85c886404efd48bcf4571b929579741646badf18283197f7a9cb7d55c1cd42d802484ea0cbe5deeba4a5fc80ab0d20bfed5d207c15ed19b63f381b4eb33d02c6f02513e063f6d4d8eac82bead454db2112d5e65cfe9af9de59406343e8a64bbe57185b1f713a89b6b7bd860bb8b7f3b371330cd49e285a64fec6b2efa1a1944f8fde37e82af0c4692a43353fbe52db5457c5767c056f70b33ff3a297aa11ba372c28484327fb0d7e16b4ad3b346bdf35415114a0a49f8028adf337f9f3c2181d64a1c8a5e6af5f90cc9939d2fc820e3f7bfbaa31790d1325b62193204778a1ec1c42c483a4601bd38e9ad7216a8bb077e19aa7aeac09577ee3c46bc939868f11f7c4c8bdeb07823d4a27090e12c57d2031441a9b2ac45420155906a28bfefdaf649c1e76c61499c92bbaaec30b166bbe5c5b2f2cbf8319e7d653ba0d854500d70a457c4d613c729ec7dfb8533fb3d412202f37c7e4e061d52f5255acd55f713533695e3800300547410f50c8f77d971b068ea533b04beb09cfa0fc8f5450705dd893f1ff6edfc7dfed1c726f0388d908b67d642e299913594dc46ee28eda9401beab3be2384f921905ae8460b0f7ef53b86c88dd30ccd2a712441209ad315ab6440e181be0a2a4d45a6065c53f30c6f263f1a50978c22daf6e500124c6dcc287bd59894309feb0610102e0310d22008bd5d2fcc351d0b608535d869a7da5454efc3020bc4482162705183106df18aec5f54644232a1f97a4fa391d2685b2a1641985b027856029ce298348e1358e92e0710f93b217f61eab8e232a8e5c7e09ee0d362623fe71c0f98e2bc1ba4dae44eb8d6b04c9764ae704a062dad206387e5adba77085c42d9d562d4be4eb264976b7ef1282866a9828af12be6412953a559963542f71188e378fafcc21a79d75105dbaf91006ed87950618096a26ad054ec92dc95ec824fe71fe2178ae423769fca7d7a5073a7d312dec5969f16d06fcb6476b138bf918b9838965994fcac0a0e4cce951e2b6433a06a29a0c500667d38056d09bd9d0f93c2b58f3a390c076a231194d33d68eb279b2ef54a49a8b43c7592cb41e1623be5f4eccbd0198bb055cda86a010d0c55cc5abc31b3c1124c8f7351267beeb2bd289b0643d330b1aa893f21c5fc3b729359885dfefbca38f5ad67aae223592381233caad46654495190cf5eb88b4e5d32d56f0a4bdfaf4fa41ddbf3cb05629f0d1f887312baa71ed978358b09ef5429a4a184eb3af33ed70e923f9da530d88489b03615469c181702800f8b1f59381eff432760ee269d9a6ec9d4c1ba23647724360255de5d05caad981186ff9649143a885d3a150762584a2a89e2f1035dd076a82786efba932e9ea9e17bdd611463c4503c3532a6229a41b31fdbd60db5150950a19f4be0d7b538f40db36d335ca026a0d95791c61851e9b0ba3efc488160ede4592b89ed9044a82321b11983cfc46ef91066110cf0a46ec60131f95b82bb06700990524810251548fea99030dc864ed00381eb43f58d2f66a1baf76e807c128e6fa86e2d0eeb1b15a624f811ef8e409c93c1e0acdffc23a5f5bf21ba9702a55447ef5bcef00d413efa3b582f5795310689d826a48d0f79f38e772364f1dc8fa73e77836f71522fe7b036ae9e7c0a03fb9afef77944fdeee31ee05e81cb78060b52c0539a42427543189da86a700bdbc2a64c6c0bfa263e358dbf3166aea557145dc00ec35624bce185f8e4292bc47a092328b2d60bcc7233f387b1206825fcb7c93721f4b09c6192b8fb8b770e23ed82a1131fd29332959dd0a090032fdee01dc0bb7f2cba4bd8797b27a94cbc2933f0b31ec218f460b47397a8725243614ff731b6cfa609acbe6d12cfc71776e6feb6ea2341275886a25d5e5bb35dcdec2a019582bc24400ce74288468e34c77b93bdad54f2b7c5b31790b86166d9742b7435795f91fa388051f14e5fb03ec6ecdef01089932ce13c9cc48020a736e204cddc0ccdab67662798b92554735ed7853618053d635da876ff9792a259f7c1fd3d30a66f655bc2969ebe31d77b9cdefe4d65059eaff2e9f6604136d3a30b098d1b6445b907031ac3ae63c097ae95905346dbff88b34daa64b6ec7f2b29bcbdb574b02e69b4caed0e4c81bf12e0e93f57792418a76dcf9f1f664654731effee3259ffd87f6025ad40daa714c036e9175a574d47d5c2e174f466526c6c3af72d32c16b87a2d95537931aa5ef651986c607b18c3c645ce2304b5fce48e8cd7c2c8047a046361428ec817ab010bb9f0ffdf48cf3692758d47639bda171849f1f95a55ffce92732830c7de64941d1e5369dd32484ab9a6c92ae9756532347ab42f9cd6cd89062c1b341f6858b6e205183bd20d4c16df811a0e4859e4a641cb303dafa0395b0735a7238b38c95cc8ac449860299c0f2871c3547e63c846d638212af74528554616d9ff02b256a7c8f02fa904a83a53c6c6d841294c73ceae3fc9072100a755372f8349fda5c77232dc9a5c6b1b10fbf15e309c8dbe16b721d94ac613552dbf46c31a01204528ee3fced9f0bc9f4f03c448b6a5bdb8658665636d58e7e6eb51d56a9190621e5ec4b409566cba73bf4843a78d511b9c71e2d908571acc2bf7ab35e690d8ea1de18b9d46fdb901a02f8b35608b75b722f4b50a0cebeeeee024daed84403104ea328d92ad14b38c9a6031bab3036f3b0e18de1b4343897edda563b7b30763f6d047922fa5f2239e874570be18a2a39f443d3d7217e2f6fd7326a542a1c61adcbc81680f2417a7f6ea7a0eaa32b1035404444f723643864fa480310948144c599e78ae42d9248ff8e74630ee78e4edc9cffb58b23c5f4ff6e169072e7c3d3bbab4dec815e42d425a8380fa2b6c090bb9f71ef298d158ba2f3f2577f1471a590578a2332fdaa73aaaeaa686a946f2b967255996286f7e71c272e3ab94347a62dfa4f46f014ebc728d55a6e4dc0a4537dcd1e6517750d431c30675a6e490565d36e4b86210e89c4c925e6d822112e082cf4e8328bd8c44e0dfa09eb78138ba5f82629441b9799e619463b5a2361b9c90786a11f951411fe8e0a252db5e50077ca0e66c0e30b3afa30496a06ca886d70b19f3b5d61e0768ba27188ca8d200a66aba4a4649f76217c23ecda9b91acfe929b5b7d49ab2001d71fcf6b80c82d36378e1b898616ec5a021b998ee3ad8d273fec1bfd0ad29f608c166c5704c5d0aad04552185dd5eca78315d43f84889488a85959f5b1f934521dce293de8730d39094448253e69edd6ab9e3cb4e4de8b59b99bdcebe786b50059e7fd33fed9d8346f46cbecd22865819821afcc6aa726d76a3ae5272a3aecb55de7335aade13605442dca343182d12ac404cd4016705142de31c4c9bd93c5bafafa2bf1db3463c1300c7f73cc2f6977c007f2fa462ff37dd7717e8e8f9a426d285477fb48b0cc8acffafd72fc502a7add95ca0eb9682eca1221911c9461787ce7bcefc42d652395fc129fa7f521c1cc1695b56a4c2085d765e8daf005155e25106a262a8963e5b01ed14e8446647c6b4aa0b5d2772c086429e86f997b4a5b14f1eff5efba6eddf3669cf0851ff521c19a749ab362e65ffad4c49925ff8f540c076a484e83ae95063674217086b44aaed18c65da189bae1d6e49988d2c51de163b95d64fd5895fd01f538357c015190e0fd85c5032e6582700fc467167f5fe6a70f648304f426afa831588d1b8888dc0daf61f32fd64a1c6c0d39fb96dcea86ccdc7f724bf3af206e335bbf80cbb3e395599a4946c7f938f67b26218d653275093e7363da3896799abd1c0c57ea4861995fdaee63919551ff88d09528a616d7d971dfd146cf26d849d806d174d92fb3d361da3c7f63e932bb2e0fac233ddf60fda00af90d26fac3bdf8c021f1b9caf343e5695804deb2daec795726e295a867af944d5e3885c2c802e385f308c768545554b59fcaa42cc5eb4f5c85de7007bad640bfd553092f0c6a68978fdb565a0d02ff434e3d020ad379181e16b1ba6c611ce90e7f6a245c1d5ab89d32ea408bbd031d514c9ed62a09fbc3b508e2a6f75a5146c3f61261381286c5304a457549d71705525ccc8e3db1343dd0b3adaecea9b9ef433f7b5fa9dab1b08f8de234b9543fafa8cebf34a94bba2b011a37ec1cb982142cda36e34a402d6239f34414bd4bf7233b390d4ca50d1c49108eaf06b59e3f0c9484cc77f2e994dc2c14ad56b8c3172645e1394be354bb6625a2aab035de637620f7efc5a0fd3383254c6f1ad45c617dcfae5b0d5dd83bd5e1a91a95df9c798b651ee311a75ed99b5086ebe43d56410b3438f4bb7164eb1cf54e3a204f37d02450f7761dde8b86144adbd8fb8cc824329764975c67a56af71797e03139ab13a562ebe57b5e0cc08e01637df881200c284635f12aaa9ebce1b235e68ff2dadb027b4df28cb66172cbcc06", 0x1000, 0x7ff}, {&(0x7f0000002380)="7760e65fd05890423bb50a4ebc893b97b6dea0187754d81ff159bbc2804ce5c8364180bf4a", 0x25, 0x2}, {&(0x7f00000023c0)="9c13a6265531aa40f2617e1b897c", 0xe, 0x10001}], 0x800020, &(0x7f00000024c0)={[{@grpjquota}, {@data_ordered}], [{@fsuuid={'fsuuid', 0x3d, {[0x62, 0x32, 0x34, 0x65, 0x32, 0x35, 0x31, 0x32], 0x2d, [0x64, 0x38, 0x66, 0x38], 0x2d, [0x31, 0x35, 0x32, 0x37], 0x2d, [0xcd0ec935eaac770, 0x33, 0x38, 0x61], 0x2d, [0x63, 0x64, 0x33, 0x64, 0x33, 0x0, 0x30, 0x6]}}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'wfdno'}}, {@dont_hash}]}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000002540)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000002640)={{r4}, r5, 0xe, @inherit={0x90, &(0x7f0000002580)={0x1, 0x9, 0x5, 0x3, {0xc, 0x5, 0xb374, 0x7ff, 0x1}, [0x4, 0x0, 0x3, 0x3f000000000, 0x3, 0x9, 0x7, 0xfff, 0xc]}}, @devid}) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:16:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x7ffffff2, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:16:43 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:16:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) r4 = gettid() clone3(&(0x7f0000001bc0)={0x80, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000001740), {0x9}, &(0x7f0000001780)=""/168, 0xa8, &(0x7f0000001840)=""/15, &(0x7f0000001b80)=[0x0, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4], 0x5}, 0x58) r5 = syz_io_uring_complete(0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000014c0)={0x8, 'hsr0\x00', {'vlan1\x00'}, 0xa2f}) setsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f0000002fc0)=0xfff, 0x4) syz_mount_image$nfs4(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x3, 0x3, &(0x7f0000001440)=[{&(0x7f0000000340)="8fd3f5a3fb86091d9f2e1b80ad161fad7e91cb70830ede96dff0c26ff8fbae6de6d10136c9aa7a4b4f60213c4232e9da4da2e21274e1715cf1b4fa626b7f08ba8e513b29caaf7f07065cc7ae1a201f08dc73fcd8", 0x54, 0x7}, {&(0x7f00000003c0)="e695d1eff36f8cf5c028636fa089dcaf674b44be29ef6cfd7867a8579f0487a28edd0c2159f35921de4f381db8a8342b63cf0a0a00913fe281ab39aa89cc965d6814c83248250ca066c8a0ec990cae2c8a265bbcf2394bbb38cddbef4123dc24e77e97e58981bd3033fdc6ecc480e0876ad821ca7e717980219cbfc8f37dba9bb49c70f1d7eec9abe2b4c27eb57007e1637f6a1bb98036c47d76e1270dd8bd3e57c9fa283d6977c709a63951b6e6ea56d67832e11703eacd82fc03c69016bd1351fb9869747e7cf31ca38b1ff866178e1acef2b7c53dcc5af45aa33d676095057c82052154185cfcb5b4d223ebce41fe3cf82823d99bbd4b61dc710d5c8a7fe0cc9d78da264389757330e4dac5da02ea102b0f9b29976454bf1a81629e3b6d18f3cb850005fe7c4d05c03953dca3b49ba7f18374ca16526120141381c6e5e3a6fd8c75697440659e6a599c800c63aefc41f2bc81a7d7aa6329834abaa552ed2540cb79e2ed60390e2a76177d7915b023743c23b166ba054eac3f71ae41caa5e18eefa5953b8deccfd41d6c289c8f63ed522e8c631cd4e35dda01e0142adf2365972f8f920290c07645a327c8f83995d807b847b531846a1ce81680f591394bbd4c1ee7f7328ca41c4811eb0d104d5e8b91dd7c38dd53cf7e846b7950e3039929259e9b793652f033ef1b0436f2528cc471354bb15e6f20fb52408db00389a1707ce4cd7cb2ad906147e7e58ead8ba6ff8ee2bd2658b70ef9f9820f7bb9b59c72e30cd97d81fa989b1e6994cdb1fe5caa5b26b4604ea7e08fc2e7329645909d170627f93d021c517b2ccf931b8823ad92c01eab7d45e73c3e840523d0953a12959113e1aff134cc6a8b8df3eb4481025470858aa3d15a5eb175d2cdb68100b83e01815d7da5c0dbe39de55d2a5775f609b199f9a5277a6f6e7a0ec7f5f432edcb021a60d589287449267aed7921d80bad8bf2eb82cc4e4cf844209268ecd45e7c569e9dd036eeb59d19ae02457672c1b5956de86669ac0cc5b908d9de8acae8122801cf5326a7ffb23247e92ec1ebe5fda890ba54f96c166ea9d142110eaf90e38d6b5d891bd5362aa28c924397ede077e8aec5e4809c7a135d4aae76a46a9ef8fb264c31a4d5ab2b9d85a208e2d044b740d5c49fba4e558df6c1a7fc2d4703d92c61470979aaa49544940a1d64868fda102f4ad3d8c067b3579dddf0a50803793039f9d1c1ce5daf6f69e0e9aa982522c0a1af0b4756898b850def9126b19af520f6868fa14ea86471ae26a95a369b5f3084f62893f821fcf8b16624103b1cf39526026de58d19d9c7178fd458a32e2fbdbe9c08ac338c9ecd713593cc0efe4c7905d4d9e2055c766f5b9e0c7d9cf8d2b97a50048b3c3d61dd8b5d44101b5450a43a0324f3567be1e22530756eedb83b41b465eb280a05d9b4125c140de4507c2c3823bde4bae35c11d0993a4ba387989cd4208f0d85f21f402382237de2aa2d96d0a6f77124b9c3254958bfc303f630d6775f29857453309616d5850c7bfa6a56db4ffaf1ab8145a8faf8994eb90c740f7713a5799aa6f7d6d1450ea705f70cbeddacfc816921af9b3d2b8a7b4c08915ced605188cfc857327ee4999f470b082e991f3006dff1a7f41adba18f835bf61bd557d43682de6a4ba3456b3af74da28629c2f944e5734ecb8bcdef47bdcedd1240a4485522cb9edfeae7250f6a38c0429f6e8d3d789e172bc05c7914ce636ed103a8a63441b6d1493c12200c35dbfa5316f7f5c46720db463ab5b4ba062405e99edf2b9e62c4f6f0aa1a25a85bb8ba56a289ee149d532b54a18c7ded1992dc6e18baef0b30b3287ca439860fa920de3739a5577ec3230bce4269f8963e983f9b7f3610a47eea72ccfe28e28aac151f31a5cb85d08427857780459771f178a3fb1030486608192a16eb0b0748df9d99e06c002e7bb0c549846814dcfb887cdfbb84c22c99fb7c7ffa49b3d0f51a4404b8a81f052734fa66dcd487c66ae3fe4bdef239d97e5b6ce7699b1608e9935c875762ded17eda1822ff56c1a9f2cad25dd2d0fd9bb9ab98cbeba87b72f84b37fe160b116517b2d23a07bfd492bd348df861f1abb5e3c60424251b52832bafc4836557924af5dca628806fe66c57a8950b7e4a3e8bede663188dad5ec5f0d6fab92bec0cc5b8b83c8b0d7f7e73c8d68a7679f2ab3622a03b219d8a34598beb650be243f29df467a622831bb0b723087bd959873d3193bb2401972b877913ea8e3c799fa329661f60cc98fd7496d042e757d39691f390d55edb98d394537cc26da4db1ecd14034a642afbb02557abd077396e01fc0eb46dd0056c068b92bfa6b513af627c335152bfa2c9520877d3ec4a1a7b17d2a4797a64917cb2599341654e54272dec2a84ffa115e1613565c2f5086cff6a08586b25d1eef3446468aee9d6903a7ecd7e04db5b33081733f6be01dd94ec765d9a35df0904b9ec5973d9c83cbb928122b195d56df93e00bde20686a5df58bc2cc8ccd447f1ccc5db2164a44b1b354143827061342ea35a9da683beb30cfad03461e784561b76f4a48edd0196cd16e880e8aec1b767e2f9034928ef5a370e8aea26dfab39f05e963bbdedfe02cff0517d0298b3976b3c4ce0418038ef78db59ca428c2b155076b3221cf289fd3df95d85a590e301b27c2451826c0e9edcbd960dd945b672e1ce35363500ccaeae7314587ad1d8799e48d5fe22d057e55092e67220b23bc58ca0f1359323e90b7bbf469da229a000dc11c249cb84ba084965577653329e2ab700ed687d44608fe8d900998409306e555608205ff02bc99114fdab667a815a557dbce729110305953c0b7c84ce3045e5d840b3c357d8141baecb5ba10d02bcd6955409a776630efc42378eaba3e4f646488e6ecdeb36021dec33dcfc2e092d1fd71fcd96f1bbbcca180b364b14babf5edb4a8662c26bf9f8bec19d64aeb3e5dd83347c2ff9ec72bf8ea0d5e00285d4b95f45029265820a81192fdc6be9fbcc24189a12d0177af21b64e71f82fac8b723d0f526ebf37c007730a493a845cc059e3cb17ddd6ed21a801faf340240ebd8f6fc7fec593d7ba50736b145ec35f6d910c9cf4f110c5f945ff0350fd93f12075d89158805d60b40df12503a2d78877b98b0a615c58df15fe467336c799e97c826672644134ebb9afeead50e4ef2d936db5be29be006a63e78f39030fcb93a2324a78633bb155b1d80ad0fb0f5fe33c1c29832d3f528a52d3b489bf5dfa1ae189e37cab9cc9c7ecf0e674b90f9d075d3ea8aacf71db6c2c73d9cb9b1e0d7893c36370b168c97ce4fa94175a56b2b1dbe784a34be602aff268c79e17233391cac23dd401682b69ecccb7cba69a2b44976a07e3a666737b09d3fc25cb14dcd1d2a6f7eb641968ecb87ecec9948070651e42d17758304ec8a4a165fb18c4269fc33e79840fba6ccc809290b0ad613ae7adb378c383cd958404b9658b3b4dea0cd61155da911cf4afbd86fb8ba779b0555637e10ac327a8fd349393c97f5cb117a39f8bd022981d42ccd1c7b750cb12f1078975c9e5b45dffd6a0d12424fe0266c777fb05a046c37ebf7d05e66b0e2377ec6c415dc1957a520d6ddc74ab2d996ff10d384e1fd57af31ee9293bfee287ecc66188ca047fe2d2c67a80e00d0992a3fca29f3ab0ce7498054db3a471f2c6232deb9f21e34278f9c648cb5bdfa749b710396b9fdf815383e1ad557d5828036f6f24178e7e78ce6c49b0e020a660c86aa90be2eed08529d3ace89729e59e056fa3d028f4c4c33514b95a0f722e55cc1c5afbf789ed7466fe68309d8fd153bf54fdab71c146ff4923f8898cae0ead99882333b7c8fcba25b62c265c5351f9dda6cf17ab0707929493c173c56d83d7264bc783374379726f7904b79ded0403b98161976aa3adf9753efadedccaf774d9d0806741748f899c08505a0bf582f85d6ff7d414fff6c10cbcb4be7066e40f0f53fdc50da9de2ef62e5ffe82e02782a601297c07a99a78a490e1556c600388dbf46f3ce3ed1b396bac72a517d1d4fc273611a260b8e8c128e88f8486c6b43d8678556864026da4a82ad1d119b65b3f9a85d339bc88cf221ba667a63704db4232e4e952a0b32b4840bb6d2025a9304368259951b6b250bbf1465776a42247f31699231740ea5d8e302a1f4d6159d8e117a7f3efaf336ff01459672fdea4b314f57a173b8f7339725935e0a055333829e230e22b276e3f60253f9a284c27782ecba05dc7030f10708f4d12803d69fdf43c448ea90a8f83b84b041a7aa2b6a12a938ccfeb1b6a6e1ac5f5d18b8f7a3c225c7794093ad532150da0c1b5e547337cf523815dbea60cfb60ca33a03a17e0a454558beedfc0d1872c3ab1f3c8024ce8aa59a0b54c2a31b7cb6172b90cbd2b1689d37de4f6c9916939324d53d94cdfd752febe1ca8110fbc3fe855957ae1d4d7b572d4a6c63597d7f6b598ae55c4d3f4af8b830b87dc6e4a252a9f90e225f7533ef956621ca5330e1b0725ee1032a2d2f754c8389c7770d553f6940b1b16251e164484c249343cc6780662da99410122a827e16f7f7ec4c37405f6bcad26ccb674649e3ec9fdfc07dea2e6d0d0fb9400949b3cd51a07e36943d218315231b57d8e7f8086bbc7c2558538a711f25bcfca0097408632f7f3eaa6a344a7fa841a508f912831ac5269a73ebe8f5e299e27c5aa7fbb4bd2278f67db29c71e1937310113b44b2c54b648919f223e091dcdef16e01be8c332494330f020e25fd0cc05f66a1be10b68fa23a6f6b6405f73f43204f71a4acf5976533d61998c49495c352d475ac2c30caed20c68e496c5fc6ef0e43bb337e240a4648e0656b42b9e8d4789f5d8f79ab5124502eb068ffbf0e5bec3579e363a5f27ee9eba8dbc4dcfe52eda0918f738f1753899cdd38b1ad1df53bb867bbce8c4a6e8d4e149d77c80f4709ba87b619df84ea0d069ebac2dc178790fab6dc74ee1e5364cb33bd31c7a014efc263dece3877ab3e4bf9b48bc639a34dc16b196c1610955f27f9486187bdb4cd7620486efc992e818440dd3135cad991fcaa6cca7b4e5d4c2ed2f6ed48151c809f69caad2ba0187b497754203458165fcb1717b5e2b7526c7eea1a26b730bb22b5b7ec4f342b5f18e451a9b950681f6a97329f6fc75c704e9acc831dfc9b0268e7c8b1375949b9b50de335f61807cd92a50c8a8717919aa32c6ac94d0eded034549b79207b3122b80b8b84a7c2ddb65f1d3a68e33c4e6da00745dbf9ca92c0c38a6d5832d03f08127d0f7d1858aafcc81c8b725af49f12168721369060cb6a7192e6b12731e6c8edf9a89f83d4164e910173b86e97a5698c5fb097c9e53c8dba808f1cfd3e424f34153e929e35f2cd44650fe76795b085007db43a663d288b84b209b83d0059dcfce08d27f2f597cfde4ff5364066e8e666c1e3aba703a19641d7468d586a5b0edb365d3f04fc015626c952371c4daad7acb86afa6a444fb0ee47c31f82725edcabbf085c3a4c732d5c2c29bf4f7eb46a0983189c2961920e2764a9b5ba35eef7e43a82c165b6de175c10e27d6f59d23f3768a955168a8c17decdeabe50d37b1bb395504b5a29edcf3f361227ad440f6532bb1ab182b4833d1c00dc4b1f73df89dc0c6b4ad3390db20f352f194dc93572df2b15d412ae1bfcd03dc9b8a325e2bfd9a5d18e96564fd9ad2cc664d631772ea85364ea586ba98eeeee91ec64c0bbf5973dc7af56d74028c23463f3c2f0bd2c3addf0026f9c88df6ed5f483767fe93a21deb665e783", 0x1000, 0x1}, {&(0x7f00000013c0)="886ee72b117d05ef013da18966060f15c451f5ec047ca688be8b3291f7b4ba7c77bebfd90ff38e07a411f1198aa8216f94f9e822a56cf6c0a3e79d715a6030359207be04a5", 0x45, 0x401}], 0x200034, &(0x7f0000001540)=ANY=[@ANYBLOB="402a7b2c7065726d69745f646972650900696f2c7065726d69745f646972656374696f2c00097bd35fb6c5db90a810724d88aebdca899d7427842d49a6e6df0854303a33d76fa0ece2e7999eb076038be40f84f723615cd9a3284a8464d302ead4eed44fa04b13869d2d24a88f88476e3b76"]) 15:16:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2694.340209] 9p: Bad value for 'rfdno' [ 2694.352436] msdos: Bad value for 'time_offset' [ 2694.358714] msdos: Bad value for 'time_offset' [ 2694.364307] loop7: detected capacity change from 0 to 264192 [ 2694.368461] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2694.396770] 9p: Bad value for 'rfdno' [ 2694.416436] loop7: detected capacity change from 0 to 264192 15:16:43 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1020, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:16:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:16:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x7ffffff9, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:16:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {0xffffffffffffffff, 0x4}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:16:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) [ 2694.608564] msdos: Bad value for 'time_offset' [ 2694.617255] msdos: Bad value for 'time_offset' 15:16:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:16:43 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:16:43 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x2000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2694.676429] loop4: detected capacity change from 0 to 8 15:16:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x80086601, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2694.769598] msdos: Bad value for 'time_offset' [ 2694.771473] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2694.777083] msdos: Bad value for 'time_offset' 15:16:43 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) 15:16:43 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:16:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) r4 = gettid() clone3(&(0x7f0000001bc0)={0x80, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000001740), {0x9}, &(0x7f0000001780)=""/168, 0xa8, &(0x7f0000001840)=""/15, &(0x7f0000001b80)=[0x0, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4], 0x5}, 0x58) r5 = syz_io_uring_complete(0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000014c0)={0x8, 'hsr0\x00', {'vlan1\x00'}, 0xa2f}) setsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f0000002fc0)=0xfff, 0x4) syz_mount_image$nfs4(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x3, 0x3, &(0x7f0000001440)=[{&(0x7f0000000340)="8fd3f5a3fb86091d9f2e1b80ad161fad7e91cb70830ede96dff0c26ff8fbae6de6d10136c9aa7a4b4f60213c4232e9da4da2e21274e1715cf1b4fa626b7f08ba8e513b29caaf7f07065cc7ae1a201f08dc73fcd8", 0x54, 0x7}, {&(0x7f00000003c0)="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", 0x1000, 0x1}, {&(0x7f00000013c0)="886ee72b117d05ef013da18966060f15c451f5ec047ca688be8b3291f7b4ba7c77bebfd90ff38e07a411f1198aa8216f94f9e822a56cf6c0a3e79d715a6030359207be04a5", 0x45, 0x401}], 0x200034, &(0x7f0000001540)=ANY=[@ANYBLOB="402a7b2c7065726d69745f646972650900696f2c7065726d69745f646972656374696f2c00097bd35fb6c5db90a810724d88aebdca899d7427842d49a6e6df0854303a33d76fa0ece2e7999eb076038be40f84f723615cd9a3284a8464d302ead4eed44fa04b13869d2d24a88f88476e3b76"]) 15:16:43 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x2010, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:16:43 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@gid={'gid', 0x3d, r2}}]}) getresuid(&(0x7f0000002c40)=0x0, &(0x7f0000002c80), &(0x7f0000002cc0)) getgroups(0x1, &(0x7f0000002d00)=[0xee00]) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x2b, 0x9, &(0x7f0000000740)=[{&(0x7f0000000140)="3dc796138f58ed56c4bf06bb5dd13f84f50290c43d4443a38bd6de85071a02f7ed7ea3c70ade755f10937f21f213e3f2c7361759a02bf6dc326f5f0f6194da973a9c87f4d32d180a482e33303124e2b8926975565732ebd18e3bc19d39a1b424f1f18643da66e0b71fe3c46521b1f2d03084d32a374f97", 0x77, 0x3}, {&(0x7f00000001c0)="ce3f4c6306700fa1a1a2986fbc89f119d49c64130feb52b1733bf5ef876c934e8b4127677b804690080a270fd0665bca8617c7c17071cd8c566c658b555bcafdc881e6e7ff7599b0c5fb6f0bee4aeb9b99f44cf78d848caf055555226e9506338ded8ffb2084e2cefa28c5f879ed53c2a153d6b2aa76a21ecbb824761b75e68c9e04e6", 0x83}, {&(0x7f0000000280)="f2580d1cb4e9023aebe3213f8871b9b5741dc21d3ed2cb0d3b6c85f92456d138dd03ed6ad08e7fb32343b6463bdd3282fc83e55df47bfe0003d45138a226588d530cc238428f85d8b3cba3a8ca0fbb257b08577bded256993037", 0x5a, 0x5}, {&(0x7f0000000300)="a934ec58cc3ccc04d2a649554f556de306701d45be7a2a1df51baf3b0a55a1f29e0bdf2bb186a05095c70e19732db3af76f2b41b3718df4b0a70bee32448c3adc4f141f24239369d135cfaa9f58fa3555301365737befd6c3eeed8235e0df49016865923c4a9af47aca1b931efabf86e93c196ede78c5047c9dadac8fd8ca658bd64215de605099088927b06d5ee65a64c3ed0a40113f9", 0x97}, {&(0x7f00000003c0)="c6dd74e14334f59d089f622d0b0c334d5f98b3ef913d82ab8b3e23b724fb7615ebdd40c054843bb9583d07a07e3696531923057b92ed19efc7e23a00b8311150480c14f0410da7092c57000cf8b379013c528744917bf907c29f4ade3200b7667fe582c4b44c1d574c9cc1fb6e229175cf84752e3c065bc4294aa799b027cbae65006228623028b14261344ebbda32e6871052ae6d740648c13dd8899b3b327e75e2e3a624d9feefaa48c060c7f0cef5d7fe6f622ae2a7672a282457376189acaf8719b922e74a08ee8140682628ba52104df2ca37ddf103f6134d1db15ad39244682b1cb3afc283f06457b52c8c", 0xee, 0x40000000000}, {&(0x7f00000004c0)="282c700c08d90b0ee0157477b3999a2b19dabb08c1b6ae0737545233d0ab41fd7683ef9ed7c6bcd12fbc6a86feda2cd676f882cba744d400cc6b0d4cd6c687112848535e8b834c31bf19129df2ce548e6dc67a8cb1a2d6fdca75be2789d7cdacabefd77d58045ef1d4f3955fa4f87b7d34f2a5c18a66a4ba6cdb9da79f0287172b92b822bb20c4f3ca53d372dfffcb860ee76d01edd58e5a4dabe9e5c01cdd2f28b517b36df0e133c03a93d28af0fdf9defc8ce08053abf658f97e395e85f62f9720e17a9eaf99337d8c80335bbaf71e746bfdce6dac86b7f790b5f736ffe1627426e39cefa3307d5b", 0xe9, 0x100000001}, {&(0x7f00000005c0)="8bdb5b3624888741ba5bdf37eac7a1cffad5159951d4ffe64787211c3ba91fc640cd07b2ce9bb2356975ad0bd158288618aae1e514bbfcc86ad98cf36feaadbd2f915809b667ca9e502b1cecc1b827bdc15ca670", 0x54, 0x9}, {&(0x7f0000000640)="34ad8d1bb8d1e6d991583b966666506d97cf6788041662ae616ec4c4a7eaa06bbecc6ab44a5105886538ab506ca784f1e17a260872165de586ddb9a54a1b5efc243d4070699959a0f2b6180cee594e04cc18ba4df1226dba1fe7dea259bfda26cdc4e65c80b523ac216ae36f12c1", 0x6e}, {&(0x7f00000006c0)="476a12810b11763d7c42edaaa24d7b33e1dde8c0410f020101af6f6216bb48bf13967f9578351cf8f2dd59672793a4d65a3258cad517056b975cc646fc3125cf2c15769769a2fd6925617fb936d971e9905b9c066846abfe55a9b103c3a2d447ea9705683c7b4a394e23989555da46aac680d10a9f67cc49bb341069e473", 0x7e, 0x7fff}], 0x10000, &(0x7f0000002d40)={[{}, {@mpol={'mpol', 0x3d, {'interleave', '', @void}}}, {@gid={'gid', 0x3d, r2}}, {@nr_blocks={'nr_blocks', 0x3d, [0x6b, 0x39]}}, {@uid={'uid', 0x3d, r3}}, {@gid={'gid', 0x3d, r4}}], [{@subj_role={'subj_role', 0x3d, '/)\'@'}}]}) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:16:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x80087601, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2694.944724] tmpfs: Invalid gid '0x00000000ffffffff' [ 2694.955959] msdos: Bad value for 'time_offset' [ 2694.961126] loop7: detected capacity change from 0 to 264192 [ 2694.965530] msdos: Bad value for 'time_offset' [ 2694.974852] tmpfs: Invalid gid '0x00000000ffffffff' 15:16:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2695.022072] tmpfs: Invalid gid '0x00000000ffffffff' 15:16:44 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) [ 2695.045500] loop7: detected capacity change from 0 to 264192 [ 2695.058723] tmpfs: Invalid gid '0x00000000ffffffff' 15:16:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x80111500, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:16:44 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x2177, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2695.167141] msdos: Bad value for 'time_offset' [ 2695.178156] msdos: Bad value for 'time_offset' [ 2695.214766] loop4: detected capacity change from 0 to 8 15:16:53 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x2402c2, 0x128) ppoll(&(0x7f0000000180)=[{r1, 0x10}, {r2, 0x12a0}, {r3, 0xc124}, {r4, 0x1428}, {r0, 0x28}, {r5, 0x20}], 0x6, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)={[0x37]}, 0x8) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x60) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:16:53 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:16:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {0xffffffffffffffff, 0x4}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:16:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x801c581f, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:16:53 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) 15:16:53 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x7721, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:16:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:16:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) r4 = gettid() clone3(&(0x7f0000001bc0)={0x80, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000001740), {0x9}, &(0x7f0000001780)=""/168, 0xa8, &(0x7f0000001840)=""/15, &(0x7f0000001b80)=[0x0, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4], 0x5}, 0x58) r5 = syz_io_uring_complete(0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000014c0)={0x8, 'hsr0\x00', {'vlan1\x00'}, 0xa2f}) setsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f0000002fc0)=0xfff, 0x4) 15:16:53 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) [ 2704.391209] msdos: Bad value for 'time_offset' [ 2704.398084] msdos: Bad value for 'time_offset' [ 2704.448366] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 15:17:03 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {0xffffffffffffffff, 0x4}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:17:03 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) r4 = gettid() clone3(&(0x7f0000001bc0)={0x80, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000001740), {0x9}, &(0x7f0000001780)=""/168, 0xa8, &(0x7f0000001840)=""/15, &(0x7f0000001b80)=[0x0, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4], 0x5}, 0x58) r5 = syz_io_uring_complete(0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000014c0)={0x8, 'hsr0\x00', {'vlan1\x00'}, 0xa2f}) setsockopt$inet_udp_int(r5, 0x11, 0x65, &(0x7f0000002fc0)=0xfff, 0x4) 15:17:03 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = getpid() pidfd_open(r1, 0x0) r2 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x81, 0x81, 0x5, 0x0, 0x0, 0x7, 0x20040, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfff, 0x1, @perf_bp={&(0x7f0000000000), 0x1c}, 0x9509, 0x7ff, 0x6, 0x9, 0x8, 0x7, 0x7, 0x0, 0x1200, 0x0, 0x9}, r1, 0xb, r2, 0x1) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:17:03 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xedc0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:17:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x80811501, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:17:03 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) 15:17:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:17:03 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) [ 2714.355349] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 15:17:03 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:17:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0xc0045878, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2714.409714] msdos: Bad value for 'time_offset' [ 2714.416259] msdos: Bad value for 'time_offset' 15:17:03 executing program 5: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) 15:17:13 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:17:13 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:17:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:17:13 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x5, 0x81, 0x0, 0x7, 0x0, 0x94e, 0x4210, 0xa, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x400, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x404, 0x7fff800000000, 0x8, 0x3, 0x6, 0x3, 0x1000, 0x0, 0xa68}, r1, 0x7, r0, 0x3) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:17:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:17:13 executing program 5: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) 15:17:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0xc0045878, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:17:13 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) r4 = gettid() clone3(&(0x7f0000001bc0)={0x80, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000001740), {0x9}, &(0x7f0000001780)=""/168, 0xa8, &(0x7f0000001840)=""/15, &(0x7f0000001b80)=[0x0, 0xffffffffffffffff, r3, 0xffffffffffffffff, r4], 0x5}, 0x58) syz_io_uring_complete(0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000014c0)={0x8, 'hsr0\x00', {'vlan1\x00'}, 0xa2f}) [ 2724.203754] msdos: Bad value for 'time_offset' [ 2724.207421] msdos: Bad value for 'time_offset' 15:17:13 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2724.270373] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 15:17:13 executing program 5: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) [ 2724.292635] msdos: Bad value for 'time_offset' [ 2724.298990] msdos: Bad value for 'time_offset' 15:17:13 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x93ea, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) dup2(r2, r3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/207, 0xcf}, {&(0x7f0000000200)=""/75, 0x4b}, {&(0x7f0000000000)=""/16, 0x10}, {&(0x7f0000000280)=""/27, 0x1b}, {&(0x7f00000002c0)=""/131, 0x83}], 0x5) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:17:13 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:17:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:17:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0xc0189436, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2724.398033] msdos: Bad value for 'time_offset' [ 2724.401648] msdos: Bad value for 'time_offset' 15:17:13 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:17:13 executing program 7: perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x7f}, 0x0, 0x2, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f72656600a30f3000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='qnx6\x00', 0x4, 0x0) 15:17:13 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:17:13 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) [ 2724.483404] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2724.509227] msdos: Bad value for 'time_offset' [ 2724.513163] msdos: Bad value for 'time_offset' 15:17:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) r2 = clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) r3 = gettid() clone3(&(0x7f0000001bc0)={0x80, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000001740), {0x9}, &(0x7f0000001780)=""/168, 0xa8, &(0x7f0000001840)=""/15, &(0x7f0000001b80)=[0x0, 0xffffffffffffffff, r2, 0xffffffffffffffff, r3], 0x5}, 0x58) syz_io_uring_complete(0x0) 15:17:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:17:25 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:17:25 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x4000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:17:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8, 0x200) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 15:17:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0xc020660b, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:17:25 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, 0x0, &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) 15:17:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:17:25 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, 0x0, &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) [ 2736.061697] msdos: Bad value for 'time_offset' 15:17:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0xc0481273, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2736.067519] msdos: Bad value for 'time_offset' [ 2736.084125] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 15:17:25 executing program 7: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)="fe57185a0b3c3c7acc937985dc6a838e395f42d786a7d72818f6544d02a7c174dcc1c43d3f3d204c5d21f55c27b2ef80228e620de5ae68c342e1b2b2321df2af19d5752195bbf3160445a060f304ee777898b3d06aa3b7b533a50279e49da953fd1b05c22b5843710205a4a409ba3c0006a7257fd0c361161d5bb9ba459a27871cbac28620d4c49fb1c740ae75fe78dfb2e3062a3f4369de541e618f3caf741bb97d85438234800126b3b3670abb12f3781e466f75f84c366ac33f5a8ac9074f08ff2a3d1654b071eb270f7b1dfbcc4959faaf734675d2eebc09ceff8efd44faa27d6f45a25955aa", 0xe8}, 0x68) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:17:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x2, 0x0, 0x0, "ee"}) 15:17:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:17:25 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x5000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:17:25 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, 0x0, &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) [ 2736.239727] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2736.284598] msdos: Bad value for 'time_offset' [ 2736.292198] msdos: Bad value for 'time_offset' 15:17:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r2, 0x4000}, {r0}], 0x2, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:17:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x100000000000, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/l2cap\x00') perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x7, 0x34, 0xfa, 0x9, 0x0, 0x7, 0x40004, 0xe, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0x7ff, 0x200}, 0x46a9, 0x81, 0x9, 0x1, 0x0, 0x3, 0x1, 0x0, 0x80000000}, 0x0, 0xb, r1, 0x8) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:17:35 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) r2 = clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) r3 = gettid() clone3(&(0x7f0000001bc0)={0x80, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000001740), {0x9}, &(0x7f0000001780)=""/168, 0xa8, &(0x7f0000001840)=""/15, &(0x7f0000001b80)=[0x0, 0xffffffffffffffff, r2, 0xffffffffffffffff, r3], 0x5}, 0x58) 15:17:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x3, 0x0, 0x0, "ee"}) 15:17:35 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:17:35 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x6000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:17:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:17:35 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', 0x0, 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) [ 2746.380279] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:17:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x4, 0x0, 0x0, "ee"}) [ 2746.416513] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2746.425197] msdos: Bad value for 'time_offset' 15:17:35 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) [ 2746.434033] msdos: Bad value for 'time_offset' 15:17:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:17:35 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', 0x0, 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) 15:17:35 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x7000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2746.507350] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:17:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x5, 0x0, 0x0, "ee"}) 15:17:35 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2746.611512] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2746.625970] msdos: Bad value for 'time_offset' [ 2746.635522] msdos: Bad value for 'time_offset' 15:17:35 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) [ 2746.706462] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 15:17:46 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', 0x0, 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) 15:17:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:17:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x6, 0x0, 0x0, "ee"}) 15:17:46 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:17:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:17:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x7b, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:17:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) r2 = clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) r3 = gettid() clone3(&(0x7f0000001bc0)={0x80, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000001740), {0x9}, &(0x7f0000001780)=""/168, 0xa8, &(0x7f0000001840)=""/15, &(0x7f0000001b80)=[0x0, 0xffffffffffffffff, r2, 0xffffffffffffffff, r3], 0x5}, 0x58) 15:17:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:17:46 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) [ 2757.087146] msdos: Bad value for 'time_offset' 15:17:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x27880, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) [ 2757.094275] msdos: Bad value for 'time_offset' [ 2757.099832] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2757.118634] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 15:17:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x9000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:17:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x4}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) [ 2757.211675] msdos: Bad value for 'time_offset' [ 2757.216485] msdos: Bad value for 'time_offset' 15:17:46 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:17:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x7, 0x0, 0x0, "ee"}) 15:17:46 executing program 7: r0 = getpid() pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x80000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) connect$unix(r4, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) r5 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)={0x5c1000}, 0x18) move_mount(r3, &(0x7f0000000100)='./file0\x00', r5, &(0x7f00000001c0)='./file0\x00', 0x37) 15:17:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xa000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2757.310805] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2757.318522] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:17:46 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, 0x0) [ 2757.364331] msdos: Bad value for 'time_offset' [ 2757.376194] msdos: Bad value for 'time_offset' 15:17:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x9, 0x0, 0x0, "ee"}) 15:17:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) [ 2757.419834] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:17:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) r2 = clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) r3 = gettid() clone3(&(0x7f0000001bc0)={0x80, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000001740), {0x9}, &(0x7f0000001780)=""/168, 0xa8, &(0x7f0000001840)=""/15, &(0x7f0000001b80)=[0x0, 0xffffffffffffffff, r2, 0xffffffffffffffff, r3], 0x5}, 0x58) 15:17:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:17:46 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, 0x0) 15:17:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) dup2(r0, r1) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x9, 0x9, 0xf8, 0x0, 0x1fdb, 0x19802, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x200000000000, 0x8}, 0x40, 0x7f, 0x2, 0x9, 0x4, 0x8, 0x5eb, 0x0, 0x6, 0x0, 0xd0ac}, 0x0, 0x8, r0, 0x1) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xb, 0x8, 0x8f, 0x3, 0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4d5, 0x4, @perf_config_ext={0x3, 0x7e}, 0x1, 0x551, 0xb3, 0x3, 0x4, 0x800, 0xff81, 0x0, 0xffffffff, 0x0, 0x1}, 0x0, 0xf, r0, 0xa) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) dup2(r0, r3) 15:17:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x10, 0x0, 0x0, "ee"}) 15:17:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xb000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2757.489057] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2757.508014] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2757.533514] msdos: Bad value for 'time_offset' [ 2757.536664] msdos: Bad value for 'time_offset' 15:17:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x25, 0x0, 0x0, "ee"}) 15:17:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x10000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2757.628567] msdos: Bad value for 'time_offset' [ 2757.632523] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2757.632706] msdos: Bad value for 'time_offset' 15:17:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:17:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x4}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:17:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:17:55 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, 0x0) 15:17:55 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x20000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:17:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:17:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x1267, 0x0, 0x0, "ee"}) 15:17:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) gettid() syz_io_uring_complete(0x0) [ 2766.540482] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2766.589131] msdos: Bad value for 'time_offset' [ 2766.594465] msdos: Bad value for 'time_offset' [ 2766.617305] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:18:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x4}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:18:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) gettid() syz_io_uring_complete(0x0) 15:18:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:18:05 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0/file0\x00'}, 0x6e) 15:18:05 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[]) 15:18:05 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x20100000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:18:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x1274, 0x0, 0x0, "ee"}) 15:18:05 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:18:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2284, 0x0) [ 2776.105134] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2776.107326] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2776.119366] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2776.129378] msdos: Bad value for 'time_offset' [ 2776.138090] msdos: Bad value for 'time_offset' 15:18:05 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x77210000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:18:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x1275, 0x0, 0x0, "ee"}) 15:18:05 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[]) [ 2776.318340] msdos: Bad value for 'time_offset' [ 2776.321678] msdos: Bad value for 'time_offset' [ 2776.336545] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:18:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:18:14 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/244, 0xf4) r2 = socket$unix(0x1, 0x2, 0x0) pidfd_open(0x0, 0x0) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000014c0)={0x0, 0xfffffffffffffffc, 0x2}) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="610000007d010000004200bf920800000008000000000500000000000000000011410200000002000000060000000000002cef000f002f6465762f736e642f74696d6572000000000000000a006d61705f66696c657300", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0xee01], 0x61) stat(&(0x7f0000002b40)='./file0\x00', &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) r8 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FITRIM(r8, 0xc0185879, &(0x7f00000014c0)={0x0, 0xfffffffffffffffc, 0x2}) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="610000007d010000004200bf920800000008000000000500000000000000000011410200000002000000060000000000002cef000f002f6465762f736e642f74696d6572000000000000000a006d61705f66696c657300", @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=0xee01], 0x61) sendmmsg$unix(r2, &(0x7f0000003d40)=[{{&(0x7f0000000200)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000280)="9b508e4f6c42c5cd8ff1069ccd3c26300ead087cc527fd4357e5953a2501bc85eb48a24090988f73460f614d8f46d21505238b4cdbfaed4c4b89e6a4269de53bfc9aed655a00768c57aab01c749ec93ff17b6b9f9ab6f640e0967b8d5d028362ef4979a90406ad473acaf3c1e8c2b1fa1a0e2e74e60e3283d148f15207e1c58a8a0f30ba577807bce554af02a4b65f8cc6d070cc2e20e96fc761d7af5c1d4886c4ccdfbc1d05ef3a2cdbdf3b1e5ed22c3b5c6e87faa1b67ac576828598db811fa854a3fdda0c7dfc0031d8060649d573e37aadd09498f37650217a94ce266d46965f98a1f8a4d76533f09a104c117eb2940ae0fc900738aa0d", 0xf9}], 0x1, 0x0, 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)="d6fcc354ec5f0e80588f010a5ffb720aa08de21f6e95ec135e6cc81df342048738eddd90a0", 0x25}, {&(0x7f0000000400)="357ee0d53dd7f5f016a62db03166bb311a13cd9be1c74dd738f69c7606ed2a5f28c50b5f7b93", 0x26}, {&(0x7f0000000440)="44211c458867ac3e609ef1c48bfddab53797012a081b795be5c1e62540fc7715358680a37dc3db079ddcaecd7691c3074c0e4433d3c1ee4d3a5f61f12805730b0dd09f358081a373f6a5e0d8f63ba138762d2a949e667281988912c1b735cf203c1db75c2c0584e1def9023b5d3d67b7936e46e81a94de2dfb94dfd8f39aeb29301abd29656951f02882e5273f6f5a9db639fa6035c6b7a65961acc14b5b46d0a21be30c2baaf84f304d1bbf34d4743b67e64554e17bebc7454ee2db5f789063563075dbfe9f58977f73ee05cbb62964bf8a98ce1440c01f24e3f16b4eaea40746a94475fdf5387c0873ab", 0xeb}, {&(0x7f0000000540)="1cdb60b0a1fd766b974ee0e538408a8ef4f035d3e77a4082e659c41599afe8d652ca7a3628b812c48ddd4d0da66e8ab2fa1d0d1c2d3b4f09d7fe472d6327b5d98cea5c45e7ce32c395f00cc068faa8717f1053d6f5e95971a72a49d54cc74c297c0063b781bbaa1f4ae36471117f72ac32e1180da8b7f1a1ead571e203bcc5bde2175b06107944efb67efcec2877216c6fea89db5f98effb5968b70bc499306ba2a70e85c9bfcd1bc8deb6", 0xab}], 0x4, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x28, 0x1, 0x1, [r1, r2, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x108, 0x80}}, {{&(0x7f0000000880)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000900)="143a077dab6eb91a86889c6f72ca5058052eec97073b59e9f4e86db2bd0743607af10d48b9ab6880ffd56c52c90bf6a3dde0d0fbdc4b2b878099a11f2c28d12e212e3111603e8791cd4b8239c76240f0074818bb79", 0x55}], 0x1, &(0x7f0000002880)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r2]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0x138, 0x8040}}, {{&(0x7f00000029c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002b00)=[{&(0x7f0000002a40)="7da69c5ebb878f168475ec0cdb3fdb695516740277d773b31494b4b90727bdee828ebe1527e755802b11238f891c4dd39381206c657bcaa127a72891bdaa722b86b6a649d0313438b2a6fbfc76aacc0e4581f11f25285f", 0x57}, {&(0x7f0000002ac0)="6f8c065840cabf0e74db", 0xa}], 0x2, &(0x7f0000002c00)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r2, r1]}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0xa0, 0x84}}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000002cc0)="751cee07a09cfd2a4e5a79505cc87de91176bb54886907cbb874a242e062fb6fe13d83eedfe779dd5a5d29b41de5b77b62b1c656a39f9dbb7d67a3cbd9bbd489f0a5efb02dc9590883715c2c5004ba935f542f27eedae00cfbea4716336915a57c6a112f2a49ad08830147c4f1599c2b411a21d6133845c1aac50dfa4a30157c40d80c6e2a0b60b71fe95e3dbf85dbbd9512a4521aadb5831b409460c19aa8d7cc0a70641fd0d6ca27476e532e32da03b13a242d6c90144c69e08673e679e4e2d5f56813d16c9e090a6f7792c2c022f0404de002af357503be1a31022cc0b8a8fb467ff0b765f843a28250d82b04585733079755917e4a083b72fc7607b36a171320d22179da565253e8c4aa87ecc57aa2c3ea70035fb063a8b003140498ffbbc59cc736a7b57c7e1fb09a13c0f969417dc22dac6195304bb9912e21fd723b7d021d96c155f93e2dc51366f8ad34028dd243a0223fc4d06e1c3ab859edb0147f21f4d6703466335c8507f2c4dd1d0153278632c5ffc5fce1ba34421caa3863a9f25c93c660347c15f820dc11b7b47411a1c0b6791b900fbd68ff07f5558f0624170a9ed44c1e43d908c68e37f43e47358611846781515e5678f07f4496cbce1d0eeb5c24ed0b4bbf58f5e8e9a48d23400cad69d0fcefda7ffa0c156e3ab434d2b445b10ee5f3b28fbebc8b0adc483fde713b022562052ffe98eda350594cc1ebcfda5541c44739293d4736b991358d3f1b0cae6733cac86f4c57465d5ba0eb0938f282325b110d68dae11a02a41e6f8741265ab77d1cb7d64c1601f1ea0555196e1110e5973c46554a681d4a2f43973c0db614a95036f1cfab3b659e6d1b5277aac04b40be3def1fc8958a14226a9925f6dd495fd93c31ebd1284ad227d88de290ab7412ac78a2573fe3e8600261b4c65bb9b33666fef0fa7d9cecb6cd8b3d65b79070e4437598922fc52c57fa1023667846328dae2d2a3ec44fdcc1a00ae3c3a09741afb12f59e157bfb5709e33f60f382fc16f5c33cdf58566f0331ab9096319181c94db5ca6fa695949d4f41571cae55998cbbc9b77ced0531c4ca4851f0be9e1a021f638cf56460740d28333507226f307c1d1d993a30ac3bb1c3276176334831f80d4d2d3d2dfc3e9091d7d912b5719f53168d115cc820be346c25dc76acec117121d756059589def2df6425c89200567a264e24481c747df25fd9a5bab5ddfd88e84a68945b76fe5ec8b3396f43b94304fa06fa097d0cca98fad21255fc2bd13f01456ba519b6b3c0acc901a0aa5be58d6a8ddc35be86e05e6d33ddfb7e4f17a082fa42bb60ee49499eacf190fa958b2b0a814e4b5cce81e1a070e90455a4fb667f4e189b046b614badfa25d0b4ad25d4074ad1113169adc5fa901dce86ccbf622a4d948c6166278a7e78fcbab24d0923724ea1a0ff9704e9f64fb3988d5842de5e9ff747f955e8a118bebbba61d6e492272548e4747c54bd79d51515e5d8218f5cd1d99ec98f2ad5faa56b723109e531b6faf51cddef53224bd525045710828da241b61d4890d16bf8f023c39a6d0e779174c74f946fced487ab72e2c6375472ce99e0c81c9fd00715a8bd976b80b470b584c16d59cfecd418d763ccfe7bdc78c61aed77a78eacf4eae1ca867861d75900dcb2c06679d5d260f22a9881cb6a3ef12ee320ec406b8352a6b7aec6ef89bca3f2173d7f1748201b53d46c3cff59971ed9833ad4b57fd4084a1348622a3ae90a326cd5ad890893b936c84eeb6bee509b8160551f7fffadfc05dc837a11f015c2194d4c6620218453324f5823b95b4d6adbd7d4ad426c848af8761b2cf0812dc12143e39cf711f2b1b6eaf5b3e5e1dfa51cc36e607fc36e90a9361898e1ff275289b121e528925c719b3bad03c2d322f7816a9ba2727c926392f1c369f0ad4e4759ce93127a65aba45ae0d251a46f2deb1e7a3ba0087ce707cca29541f6b3719067c411644841a33e772ee0efad78c1cde2b1ef6998607eabf1ea293e8dcee2f5e767b5a865b3091ac768777299e2f92066d2485a456ca53686cabca8e845808d25670fa56a32bb6d08517d7cc46871f71c9662b47d7600e344b31815800443ae18e2f0379f4e6aa62aa01f6443594c2e75e7769c6149b56ccad772aac0e948de77c72edbffde5cd1da014ac291c2731004d4ae3aaf69c02144d339edbee455dea92724932f340d05640ccbb01867006be9cc585f0e32bffcd787af92e9b9f91a863e04d81e45cdfebe67ccd548442964f71612880ca310c56e45fdea0cf65571a9325a32b75c72e2173b8f2bbcdefbee4ea1b7e90b1b7e6a600552a9463686533402feb804c5f6cc2cd2886d6376005369f68da08f2e4c4899e96ffac4df3fbcb2ff9fcebcbabc53c1064149c10b6134abf4a05689c1bbf94e8af2d47101747df7a676b82919f450b96980f40d6b041a6ded839f856148642aafccfe31452df6b889f03291419ed85711a183f1f8ca5e8b909a8ed484394c70b128713b9c6a18e1465df06243baa78763694e04ffea77c198b37f478320f39988c82a4c4e6675374243c572df851405b100393746033f51d3fbda12f34c5718bc6ef5fb017142c8cf79d16791fbe6b516630b813a558a8adb4d74c7cc31c3cb31e1eec56e0632a2437c42b990f65304b679b7355a5121497ddfacaf3be77b5822587facda902d32323ebf0b0dcd254565b9389b15eba31692736e8b63669002356b6a6c8ad89a048bebb632db9fe78436fd32ddf7c6c1175ea2024b5f2e4f45946031e70f42baf34f171acc357606ea10eca7439eec92e833568f351021b0f34ebb77a78efb6bee8f41dbe1289fcf831b8f6a67030300b897e388a31fed80c270502f42e4feb1c64138f031edaf00b4f823b25434ccd0fb39a0936d177a4162341c5183857d0feec13e1da1f2e0295507059c82be45830ba9f6b14b83b2d9d71dd6903d8ae41c12521b9b287da967073810b24f473fe72a4f5bdb2b1d0ec6ce27c123f4ca18cd41b9b74d43249e1bc515f473b1488e1b07507e2bac79c24b264ea4289b8b28fa487e10fee0bc415b7823e270d6ad4679e98a913cf1cafa94bce4f8a2e2842061d12b7a81b449521507cf1ab3be85ffcfa01713f86953a10e3d72210a2923697ff37191696ece31357ad4b01d00e2ed916cbb3812364a9fd61c4cba22edc9f210a5d6fb6b452bdc5e838bbc2efdb7d255627c2fc0fa3d7139b8f3165449a6bfc5f05866a0435f63be8703ca112ab4199aa666a7c2c1ede6ed9ba7cc94c3d8a2c48761f1c9bd516833aaf32819bc87afeaed6250c38efa671ac921f536e1a0b4fe0cfbec87f2da6c19fb78a1c888f7e97facacd0e02f61ca1a282fb95c5eb950213d884fce1ed5c4862a2765d623df41da560528fec0742827949d4040c217bdc55d5b25f10b319dc7fc3677eb6eaeca8ade445823f23d035a07d729ed8247e01f39635bf8deedb1bfbb1ff089ed480ebb4d2ea0424df61d2d56e9bde021b4c892032c69cd896fa6b5c4a72956547a44a2edd32e309546399957d3445cf7a1002fc39b7a3310036fe53bd5755548c97d08b3294576ceabcbde83fee628b9c641e6e14e2262ac9a14f560a625e44c1067d724a26ab1ff71aeb942f745a1207d7f1ce9cd8163f847f4d10e784f0033a07b8b07dde126d9df126b82666adfa8a7f38e6a2f4e41ec1ec9fa26589c5c49e4b16d95f0848f97e05b2e8a4ba7f4ad77b9afb0e5ad02ddce627f024be21d812b8a4b5ade2bacd5991736ca4688f96ba0df20ab9412daf1b0ad7d3e9a39d30f079ac97f440c6174ce1b64e5c2c6a56652cadcece9df70919b941a9228997924b23f1a5e953e8715ddb47fd78c43e543f6055064f46be366ec01e2434b6d6f28bfdfdff2815806474baaccf478dfc4e18d749d10fec20eece691a1cd4a441b0a3e2af9aa54d86c0e1aa82cca347867d9793b5e343dab09b020c0c3adaeb2a4aea985f20df5368bb65d98426791a04f07a5806b48b60bc98030a7298e031446841e0edbd811dfc7ae881e011dc8ab3cda35c11161f3493652b63da5e73e8568977b0d55fa89f0387f5d4872ed3cacd602f9baa1b60c90d7ef0baee222445cd2a8c712500668a87ef0b4bbfe26dee0a5e623f001bd4ca7d90e4dccc229f26035810b8bcc82fc5791c558cb66af23d11b83c405a7b55bcc0f3bd0d806dd878b5fad4fc26779bdd9fee26bb5cc4a4b74f82274d36c929e535d5cea63dea74d5277b485d05b559de33c678f13968f839c2f86e6852d2b18725347d50396f37c544e73ac1842e16922b43bf030a988e727c662ea4d645d065db759bfca534ccabe55afd824787cd47ff8ffcd5e17bd6b8ed469673b992e67c2bfeb6d036cf990e804c95c587e3e66e6a11fb9da0efcc2500bf7943dd2774254ffcb1e7d59e6831de3f6473e843ab76a07e22e84c194dd673f2ed951ee942cfc9cc29452b9290310f8f67ad0df5410ce90498db4e1d967f57d4017e40c2d97cc90b6f585ba7675ef245661bef7efae7381b820a94f2894c208dd7489f5ebc14e43b08f42e1cf3b801b0035219b9849db63ff970f6242858c38c756ff735d16c0a7cd54eab8082c58f613bcc03e4abe4b38e674112e252036be1893b67bff7868e4ed050c4220b966ab3721bff4613789f7215349e959ca11ca913e78f53cb0e9b45fd00ad2c212505c8891f4abf99b8d73850e3fa1ef80a0025ba528997ce8b7d6e4f1bfa1631acaa79439473e1a866e0a0b962a07d5d965d9924de9797d0075d387b15b975930ed6a4a129dd8374fbe631a633b478e5efae75d31a562b1e5b12a38a2e22260477205d8b4db5fd3cab8b2fa6ad6ca4ad95228ae76e629855fea4ed0f0a732f4fdbe899b5ef3cc2e0d5f7b28d506937311a2c95a278310eb28e4d637e5c6808dbdfd6973eada848fec09bda10902202e6c018314bae6e7a83911ca6f9e7921b6af5824ffe9b705dbf585c16c89530196e8c24f1a03be8d8ae2974976b3364b208555b7c9a4503978571a2e3db87bab7601c4ea6f3cc975403d46b5d7f96a2770e519cf1a53a5f2a306bfdc20059c551e370a82d16c0e973a4ce8da6df8ecd6ef31f864983c008e2760252f6608983f24ff4a519e195662469ce9b5ef0f2d2d742a17d975aa90cae29fc4a1c3c85ad48e710750448776fade95070812d4c678024cb4aacf71aa124731eea0f786ba9f8def2bdb7d145e09b7a68aa41ffdd7d05b32de2b74f6f514907bf0f9f8aaff940544f9a62dc9316b1e82fd2a89962eed269105a90098abcdc85530c6f4bca76b5de4ed2c42d5c97ea17c88dc4203c22b334f65080de59a3b0866c96b4824805299ac2ca84ce3e5d49da8963cb6e233d977860d28a0c90bae2bfe644f6a2ff26edff28e333c439a4c0ab6aacabd709a3ae6f61cd51f80d851bf2ba1365cd76bbcacfd1de12609d6f30973be8d210acd9471673d2e3f919a49558585cf4e7f17020725f011084eb80ff680450224725ac8e89b9a71734e0dc799d0940b1928f886e795f4b917fe9fcd8bcc541481de9b2cf6eedd8fe2493370865c088c065276a608b24f005ff81b270b0f18d3a2a7281dba5896b004b452688025b0863a4a05ada9c10c70695e706225064f88bb544248d4e2bf43c8cb9168bacce6078dc4ddbd3c217852dab60b6da3798f6969e6ef17b2dffac5e11e35ad396a2f733728ce1cf48568037ee41f2f9af2b5aa5bef5775405835b7f740a003d1fd13bf01bd85b6fb1a4f574023e9e6c710c49c3530b0801cdd5c0", 0x1000}], 0x1, &(0x7f0000003d00)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r9, 0xee00}}}], 0x38, 0xc001}}], 0x5, 0x10) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:18:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2284, 0x0) 15:18:14 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8cffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:18:14 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:18:14 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) syz_io_uring_complete(0x0) 15:18:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x1276, 0x0, 0x0, "ee"}) 15:18:14 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[]) [ 2785.740521] msdos: Bad value for 'time_offset' [ 2785.744981] msdos: Bad value for 'time_offset' 15:18:14 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB]) 15:18:14 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xc0ed0000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2785.773671] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2785.787510] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 15:18:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x2201, 0x0, 0x0, "ee"}) 15:18:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2284, 0x0) [ 2785.879576] msdos: Bad value for 'time_offset' 15:18:14 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB]) [ 2785.895545] msdos: Bad value for 'time_offset' 15:18:14 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.origin\x00') [ 2785.935052] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:18:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2284, &(0x7f00000000c0)) 15:18:15 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xf6ffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2786.089025] msdos: Bad value for 'time_offset' [ 2786.090122] msdos: Bad value for 'time_offset' 15:18:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:18:24 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB]) 15:18:24 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:18:24 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000000)='./file0/../file0\x00') r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:18:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x2202, 0x0, 0x0, "ee"}) 15:18:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) syz_io_uring_complete(0x0) 15:18:24 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xffffff7f, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:18:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2284, &(0x7f00000000c0)) [ 2795.876817] msdos: Bad value for 'time_offset' [ 2795.880481] msdos: Bad value for 'time_offset' [ 2795.909612] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 15:18:24 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xffffff8c, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:18:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2284, &(0x7f00000000c0)) [ 2795.929501] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:18:25 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='./file0\x00') accept(0xffffffffffffffff, &(0x7f0000000180)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000000)=0x80) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0/file0', [{}], 0xa, "06648180dace3bcbdf4a46e39e75d527d9490c1a9097f891044619e5e645ae9efe315ef14dc022f000000000000000"}, 0x41) [ 2795.991054] msdos: Bad value for 'time_offset' 15:18:25 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000']) [ 2795.994420] msdos: Bad value for 'time_offset' 15:18:25 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xfffffff6, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:18:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x2203, 0x0, 0x0, "ee"}) 15:18:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r1 = open(&(0x7f0000000000)='./file0\x00', 0xac0080, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 15:18:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2284, &(0x7f00000000c0)) [ 2796.115061] msdos: Bad value for 'time_offset' [ 2796.123214] msdos: Bad value for 'time_offset' [ 2796.154336] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2796.194203] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:18:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x57]}, 0x8) 15:18:36 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xedc000000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:18:36 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) r2 = clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) r3 = gettid() clone3(&(0x7f0000001bc0)={0x80, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000001740), {0x9}, &(0x7f0000001780)=""/168, 0xa8, &(0x7f0000001840)=""/15, &(0x7f0000001b80)=[0x0, 0xffffffffffffffff, r2, 0xffffffffffffffff, r3], 0x5}, 0x58) syz_io_uring_complete(0x0) 15:18:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x2205, 0x0, 0x0, "ee"}) 15:18:36 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB]) 15:18:36 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000f0", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:18:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) clone3(&(0x7f0000001b00)={0x1000, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900), {0x1a}, &(0x7f0000001940)=""/183, 0xb7, &(0x7f0000001a00)=""/131, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x8, {r1}}, 0x58) syz_io_uring_complete(0x0) 15:18:36 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x5, 0x40, 0x5, 0x8, 0x0, 0x94c, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x4}, 0x200, 0x1ff, 0x80000001, 0x0, 0x0, 0x9, 0x9, 0x0, 0x3, 0x0, 0xffffffffffffffe1}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xa) syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x55) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) [ 2807.431753] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2807.484914] msdos: Bad value for 'time_offset' [ 2807.489184] msdos: Bad value for 'time_offset' 15:18:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x2270, 0x0, 0x0, "ee"}) 15:18:36 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB]) 15:18:36 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8000000000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2807.593719] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:18:36 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x20, 0x14, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:18:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) 15:18:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x2271, 0x0, 0x0, "ee"}) 15:18:36 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB]) [ 2807.722004] msdos: Bad value for 'time_offset' [ 2807.729703] msdos: Bad value for 'time_offset' 15:18:36 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000002", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) [ 2807.745230] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:18:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x100000000000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:18:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) 15:18:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, &(0x7f0000000140)={[0x57]}, 0x8) 15:18:46 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @remote, @val={@void}, {@ipv4={0x800, @tipc={{0x5, 0x2, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @dev}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x8, 0x2, 0x1, 0x0, 0x0, 0x5, 0x10, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb5, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x8}, 0x800, 0x1, 0x7, 0x3, 0x9, 0xb4bd, 0x8001, 0x0, 0x8, 0x0, 0x100000000}, r1, 0x4, r0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000001c0)) 15:18:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x2272, 0x0, 0x0, "ee"}) 15:18:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:18:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000003", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:18:46 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize']) [ 2817.383502] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2817.396179] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2817.414204] 9p: Bad value for 'msize' 15:18:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x2275, 0x0, 0x0, "ee"}) [ 2817.450912] msdos: Bad value for 'time_offset' 15:18:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) [ 2817.458644] msdos: Bad value for 'time_offset' [ 2817.505529] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:18:46 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize']) 15:18:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x200000000000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:18:46 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x800}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:18:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x2276, 0x0, 0x0, "ee"}) 15:18:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, &(0x7f0000000140)={[0x57]}, 0x8) [ 2817.596899] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:18:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000004", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:18:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x2279, 0x0, 0x0, "ee"}) [ 2817.663216] 9p: Bad value for 'msize' [ 2817.700215] msdos: Bad value for 'time_offset' [ 2817.709062] msdos: Bad value for 'time_offset' [ 2817.724449] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:18:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, &(0x7f0000000140)={[0x57]}, 0x8) 15:18:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000005", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:18:55 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x300000000000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:18:55 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) 15:18:55 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize']) 15:18:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x227a, 0x0, 0x0, "ee"}) 15:18:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 15:18:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) close_range(r0, r1, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'wlan1\x00', &(0x7f0000000100)=@ethtool_channels={0x3d, 0x100, 0x8, 0x6, 0x9, 0x9, 0xfffffffd, 0x7, 0x9}}) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:18:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) (fail_nth: 1) [ 2826.194609] 9p: Bad value for 'msize' [ 2826.200731] msdos: Bad value for 'time_offset' [ 2826.210135] msdos: Bad value for 'time_offset' [ 2826.235318] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:18:55 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x400000000000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2826.265308] FAULT_INJECTION: forcing a failure. [ 2826.265308] name failslab, interval 1, probability 0, space 0, times 0 [ 2826.267465] CPU: 0 UID: 0 PID: 41091 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2826.267483] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2826.267491] Call Trace: [ 2826.267496] [ 2826.267501] dump_stack_lvl+0xfa/0x120 [ 2826.267528] should_fail_ex+0x4d7/0x5e0 [ 2826.267544] should_failslab+0xc2/0x120 [ 2826.267559] __kmalloc_noprof+0xcd/0x680 [ 2826.267574] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2826.267592] ? scsi_ioctl_reset+0x132/0x7b0 [ 2826.267608] ? __pm_runtime_resume+0xc7/0x180 [ 2826.267630] scsi_ioctl_reset+0x132/0x7b0 [ 2826.267646] scsi_ioctl+0x67c/0x15e0 [ 2826.267661] ? __pfx_scsi_ioctl+0x10/0x10 [ 2826.267673] ? scsi_block_when_processing_errors+0x263/0x430 [ 2826.267689] ? __pfx_scsi_block_when_processing_errors+0x10/0x10 [ 2826.267704] ? proc_fail_nth_write+0x97/0x220 [ 2826.267719] ? find_held_lock+0x2b/0x80 [ 2826.267735] ? perf_trace_lock_acquire+0xc9/0x700 [ 2826.267752] ? lock_is_held_type+0x9e/0x120 [ 2826.267781] sg_ioctl+0xf2e/0x2720 [ 2826.267797] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2826.267820] ? __pfx_sg_ioctl+0x10/0x10 [ 2826.267833] ? __fget_files+0x34/0x3b0 15:18:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) (fail_nth: 1) [ 2826.267852] ? find_held_lock+0x2b/0x80 [ 2826.267865] ? __fget_files+0x203/0x3b0 [ 2826.267882] ? lock_release+0xc8/0x290 [ 2826.267904] ? selinux_file_ioctl+0xb9/0x280 [ 2826.267924] ? __pfx_sg_ioctl+0x10/0x10 [ 2826.267939] __x64_sys_ioctl+0x18f/0x210 [ 2826.267958] do_syscall_64+0xbf/0x430 [ 2826.267971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2826.267985] RIP: 0033:0x7f65dcd9cb19 [ 2826.267995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2826.268007] RSP: 002b:00007f65da312188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2826.268022] RAX: ffffffffffffffda RBX: 00007f65dceaff60 RCX: 00007f65dcd9cb19 [ 2826.268030] RDX: 00000000200000c0 RSI: 0000000000002284 RDI: 0000000000000003 [ 2826.268040] RBP: 00007f65da3121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2826.268048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2826.268055] R13: 00007ffdcb1bcc5f R14: 00007f65da312300 R15: 0000000000022000 [ 2826.268072] 15:18:55 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x00000']) 15:18:55 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000006", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) [ 2826.347760] FAULT_INJECTION: forcing a failure. [ 2826.347760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2826.348678] CPU: 0 UID: 0 PID: 41096 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2826.348694] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2826.348702] Call Trace: [ 2826.348707] [ 2826.348712] dump_stack_lvl+0xfa/0x120 [ 2826.348738] should_fail_ex+0x4d7/0x5e0 [ 2826.348754] _copy_from_user+0x30/0xd0 [ 2826.348774] do_sys_poll+0x1b3/0xd90 [ 2826.348793] ? __is_insn_slot_addr+0x140/0x290 [ 2826.348815] ? __kernel_text_address+0xd/0x40 [ 2826.348832] ? unwind_get_return_address+0x59/0xa0 [ 2826.348845] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2826.348860] ? __pfx_do_sys_poll+0x10/0x10 [ 2826.348880] ? perf_trace_lock_acquire+0xc9/0x700 15:18:55 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x227b, 0x0, 0x0, "ee"}) [ 2826.348902] ? _parse_integer_limit+0x181/0x1e0 [ 2826.348921] ? _kstrtoull+0x13e/0x200 [ 2826.348935] ? __pfx__kstrtoull+0x10/0x10 [ 2826.348951] ? __might_fault+0xe0/0x190 [ 2826.348969] ? perf_trace_lock_acquire+0xc9/0x700 [ 2826.348990] ? __lock_acquire+0x694/0x1b70 [ 2826.349015] ? lock_acquire+0x15e/0x2f0 [ 2826.349031] ? get_pid_task+0x29/0x250 [ 2826.349044] ? find_held_lock+0x2b/0x80 [ 2826.349057] ? get_pid_task+0xfd/0x250 [ 2826.349071] ? lock_release+0xc8/0x290 [ 2826.349089] ? get_pid_task+0x107/0x250 [ 2826.349104] ? proc_fail_nth_write+0x97/0x220 [ 2826.349118] ? find_held_lock+0x2b/0x80 [ 2826.349131] ? ksys_write+0x121/0x240 [ 2826.349142] ? lock_is_held_type+0x9e/0x120 [ 2826.349161] ? find_held_lock+0x2b/0x80 [ 2826.349174] ? ksys_write+0x187/0x240 [ 2826.349185] ? lock_release+0xc8/0x290 [ 2826.349204] ? __mutex_unlock_slowpath+0x157/0x750 [ 2826.349222] ? kernel_write+0x5d3/0x660 [ 2826.349235] ? set_user_sigmask+0x213/0x2a0 [ 2826.349254] ? __pfx_set_user_sigmask+0x10/0x10 [ 2826.349272] ? __fget_files+0x20d/0x3b0 [ 2826.349294] __x64_sys_ppoll+0x229/0x2a0 [ 2826.349313] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 2826.349330] ? ksys_write+0x1a3/0x240 [ 2826.349341] ? __pfx_ksys_write+0x10/0x10 [ 2826.349358] do_syscall_64+0xbf/0x430 [ 2826.349371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2826.349384] RIP: 0033:0x7fcbf0682b19 [ 2826.349393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2826.349405] RSP: 002b:00007fcbedbf8188 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 2826.349417] RAX: ffffffffffffffda RBX: 00007fcbf0795f60 RCX: 00007fcbf0682b19 [ 2826.349426] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000200000c0 [ 2826.349433] RBP: 00007fcbedbf81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2826.349441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2826.349448] R13: 00007ffd6f0eceef R14: 00007fcbedbf8300 R15: 0000000000022000 [ 2826.349465] 15:18:55 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) [ 2826.405466] msdos: Bad value for 'time_offset' [ 2826.422611] msdos: Bad value for 'time_offset' [ 2826.479932] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2826.485892] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:19:05 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize']) 15:19:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x227c, 0x0, 0x0, "ee"}) 15:19:05 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000007", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:19:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) (fail_nth: 2) 15:19:05 executing program 7: write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7b, 0x2}, 0x7) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:19:05 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) 15:19:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) (fail_nth: 2) 15:19:05 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x500000000000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2836.684282] 9p: Bad value for 'msize' 15:19:05 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize']) 15:19:05 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$inet6(0xa, 0x80000, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) [ 2836.739839] msdos: Bad value for 'time_offset' [ 2836.752661] msdos: Bad value for 'time_offset' [ 2836.754588] FAULT_INJECTION: forcing a failure. [ 2836.754588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2836.756344] CPU: 1 UID: 0 PID: 41226 Comm: syz-executor.2 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2836.756374] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2836.756388] Call Trace: [ 2836.756397] [ 2836.756406] dump_stack_lvl+0xfa/0x120 [ 2836.756453] should_fail_ex+0x4d7/0x5e0 [ 2836.756492] _copy_to_user+0x32/0xd0 [ 2836.756519] simple_read_from_buffer+0xe0/0x180 [ 2836.756556] proc_fail_nth_read+0x18a/0x240 [ 2836.756584] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2836.756611] ? security_file_permission+0x22/0x90 [ 2836.756640] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2836.756666] vfs_read+0x1eb/0xc70 [ 2836.756693] ? __pfx_vfs_read+0x10/0x10 [ 2836.756716] ? lock_release+0xc8/0x290 [ 2836.756754] ? __fget_files+0x20d/0x3b0 [ 2836.756807] ksys_read+0x121/0x240 [ 2836.756827] ? __pfx_ksys_read+0x10/0x10 [ 2836.756859] do_syscall_64+0xbf/0x430 [ 2836.756885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2836.756909] RIP: 0033:0x7fcbf063569c [ 2836.756927] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2836.756948] RSP: 002b:00007fcbedbf8170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2836.756971] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fcbf063569c [ 2836.756986] RDX: 000000000000000f RSI: 00007fcbedbf81e0 RDI: 0000000000000005 [ 2836.757000] RBP: 00007fcbedbf81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2836.757013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2836.757027] R13: 00007ffd6f0eceef R14: 00007fcbedbf8300 R15: 0000000000022000 [ 2836.757060] [ 2836.768220] 9p: Bad value for 'msize' [ 2836.777899] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:19:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) (fail_nth: 3) 15:19:05 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize']) [ 2836.862271] FAULT_INJECTION: forcing a failure. [ 2836.862271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2836.863301] CPU: 0 UID: 0 PID: 41334 Comm: syz-executor.1 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2836.863319] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2836.863328] Call Trace: [ 2836.863333] [ 2836.863339] dump_stack_lvl+0xfa/0x120 [ 2836.863370] should_fail_ex+0x4d7/0x5e0 [ 2836.863387] _copy_to_user+0x32/0xd0 [ 2836.863403] simple_read_from_buffer+0xe0/0x180 [ 2836.863425] proc_fail_nth_read+0x18a/0x240 [ 2836.863442] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2836.863456] ? security_file_permission+0x22/0x90 [ 2836.863473] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2836.863487] vfs_read+0x1eb/0xc70 [ 2836.863504] ? __pfx_vfs_read+0x10/0x10 [ 2836.863516] ? lock_release+0xc8/0x290 [ 2836.863538] ? __fget_files+0x20d/0x3b0 [ 2836.863563] ksys_read+0x121/0x240 [ 2836.863574] ? __pfx_ksys_read+0x10/0x10 [ 2836.863592] do_syscall_64+0xbf/0x430 [ 2836.863606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2836.863620] RIP: 0033:0x7f65dcd4f69c [ 2836.863630] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2836.863642] RSP: 002b:00007f65da312170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2836.863655] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f65dcd4f69c [ 2836.863664] RDX: 000000000000000f RSI: 00007f65da3121e0 RDI: 0000000000000005 [ 2836.863672] RBP: 00007f65da3121d0 R08: 0000000000000000 R09: 0000000000000000 [ 2836.863680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2836.863687] R13: 00007ffdcb1bcc5f R14: 00007f65da312300 R15: 0000000000022000 [ 2836.863706] 15:19:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x227d, 0x0, 0x0, "ee"}) 15:19:05 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x600000000000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:19:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 15:19:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2284, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:19:06 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000008", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:19:06 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) mount$9p_unix(&(0x7f0000001500)='./file0\x00', &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x800081, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0000000000000fff,func=KEXEC_INITRApFS_CHECK,\x00']) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) [ 2836.966931] msdos: Bad value for 'time_offset' [ 2836.973392] msdos: Bad value for 'time_offset' 15:19:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) [ 2837.031301] 9p: Bad value for 'msize' 15:19:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:19:06 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x700000000000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2837.066436] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2837.087572] msdos: Bad value for 'time_offset' [ 2837.095697] msdos: Bad value for 'time_offset' 15:19:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r0, 0x4, 0x8}], 0x1, 0x0, 0x0, 0x0) 15:19:06 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x800000000000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:19:06 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0x0']) 15:19:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2837.226577] msdos: Bad value for 'time_offset' [ 2837.233056] msdos: Bad value for 'time_offset' 15:19:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) 15:19:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x227e, 0x0, 0x0, "ee"}) 15:19:15 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize']) 15:19:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x6, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:19:15 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x900000000000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:19:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0xfffffdfe, 0x0, 0x0, 0x0) 15:19:15 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') fcntl$notify(r0, 0x402, 0x80000010) fcntl$notify(r0, 0x402, 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x801, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:19:15 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000009", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) [ 2846.835584] 9p: Bad value for 'msize' [ 2846.840667] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2846.854541] audit: type=1400 audit(1762787955.915:341): avc: denied { watch } for pid=41485 comm="syz-executor.7" path="/proc/41485/task" dev="proc" ino=50714 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 [ 2846.859938] msdos: Bad value for 'time_offset' [ 2846.862907] msdos: Bad value for 'time_offset' [ 2846.870261] audit: type=1400 audit(1762787955.928:342): avc: denied { watch_reads } for pid=41485 comm="syz-executor.7" path="/proc/41485/task" dev="proc" ino=50714 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1 15:19:15 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize']) [ 2847.003851] 9p: Bad value for 'msize' 15:19:25 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize']) 15:19:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1267, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:19:25 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x4) r3 = socket$unix(0x1, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = dup2(r5, r4) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) bind$bt_sco(r6, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:19:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x8) 15:19:25 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000f", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:19:25 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xa00000000000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:19:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x227f, 0x0, 0x0, "ee"}) 15:19:25 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) [ 2856.929230] 9p: Bad value for 'msize' [ 2856.976987] msdos: Bad value for 'time_offset' [ 2856.979241] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2856.984128] msdos: Bad value for 'time_offset' 15:19:26 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0']) 15:19:26 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xb00000000000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:19:26 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) 15:19:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x8000000) 15:19:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x2282, 0x0, 0x0, "ee"}) 15:19:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1274, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2857.196961] msdos: Bad value for 'time_offset' [ 2857.204751] msdos: Bad value for 'time_offset' 15:19:26 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize']) [ 2857.257355] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:19:26 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000f0", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:19:26 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x1000000000000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2857.381660] 9p: Bad value for 'msize' [ 2857.442656] msdos: Bad value for 'time_offset' [ 2857.453584] msdos: Bad value for 'time_offset' 15:19:36 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:19:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) 15:19:36 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x2000000000000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:19:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1275, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:19:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x800000000000000) 15:19:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x2283, 0x0, 0x0, "ee"}) 15:19:36 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000000)=0x8, 0x4) write(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000014c0)={0x0, 0xfffffffffffffffc, 0x2}) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r4, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0xee01], 0x61) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) r7 = syz_mount_image$iso9660(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x1, 0x3, &(0x7f00000009c0)=[{&(0x7f00000007c0)="c98818f0e90996a837a55181d0c4218991baea6dce5e1afa5c8357443acbe644a2e4115a64100384f6417e7b55072737c41f712115ea2b0bc213506b5b4d11094e2d8b37822b49419ba2123d573dd9f52a7f3a8746bc34b5f3549abc075b3cecb03bf07a5dece0d5b64f3748a3727b4768fb3c62571224786fe45fcbf33995648fa8a6a023d3e9c444fd4302eb5270541a37c69653ad60fb43864001d71d424810d0ba8ed2865b5f74", 0xa9, 0x2a11}, {&(0x7f0000000880)="2439a8ce1aa545f67d939034dcfc44a7448b2a1df31026d2a4433ce9212384f7071faa1b6ce37eacd3d19ec49482849b6c666d345d6079f78a48faa9da26b3e774cb4a822ba572e84c4c36fbade7c9f8b4560ca9e5213aa6c524674abbfc", 0x5e, 0x3ff}, {&(0x7f0000000900)="680d80c49f9da808f5c0c734bdb2033344060fa752cc0ad405aaf3f40efde973b71a0deed5fb7fbfffb4c7abfa12ff8d411f5f8bbf13fc566f80673e98516e646423210e70907c401505c76358e5b25b35ede7132629de0a2416e174f78139034e8d0e47dbb1e26ca6c6e6d7e8b865c0bc343079ef58261e932703d8f836eb953c259c25311d6e6a8d297a80cadad6bbb0f017bf427547b28f9576754fb2060b6779599e6ecc291ac48b96efd4d92c4fc5e16f833ea6", 0xb6, 0x4}], 0x200000, &(0x7f0000000a40)={[{@session={'session', 0x3d, 0x8}}, {@map_normal}, {@nocompress}, {@cruft}, {@sbsector={'sbsector', 0x3d, 0x81}}], [{@smackfsroot={'smackfsroot', 0x3d, '+@{-!{(^\x00'}}, {@pcr={'pcr', 0x3d, 0x2a}}, {@context={'context', 0x3d, 'root'}}]}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000180)="875d5caad35118487e54280e9d73078d73261904e6c0a940cda550a8d6ecd77e6b18d763c98b940d5496ebd87fb72c9e940cdf34317e6a23298429765eb16e8d9168affe3b1e264081300c1cb4b676333549cd740cd7947062b3755fa305abb5b3c45ab6f2bd834129d5b27092635c966a3783dd8768b79fae88ac570ee7b32228f1fa07d3717aca515e7e29e3b4957faa0b789d1882d33f5d141b23bee48f1bf6639b43", 0xa4}, {&(0x7f0000000240)="a5ff5177492138b31c8bc1d142c11401300f666df67caa98e4b850ab680e578b303f701d3c761b0ec612f74b448b67f4447df2dd5574f96ffe8703d47cfea3477a58eda167918790b607923e75d64d2d31675c0076cda8d18a96f5c8dc0fd6492d7e88d55fd6e8524f4790fcd29313ae72bad0ac718b39261c42a782968ddc5051c5f80df0779d77f50a64b73f201229fa3fc04a0ab54221d04a259eb44de1b9cc1c0db72a32199e5fecf81d83b052a31da30a0b35dccff80a0a6546c001913bc500a31c1f60f0476db56d3358a61f5774812bd17f6d1457299d152c32db5dea8ff724c4a3e863831ab739da67", 0xed}, {&(0x7f0000000000)="dfd130f574e23cf67ecd79155edd2ea0d2153e7c0a7d2bcb", 0x18}, {&(0x7f0000000340)="be0fb57ce0072c5ea1b47b8c9cb694c00724aba22c7caf0875e4ac47e0bfa907c3f16cff8c90461661dcc5bc300981cff46c7aea82b2a883da18fed273eeddb48a96d47f88f2b114c7", 0x49}, {&(0x7f00000003c0)="afb8ebb2a1e16048bacc7e24bbae31883a2e2ba0896cbd1708dd82083077f6fa9eaf3f716ae8f3fa954a9d219ba1b09147bd9a7173de7bf1339016218f6ffcf3b02e84f92121887b8d507b9b1fa857a41b911116d50cdd1e0036a2cac9dfda", 0x5f}, {&(0x7f0000000440)="bc49a2f0d4c99a2172cb19a9a8e35d6b31246a2c81abd2096b514bf20c376fb2858cd1fde3", 0x25}, {&(0x7f0000000480)="0b6d03513799b3ec367c495db046801313209b235457f014826737158571929910de4da92a586f2bc89aed2135719f03868b9e200f28e07f6c5d00b0cd39bd09dcdece3418d72306ed179d8e8d6342da045c6083cc5f6909b0a30f9662e7c9deefc54045915b3bdb15fa6d0cee4e2adfc6c3a699fc8dee695279f7794fc2258744295de848757b3a7abdf562f56278ca32eb1a3759ca6df27fd70997c44848474da045a69304c0b0a68bb6", 0xab}, {&(0x7f0000000540)="3f123d7b770f9b2090cec16eed7281c26c8c7eb78921f68daab8c0c26ef76fb5adf4ad7c11ec51292eb186daf2e5e3274b7ebf772aa0c72d3b05b6b81b3604833b54f21e3ca5e3ceff9f13b3bbf808d1fc97017941c390832d79173dcbf10f0d366c6c5578b893586afd11d431973f69139d21ca4bcd3df3b6dd0ca0ebe768298e35a41c13297922627a900e5befb27136a0a6a2abfe11579696ec9fb5a7d024ad3f34ad5e3b497001c01b194a79ec77f239ffc8ff49e74f7a21428a0b5ae87bc69a0fe439228187da09542a584b3b8f21401e43cd23c4c835f1b31088adf52fc951e6e5ded875", 0xe7}, {&(0x7f0000000640)="fa81e1a00421de28d3a8d0c77e398a", 0xf}], 0x9, &(0x7f0000000b00)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r6, r0, r2, r2, r7]}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x60, 0x8090}}, {{&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000c00)="05cb34d3ade4362651c0ccadf7c6c39f156e1662c64603bdea720855482bed40781610763da3ef352945aa9f2b7be90e7320c2bfdb3df79500d32bb60a3b386e3519666b38ffb55856b4460bfb23038190f1f199fc08d01b094539c81de35ea1be7145739b4929ed7aff9250b157f5b1495e30731e7493c30c2c046f7e", 0x7d}, {&(0x7f0000000c80)="7c764c2b9eea4eaed9f5a00769088b71", 0x10}, {&(0x7f0000000cc0)="5fb838f842ff77d412e64c8f69381e", 0xf}, {&(0x7f0000000d00)="2b1116095b103a29ed67df442052ffd4afea74c823d9c9f9f420e07bd3211a0c90a99a43ea011007f5349196b7f449fb16b4d8e1a7775f312bd09e344db05beac73ff088b463a871c2c3d42d0621ab0a15e11b62b906b5a920f9bd88c934cc99c21191a0df0942beb47b04484f4d607820cc827287bc7995c1bf77f52218fc8301ecc9e152", 0x85}, {&(0x7f0000000dc0)}], 0x5, &(0x7f0000000e80)=[@rights={{0x18, 0x1, 0x1, [r8, r1]}}], 0x18, 0x8001}}], 0x2, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:19:36 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize']) [ 2867.277594] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2867.279524] 9p: Bad value for 'msize' [ 2867.282168] msdos: Bad value for 'time_offset' [ 2867.298270] msdos: Bad value for 'time_offset' 15:19:36 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize']) 15:19:36 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:19:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) [ 2867.368406] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2867.374437] loop7: detected capacity change from 0 to 42 [ 2867.383195] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 15:19:36 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x2010000000000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2867.392024] iso9660: Unknown parameter 'smackfsroot' 15:19:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0xc84, 0x7, 0x2, 0x2, 0x6, "5f11625c087ac428a33013e151f3e3b2b7478c", 0xffffffff, 0x7ff}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_dump={0x11}}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000080)={0x40000002}) [ 2867.413181] 9p: Bad value for 'msize' 15:19:36 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) 15:19:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1276, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2867.465234] msdos: Bad value for 'time_offset' [ 2867.466561] loop7: detected capacity change from 0 to 42 [ 2867.469678] msdos: Bad value for 'time_offset' [ 2867.472173] iso9660: Unknown parameter 'smackfsroot' 15:19:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x2284, 0x0, 0x0, "ee"}) 15:19:36 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x7721000000000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2867.607974] msdos: Bad value for 'time_offset' [ 2867.612278] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2867.623124] msdos: Bad value for 'time_offset' 15:19:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) 15:19:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:19:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8cffffff00000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:19:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 15:19:46 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) ioctl$CDROM_SEND_PACKET(r2, 0x5393, &(0x7f0000000200)={"32bd534135cabcc7e7756752", &(0x7f0000000100)="bad159fda8033352b6c70e66d2cb6e0dc45ae14d6891a61f902f1750cab3014dc08e319afa1b5face2ed8cda768774f0541fb4446dfb9139f5c1f6c6a91a5df1a2c97a90ce5268a40fb22598049d4cd6af9d3eb7d5196cad67d95712ce85fa4bb9f6747039992a0e8ab7c31deb6d63fd26e88b7b3615e9ef37f7ea85260e0e10bbe2c851a2102a2da900416afc2194e9de9d0aa55d56d4fb84ec98f219a4e459bf05eb87a70e622a64e25b01fd344a89f411e19ad3e55cf56be2", 0xba, 0x5, &(0x7f0000000000)={0x33, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, "837012ee", 0x7, "3127b339", 0x81, 0xfc, 0x5, "1faaf7", "e6351a6f556ce8e101f55e9ee0cc2368ee218b806adf2494a6c5f5fb2403840efa8520fec67bb53c373efb5aa2f3"}, 0x2, 0x2802, 0x4, &(0x7f00000001c0)}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:19:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x2285, 0x0, 0x0, "ee"}) 15:19:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2201, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:19:46 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=']) 15:19:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2202, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2877.381597] msdos: Bad value for 'time_offset' [ 2877.385411] 9p: Bad value for 'msize' [ 2877.387877] msdos: Bad value for 'time_offset' [ 2877.412085] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2877.427610] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:19:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xf6ffffff00000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:19:46 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=']) [ 2877.450871] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2877.491053] 9p: Bad value for 'msize' [ 2877.496283] msdos: Bad value for 'time_offset' [ 2877.499878] msdos: Bad value for 'time_offset' 15:19:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2203, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:19:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x7fff) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, 0xc) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 15:19:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:19:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x2286, 0x0, 0x0, "ee"}) 15:19:58 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file0\x00', 0x8, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000100)) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:19:58 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=']) 15:19:58 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0xffffff7f00000000, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:19:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) [ 2889.231810] msdos: Bad value for 'time_offset' [ 2889.234624] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2889.236796] 9p: Bad value for 'msize' [ 2889.238384] msdos: Bad value for 'time_offset' [ 2889.273026] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 15:19:58 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x2, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:19:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x2287, 0x0, 0x0, "ee"}) 15:19:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffe, 0x1000, 0x40, @scatter={0x3, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000040)=""/19, 0x13}, {&(0x7f0000000100)=""/161, 0xa1}]}, &(0x7f0000001300)="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", &(0x7f00000001c0)=""/40, 0x7, 0x11, 0x1, &(0x7f0000000200)}) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) [ 2889.363164] msdos: Bad value for 'time_offset' 15:19:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) 15:19:58 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40118, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x399, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 15:19:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2205, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) [ 2889.370015] msdos: Bad value for 'time_offset' [ 2889.385044] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:19:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:19:58 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0']) (fail_nth: 1) 15:19:58 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x3, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2889.477641] msdos: Bad value for 'time_offset' [ 2889.478428] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2889.483459] msdos: Bad value for 'time_offset' 15:19:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x2288, 0x0, 0x0, "ee"}) [ 2889.564628] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:20:08 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0']) (fail_nth: 2) 15:20:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x2289, 0x0, 0x0, "ee"}) 15:20:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2270, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:20:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000040)) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 15:20:08 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x4, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:20:08 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000c0", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:20:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) 15:20:08 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1516c0) r2 = dup2(r1, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) write$P9_RREAD(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x100b) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x29f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x8000) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x8, &(0x7f0000000100)=[{0x9, 0x9, 0xc0, 0x2422}, {0x3ff, 0x0, 0x0, 0x2}, {0x4, 0x4, 0x4, 0x4}, {0x8, 0x9, 0x1, 0x1000}, {0xffe1, 0xac, 0x2, 0x3000000}, {0x9, 0x7f, 0x7, 0x4}, {0x5, 0x3, 0x14, 0xffffff45}, {0x5, 0xf5, 0xa0, 0x101}]}, 0x10) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000012c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="07000000000000002e2f66696c65300099ca88e7109cc70827e2ef401efc41d8d034f9b32e9d943df4ede23339347c01cdc3acecaebdf308242f45b86ad009305004cab49e52949ea4caa34265694188f0fc10ba1c67a5b454ce2361de2e34856c41f228df8b86fe4f5c5f25aff4bd4c9b59ff3a47addae908fb39011c08fcb66aff281c1bf85cf2ac2b1662574bc48dc1014b66d56c273e0bcd36a2b388290de7c070b544cdf2c71de0ad928d190f7a1a73f0fca8a2878e4fecfa51b09ab1b97bfc187b7183"]) [ 2899.015533] msdos: Bad value for 'time_offset' [ 2899.019617] msdos: Bad value for 'time_offset' 15:20:08 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x5, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2899.062684] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:20:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2271, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:20:08 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xffff, 0x155400) write(r0, &(0x7f0000000100)="e894b26d36381a84ea20c381d9354a7372a9c74715fccf83613e", 0x1a) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x0, 0x5}}, './file0\x00'}) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f00000001c0)=""/197) r4 = dup2(r2, r1) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000040)={'\x00', 0x0, 0x1, 0x6f7e9d48}) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000140)=0x1) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:20:08 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) [ 2899.113762] msdos: Bad value for 'time_offset' [ 2899.119231] msdos: Bad value for 'time_offset' 15:20:08 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x6, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:20:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2272, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:20:08 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0']) (fail_nth: 3) 15:20:08 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = socket$inet(0x2, 0xd5613118ac43e21b, 0x80000001) close_range(r2, r1, 0x2) pidfd_getfd(r1, r0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:20:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x4b47, 0x0, 0x0, "ee"}) 15:20:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'batadv_slave_0\x00', &(0x7f0000000000)=@ethtool_dump={0x40, 0x0, 0x1000000}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000010000001800f900", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) dup2(r2, r2) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) [ 2899.257332] msdos: Bad value for 'time_offset' [ 2899.270166] msdos: Bad value for 'time_offset' [ 2899.270278] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2899.287368] FAULT_INJECTION: forcing a failure. [ 2899.287368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2899.289309] CPU: 1 UID: 0 PID: 42245 Comm: syz-executor.5 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2899.289343] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2899.289358] Call Trace: [ 2899.289366] [ 2899.289375] dump_stack_lvl+0xfa/0x120 [ 2899.289422] should_fail_ex+0x4d7/0x5e0 [ 2899.289451] _copy_from_user+0x30/0xd0 [ 2899.289477] memdup_user+0x7e/0xe0 [ 2899.289506] strndup_user+0x78/0xe0 [ 2899.289533] __x64_sys_mount+0x136/0x310 [ 2899.289560] ? __pfx___x64_sys_mount+0x10/0x10 [ 2899.289597] do_syscall_64+0xbf/0x430 [ 2899.289624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2899.289649] RIP: 0033:0x7fd28c5bbb19 [ 2899.289668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2899.289692] RSP: 002b:00007fd289b31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2899.289716] RAX: ffffffffffffffda RBX: 00007fd28c6cef60 RCX: 00007fd28c5bbb19 [ 2899.289732] RDX: 0000000020001600 RSI: 00000000200015c0 RDI: 0000000000000000 [ 2899.289747] RBP: 00007fd289b311d0 R08: 0000000020001640 R09: 0000000000000000 [ 2899.289763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2899.289785] R13: 00007ffc67a9c89f R14: 00007fd289b31300 R15: 0000000000022000 [ 2899.289820] 15:20:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2275, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:20:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x4b49, 0x0, 0x0, "ee"}) 15:20:08 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) [ 2899.388529] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2899.393351] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2899.428359] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 15:20:17 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000c6", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) [ 2908.310405] FAULT_INJECTION: forcing a failure. [ 2908.310405] name failslab, interval 1, probability 0, space 0, times 0 [ 2908.311445] CPU: 1 UID: 0 PID: 42370 Comm: syz-executor.5 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2908.311462] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2908.311471] Call Trace: [ 2908.311476] [ 2908.311481] dump_stack_lvl+0xfa/0x120 [ 2908.311508] should_fail_ex+0x4d7/0x5e0 [ 2908.311524] should_failslab+0xc2/0x120 [ 2908.311539] __kmalloc_cache_noprof+0x81/0x6b0 [ 2908.311555] ? __might_fault+0xe0/0x190 [ 2908.311574] ? copy_mount_options+0x55/0x180 [ 2908.311594] ? copy_mount_options+0x55/0x180 [ 2908.311607] ? memdup_user+0x95/0xe0 [ 2908.311621] copy_mount_options+0x55/0x180 [ 2908.311637] __x64_sys_mount+0x1ab/0x310 [ 2908.311651] ? __pfx___x64_sys_mount+0x10/0x10 [ 2908.311669] do_syscall_64+0xbf/0x430 [ 2908.311683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2908.311698] RIP: 0033:0x7fd28c5bbb19 [ 2908.311707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 15:20:17 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) 15:20:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x5309, 0x0, 0x0, "ee"}) 15:20:17 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x7, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:20:17 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r2 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x2, 0x0, 0x8, 0x0, 0x0, 0x9, 0x8002, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp, 0x42504, 0x100, 0x9000, 0x2, 0x6, 0x5b, 0x2, 0x0, 0x4, 0x0, 0x80000000}, r2, 0x0, r0, 0x2) 15:20:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2276, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:20:17 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0']) (fail_nth: 4) 15:20:17 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001400), 0x292400, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) dup2(r1, r0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = dup2(r2, r0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001380)={0x53, 0xfffffffffffffffb, 0xa9, 0x3a, @scatter={0x4, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/14, 0xe}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000080)=""/41, 0x29}, {&(0x7f0000000100)=""/168, 0xa8}]}, &(0x7f0000000200)="f1034a3ca73b6690228e7f3298fdfae4b20cfa1ebad0bf404c8c52ef3361efd1c9737dafeefcbc7b019ebea832f8169feb83a0094ff5d38f2cb2a7aad005fcf7e5e733c5ae51de2c9f2a34d499a36bf47c10eec66493558c9293cd89b08fcf06bae391840014b65d68bca3487e1a820d029837729c312f84f10f7de12fce3e926052b1e15258a9f99ce78a20c815b3eea6a0eff9c736cf2439d9975f577940a293382d581d3705714c", &(0x7f0000001300)=""/43, 0x6, 0x11, 0x1, &(0x7f0000001340)}) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) [ 2908.311719] RSP: 002b:00007fd289b31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2908.311731] RAX: ffffffffffffffda RBX: 00007fd28c6cef60 RCX: 00007fd28c5bbb19 [ 2908.311740] RDX: 0000000020001600 RSI: 00000000200015c0 RDI: 0000000000000000 [ 2908.311748] RBP: 00007fd289b311d0 R08: 0000000020001640 R09: 0000000000000000 [ 2908.311756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2908.311768] R13: 00007ffc67a9c89f R14: 00007fd289b31300 R15: 0000000000022000 [ 2908.311786] [ 2908.345708] msdos: Bad value for 'time_offset' [ 2908.349288] msdos: Bad value for 'time_offset' 15:20:17 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) [ 2908.401826] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:20:17 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x8, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2908.420384] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:20:17 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0']) (fail_nth: 5) [ 2908.475283] msdos: Bad value for 'time_offset' [ 2908.478904] msdos: Bad value for 'time_offset' 15:20:28 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x9, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:20:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r3, r2) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000040)={0x8, 0x3, 0x80000001, 0x2279, 0x4, "017c3defe93c01f049226a67add4483b2dc0d3", 0x2, 0x91c}) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 15:20:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00008e", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:20:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x5319, 0x0, 0x0, "ee"}) 15:20:28 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0']) (fail_nth: 6) 15:20:28 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) 15:20:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x2279, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:20:28 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) mknodat$loop(r0, &(0x7f0000000000)='./file0\x00', 0x2, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) [ 2919.135572] msdos: Bad value for 'time_offset' [ 2919.146281] msdos: Bad value for 'time_offset' [ 2919.162972] FAULT_INJECTION: forcing a failure. [ 2919.162972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2919.164702] CPU: 1 UID: 0 PID: 42510 Comm: syz-executor.5 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2919.164732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2919.164746] Call Trace: [ 2919.164754] [ 2919.164764] dump_stack_lvl+0xfa/0x120 [ 2919.164817] should_fail_ex+0x4d7/0x5e0 [ 2919.164846] _copy_from_user+0x30/0xd0 [ 2919.164872] copy_mount_options+0x76/0x180 [ 2919.164905] __x64_sys_mount+0x1ab/0x310 [ 2919.164930] ? __pfx___x64_sys_mount+0x10/0x10 [ 2919.164965] do_syscall_64+0xbf/0x430 [ 2919.164990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2919.165014] RIP: 0033:0x7fd28c5bbb19 [ 2919.165031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2919.165053] RSP: 002b:00007fd289b31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2919.165075] RAX: ffffffffffffffda RBX: 00007fd28c6cef60 RCX: 00007fd28c5bbb19 [ 2919.165090] RDX: 0000000020001600 RSI: 00000000200015c0 RDI: 0000000000000000 [ 2919.165105] RBP: 00007fd289b311d0 R08: 0000000020001640 R09: 0000000000000000 [ 2919.165119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2919.165133] R13: 00007ffc67a9c89f R14: 00007fd289b31300 R15: 0000000000022000 [ 2919.165165] [ 2919.166468] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:20:28 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0xa, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:20:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x141000) r2 = dup2(r1, r0) bind$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 15:20:28 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0']) (fail_nth: 7) 15:20:28 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) 15:20:28 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x7f, 0xcc, 0xa0, 0x0, 0x0, 0x1000, 0x880, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x80}, 0x110, 0x6, 0x2, 0x6, 0x8, 0x800, 0x200, 0x0, 0x121a, 0x0, 0x440b}, 0x0, 0x3, r0, 0x2) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:20:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x227a, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:20:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x5380, 0x0, 0x0, "ee"}) [ 2919.393188] msdos: Bad value for 'time_offset' [ 2919.401719] msdos: Bad value for 'time_offset' [ 2919.419020] FAULT_INJECTION: forcing a failure. [ 2919.419020] name failslab, interval 1, probability 0, space 0, times 0 [ 2919.420773] CPU: 1 UID: 0 PID: 42628 Comm: syz-executor.5 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2919.420804] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2919.420817] Call Trace: [ 2919.420825] [ 2919.420834] dump_stack_lvl+0xfa/0x120 [ 2919.420880] should_fail_ex+0x4d7/0x5e0 [ 2919.420907] ? getname_flags.part.0+0x48/0x540 [ 2919.420937] should_failslab+0xc2/0x120 [ 2919.420962] kmem_cache_alloc_noprof+0x80/0x690 [ 2919.421001] ? getname_flags.part.0+0x48/0x540 [ 2919.421028] getname_flags.part.0+0x48/0x540 [ 2919.421060] getname_flags+0x95/0xe0 [ 2919.421095] user_path_at+0x27/0x90 [ 2919.421131] __x64_sys_mount+0x1fb/0x310 [ 2919.421156] ? __pfx___x64_sys_mount+0x10/0x10 [ 2919.421206] do_syscall_64+0xbf/0x430 [ 2919.421232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2919.421256] RIP: 0033:0x7fd28c5bbb19 [ 2919.421273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2919.421296] RSP: 002b:00007fd289b31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2919.421319] RAX: ffffffffffffffda RBX: 00007fd28c6cef60 RCX: 00007fd28c5bbb19 [ 2919.421335] RDX: 0000000020001600 RSI: 00000000200015c0 RDI: 0000000000000000 [ 2919.421349] RBP: 00007fd289b311d0 R08: 0000000020001640 R09: 0000000000000000 [ 2919.421363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2919.421378] R13: 00007ffc67a9c89f R14: 00007fd289b31300 R15: 0000000000022000 [ 2919.421410] 15:20:28 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000024", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:20:28 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0xb, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2919.515000] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2919.615231] msdos: Bad value for 'time_offset' [ 2919.618705] msdos: Bad value for 'time_offset' 15:20:37 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0']) (fail_nth: 8) 15:20:37 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000e", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:20:37 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) 15:20:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x227b, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:20:37 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2a62c0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:20:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x5381, 0x0, 0x0, "ee"}) 15:20:37 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x10, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:20:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = syz_io_uring_complete(0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0) dup2(r1, r3) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) [ 2928.404789] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2928.412983] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:20:37 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:20:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x5382, 0x0, 0x0, "ee"}) [ 2928.471923] msdos: Bad value for 'time_offset' [ 2928.504952] msdos: Bad value for 'time_offset' 15:20:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x227c, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:20:37 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0']) (fail_nth: 9) 15:20:37 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x300, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:20:37 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) [ 2928.606196] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:20:37 executing program 2: sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x48, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) [ 2928.704420] FAULT_INJECTION: forcing a failure. [ 2928.704420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2928.706538] CPU: 1 UID: 0 PID: 42883 Comm: syz-executor.5 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2928.706571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2928.706586] Call Trace: [ 2928.706594] [ 2928.706603] dump_stack_lvl+0xfa/0x120 [ 2928.706651] should_fail_ex+0x4d7/0x5e0 [ 2928.706680] strncpy_from_user+0x3b/0x2f0 [ 2928.706717] getname_flags.part.0+0x8d/0x540 [ 2928.706754] getname_flags+0x95/0xe0 [ 2928.706799] user_path_at+0x27/0x90 [ 2928.706837] __x64_sys_mount+0x1fb/0x310 [ 2928.706864] ? __pfx___x64_sys_mount+0x10/0x10 [ 2928.706901] do_syscall_64+0xbf/0x430 [ 2928.706928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2928.706953] RIP: 0033:0x7fd28c5bbb19 [ 2928.706972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2928.706996] RSP: 002b:00007fd289b31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2928.707020] RAX: ffffffffffffffda RBX: 00007fd28c6cef60 RCX: 00007fd28c5bbb19 [ 2928.707037] RDX: 0000000020001600 RSI: 00000000200015c0 RDI: 0000000000000000 [ 2928.707052] RBP: 00007fd289b311d0 R08: 0000000020001640 R09: 0000000000000000 [ 2928.707068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2928.707083] R13: 00007ffc67a9c89f R14: 00007fd289b31300 R15: 0000000000022000 [ 2928.707118] [ 2928.758740] msdos: Bad value for 'time_offset' [ 2928.764163] msdos: Bad value for 'time_offset' 15:20:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x500, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:20:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x227d, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:20:46 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0']) (fail_nth: 10) 15:20:46 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) 15:20:46 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x6e, 0x8b, 0x5, 0x8, 0x0, 0x7, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, 0x4, @perf_config_ext={0x9, 0x5}, 0x1000, 0x7, 0x4, 0x2, 0xd2, 0xffffffe0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffff7}, r1, 0xc, r0, 0x18) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x7, 0x80, 0xfc, 0x6, 0x0, 0x1ff, 0x801, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x18000, 0x2, 0x7, 0x2, 0x1, 0xd2, 0x1, 0x0, 0xae, 0x0, 0x9}, r1, 0xc, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 15:20:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000017", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:20:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x5385, 0x0, 0x0, "ee"}) 15:20:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) close(r0) [ 2936.989264] msdos: Bad value for 'time_offset' [ 2937.000033] msdos: Bad value for 'time_offset' [ 2937.006433] FAULT_INJECTION: forcing a failure. [ 2937.006433] name failslab, interval 1, probability 0, space 0, times 0 [ 2937.007457] CPU: 1 UID: 0 PID: 42900 Comm: syz-executor.5 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2937.007474] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2937.007482] Call Trace: [ 2937.007487] [ 2937.007492] dump_stack_lvl+0xfa/0x120 [ 2937.007520] should_fail_ex+0x4d7/0x5e0 [ 2937.007536] should_failslab+0xc2/0x120 [ 2937.007551] __kmalloc_cache_noprof+0x81/0x6b0 [ 2937.007567] ? find_held_lock+0x2b/0x80 [ 2937.007582] ? __get_fs_type+0xe6/0x160 [ 2937.007595] ? alloc_fs_context+0x58/0x9e0 [ 2937.007618] ? alloc_fs_context+0x58/0x9e0 [ 2937.007635] ? _raw_read_unlock+0x1e/0x40 [ 2937.007652] alloc_fs_context+0x58/0x9e0 [ 2937.007675] path_mount+0xd8d/0x2140 [ 2937.007689] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2937.007711] ? __pfx_path_mount+0x10/0x10 [ 2937.007723] ? kmem_cache_free+0x2a4/0x550 [ 2937.007740] ? putname.part.0+0xc0/0x160 [ 2937.007755] ? getname_flags.part.0+0x1c6/0x540 [ 2937.007777] ? putname.part.0+0xc0/0x160 [ 2937.007794] __x64_sys_mount+0x293/0x310 [ 2937.007807] ? __pfx___x64_sys_mount+0x10/0x10 [ 2937.007829] do_syscall_64+0xbf/0x430 [ 2937.007844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2937.007857] RIP: 0033:0x7fd28c5bbb19 [ 2937.007867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2937.007879] RSP: 002b:00007fd289b31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2937.007892] RAX: ffffffffffffffda RBX: 00007fd28c6cef60 RCX: 00007fd28c5bbb19 [ 2937.007900] RDX: 0000000020001600 RSI: 00000000200015c0 RDI: 0000000000000000 [ 2937.007908] RBP: 00007fd289b311d0 R08: 0000000020001640 R09: 0000000000000000 [ 2937.007915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2937.007923] R13: 00007ffc67a9c89f R14: 00007fd289b31300 R15: 0000000000022000 [ 2937.007940] 15:20:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) [ 2937.085367] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:20:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) 15:20:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x600, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:20:46 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) 15:20:46 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0']) (fail_nth: 11) 15:20:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) [ 2937.274743] msdos: Bad value for 'time_offset' [ 2937.283633] msdos: Bad value for 'time_offset' 15:20:54 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x700, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:20:54 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:20:54 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) dup2(r1, r2) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4, 0x6a, 0x9d, 0xf1, 0x0, 0x8, 0x48860, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x80, 0x7fff, 0x81a1, 0x4, 0xb460, 0x7, 0x0, 0x0, 0x1000, 0x0, 0xfe}, 0xffffffffffffffff, 0x1, r1, 0xa) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/16]}) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000300)={0x1, 0x3, 0x1000, 0x60, &(0x7f0000000180)="daf720231f6ac884a252897b92198291861dbfcc4bd3c0397042999b545f362831c19645e4c0c255ccc3a8b389fc6a0c490e04e332b985635f27b8da464ecd18d680e70df6fe01d859c4bfa7d91d2184a67ba943244c343781261fa0e68ca073", 0xd0, 0x0, &(0x7f0000000200)="7e4f071cca32b2c2d85ccd3a3e3def2982670add42930a970ab7b01f4f2304ac2904f2ba9e6f6f9468b51546402433ae34f11e5ee4b46c44b326f7d45d0b04ab1799a03a81acff5059f729a2464c2edd1e4ca27325ef283b329e833f8ae6ff7792bfb9809246557039ed473b1d78c8f0f396fd8df878cbd0cf4f45cbec98bf265522eb497ca3919ca7520c8d8dac4b7343d280a3679e05a6213ffd7fa0cb7bb607be0ec9ab927adf213dbc3f32521981aa4d56384dd0d4705201bf49d3bd6c3979395b85752d9b6fa82f29ac76af0d28"}) 15:20:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x5386, 0x0, 0x0, "ee"}) 15:20:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x227e, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:20:54 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0']) (fail_nth: 12) 15:20:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x4}], 0x1, 0x0, 0x0, 0x0) 15:20:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) [ 2945.290599] FAULT_INJECTION: forcing a failure. [ 2945.290599] name failslab, interval 1, probability 0, space 0, times 0 [ 2945.291659] CPU: 1 UID: 0 PID: 43039 Comm: syz-executor.5 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2945.291675] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2945.291683] Call Trace: [ 2945.291688] [ 2945.291692] dump_stack_lvl+0xfa/0x120 [ 2945.291718] should_fail_ex+0x4d7/0x5e0 [ 2945.291734] should_failslab+0xc2/0x120 [ 2945.291748] ? __pfx_v9fs_init_fs_context+0x10/0x10 [ 2945.291770] __kmalloc_cache_noprof+0x81/0x6b0 [ 2945.291786] ? trace_kmalloc+0x1f/0xb0 [ 2945.291797] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 2945.291811] ? v9fs_init_fs_context+0x49/0x5b0 [ 2945.291828] ? __pfx_v9fs_init_fs_context+0x10/0x10 [ 2945.291846] ? v9fs_init_fs_context+0x49/0x5b0 [ 2945.291862] v9fs_init_fs_context+0x49/0x5b0 [ 2945.291878] ? __pfx_v9fs_init_fs_context+0x10/0x10 [ 2945.291895] alloc_fs_context+0x570/0x9e0 [ 2945.291919] path_mount+0xd8d/0x2140 [ 2945.291933] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2945.291956] ? __pfx_path_mount+0x10/0x10 [ 2945.291968] ? kmem_cache_free+0x2a4/0x550 [ 2945.291984] ? putname.part.0+0xc0/0x160 [ 2945.291999] ? getname_flags.part.0+0x1c6/0x540 [ 2945.292016] ? putname.part.0+0xc0/0x160 [ 2945.292033] __x64_sys_mount+0x293/0x310 [ 2945.292046] ? __pfx___x64_sys_mount+0x10/0x10 [ 2945.292064] do_syscall_64+0xbf/0x430 [ 2945.292078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2945.292091] RIP: 0033:0x7fd28c5bbb19 [ 2945.292101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2945.292113] RSP: 002b:00007fd289b31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2945.292125] RAX: ffffffffffffffda RBX: 00007fd28c6cef60 RCX: 00007fd28c5bbb19 [ 2945.292133] RDX: 0000000020001600 RSI: 00000000200015c0 RDI: 0000000000000000 [ 2945.292140] RBP: 00007fd289b311d0 R08: 0000000020001640 R09: 0000000000000000 [ 2945.292148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2945.292155] R13: 00007ffc67a9c89f R14: 00007fd289b31300 R15: 0000000000022000 [ 2945.292172] 15:20:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) [ 2945.346358] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2945.360136] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2945.363287] msdos: Bad value for 'time_offset' [ 2945.367221] msdos: Bad value for 'time_offset' [ 2945.378966] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:20:54 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0']) (fail_nth: 13) 15:20:54 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x900, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) 15:20:54 executing program 7: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6}, 0x0, 0xe, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 15:20:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) 15:20:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x227f, &(0x7f00000000c0)={0x1, 0x0, 0x0, "ee"}) 15:20:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x5387, 0x0, 0x0, "ee"}) 15:20:54 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01030000000000c3798d20"], 0x1c}}, 0x0) 15:20:54 executing program 5: syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600), 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB='trans=unix,msize=0']) (fail_nth: 14) [ 2945.557756] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2945.573495] msdos: Bad value for 'time_offset' [ 2945.580334] msdos: Bad value for 'time_offset' 15:20:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) [ 2945.597715] FAULT_INJECTION: forcing a failure. [ 2945.597715] name failslab, interval 1, probability 0, space 0, times 0 [ 2945.598654] CPU: 1 UID: 0 PID: 43174 Comm: syz-executor.5 Not tainted 6.18.0-rc4-next-20251110 #1 PREEMPT(voluntary) [ 2945.598671] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2945.598680] Call Trace: [ 2945.598685] [ 2945.598690] dump_stack_lvl+0xfa/0x120 [ 2945.598717] should_fail_ex+0x4d7/0x5e0 [ 2945.598733] should_failslab+0xc2/0x120 [ 2945.598747] __kmalloc_node_track_caller_noprof+0xc6/0x690 [ 2945.598771] ? trace_kmalloc+0x1f/0xb0 [ 2945.598782] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 2945.598798] ? v9fs_init_fs_context+0xf3/0x5b0 [ 2945.598815] ? __kmalloc_cache_noprof+0x27b/0x6b0 [ 2945.598832] kstrdup+0x3e/0xc0 [ 2945.598846] v9fs_init_fs_context+0xf3/0x5b0 [ 2945.598863] ? __pfx_v9fs_init_fs_context+0x10/0x10 [ 2945.598880] alloc_fs_context+0x570/0x9e0 [ 2945.598904] path_mount+0xd8d/0x2140 [ 2945.598918] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2945.598940] ? __pfx_path_mount+0x10/0x10 [ 2945.598952] ? kmem_cache_free+0x2a4/0x550 [ 2945.598969] ? putname.part.0+0xc0/0x160 [ 2945.598984] ? getname_flags.part.0+0x1c6/0x540 [ 2945.599001] ? putname.part.0+0xc0/0x160 [ 2945.599018] __x64_sys_mount+0x293/0x310 [ 2945.599031] ? __pfx___x64_sys_mount+0x10/0x10 [ 2945.599049] do_syscall_64+0xbf/0x430 [ 2945.599064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2945.599077] RIP: 0033:0x7fd28c5bbb19 [ 2945.599086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2945.599098] RSP: 002b:00007fd289b31188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2945.599110] RAX: ffffffffffffffda RBX: 00007fd28c6cef60 RCX: 00007fd28c5bbb19 [ 2945.599119] RDX: 0000000020001600 RSI: 00000000200015c0 RDI: 0000000000000000 [ 2945.599126] RBP: 00007fd289b311d0 R08: 0000000020001640 R09: 0000000000000000 [ 2945.599134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2945.599141] R13: 00007ffc67a9c89f R14: 00007fd289b31300 R15: 0000000000022000 [ 2945.599158] 15:20:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x5393, 0x0, 0x0, "ee"}) 15:20:54 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20, 0x6}, 0x8008, 0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x4}, 0x0, 0x7f, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x2108808, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) [ 2945.650083] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. 15:20:54 executing program 3: syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0xa00, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff3b}}]}) [ 2945.668497] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO 15:20:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="a51a813084917c0c74e8550624010785cd74710e7a5554fbcf68d39ce533b779eff32afcf5942e1e2c51ab29b25db5cb1027e7d740408025b0e7d02bbc1ac9607dba094700a4210cdabb3f8364d2f5486fc55174", 0x54}], 0x10100a3, &(0x7f0000001680)=ANY=[@ANYBLOB="776c616e31002c646566636f6e746578743d756e636f6e66696e65645f752c6170707261697365cdd43fc0e14112ed617f670000000000006f6e746578743d756e636f6e66696e65645f752c00f78f89555856b57a5938fd1f6685c76ffcf06981c89363832619ded9910724e38fe283a2326aa41ae0a59216791872a72f6d6d38f12bb5cd1528b5a938f17aab0a2b2c7054d48c0fd2"]) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socket$inet_icmp(0x2, 0x2, 0x1) gettid() syz_io_uring_complete(0x0) [ 2945.777962] msdos: Bad value for 'time_offset' [ 2945.784121] msdos: Bad value for 'time_offset' [ 2955.576578] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88800e5d7700 (size 128): comm "syz-executor.5", pid 43174, jiffies 4297612283 hex dump (first 32 bytes): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 96bdc52d): __kmalloc_cache_noprof+0x445/0x6b0 v9fs_init_fs_context+0x49/0x5b0 alloc_fs_context+0x570/0x9e0 path_mount+0xd8d/0x2140 __x64_sys_mount+0x293/0x310 do_syscall_64+0xbf/0x430 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: leak checking failed VM DIAGNOSIS: 15:21:09 Registers: info registers vcpu 0 RAX=0000000000bea0b7 RBX=0000000000000000 RCX=ffffffff84c56f37 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814cdc30 RBP=dffffc0000000000 RSP=ffffffff85c07e00 R8 =0000000000000001 R9 =ffffed100d9c635a R10=ffff88806ce31ad3 R11=0000000000000001 R12=ffffffff8664c150 R13=1ffffffff0b80fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84c5592e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e539c000 00000000 00000000 LDT=0000 fffffe2400000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd0089b7b0 CR3=000000000f63a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=a395703493605f9fef7826a377d3ef2d XMM01=0cb517ed2ae52773bfaa7907ce195bf9 XMM02=7c09af40189d33e0698778e648349f8e XMM03=9253d74e9b91e5bb5bba207314a0f9b8 XMM04=0000000000000000000000003663014c XMM05=0000000000000000c3bec6c8d7875526 XMM06=000000000000000000000000c3bec6c8 XMM07=c3bec6c8d78755263663014c00800100 XMM08=ea00000012000000360000008e000000 XMM09=00000000000000000000000000000000 XMM10=60275a6581cb5fa5b1988d745cfce6cf XMM11=74a12781a23cdae4d3767713549bc5b5 XMM12=0d0c0f0e09080b0a0504070601000302 XMM13=0c0f0e0d080b0a090407060500030201 XMM14=00000000000000000000000000003240 XMM15=00000000000000000000000000000040 info registers vcpu 1 RAX=ffff888009643780 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff81630bd0 RDI=fffffbfff10b1431 RBP=ffffffff8858a188 RSP=ffff88806cf08ef0 R8 =ffffffff81667955 R9 =0000000000000001 R10=ffffffff85d245c0 R11=0000000000000001 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000046 RIP=ffffffff815239f2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e549c000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f11066dd020 CR3=000000000c8c8000 CR4=00350ef0 DR0=00000000000003ff DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=2938323120657a697328203030373764 XMM03=3420646970202c22352e726f74756365 XMM04=202020200a2e2e2e2e2e2e2e2e2e2e2e XMM05=30302030302030302030302030302030 XMM06=203030203030202020200a3a29736574 XMM07=642078656820200a3338323231363739 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000