0x7f0000000180)={{0x0, 0x3, 0x101, 0x3, 0x2}, 0xa428, 0x1000}) [ 429.525418] audit: type=1326 audit(1765569580.246:47): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5716 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0d06e1b19 code=0x0 [ 429.531039] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 19:59:40 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x8, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 19:59:40 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000002680)={0x5, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x7, @mcast1}}}, 0x108) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002680)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x2, '\x00', 0x2}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_vif\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00'}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x40, {{0xa, 0x4e23, 0x4, @private1}}, {{0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0xdd}}}, 0x108) 19:59:40 executing program 2: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 19:59:40 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdab39eac554c6bee, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x208, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) io_submit(0x0, 0x3, &(0x7f0000001dc0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000001c80), 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000001d40)="ca89937d4e952a160f0bc03c0d7baf456ce192399307d638518fe301c4fc0f3193f7c121e9d5ec75ac61980051eb640d13f0cd6f2e7f56af52f25ee21bfa493c00f7b7665855d5e21a41c7799f80ae8c8da3564e043114333114da0a85dfcca925d628d88f2cb931db6241bca7a3", 0x6e, 0x7, 0x0, 0x5786b8b3bb35287d}]) io_setup(0x0, &(0x7f00000000c0)=0x0) io_destroy(r2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x21800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x48412, 0x1, 0x4, 0x7, 0xfff, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x10000004, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x61a800, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10000002}) 19:59:40 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 19:59:40 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 430.276166] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 430.356905] audit: type=1326 audit(1765569581.077:48): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5716 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0d06e1b19 code=0x0 19:59:51 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfe, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 19:59:51 executing program 2: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 19:59:51 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0xaa, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xfff, &(0x7f0000000040)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x0, 0x80, 0x0, 0x5}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x8b) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x40, 0xffffffffffffffff, &(0x7f0000000240)="d775223c2cfd1659131c1635be0ca4a6022d81481647384956b74728cdf44222af85", 0x22, 0x200}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000400)="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", 0x1000, 0xffffffffffffffff, 0x0, 0x2}]) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x3f, 0x8}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) r3 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0) write$P9_RSETATTR(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000001000020189afcef404929ae2800e970bb5406a141313f3468895e34b174e83f81dca2b1451758d64ff9b477c92f6fc4b9ad000000000000000000", @ANYRES32, @ANYBLOB="000900000065293f78f03000000000"]) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xb0, 0x0, 0x0, 0xc9, 0x0, 0x80000000000, 0x4202, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x82, 0x4}, 0x0, 0x2000000, 0xffffffffffffffff, 0x0) 19:59:51 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x3, 0x8}, 0x46e08, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x12140, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x42, 0x9, 0x1, 0x1, 0x0, 0x1d, 0x80080, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f00000002c0), 0x8}, 0xc048, 0x4000000000000102, 0x0, 0x4, 0x8001, 0x106, 0x3, 0x0, 0x7, 0x0, 0x3ff}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = signalfd(r2, &(0x7f00000004c0)={[0x4]}, 0xfe28) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x7a, 0x1, 0x40, 0x3, 0x0, 0x7ff, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x2, 0xfffffffffffff3a7}, 0x24, 0x6, 0x1, 0x0, 0x2, 0x20, 0x12, 0x0, 0x7fffffff, 0x0, 0x2}, 0x0, 0xb, r3, 0x1) r4 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r4}], 0x1, 0x7fffffff) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e24, 0x4, @mcast2, 0x10001}, 0x1c) ppoll(&(0x7f0000000180)=[{r4}, {r1, 0x1000}, {r1, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) signalfd(r5, &(0x7f0000000280)={[0x10000]}, 0x8) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000500), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 19:59:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40}}, 0x40) syz_io_uring_setup(0x4ffc, &(0x7f0000000100)={0x0, 0x26c4, 0x10, 0x1, 0x212, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000180)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) 19:59:51 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1cd03, 0x4) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)=ANY=[@ANYBLOB="010100000100000018000000", @ANYRES32=r0, @ANYBLOB="04000000000000122e2f666955653000"]) setns(r0, 0xffffffd) 19:59:51 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)={0x10, 0x1e, 0xffffffffffffffff, 0x0, 0x25dfdbff}, 0x10}, {&(0x7f00000003c0)={0x2ec, 0x3e, 0x20, 0x70bd2a, 0x25dfdbfd, "", [@nested={0x28, 0x89, 0x0, 0x1, [@typed={0x8, 0x2d, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x45, 0x0, 0x0, @pid=r2}, @typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@remote}]}, @nested={0xbc, 0x27, 0x0, 0x1, [@generic="46b661e4459e97d1daf3", @generic="5b48e9e4472922b95b79d2db2896c49b69977a6e6ca91bd1386946dc69e83515123621ac3f7a8397ea30c7a1daea6b134a1eeb20455ea864decb8bc56dabb4a5d3ebc7723aeb669804dcbb5c3630263e5f0ebffa18be669896015281238f5264dda03815c3e24506a775307781f5648335f4231d3fbab9c715dc82a94e74e9f67708d988fe08f1d0aa8d62d1ab26bfcf3bf66af25c124ed31bf1c7e30d48dd96870e", @typed={0x4, 0x56}, @typed={0x8, 0x36, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @generic="bcf18252f098202bca19ed25b29c35b484667663f1b64ffeb07e5f9d5a32cbcfb97822c65de49747b3f06be1cdbafeef67822c72c49911983eadc8e7c94e3f3bd461740ea51db9dc1b8ddb31f11c38c2529dcb66dfa6ee777dbd0af8087b5054b77288eacb74a9482add7655e390f261c800d690016fdd62ae8b8993f8c09bd6638934b9159ec17e35189204029f8237ed72c75bb8ef245914a6feedb36d5fbf9869ffaf7de2f18b78bb3c2ecf020573011ec869c121955e65cdac4e24d000d2fa729179", @nested={0x12b, 0x87, 0x0, 0x1, [@generic="365c62be12bf3aba20f315f8a51668a7d128407ff2c99ea6460a7a91446efb472220d7c5dbf0e2d0d8d8", @typed={0xe3, 0x1, 0x0, 0x0, @binary="2f620cd524dab5f3de193d58736d2894fc6c65f6054792ed9b3656ea0fdac7877adb56a7485032947947848021669a580c571fe7b39d17ef63881bcc570037d5dea6fe367444d50a67e9c587717c7df6dbd20106b064131b7026cd1bb9e23f5b2e90c8fcc98ad2a214c376639c41b03904611d4783e225fac339314ccb2ae05fbad3f39d914394d9ae217f1b022006930858302091607ce949c8a5f148eb9937e185e9f57d3e795c1f167b90d1d3468be7ca26a08af15ddb0f7c880aec4f900a9c0b0072afec986f692fa936d93e1c3f057b3254328d5bf374bf8cdc2e1318"}, @generic="2eb31010637d013dd37ac2a2821b0384e643905427b301ee98"]}, @typed={0x8, 0x6a, 0x0, 0x0, @u32=0x9279}]}, 0x2ec}], 0x2, 0x0, 0x0, 0x4080}, 0x0) 19:59:51 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 440.347659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 440.348339] I/O error, dev sr0, sector 127 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 440.349280] buffer_io_error: 230 callbacks suppressed [ 440.349291] Buffer I/O error on dev sr0, logical block 127, lost async page write [ 440.350437] Buffer I/O error on dev sr0, logical block 128, lost async page write [ 440.351052] Buffer I/O error on dev sr0, logical block 129, lost async page write [ 440.351639] Buffer I/O error on dev sr0, logical block 130, lost async page write [ 440.352242] Buffer I/O error on dev sr0, logical block 131, lost async page write [ 440.352827] Buffer I/O error on dev sr0, logical block 132, lost async page write [ 440.353426] Buffer I/O error on dev sr0, logical block 133, lost async page write [ 440.354037] Buffer I/O error on dev sr0, logical block 134, lost async page write [ 440.354628] Buffer I/O error on dev sr0, logical block 135, lost async page write [ 440.355453] Buffer I/O error on dev sr0, logical block 136, lost async page write [ 440.357049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 440.357659] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 440.363441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 440.363904] I/O error, dev sr0, sector 254 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 440.364898] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 440.365372] I/O error, dev sr0, sector 381 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 440.371429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 440.371890] I/O error, dev sr0, sector 508 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 440.372972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 440.373424] I/O error, dev sr0, sector 635 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 440.377046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 440.377525] I/O error, dev sr0, sector 762 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 440.378584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 440.379229] I/O error, dev sr0, sector 889 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 440.382849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 440.383412] I/O error, dev sr0, sector 1016 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 440.384538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 440.385013] I/O error, dev sr0, sector 1143 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 440.387362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 440.388125] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 440.390255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 440.391095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 440.393122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 440.393869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 440.422280] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 440.423867] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 440.425099] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 440.426382] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 fc 00 00 0c 00 19:59:51 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 19:59:51 executing program 0: syz_mount_image$nfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0x9, 0x3, &(0x7f0000000280)=[{&(0x7f00000000c0)="2e34a29d886dd90861eb4c40b9057f6a71fc8a7380c3bb3135a58b32b9e4b5cb74", 0x21, 0x1f}, {&(0x7f0000000100)="9a4422f00059481e62fbdef4bc51ac767c2c8d5da95662defefd4f9ff875bfe712723c8423fd8e79d90830e7b34d934714b35d112eaf05eda579a58f0d005b47287c49e4f6e3cf6c9273193d7cf07395a441a80fb51bea6c00dfcb2e1a76c7bac475f7c1d58790c8d78940c1babfee59c63bff9539c3aabea9eec32778ab04b25f8ac7fe6a4c63c73f18b9bd6b754c1c9f19873d3fe33572d93758e591ab79a1536380e30afb92d8a609f858d5c8f01e032c0b3a246938635e4541", 0xbb, 0x1}, {&(0x7f00000001c0)="c25ac854aef9f118f72b214fe86987991ae47f80ec0ebdc3fd1d1924db36dd225d6f79a4cfde8b0ca925fcc997ed34526d07eda7d6526a18fdaa8fb5dd5998843ab11aa00b40c83a1b2e98a1555327c4fd7950d2a3cabdaaabd6ec5915f6c00d68e787270d92c37150b54026d167b4f7b1cc679125168922e3ed7786db406914521099bcd9e70d0b596bec25cb962b1dbcf6c3518515fca0d2468c4bbee50ab2d7b2bde8d70f4664676dbad3ee", 0xad, 0x101}], 0x2040, &(0x7f0000000300)={[{'].*^^'}, {'\xef'}, {']@+.'}, {}, {'\xce*&)\v^\'..-^='}, {}, {}], [{@fowner_lt}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@pcr={'pcr', 0x3d, 0x21}}, {@smackfsroot}, {@subj_user={'subj_user', 0x3d, ',\')'}}]}) syz_mount_image$tmpfs(&(0x7f0000000940), &(0x7f0000000980)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={[{@nr_blocks={'nr_blocks', 0x3d, [0x65, 0x0]}}]}) 19:59:51 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40}}, 0x40) recvfrom$unix(r1, &(0x7f0000000100)=""/189, 0xbd, 0x2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 19:59:51 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x300, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 19:59:51 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 19:59:51 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 440.686080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 440.693084] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 19:59:51 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 19:59:51 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40}}, 0x40) recvfrom$unix(r1, &(0x7f0000000100)=""/189, 0xbd, 0x2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 19:59:51 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x500, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 19:59:51 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 440.847405] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 440.850029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 19:59:51 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]) symlinkat(&(0x7f0000000040)='./file0/file0\x00', r0, &(0x7f0000000200)='./file0\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000100)=0xc) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000209c802d3057c1ec7178de70fac3a3c99a3dd38688508f0c", @ANYRES16=0x0, @ANYBLOB="20002cbd7000ffdbdf25120000000c0099000200000009000000050029f8c2896f00cb761b000c0000000600360006000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x0) syz_io_uring_setup(0x3c24, &(0x7f0000000540)={0x0, 0x9e20, 0x20, 0x1, 0x211, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000005c0)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000740)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000700)='./file0\x00', 0x7ff, 0x0, 0x1}, 0xa4e) inotify_add_watch(r3, &(0x7f00000007c0)='./file0\x00', 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r3, 0x0) r5 = openat$cgroup_type(r3, &(0x7f0000000480), 0x2, 0x0) dup2(r3, r5) write$binfmt_elf64(r3, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xac, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x7a}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "eaad90f81b"}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_SEQ={0x6, 0x4, "c820"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "6fc48da842"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x44) setuid(r2) dup3(r5, r5, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 19:59:51 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 441.001268] tmpfs: Unknown parameter './file0/file0' 20:00:02 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x10, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e35343235353432393700"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000191e9a1afbab4a0784039e22778533ac010000000c00000000000000d1f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000002500000000000000", 0x40, 0x540}, {&(0x7f0000000080)="00000000000000000000000000000000000000000104000000000000000000002b3532fcb1854aad85290601a2ab95c2b9ed2f576ae65a60e6d276a0de0329", 0x3f, 0x640}, {&(0x7f0000010400)="030000000400000005000000dc000f000300040000000000000000000f004582", 0x20, 0x800}, {&(0x7f0000010500)="ffffffff07000000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d1f4655fd1f4655fd1f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f00000000000004000200000000000000050000000d00"/64, 0x40, 0x1500}, {&(0x7f0000010f00)="2000000008f5ddb808f5ddb800000000d1f4655f00"/32, 0x20, 0x1580}, {&(0x7f0000011000)="c0410000002c0000d1f4655fd1f4655fd1f4655f00000000000002001600000000000000000000000e0000000f000000100000001100000012000000130000001400000015000000160000001700000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d1f4655f000000000000000000000000000002ea00"/192, 0xc0, 0x1e00}, {&(0x7f0000000380)="ed4100003c000000d1f4655fd1f4655fd1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c65310000000000000000000000000000000000000000000000000000006d465f020000000000000000000000000000000000000000000000002000000008f5ddb808f5ddb808f5ddb8d1f4655f08f5ddb80000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x1f00}, {&(0x7f0000011200)="ed8100001a040000d1f4655fd1f4655fd1f4655f0000000000000100040000000000000001000000190000001a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000852c53740000000000000000000000000000000000000000000000002000000008f5ddb808f5ddb808f5ddb8d1f4655f08f5ddb80000000000000000", 0xa0, 0x2000}, {&(0x7f0000011300)="ffa1000026000000d1f4655fd1f4655fd1f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3534323535343239372f66696c65302f66696c6530000000000000000000000000000000000000000000007c8f883b0000000000000000000000000000000000000000000000002000000008f5ddb808f5ddb808f5ddb8d1f4655f08f5ddb80000000000000000", 0xa0, 0x2100}, {&(0x7f0000011400)="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", 0x1a0, 0x2200}, {&(0x7f0000011600)="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", 0x100, 0x2400}, {&(0x7f0000011700)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x3400}, {&(0x7f0000011800)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x3800}], 0x0, &(0x7f0000012800)) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {0x1, 0x3}, [{0x2, 0x1}, {0x2, 0x0, 0xee01}, {}], {0x4, 0x6}, [{0x8, 0x2}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x6}], {0x10, 0x6}}, 0x5c, 0x0) 20:00:02 executing program 3: syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x560e, &(0x7f0000000100)=0xa) 20:00:02 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x600, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:00:02 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x3, 0x8}, 0x46e08, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x12140, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) r2 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x42, 0x9, 0x1, 0x1, 0x0, 0x1d, 0x80080, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f00000002c0), 0x8}, 0xc048, 0x4000000000000102, 0x0, 0x4, 0x8001, 0x106, 0x3, 0x0, 0x7, 0x0, 0x3ff}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) r3 = signalfd(r2, &(0x7f00000004c0)={[0x4]}, 0xfe28) perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x7a, 0x1, 0x40, 0x3, 0x0, 0x7ff, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x2, 0xfffffffffffff3a7}, 0x24, 0x6, 0x1, 0x0, 0x2, 0x20, 0x12, 0x0, 0x7fffffff, 0x0, 0x2}, 0x0, 0xb, r3, 0x1) r4 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r4}], 0x1, 0x7fffffff) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e24, 0x4, @mcast2, 0x10001}, 0x1c) ppoll(&(0x7f0000000180)=[{r4}, {r1, 0x1000}, {r1, 0x200}, {r2, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) signalfd(r5, &(0x7f0000000280)={[0x10000]}, 0x8) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000500), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:00:02 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40}}, 0x40) recvfrom$unix(r1, &(0x7f0000000100)=""/189, 0xbd, 0x2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 20:00:02 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="e00000001000ffff00000000000000000400008004000380bd0000800400080008000000", @ANYRES32=0x0, @ANYBLOB="200c43335fbf37934b3c82878ef59ee14316e904be382fb287c1dba71c2558d8ea258844913a68ab895b483e0eae3dc71556b138c45cdd467b8881d08d4dbba90c0cf07a3a840487d60414fb3254fff45038f23d5d784a04c805a5f84b1757fc4e8d1c54b477193c11b0287892f81fae9ea74117336d43afcb88a035adb2b51ab0de10613121de699b8b05d8dec9cf3d548300713643c7be860ea6c2d3744d0020a8187b9f1f587f01523028b30000008fcf78992b000000"], 0xe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgrp(0x0) sendmsg$unix(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r3}}}], 0x20}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r5, 0x560e, &(0x7f0000000100)=0xa) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r6, 0x560e, &(0x7f0000000100)=0xa) r7 = dup2(r1, r1) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r8, 0x560e, &(0x7f0000000100)=0xa) r9 = getpgrp(0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r9}}}], 0x20}, 0x0) pipe2(&(0x7f0000001fc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) perf_event_open(&(0x7f0000001f40)={0x3, 0x80, 0x3, 0x80, 0x9, 0x18, 0x0, 0x71, 0x6a000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6af0, 0x1ff}, 0xcd44f8818b6122fe, 0x6, 0xfc11, 0x8, 0x3, 0x81, 0x1, 0x0, 0x9, 0x0, 0x7ffffffc}, r9, 0x3, r10, 0x1) sendmsg$netlink(r1, &(0x7f0000001f00)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc, &(0x7f0000001e00)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="380000001300020029bd7000fbdbdf140b08006200"/32, @ANYRES32=r3, @ANYBLOB="1400850000000000000000000000000000000001"], 0x38}, {&(0x7f0000002080)={0x644, 0x11, 0x200, 0x70bd25, 0x25dfdbff, "", [@nested={0xd2, 0x69, 0x0, 0x1, [@generic="4a7534209caa11448009b105ed04b94470b3f3a94fe8d61a606d9905e9e78d39e8d198e857e8789dc8a464ee8c55483b99", @typed={0x8, 0x83, 0x0, 0x0, @u32=0xffd}, @generic="55b90c6f736aa7b7ac2fbfb9be587089da2386681d5dd27768382ca174083f56294cbe40032ade9e04d353435fa26e3c5e296d1277b72dbe96a09cf103aa28763cad2a636f9d4922a3692c9ac19a57476b4db806935b64a186f1f6e71fdcaf314fa5723f42c1f413b8365a31aae1c5135c", @typed={0x8, 0x6d, 0x0, 0x0, @u32=0x8001}, @typed={0x8, 0x39, 0x0, 0x0, @uid=r4}, @typed={0x4, 0x47}, @typed={0x8, 0xc, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x1d, 0x0, 0x0, @u32=0x5}]}, @generic="52176abc77df2f1bd6fe6cd990067c377c77803e3db81a78ca8daf1efb1584409f112c66c8f6980e93eb5ffba4252cfcd90f454bb0ca3a508660fdc6aae0da2965bb60aaef5eb1bbdc329272810bce8afeaeaec15707e01d7c4efce7b0c80183f1364d599a28aea13cba8b5c09843e39b02e8acbdcf52ec7fc47f1c6174ae627b3155d6ae3ea26861cc0d715096c33963293ab2c71c635f3dd04b84296ee62e4e981f0c81079a5b011b62efbfb0bfc69c8c325ec8d05828b78ba2a920a5c685c9d6983f520cc", @nested={0x1ea, 0x6e, 0x0, 0x1, [@typed={0x9, 0x5, 0x0, 0x0, @str='\'@]-\x00'}, @generic="d1e24a1fb50334af9981ea7719095851edeba47ab1b3c537890de4e664a317779d616c8f9ca094f641cc84491d5e893d79751d20e63fa77d4d1e4171ee8e206bcee0a0879ae72d51587816d492d085bfbdf679dcdfe8d56c77f20ff54b9d761afe63466813f34229a4580204d932e45423df0ffec5e5270e7c6296ce99a433eb36f5a81bfc20868e61688f303ee5ce8cb1beef7bf2098f7b3467848009b76430bf01935772ce1cc3547400a9a228f573dbe39bcf5e351f35b11d5e3f9c45bc6d748d67b83cc54f6b7fb504da7fc8a6b329c9920a65b42996b67cbe38a21d9a30547f0cc5c903448f771480660736a1", @typed={0x85, 0x74, 0x0, 0x0, @binary="1bfd823463987bf910f327e05e21ef4adc81e5d600da7ebd451004421e83a6cdace8b4b718e470b398a8a12053b5cede89860c73eb57b7c3fa1eacfe4ea819e7a688b341860ecfa40da82ea5af420969c7061d908d37c39dfb33f2ed467a957f970d31e8f4de0be087dad2ed204e5e885024f116512cc5b55ed2d06b2159c02e00"}, @generic="5c867f0422e029f42d237eb79f486f7694ba4763e87c2670fc7a8f398af3b8ae98fec13db95ab684ede47dcf61450be8674eb81dbe7a740f51333c15aa004265e24a7e208c2716ce99ad3b83f5856ef87e9e06965f781a20f2bf65", @typed={0x8, 0x72, 0x0, 0x0, @u32=0x1f}]}, @typed={0x14, 0x77, 0x0, 0x0, @ipv6=@loopback}, @typed={0x6, 0x15, 0x0, 0x0, @str='+\x00'}, @nested={0x1ac, 0x86, 0x0, 0x1, [@generic="0ffe2fa275b441f53d458e4a15f947ea318a77e796a9304cc5793982f4ea60a851507b42fa4763d376", @generic="206acedf5164a830a62f088aac9d33516f6f2c7a17137abe8c24c0e1a95030a5336783e9e0de6bca23acc58549fe81bd8e9af4e6aad2a5f03ff73ba3b7a7d36934901af24bd89ae8cf1159e0ae471fca90ac8eb02d36a1405127b60e08ac7fc9b12f0aaa8f", @generic="949248c45e46c1a571ab13938d06d71f602d3801e935254438228be4a46e2049d3762618013ba0adcd8def24c0f95bc02384ad70e932", @generic="9ce7e02cc7f3574187252c9410f54d597e6846931b2e335bf3be450bbccbfa6726c06b769373fefdb670c6d68391ffa081fd0c04fd24716bd6c47867326d38412c5a32c70b31218fbb2fd674d552c0320ad753cbb96449d4b7f88ed5159e2a994617255daf234bad1ca023027785dc280b3b293bd8e3ac528658fdb7d01beaf1b7dea30fd15bdda7094a31dd23e0692f271f3181de9fa9847e6249732e7b511ed3a5dd4ef98bc2aeba6b4af5eae3e91434d280d49557ba75f728287a5b83a3c0151b862ecb3c37a0ca41d601c8125a9adc216c2450e3dcc7b357c53c64702ada56c28ec6"]}, @generic="36322a74428446d19420581efcf196c62e9c870fe0c7f0536c893cfb17f87c897f70e93ded4dc6992b27ae33efe98927334b1ce7700c6dffa953af37ccf5485c8d631a53721443ab2bdb896bd00f6f368f69011cbb564a48e6749e4049fdec741a68ef3f0944a39cdc151a0a9ac3168394e30e76b84409ea5bd95df304534be52bd3c309da934df9b07ab0ae8b125a0a7d2d4ed680cc646b2ba57e9d092ec285c463d382ba0d5fe1eea13e73d192e8fe88766c6df662761251bcf9c63653b4ca28c3acb0703b7f7cf72ec93b8509118de25e1f500453e21424e47cc6fde97d81d4c6ad"]}, 0x644}, {&(0x7f0000002040)=ANY=[@ANYBLOB="140000002d0335bd70ea897154b9bcb65caa8e00ffdbdf2504004d000000"], 0x14}, {&(0x7f0000000a80)={0x1348, 0x2d, 0x4, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x8, 0x79, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x14, 0x58, 0x0, 0x1, [@typed={0x8, 0x57, 0x0, 0x0, @u32=0x800}, @typed={0x8, 0x35, 0x0, 0x0, @fd=r1}]}, @nested={0x266, 0x20, 0x0, 0x1, [@generic="5bd037ac4f7d7608914ff71291f0e89fbd710154b96f44eeaeac418220e101bf4d7702ca707028c9ef09dff23becf6d00cc4e66792a9fad360038dc2bf735dc82ca0003acadd0a21439aed4b439f3e62d74ab652a5daa75114e8a2aa358f59e4fc780f8e0b50fcc8291884427a39a5e1989daaf190a004f68731d3a792890e089b9c6de05048e0ea399f84ecd6accf3f0f40d26aac8b65ed2f4d246e8c2985c1efa8dda61f0db2c374b6e53674f1d0f95f11b5a8dccf4cdf621d1680858c5a3e4a4dcc3ec4957a5db0ab7bd9f78aebea369cafddaec83bda35", @generic="647b7038cbe3d2663448a8b9f8c4d50d6423bfdaea75d99cb2f845dbe857e0572ace478bc7a9ea3f57ab77d8f95cd5491c8e358c49673e3655a22daed4869753a0f50b3b11d1b4ad7f94f9afbebe1b771289e21d7aa4c14ab0e50e6812ecf6540da3dc36d951688244a7c4046d23191056a381d48171a9ea95a33bfe2596e6d2761662473c6a97af03208a56dc2742ad2762dd3064c8dd7bbab0cf9ad257db0906de0c279ca5fd8ce031de78c7191ad12f08f57cfffe137f310c41a7208c544f149a5980af4bc04f62da54a172395fb151ea48d5c6428af2ca048978", @typed={0x4, 0x51}, @generic="bf7ec26badbec7840c6c92400f2595643937b47bba480de9fb6bec4a1034da4438185c77428204e19e820b83a102e9a706104c81dbdf107a77cb7a1d5523c22827056ce956befa7be4015b68d27f5ba07b8e22cf969af7e564873fc305cdfc47ceb4e099637e6ac7a572ddfd1a90cbee05f4a3afdc949107c3ea305490b56dcce19753b25b7d385a7f7dec4be8b137508f0c5d29fb7cdda4b91df9680cabcc4d1ca878c35fb520b93e"]}, @generic="021eaa628e28222ba766924eebe27abea3b14a16f6fdaf18eb830d8f35da043e7b54dcd9458cd1221c0039de5d3c2d85410ed797ef53fc30ca", @generic="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", @typed={0x77, 0x36, 0x0, 0x0, @binary="378e9b0f95ce53bde3979dc5e12f639fe05b6997ff63a9b54d3fbfbddce699ec542435d1aa025e9074d1aefe9042acb7352b01cbca3607afc066a377876325f9ed6e926c2f570f5f4b0c1a10582a4434ba3400150bcc42cfa447f95e56946b48c29b8981add66eaab0614b157610332d1c6152"}]}, 0x1348}], 0x4, &(0x7f0000001e40)=[@rights={{0x38, 0x1, 0x1, [r1, r5, r6, r1, r1, r7, 0xffffffffffffffff, r1, r1, r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [r1, r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r8]}}], 0xa8, 0x4044004}, 0x8005) 20:00:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:00:02 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 451.833353] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.0'. 20:00:02 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x810, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:00:02 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x5cca, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000100)=0x62e000, 0x4) sendmmsg$inet6(r0, &(0x7f00000043c0)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback={0xffffff7f00000000}}, 0x1c, 0x0}}], 0x1, 0x2004c8c0) recvmsg(r0, &(0x7f00000059c0)={0x0, 0x0, 0x0}, 0x2062) [ 451.866787] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.0'. [ 451.871308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 451.872303] blk_print_req_error: 11 callbacks suppressed [ 451.872320] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 451.880722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 451.881632] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:00:02 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x560e, &(0x7f0000000100)=0xa) 20:00:02 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x3, 0x8}, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x3f, 0x16, 0x6, 0x4b, 0x0, 0x1, 0x80000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_config_ext={0x6, 0xf118}, 0x200, 0xfffffffffffffffd, 0x800000, 0x8, 0x3, 0x5, 0x3ff, 0x0, 0xc6, 0x0, 0x5}, 0x0, 0x10, r0, 0x2) r1 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x3f, 0x9, 0x1, 0x1, 0x0, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_config_ext={0x3, 0x9}, 0xc048, 0x102, 0x7, 0x5, 0x80000000, 0x106, 0x101, 0x0, 0x7, 0x0, 0x3ff}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000740)=[{r2}], 0x1, 0x7fffffff) ppoll(&(0x7f0000000180)=[{r2}, {r0, 0x1000}, {r0, 0x200}, {r1, 0x1031}], 0x4, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xfd]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/syz1\x00', 0x1ff) r3 = accept$unix(r0, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) r4 = fcntl$dupfd(r1, 0x0, r3) r5 = accept$inet6(r4, 0x0, &(0x7f0000000580)) pread64(r5, &(0x7f00000005c0)=""/57, 0x39, 0xeb1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000105bd7000fbdbdf254c0000000c00c9b895813efda758b86b000000000000000c0058001500be513a0e00000c00580033"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 20:00:02 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xea, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x5fff, 0x0, 0x6}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x90100, 0x0, 0x2}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x114, &(0x7f0000000340), 0x0, 0x4) write$binfmt_elf64(r3, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40}}, 0x40) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x2, 0xd6, 0x80, 0x80, 0x0, 0x6, 0x4002, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x0, 0xea, 0x7, 0x0, 0x3, 0x6a4, 0x1, 0x0, 0x81, 0x0, 0x80000001}, 0xffffffffffffffff, 0x5, r3, 0x3) perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x80, 0x3, 0x9, 0x6, 0x5, 0x0, 0xfff, 0x10210, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xc293, 0x1}, 0x4104, 0xad1, 0x8, 0x2, 0x8, 0x5, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, r2, 0x0, r0, 0x4) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x1) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) openat2(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x2000, 0x2, 0x18}, 0x18) 20:00:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:00:02 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40}}, 0x40) recvfrom$unix(r1, &(0x7f0000000100)=""/189, 0xbd, 0x2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) [ 452.162205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 452.163294] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 452.168510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 452.169755] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:00:13 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x560e, &(0x7f0000000100)=0xa) 20:00:13 executing program 3: syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x560e, &(0x7f0000000100)=0xa) 20:00:13 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x13) socket$netlink(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x84000, 0x0) sendfile(r0, r1, 0x0, 0xfdef) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40}}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r4, 0x339, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x180}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, r4, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x58}}}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0xf, 0x4, "4e5caa50a128ab455abf5b"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "54c4fe573f"}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0xc7cebb3e582df424}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x13, 0x4, "a37f1f7d256036065659fd47b2f392"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_SEQ={0xa, 0x4, "bb2b6c3d8923"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "e27c117dcd311eda2ed09ec5db"}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x812) 20:00:13 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x1008, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:00:13 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:00:13 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) getsockname(r1, 0x0, &(0x7f00000003c0)) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x3, 0x82, 0x8, 0x9, 0x0, 0xd, 0x442, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x10000, 0x1ff, 0x7fff, 0x7, 0x8, 0x1000, 0x3, 0x0, 0x1f, 0x0, 0x10000}) 20:00:13 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40}}, 0x40) 20:00:13 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x141802, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r1, 0x0) r2 = fsmount(r0, 0x0, 0x72) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x3}, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x1}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x31e, 0x0) 20:00:13 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000140)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xa) r1 = socket$inet(0x2, 0x80003, 0xff) sendmmsg$inet(r1, &(0x7f0000001c40)=[{{&(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000100)="0a45621f51bbff7f000000000000cdc81c14fca2725524196bb7bfe52a39223dfc8dd8018d3a9a18", 0x28}], 0x1, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x4}, @multicast2}}}], 0x20}}, {{&(0x7f0000000080)={0x3, 0x0, @local}, 0x10, 0x0}}], 0x2, 0x0) [ 463.054871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 463.055425] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 463.067854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 463.069006] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 463.126408] raw_sendmsg: syz-executor.6 forgot to set AF_INET. Fix it! 20:00:13 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) lseek(r1, 0x10001, 0x5) pwrite64(r0, &(0x7f0000000140)=' ', 0x1, 0xa00000) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 20:00:13 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:00:13 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x4000, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:00:13 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) 20:00:13 executing program 1: ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) syz_mount_image$tmpfs(&(0x7f0000000380), &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=ANY=[]) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1a570e1, 0x0) [ 463.224889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 463.225622] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 463.235061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 463.235521] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:00:13 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xeffd, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:00:13 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000005400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@name={'name', 0x3d, 'tmpfs\x00'}}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40}}, 0x40) statx(r1, &(0x7f0000000280)='./file0\x00', 0x100, 0x800, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000080)="3c38b8a1fb7cc96922537a5c8ddccb4035663801d6ccd520981da8bc246f9189571b2dd5e2b395f15b294aa3f3086c9785a642a01963d4b458dcc4f97abdf2e57c2edc000cb37dfa9f4542778f71e5e9cea01dfb0203878b3ee9ef14864f40d8884f", 0x62, 0x5}, {&(0x7f0000000100)="3d1d447c1b8ecd98c1d8cd911765944f782d3515d7e7ed295df7604f575e5c06629f9d441dcf898ccbff13116adefbc90ad3ad90370d6fa3fba41bd9e05614b1cf8ddf9aa6096f6ef162bad91a20203d09ec4c4e08f4c352b0eae5d93f971571668c8235e16ff8477aad960e67e42aae216534b8f07a04f3db62b719794b21d2550a6b356e8cc3b7abd84e82e2", 0x8d, 0x1}], 0x2000004, &(0x7f0000000540)={[{@size={'size', 0x3d, [0x74]}}, {@mpol={'mpol', 0x3d, {'default', '=static'}}}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@permit_directio}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@measure}, {@euid_lt={'euid<', r2}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@fsname={'fsname', 0x3d, 'cgroup\x00'}}, {@uid_gt={'uid>', r3}}]}) [ 463.353339] cgroup: No subsys list or none specified [ 463.363297] cgroup: No subsys list or none specified [ 471.564924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 471.565562] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 471.566301] buffer_io_error: 2070 callbacks suppressed [ 471.566310] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 471.567304] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 471.567873] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 471.568456] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 471.569041] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 471.569608] Buffer I/O error on dev sr0, logical block 5, lost async page write [ 471.570198] Buffer I/O error on dev sr0, logical block 6, lost async page write [ 471.570786] Buffer I/O error on dev sr0, logical block 7, lost async page write [ 471.571387] Buffer I/O error on dev sr0, logical block 8, lost async page write [ 471.571973] Buffer I/O error on dev sr0, logical block 9, lost async page write [ 471.572812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 471.573281] I/O error, dev sr0, sector 127 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 471.575553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 471.576025] I/O error, dev sr0, sector 254 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 471.577010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 471.577450] I/O error, dev sr0, sector 381 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 471.579703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 471.580181] I/O error, dev sr0, sector 508 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 471.581194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 471.581629] I/O error, dev sr0, sector 635 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 471.583949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 471.584516] I/O error, dev sr0, sector 762 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 471.585515] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 471.585974] I/O error, dev sr0, sector 889 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 471.588194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 471.588641] I/O error, dev sr0, sector 1016 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 471.589633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 471.590106] I/O error, dev sr0, sector 1143 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 471.592335] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 471.593094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 471.595091] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 471.595791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 471.597856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 471.598600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 471.611094] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 471.611902] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 471.612860] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 471.613526] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 fc 00 00 0c 00 20:00:23 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x560e, &(0x7f0000000100)=0xa) 20:00:23 executing program 3: syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x560e, &(0x7f0000000100)=0xa) 20:00:23 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 20:00:23 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:00:23 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfcfd, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:00:23 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:00:23 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) 20:00:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)='macvtap0\x00', 0xfff, 0x2, 0xfc39}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x8e, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x63, 0x0, @wg=@response={0x2, 0x0, 0x0, "8d00a05de92cd2e174cbfb618b6904b473c3fe05ed91a72b627000", "a57dfcb460646196dff50ec71ded0b59", {"a979159a1b08243b764e33f13a6a2006", "a8e72dde502d5382c448b363b844c5e6"}}}}}}}, 0x0) [ 472.627727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 472.628686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 472.663194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 472.664648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:00:23 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) 20:00:23 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfdef, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:00:23 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:00:23 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:00:23 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:00:23 executing program 0: io_submit(0x0, 0x22b8, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffff, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a522b989d472a0e52a118d", 0x12, 0x80}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup2(r1, r0) [ 472.763468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 472.766546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:00:23 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) 20:00:23 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 472.918707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 472.920678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 472.953356] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 472.959044] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:00:36 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:00:36 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfdfc, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:00:36 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:00:36 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:00:36 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:00:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0xe1bf5284ed312a67, 0x561c, 0x4, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x1ff) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01000000000000000012010000000500070000000000"], 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r4) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r2) write(r1, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r5, 0x0, 0xfdef) 20:00:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:00:36 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) [ 486.009498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 486.010226] blk_print_req_error: 17 callbacks suppressed [ 486.010237] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 486.014627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 486.015321] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:00:36 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:00:36 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x560e, &(0x7f0000000100)=0xa) 20:00:36 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfdfe, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:00:36 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:00:36 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:00:36 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 486.262532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 486.263387] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 486.268587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 486.269563] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:00:37 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfe00, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:00:37 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:00:37 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:00:37 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:00:37 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:00:37 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:00:37 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:00:37 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfefd, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 486.647522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 486.648428] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 486.652130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 486.653091] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:00:37 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, 0xffffffffffffffff) 20:00:37 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, 0xffffffffffffffff) 20:00:37 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0xe1bf5284ed312a67, 0x561c, 0x4, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x1ff) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01000000000000000012010000000500070000000000"], 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r4) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r2) write(r1, &(0x7f0000000900)="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", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r5, 0x0, 0xfdef) 20:00:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:00:49 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x560e, &(0x7f0000000100)=0xa) 20:00:49 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:00:49 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:00:49 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:00:49 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x80000, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:00:49 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, 0xffffffffffffffff) 20:00:49 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, 0xffffffffffffffff) 20:00:49 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 498.790041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 498.791240] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 498.793719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 498.794962] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 498.798888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 498.799569] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 498.804801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 498.805353] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 498.808462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 498.808949] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 498.813007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 498.813492] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:00:49 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:00:49 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x100000, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:00:49 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:00:49 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 498.925261] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 498.926257] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 498.928079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 498.929027] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:00:49 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfeffff, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 498.959672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 498.960642] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 498.962295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 498.963261] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 498.973655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 498.974408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:00:49 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:00:49 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x1000000, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 499.083609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 499.087730] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 503.314545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 503.315737] buffer_io_error: 2070 callbacks suppressed [ 503.315755] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 503.318087] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 503.319443] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 503.320774] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 503.322118] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 503.323485] Buffer I/O error on dev sr0, logical block 5, lost async page write [ 503.324830] Buffer I/O error on dev sr0, logical block 6, lost async page write [ 503.326175] Buffer I/O error on dev sr0, logical block 7, lost async page write [ 503.327561] Buffer I/O error on dev sr0, logical block 8, lost async page write [ 503.328902] Buffer I/O error on dev sr0, logical block 9, lost async page write [ 503.331340] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 503.335872] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 503.337678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 503.342353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 503.344125] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 503.353704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 503.355564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 503.360134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 503.361836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 503.366000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 503.367499] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 503.371291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 503.372723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 503.376476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 503.378030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 503.391261] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 503.392729] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 503.393850] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 503.395069] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 fc 00 00 0c 00 20:01:01 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:01:01 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:01:01 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x560e, &(0x7f0000000100)=0xa) 20:01:01 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:01:01 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x2000000, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:01:01 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:01:01 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, 0xffffffffffffffff) 20:01:01 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, 0xffffffffffffffff) [ 510.415554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 510.416087] blk_print_req_error: 21 callbacks suppressed [ 510.416096] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 510.420160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 510.420624] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 510.442806] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 510.443338] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 510.457702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 510.458209] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 510.462350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 510.462861] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:01:01 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 510.478837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 510.479826] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:01:01 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x3000000, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:01:01 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 510.586302] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 510.586820] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 510.587955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 510.588403] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:01:10 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x4000000, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:01:10 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:01:10 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(0xffffffffffffffff, r0) 20:01:10 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(0xffffffffffffffff, r0) 20:01:10 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:01:10 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:01:10 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:01:10 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 520.330745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.331276] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 520.333736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.334226] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 520.356859] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.357364] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:01:11 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x5000000, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 520.363429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 520.364368] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:01:11 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:01:20 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:01:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:01:20 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(0xffffffffffffffff, r0) 20:01:20 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:01:20 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x6000000, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:01:20 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(0xffffffffffffffff, r0) 20:01:20 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:01:20 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 530.075145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 530.075668] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:01:20 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 530.095239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 530.096224] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:01:20 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, 0xffffffffffffffff) [ 530.158377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 530.159400] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:01:20 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 530.167793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 530.168747] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:01:20 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:01:20 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x8100000, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 530.229097] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 530.229824] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 530.234155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 530.234625] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:01:20 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:01:20 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:01:21 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x10000000, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 530.316357] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 530.316872] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 530.320265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 530.320730] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 530.322811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 530.323325] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 530.336513] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 530.337006] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:01:21 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 530.380355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 530.386627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 530.391496] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 530.392570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 534.046462] kmemleak: 50 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 20:01:29 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, 0xffffffffffffffff) 20:01:29 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(0xffffffffffffffff, r0) 20:01:29 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:01:29 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:01:29 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:01:29 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x40000000, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:01:29 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(0xffffffffffffffff, r0) 20:01:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 539.062597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 539.063242] blk_print_req_error: 4 callbacks suppressed [ 539.063251] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 539.079068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 539.080147] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:01:29 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 539.113442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 539.114388] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 539.116368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 539.117353] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 539.159688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 539.160292] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 539.161430] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 539.161880] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:01:29 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 539.171586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 539.172235] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 539.176641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 539.177236] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:01:29 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xeffdffff, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:01:29 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:01:29 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 539.252562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 539.253276] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 539.256489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 539.256972] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 539.275069] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 539.276229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:01:30 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 539.340559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 539.347316] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 539.355616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 539.358740] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 541.199765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 541.200964] buffer_io_error: 2070 callbacks suppressed [ 541.200981] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 541.203199] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 541.204508] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 541.205817] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 541.207130] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 541.208428] Buffer I/O error on dev sr0, logical block 5, lost async page write [ 541.209741] Buffer I/O error on dev sr0, logical block 6, lost async page write [ 541.211057] Buffer I/O error on dev sr0, logical block 7, lost async page write [ 541.212386] Buffer I/O error on dev sr0, logical block 8, lost async page write [ 541.213689] Buffer I/O error on dev sr0, logical block 9, lost async page write [ 541.215635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 541.221469] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 541.223258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 541.229250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 541.231010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 541.244705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 541.246800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 541.251833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 541.253575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 541.258201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 541.259883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 541.264397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 541.265889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 541.269899] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 541.271428] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 541.279139] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 541.280614] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 541.281740] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 541.282895] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 fc 00 00 0c 00 20:01:41 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:01:41 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:01:41 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfcfdffff, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:01:41 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:01:41 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:01:41 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:01:41 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, 0xffffffffffffffff) 20:01:41 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 550.543638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 550.544208] blk_print_req_error: 23 callbacks suppressed [ 550.544217] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 550.545741] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 550.546264] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 550.565503] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 550.566041] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 550.567815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 550.568336] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:01:41 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:01:41 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 550.621981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 550.622900] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 550.630272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 550.631137] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:01:41 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfefdffff, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:01:41 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 550.674720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 550.675378] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 550.676730] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 550.677233] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 550.689760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 550.690386] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 550.692002] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 550.692839] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:01:41 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:01:41 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:01:41 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 550.800793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 550.801791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:01:41 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfffffdef, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 550.831044] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 550.832080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 550.846542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 550.847387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 556.913108] kmemleak: 27 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 20:01:54 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:01:54 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:01:54 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:01:54 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:01:54 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfffffdfc, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:01:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(0xffffffffffffffff, r0) 20:01:54 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:01:54 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 564.106540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 564.107502] blk_print_req_error: 6 callbacks suppressed [ 564.107517] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 564.124322] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 564.125259] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 564.138784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 564.139716] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 564.156787] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 564.157731] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:01:54 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 564.205903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 564.206981] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 564.214202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 564.215554] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:01:54 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfffffdfe, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:01:54 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:01:55 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 564.293324] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 564.294288] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 564.295814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 564.296667] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:01:55 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 564.402658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 564.403882] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 564.417237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 564.418490] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 564.420784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 564.439443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 564.440867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 564.445655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:01:55 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfffffe00, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:01:55 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 564.569243] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 564.572235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:02:06 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x7ffffffff000, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:02:06 executing program 3: r0 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:02:06 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(0xffffffffffffffff, r0) 20:02:06 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:02:06 executing program 5: r0 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:02:06 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:06 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:06 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x8000000000000, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 575.375327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 575.376256] blk_print_req_error: 6 callbacks suppressed [ 575.376267] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 575.391048] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 575.392088] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 575.393644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 575.394505] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 575.407142] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 575.407822] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 575.410375] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 575.411071] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 575.423873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 575.424728] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:02:06 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:06 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:06 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:06 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x10000000000000, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 575.551778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 575.552849] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 575.564232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 575.564832] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 575.568090] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 575.568638] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 575.577854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 575.578889] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 575.580373] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 575.581147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:02:06 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xf0ffffff7f0000, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:02:06 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:06 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:06 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 575.715553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 575.716783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 575.728834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 575.729883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 581.640896] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 581.641812] blk_print_req_error: 6 callbacks suppressed [ 581.641826] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 581.644164] buffer_io_error: 2070 callbacks suppressed [ 581.644179] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 581.646411] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 581.647740] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 581.648816] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 581.649895] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 581.650998] Buffer I/O error on dev sr0, logical block 5, lost async page write [ 581.652079] Buffer I/O error on dev sr0, logical block 6, lost async page write [ 581.653155] Buffer I/O error on dev sr0, logical block 7, lost async page write [ 581.654240] Buffer I/O error on dev sr0, logical block 8, lost async page write [ 581.655308] Buffer I/O error on dev sr0, logical block 9, lost async page write [ 581.656867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 581.657722] I/O error, dev sr0, sector 127 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 581.665732] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 581.666671] I/O error, dev sr0, sector 254 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 581.668485] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 581.669333] I/O error, dev sr0, sector 381 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 581.674166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 581.675096] I/O error, dev sr0, sector 508 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 581.676882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 581.677722] I/O error, dev sr0, sector 635 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 581.686574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 581.687422] I/O error, dev sr0, sector 762 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 581.689324] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 581.690158] I/O error, dev sr0, sector 889 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 581.694816] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 581.695686] I/O error, dev sr0, sector 1016 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 581.697500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 581.698335] I/O error, dev sr0, sector 1143 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 581.703493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 581.704773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 581.708729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 581.710154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 581.714038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 581.715813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 581.733823] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 581.735649] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 581.737084] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 581.738549] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 fc 00 00 0c 00 20:02:15 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(0xffffffffffffffff, r0) 20:02:15 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfeffffffffffff, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:02:15 executing program 5: r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:02:15 executing program 3: r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:02:15 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:15 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:15 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 585.274755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 585.276174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 585.293682] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 585.296258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:02:16 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:16 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:16 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:16 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x100000000000000, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 585.370136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 585.370722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 585.405664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 585.406264] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:02:16 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:16 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:16 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:16 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x200000000000000, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 585.512766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 585.521105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 585.523820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 585.525194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:02:24 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:02:24 executing program 3: r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:02:24 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x300000000000000, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:02:24 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:02:24 executing program 5: r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:02:24 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:24 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:24 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:25 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:25 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x400000000000000, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 594.316840] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 594.318008] blk_print_req_error: 19 callbacks suppressed [ 594.318024] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 594.330204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 594.330716] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:02:25 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:02:25 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:25 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x500000000000000, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:02:25 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:25 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:25 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 594.534958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 594.535994] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 594.548261] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 594.549210] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:02:35 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:35 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:02:35 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x600000000000000, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:02:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:02:35 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:35 executing program 3: r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:02:35 executing program 5: r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:02:35 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 604.982588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 604.984023] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 605.000729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 605.001713] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:02:35 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x810000000000000, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:02:35 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:35 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:35 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:35 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x1000000000000000, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:02:35 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 605.161136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 605.162115] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 605.164291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 605.165284] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:02:45 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:02:45 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x4000000000000000, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:02:45 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:02:45 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:45 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:02:45 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:02:45 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 614.992200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 614.992702] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:02:45 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 615.004692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 615.005641] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:02:45 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xeffdffffffffffff, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:02:45 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:02:45 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:45 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:45 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:02:45 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:02:45 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 615.957695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 615.959392] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 615.960722] buffer_io_error: 2070 callbacks suppressed [ 615.960737] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 615.962588] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 615.963682] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 615.964783] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 615.965884] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 615.966992] Buffer I/O error on dev sr0, logical block 5, lost async page write [ 615.968104] Buffer I/O error on dev sr0, logical block 6, lost async page write [ 615.969223] Buffer I/O error on dev sr0, logical block 7, lost async page write [ 615.970324] Buffer I/O error on dev sr0, logical block 8, lost async page write [ 615.971408] Buffer I/O error on dev sr0, logical block 9, lost async page write [ 615.973039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 615.973878] I/O error, dev sr0, sector 127 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 615.978225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 615.979103] I/O error, dev sr0, sector 254 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 615.981041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 615.981866] I/O error, dev sr0, sector 381 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 615.991880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 615.992757] I/O error, dev sr0, sector 508 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 615.994724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 615.995732] I/O error, dev sr0, sector 635 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 616.000311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.001197] I/O error, dev sr0, sector 762 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 616.003051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.003882] I/O error, dev sr0, sector 889 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 616.008106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.009456] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.013154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.014570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.018242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.019614] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.023318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.024758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 616.036573] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 616.038023] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 616.039245] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 616.040552] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 fc 00 00 0c 00 20:02:55 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfcfdffffffffffff, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:02:55 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 20:02:55 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:55 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:02:55 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:02:55 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:02:55 executing program 1: r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:02:55 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:02:55 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfefdffffffffffff, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:02:55 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:02:55 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 20:02:55 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:02:55 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 20:02:55 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 20:02:55 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfffffffffffffdef, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:02:55 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:03:04 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) 20:03:04 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfffffffffffffdfc, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:03:04 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:03:04 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:03:04 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:03:04 executing program 1: r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:03:04 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:03:04 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 20:03:04 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 20:03:04 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfffffffffffffdfe, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:03:04 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) 20:03:04 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:03:04 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0xfffffffffffffe00, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:03:04 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) 20:03:04 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) 20:03:04 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) 20:03:04 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:03:04 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:03:15 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)}], 0x2, 0x0, 0x0, 0x0) 20:03:15 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:03:15 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:03:15 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x2, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:03:15 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) 20:03:15 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:03:15 executing program 1: r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:03:15 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:03:15 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)}], 0x2, 0x0, 0x0, 0x0) 20:03:15 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:03:15 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x3, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:03:16 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)}], 0x2, 0x0, 0x0, 0x0) 20:03:16 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x4, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:03:16 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)}], 0x2, 0x0, 0x0, 0x0) 20:03:16 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)}], 0x2, 0x0, 0x0, 0x0) 20:03:16 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:03:16 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="c4", 0x1}], 0x1, 0x0, 0x0, 0x0) 20:03:26 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)}], 0x2, 0x0, 0x0, 0x0) 20:03:26 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:03:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:03:26 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="c4", 0x1}], 0x1, 0x0, 0x0, 0x0) 20:03:26 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:03:26 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:03:26 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:03:26 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x5, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:03:27 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="c4", 0x1}], 0x1, 0x0, 0x0, 0x0) 20:03:27 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x6, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:03:27 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="c4", 0x1}], 0x1, 0x0, 0x0, 0x0) 20:03:27 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 20:03:27 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="c4", 0x1}], 0x1, 0x0, 0x0, 0x0) 20:03:27 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x8, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:03:38 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x10, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:03:38 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 20:03:38 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:03:38 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:03:38 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="c4", 0x1}], 0x1, 0x0, 0x0, 0x0) 20:03:38 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:03:38 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:03:38 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:03:38 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x0) [ 667.665317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 667.666209] blk_print_req_error: 9 callbacks suppressed [ 667.666224] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 667.668836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 667.669349] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:03:38 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfe, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:03:38 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:03:38 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) 20:03:38 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:03:38 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:03:38 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x500, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 667.858810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 667.860066] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:03:38 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x600, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 667.861581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 667.862460] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 667.872327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 667.873506] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 667.880332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 667.881250] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:03:38 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) 20:03:38 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 668.002452] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.003386] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 668.016055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 668.017023] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 676.366226] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 676.367403] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 676.369045] buffer_io_error: 2070 callbacks suppressed [ 676.369062] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 676.371324] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 676.372634] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 676.373944] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 676.375261] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 676.376569] Buffer I/O error on dev sr0, logical block 5, lost async page write [ 676.377887] Buffer I/O error on dev sr0, logical block 6, lost async page write [ 676.379215] Buffer I/O error on dev sr0, logical block 7, lost async page write [ 676.380541] Buffer I/O error on dev sr0, logical block 8, lost async page write [ 676.381859] Buffer I/O error on dev sr0, logical block 9, lost async page write [ 676.384121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 676.384651] I/O error, dev sr0, sector 127 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 676.396451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 676.396964] I/O error, dev sr0, sector 254 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 676.397978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 676.398417] I/O error, dev sr0, sector 381 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 676.403435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 676.403891] I/O error, dev sr0, sector 508 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 676.404934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 676.405380] I/O error, dev sr0, sector 635 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 676.408817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 676.409301] I/O error, dev sr0, sector 762 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 676.410298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 676.410737] I/O error, dev sr0, sector 889 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 676.418211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 676.418667] I/O error, dev sr0, sector 1016 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 676.419708] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 676.420165] I/O error, dev sr0, sector 1143 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 676.422408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 676.423175] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 676.425155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 676.425861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 676.434428] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 676.435196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 676.447070] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 676.449077] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 676.450334] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 676.451558] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 fc 00 00 0c 00 20:03:47 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:03:47 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x810, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:03:47 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) 20:03:47 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:03:47 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:03:47 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:03:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:03:47 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:03:47 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x1008, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 676.954692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 676.955709] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 676.962791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 676.966183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:03:47 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)}], 0x2, 0x0, 0x0, 0x0) 20:03:47 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:03:47 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)}], 0x2, 0x0, 0x0, 0x0) 20:03:47 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 677.083126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:03:47 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x4000, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 677.086291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 677.167301] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 677.167894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:03:58 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:03:58 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:03:58 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)}], 0x2, 0x0, 0x0, 0x0) 20:03:58 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:03:58 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:03:58 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xeffd, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:03:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:03:58 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 687.646494] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 687.647226] blk_print_req_error: 15 callbacks suppressed [ 687.647239] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 687.658854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 687.659445] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 687.661554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 687.662186] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:03:58 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfcfd, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 687.670389] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 687.670835] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:03:58 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="c4", 0x1}], 0x1, 0x0, 0x0, 0x0) 20:03:58 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:03:58 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:03:58 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfdef, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 687.814190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 687.815256] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 687.816810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 687.817504] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:03:58 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="c4", 0x1}], 0x1, 0x0, 0x0, 0x0) [ 687.856468] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 687.857472] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 687.862826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 687.863600] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:03:58 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfdfc, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:03:58 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 687.953636] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 687.954150] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 687.959294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 687.959737] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 702.466688] kmemleak: 18 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 707.588097] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 707.589258] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 707.590925] buffer_io_error: 2070 callbacks suppressed [ 707.590942] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 707.593212] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 707.594531] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 707.595862] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 707.597188] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 707.598537] Buffer I/O error on dev sr0, logical block 5, lost async page write [ 707.599861] Buffer I/O error on dev sr0, logical block 6, lost async page write [ 707.601190] Buffer I/O error on dev sr0, logical block 7, lost async page write [ 707.602533] Buffer I/O error on dev sr0, logical block 8, lost async page write [ 707.603869] Buffer I/O error on dev sr0, logical block 9, lost async page write [ 707.605832] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 707.606970] I/O error, dev sr0, sector 127 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 707.618730] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 707.620150] I/O error, dev sr0, sector 254 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 707.622477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 707.623577] I/O error, dev sr0, sector 381 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 707.630101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 707.631727] I/O error, dev sr0, sector 508 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 707.639337] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 707.640396] I/O error, dev sr0, sector 635 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 707.647670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 707.649049] I/O error, dev sr0, sector 762 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 707.651267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 707.652279] I/O error, dev sr0, sector 889 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 707.657303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 707.658341] I/O error, dev sr0, sector 1016 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 707.660565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 707.661610] I/O error, dev sr0, sector 1143 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 707.666568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 707.668097] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 707.672053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 707.673512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 707.677436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 707.678894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 707.698647] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 707.700148] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 707.701329] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 707.702549] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 fc 00 00 0c 00 20:04:19 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfdfe, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:04:19 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:04:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:04:19 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:04:19 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:04:19 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="c4", 0x1}], 0x1, 0x0, 0x0, 0x0) 20:04:19 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:04:19 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 708.569229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 708.587296] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 708.588799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 708.603724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:04:19 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfe00, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:04:19 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:04:19 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 708.787181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:04:19 executing program 6: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 708.790826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 708.881433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 708.887553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:04:19 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfefd, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 708.900478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 708.901774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:04:19 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0xe1bf5284ed312a67, 0x561c, 0x4, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x1ff) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01000000000000000012010000000500070000000000"], 0x1c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r4) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r2) write(r1, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r5, 0x0, 0xfdef) 20:04:19 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:04:19 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:04:19 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x80000, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 709.160457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 709.162258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:04:19 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x100000, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:04:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:04:20 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:04:20 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 1) 20:04:20 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfeffff, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:04:20 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:04:20 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:04:20 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 709.519844] FAULT_INJECTION: forcing a failure. [ 709.519844] name failslab, interval 1, probability 0, space 0, times 0 [ 709.521503] CPU: 1 UID: 0 PID: 6900 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 709.521536] Tainted: [W]=WARN [ 709.521541] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 709.521550] Call Trace: [ 709.521556] [ 709.521562] dump_stack_lvl+0xfa/0x120 [ 709.521591] should_fail_ex+0x4d7/0x5e0 [ 709.521621] should_failslab+0xc2/0x120 [ 709.521638] __kmalloc_noprof+0xd6/0x880 [ 709.521659] ? find_held_lock+0x2b/0x80 [ 709.521685] ? iovec_from_user+0xfe/0x130 [ 709.521712] ? iovec_from_user+0xfe/0x130 [ 709.521734] iovec_from_user+0xfe/0x130 [ 709.521761] __import_iovec+0x88/0x670 [ 709.521784] ? lock_acquire+0x15e/0x2d0 [ 709.521805] import_iovec+0x86/0xb0 [ 709.521830] vfs_writev+0x124/0xcd0 [ 709.521854] ? perf_trace_lock+0xb5/0x5d0 [ 709.521872] ? __lock_acquire+0x451/0x2250 [ 709.521895] ? __pfx_vfs_writev+0x10/0x10 [ 709.521933] ? __pfx_perf_trace_lock+0x10/0x10 [ 709.521960] ? lock_acquire+0x15e/0x2d0 [ 709.521981] ? __fget_files+0x34/0x3b0 [ 709.522013] ? find_held_lock+0x2b/0x80 [ 709.522039] ? __fget_files+0x203/0x3b0 [ 709.522065] ? lock_release+0xc8/0x270 [ 709.522088] ? __fget_files+0x20d/0x3b0 [ 709.522125] do_pwritev+0x1ab/0x280 [ 709.522149] ? __pfx_do_pwritev+0x10/0x10 [ 709.522177] ? find_held_lock+0x2b/0x80 [ 709.522205] ? syscall_trace_enter+0x1cf/0x230 [ 709.522235] __x64_sys_pwritev2+0xef/0x160 [ 709.522268] do_syscall_64+0xbf/0x420 [ 709.522316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.522341] RIP: 0033:0x7f9d93406b19 [ 709.522362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 709.522388] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 709.522421] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 709.522447] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 709.522462] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 709.522484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.522499] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 709.522534] 20:04:20 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x1000000, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:04:20 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 2) 20:04:20 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x2000000, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:04:20 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 709.771436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 709.776185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:04:29 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x3000000, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:04:29 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 3) 20:04:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:04:29 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x560e, &(0x7f0000000100)=0xa) 20:04:29 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:04:29 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:04:29 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:04:29 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 1) [ 718.953824] FAULT_INJECTION: forcing a failure. [ 718.953824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.955185] CPU: 0 UID: 0 PID: 6942 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 718.955204] Tainted: [W]=WARN [ 718.955208] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 718.955215] Call Trace: [ 718.955219] [ 718.955224] dump_stack_lvl+0xfa/0x120 [ 718.955244] should_fail_ex+0x4d7/0x5e0 [ 718.955261] ? page_copy_sane+0xce/0x2b0 [ 718.955278] copy_folio_from_iter_atomic+0x536/0x1820 [ 718.955303] ? fault_in_readable+0x12d/0x1d0 [ 718.955318] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 718.955334] ? fault_in_readable+0x172/0x1d0 [ 718.955348] ? __pfx_fault_in_readable+0x10/0x10 [ 718.955369] iomap_file_buffered_write+0x4fa/0xa40 [ 718.955397] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 718.955416] ? __lock_acquire+0x451/0x2250 [ 718.955448] ? __pfx_down_read+0x10/0x10 [ 718.955462] ? generic_update_time+0xcb/0xf0 [ 718.955475] ? mnt_put_write_access_file+0xb7/0xe0 [ 718.955493] ? file_update_time_flags+0x24c/0x4f0 [ 718.955509] blkdev_write_iter+0x7a0/0xd00 [ 718.955531] do_iter_readv_writev+0x5b3/0x910 [ 718.955550] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 718.955565] ? __import_iovec+0x1df/0x670 [ 718.955580] ? avc_policy_seqno+0x9/0x20 [ 718.955596] ? security_file_permission+0x22/0x90 [ 718.955618] vfs_writev+0x2d4/0xcd0 [ 718.955635] ? perf_trace_lock+0xb5/0x5d0 [ 718.955648] ? __lock_acquire+0x451/0x2250 [ 718.955662] ? __pfx_vfs_writev+0x10/0x10 [ 718.955678] ? __pfx_perf_trace_lock+0x10/0x10 [ 718.955695] ? __fget_files+0x34/0x3b0 [ 718.955713] ? find_held_lock+0x2b/0x80 [ 718.955729] ? __fget_files+0x203/0x3b0 [ 718.955746] ? lock_release+0xc8/0x270 [ 718.955762] ? __fget_files+0x20d/0x3b0 [ 718.955785] do_pwritev+0x1ab/0x280 [ 718.955802] ? __pfx_do_pwritev+0x10/0x10 [ 718.955818] ? find_held_lock+0x2b/0x80 [ 718.955835] ? syscall_trace_enter+0x1cf/0x230 [ 718.955851] __x64_sys_pwritev2+0xef/0x160 [ 718.955865] do_syscall_64+0xbf/0x420 [ 718.955881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.955893] RIP: 0033:0x7f9d93406b19 [ 718.955908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 718.955919] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 718.955930] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 718.955938] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 718.955945] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 718.955952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.955959] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 718.955977] [ 718.987696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 718.988754] blk_print_req_error: 21 callbacks suppressed [ 718.988772] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 718.991512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 718.992009] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 718.998282] FAULT_INJECTION: forcing a failure. [ 718.998282] name failslab, interval 1, probability 0, space 0, times 0 [ 719.003457] CPU: 1 UID: 0 PID: 6944 Comm: syz-executor.4 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 719.003499] Tainted: [W]=WARN [ 719.003507] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 719.003521] Call Trace: [ 719.003529] [ 719.003539] dump_stack_lvl+0xfa/0x120 [ 719.003574] should_fail_ex+0x4d7/0x5e0 [ 719.003615] should_failslab+0xc2/0x120 [ 719.003641] __kmalloc_noprof+0xd6/0x880 [ 719.003674] ? find_held_lock+0x2b/0x80 [ 719.003715] ? iovec_from_user+0xfe/0x130 [ 719.003759] ? iovec_from_user+0xfe/0x130 [ 719.003792] iovec_from_user+0xfe/0x130 [ 719.003832] __import_iovec+0x88/0x670 [ 719.003871] ? lock_acquire+0x15e/0x2d0 [ 719.003914] import_iovec+0x86/0xb0 [ 719.003956] vfs_writev+0x124/0xcd0 [ 719.003993] ? perf_trace_lock+0xb5/0x5d0 [ 719.004021] ? __lock_acquire+0x451/0x2250 [ 719.004052] ? __pfx_vfs_writev+0x10/0x10 [ 719.004087] ? __pfx_perf_trace_lock+0x10/0x10 [ 719.004125] ? lock_acquire+0x15e/0x2d0 [ 719.004152] ? __fget_files+0x34/0x3b0 [ 719.004191] ? find_held_lock+0x2b/0x80 [ 719.004227] ? __fget_files+0x203/0x3b0 [ 719.004266] ? lock_release+0xc8/0x270 [ 719.004300] ? __fget_files+0x20d/0x3b0 [ 719.004353] do_pwritev+0x1ab/0x280 [ 719.004391] ? __pfx_do_pwritev+0x10/0x10 [ 719.004427] ? find_held_lock+0x2b/0x80 [ 719.004464] ? syscall_trace_enter+0x1cf/0x230 [ 719.004498] __x64_sys_pwritev2+0xef/0x160 [ 719.004528] do_syscall_64+0xbf/0x420 [ 719.004562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.004587] RIP: 0033:0x7fc2756cbb19 [ 719.004607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 719.004630] RSP: 002b:00007fc272c41188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 719.004656] RAX: ffffffffffffffda RBX: 00007fc2757def60 RCX: 00007fc2756cbb19 [ 719.004673] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 719.004689] RBP: 00007fc272c411d0 R08: 0000000000000000 R09: 0000000000000000 [ 719.004704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.004719] R13: 00007ffc6fd7829f R14: 00007fc272c41300 R15: 0000000000022000 [ 719.004758] 20:04:29 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 4) [ 719.084711] FAULT_INJECTION: forcing a failure. [ 719.084711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.085967] CPU: 0 UID: 0 PID: 6952 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 719.085986] Tainted: [W]=WARN [ 719.085990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 719.085997] Call Trace: [ 719.086001] [ 719.086006] dump_stack_lvl+0xfa/0x120 [ 719.086026] should_fail_ex+0x4d7/0x5e0 [ 719.086042] ? page_copy_sane+0xce/0x2b0 [ 719.086059] copy_folio_from_iter_atomic+0x536/0x1820 [ 719.086085] ? fault_in_readable+0x12d/0x1d0 [ 719.086100] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 719.086116] ? fault_in_readable+0x172/0x1d0 [ 719.086129] ? __pfx_fault_in_readable+0x10/0x10 [ 719.086151] iomap_file_buffered_write+0x4fa/0xa40 [ 719.086179] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 719.086198] ? __lock_acquire+0x451/0x2250 [ 719.086212] ? __schedule+0x18d1/0x46a0 [ 719.086240] ? __pfx_down_read+0x10/0x10 [ 719.086254] ? generic_update_time+0xcb/0xf0 [ 719.086266] ? mnt_put_write_access_file+0xc0/0xe0 [ 719.086285] ? file_update_time_flags+0x24c/0x4f0 [ 719.086301] blkdev_write_iter+0x7a0/0xd00 [ 719.086323] do_iter_readv_writev+0x5b3/0x910 [ 719.086341] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 719.086357] ? __import_iovec+0x1df/0x670 [ 719.086372] ? avc_policy_seqno+0x9/0x20 [ 719.086388] ? security_file_permission+0x22/0x90 [ 719.086410] vfs_writev+0x2d4/0xcd0 [ 719.086427] ? perf_trace_lock+0xb5/0x5d0 [ 719.086440] ? __lock_acquire+0x451/0x2250 [ 719.086454] ? __pfx_vfs_writev+0x10/0x10 [ 719.086469] ? __pfx_perf_trace_lock+0x10/0x10 [ 719.086487] ? __fget_files+0x34/0x3b0 [ 719.086505] ? find_held_lock+0x2b/0x80 [ 719.086523] ? __fget_files+0x203/0x3b0 [ 719.086543] ? lock_release+0xc8/0x270 [ 719.086559] ? __fget_files+0x20d/0x3b0 [ 719.086583] do_pwritev+0x1ab/0x280 [ 719.086600] ? __pfx_do_pwritev+0x10/0x10 [ 719.086616] ? find_held_lock+0x2b/0x80 [ 719.086632] ? syscall_trace_enter+0x1cf/0x230 [ 719.086649] __x64_sys_pwritev2+0xef/0x160 [ 719.086662] do_syscall_64+0xbf/0x420 [ 719.086679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.086691] RIP: 0033:0x7f9d93406b19 [ 719.086700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 719.086711] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 719.086723] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 719.086731] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 719.086738] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 719.086745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.086751] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 719.086769] [ 719.117775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 719.118307] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 719.120441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 719.120966] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:04:39 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 5) 20:04:39 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x4000000, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:04:39 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:04:39 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:04:39 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x560e, &(0x7f0000000100)=0xa) 20:04:39 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:04:39 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:04:39 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 2) [ 728.851068] FAULT_INJECTION: forcing a failure. [ 728.851068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.852033] CPU: 0 UID: 0 PID: 6962 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 728.852052] Tainted: [W]=WARN [ 728.852056] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 728.852063] Call Trace: [ 728.852067] [ 728.852072] dump_stack_lvl+0xfa/0x120 [ 728.852093] should_fail_ex+0x4d7/0x5e0 [ 728.852111] ? page_copy_sane+0xce/0x2b0 [ 728.852129] copy_folio_from_iter_atomic+0x536/0x1820 [ 728.852157] ? fault_in_readable+0x12d/0x1d0 [ 728.852175] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 728.852195] ? fault_in_readable+0x172/0x1d0 [ 728.852210] ? __pfx_fault_in_readable+0x10/0x10 [ 728.852232] iomap_file_buffered_write+0x4fa/0xa40 [ 728.852270] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 728.852295] ? __lock_acquire+0x451/0x2250 [ 728.852330] ? __pfx_down_read+0x10/0x10 [ 728.852348] ? generic_update_time+0xcb/0xf0 [ 728.852362] ? mnt_put_write_access_file+0xb7/0xe0 [ 728.852388] ? file_update_time_flags+0x24c/0x4f0 [ 728.852404] blkdev_write_iter+0x7a0/0xd00 [ 728.852432] do_iter_readv_writev+0x5b3/0x910 [ 728.852451] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 728.852466] ? __import_iovec+0x1df/0x670 [ 728.852481] ? avc_policy_seqno+0x9/0x20 [ 728.852497] ? security_file_permission+0x22/0x90 [ 728.852520] vfs_writev+0x2d4/0xcd0 [ 728.852536] ? perf_trace_lock+0xb5/0x5d0 [ 728.852549] ? __lock_acquire+0x451/0x2250 [ 728.852563] ? __pfx_vfs_writev+0x10/0x10 [ 728.852579] ? __pfx_perf_trace_lock+0x10/0x10 [ 728.852597] ? __fget_files+0x34/0x3b0 [ 728.852614] ? find_held_lock+0x2b/0x80 [ 728.852631] ? __fget_files+0x203/0x3b0 [ 728.852648] ? lock_release+0xc8/0x270 [ 728.852664] ? __fget_files+0x20d/0x3b0 [ 728.852687] do_pwritev+0x1ab/0x280 [ 728.852704] ? __pfx_do_pwritev+0x10/0x10 [ 728.852720] ? find_held_lock+0x2b/0x80 [ 728.852737] ? syscall_trace_enter+0x1cf/0x230 [ 728.852753] __x64_sys_pwritev2+0xef/0x160 [ 728.852767] do_syscall_64+0xbf/0x420 [ 728.852783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.852795] RIP: 0033:0x7f9d93406b19 [ 728.852804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 728.852816] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 728.852828] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 728.852835] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 728.852842] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 728.852849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.852856] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 728.852874] [ 728.897845] FAULT_INJECTION: forcing a failure. [ 728.897845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.900018] CPU: 1 UID: 0 PID: 6972 Comm: syz-executor.4 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 728.900055] Tainted: [W]=WARN [ 728.900063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 728.900077] Call Trace: [ 728.900085] [ 728.900094] dump_stack_lvl+0xfa/0x120 [ 728.900132] should_fail_ex+0x4d7/0x5e0 [ 728.900178] _copy_from_user+0x30/0xd0 [ 728.900220] kstrtouint_from_user+0xbd/0x180 [ 728.900244] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 728.900270] ? __lock_acquire+0x451/0x2250 [ 728.900307] ? fdget_pos+0x2a8/0x380 [ 728.900338] proc_fail_nth_write+0x7b/0x220 [ 728.900368] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 728.900397] ? lock_is_held_type+0x9e/0x120 [ 728.900431] vfs_write+0x2b7/0x1150 [ 728.900471] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 728.900500] ? __pfx___mutex_lock+0x10/0x10 [ 728.900529] ? __fget_files+0x34/0x3b0 [ 728.900572] ? __pfx_vfs_write+0x10/0x10 [ 728.900610] ? lock_release+0xc8/0x270 [ 728.900641] ? __fget_files+0x20d/0x3b0 [ 728.900689] ksys_write+0x121/0x240 [ 728.900722] ? __pfx_ksys_write+0x10/0x10 [ 728.900769] do_syscall_64+0xbf/0x420 [ 728.900801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.900825] RIP: 0033:0x7fc27567e5ff [ 728.900843] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 728.900865] RSP: 002b:00007fc272c20170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 728.900888] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc27567e5ff [ 728.900910] RDX: 0000000000000001 RSI: 00007fc272c201e0 RDI: 0000000000000005 [ 728.900924] RBP: 00007fc272c201d0 R08: 0000000000000000 R09: 0000000000000000 [ 728.900938] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 728.900952] R13: 00007ffc6fd7829f R14: 00007fc272c20300 R15: 0000000000022000 [ 728.900987] 20:04:39 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x5000000, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 728.949065] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 728.949576] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 728.950540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 728.951376] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:04:39 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x6000000, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:04:39 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 6) [ 729.049374] FAULT_INJECTION: forcing a failure. [ 729.049374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.050378] CPU: 0 UID: 0 PID: 6987 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 729.050397] Tainted: [W]=WARN [ 729.050401] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 729.050409] Call Trace: [ 729.050413] [ 729.050418] dump_stack_lvl+0xfa/0x120 [ 729.050442] should_fail_ex+0x4d7/0x5e0 [ 729.050465] ? page_copy_sane+0xce/0x2b0 [ 729.050486] copy_folio_from_iter_atomic+0x536/0x1820 [ 729.050516] ? fault_in_readable+0x12d/0x1d0 [ 729.050535] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 729.050554] ? fault_in_readable+0x172/0x1d0 [ 729.050569] ? __pfx_fault_in_readable+0x10/0x10 [ 729.050590] iomap_file_buffered_write+0x4fa/0xa40 [ 729.050628] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 729.050652] ? __lock_acquire+0x451/0x2250 [ 729.050685] ? __pfx_down_read+0x10/0x10 [ 729.050699] ? generic_update_time+0xcb/0xf0 [ 729.050712] ? mnt_put_write_access_file+0xb7/0xe0 [ 729.050730] ? file_update_time_flags+0x24c/0x4f0 [ 729.050746] blkdev_write_iter+0x7a0/0xd00 [ 729.050768] do_iter_readv_writev+0x5b3/0x910 [ 729.050788] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 729.050803] ? __import_iovec+0x1df/0x670 [ 729.050818] ? avc_policy_seqno+0x9/0x20 [ 729.050834] ? security_file_permission+0x22/0x90 [ 729.050857] vfs_writev+0x2d4/0xcd0 [ 729.050873] ? perf_trace_lock+0xb5/0x5d0 [ 729.050886] ? __lock_acquire+0x451/0x2250 [ 729.050906] ? __pfx_vfs_writev+0x10/0x10 [ 729.050921] ? __pfx_perf_trace_lock+0x10/0x10 [ 729.050939] ? __fget_files+0x34/0x3b0 [ 729.050956] ? find_held_lock+0x2b/0x80 [ 729.050973] ? __fget_files+0x203/0x3b0 [ 729.050990] ? lock_release+0xc8/0x270 [ 729.051005] ? __fget_files+0x20d/0x3b0 [ 729.051029] do_pwritev+0x1ab/0x280 [ 729.051046] ? __pfx_do_pwritev+0x10/0x10 [ 729.051062] ? find_held_lock+0x2b/0x80 [ 729.051079] ? syscall_trace_enter+0x1cf/0x230 [ 729.051095] __x64_sys_pwritev2+0xef/0x160 [ 729.051108] do_syscall_64+0xbf/0x420 [ 729.051124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.051137] RIP: 0033:0x7f9d93406b19 [ 729.051146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 729.051157] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 729.051169] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 729.051177] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 729.051184] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 729.051191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.051197] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 729.051215] [ 729.098854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 729.099379] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 729.103628] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 729.104099] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:04:49 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 7) 20:04:49 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x560e, &(0x7f0000000100)=0xa) 20:04:49 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:04:49 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:04:49 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:04:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:04:49 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:04:49 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x8100000, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:04:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 738.688791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 738.689712] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 738.689779] FAULT_INJECTION: forcing a failure. [ 738.689779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.692005] CPU: 0 UID: 0 PID: 7006 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 738.692024] Tainted: [W]=WARN [ 738.692028] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 738.692035] Call Trace: [ 738.692040] [ 738.692044] dump_stack_lvl+0xfa/0x120 [ 738.692066] should_fail_ex+0x4d7/0x5e0 [ 738.692084] ? page_copy_sane+0xce/0x2b0 [ 738.692102] copy_folio_from_iter_atomic+0x536/0x1820 [ 738.692128] ? fault_in_readable+0x12d/0x1d0 [ 738.692143] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 738.692159] ? fault_in_readable+0x172/0x1d0 [ 738.692173] ? __pfx_fault_in_readable+0x10/0x10 [ 738.692194] iomap_file_buffered_write+0x4fa/0xa40 [ 738.692223] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 738.692242] ? __lock_acquire+0x451/0x2250 [ 738.692275] ? __pfx_down_read+0x10/0x10 [ 738.692289] ? generic_update_time+0xcb/0xf0 [ 738.692303] ? mnt_put_write_access_file+0xb7/0xe0 [ 738.692322] ? file_update_time_flags+0x24c/0x4f0 [ 738.692338] blkdev_write_iter+0x7a0/0xd00 [ 738.692359] do_iter_readv_writev+0x5b3/0x910 [ 738.692378] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 738.692393] ? __import_iovec+0x1df/0x670 [ 738.692408] ? avc_policy_seqno+0x9/0x20 [ 738.692424] ? security_file_permission+0x22/0x90 [ 738.692447] vfs_writev+0x2d4/0xcd0 [ 738.692463] ? perf_trace_lock+0xb5/0x5d0 [ 738.692476] ? __lock_acquire+0x451/0x2250 [ 738.692490] ? __pfx_vfs_writev+0x10/0x10 [ 738.692506] ? __pfx_perf_trace_lock+0x10/0x10 [ 738.692524] ? __fget_files+0x34/0x3b0 [ 738.692542] ? find_held_lock+0x2b/0x80 [ 738.692558] ? __fget_files+0x203/0x3b0 [ 738.692575] ? lock_release+0xc8/0x270 [ 738.692591] ? __fget_files+0x20d/0x3b0 [ 738.692614] do_pwritev+0x1ab/0x280 [ 738.692632] ? __pfx_do_pwritev+0x10/0x10 [ 738.692648] ? find_held_lock+0x2b/0x80 [ 738.692664] ? syscall_trace_enter+0x1cf/0x230 [ 738.692681] __x64_sys_pwritev2+0xef/0x160 [ 738.692694] do_syscall_64+0xbf/0x420 [ 738.692711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.692723] RIP: 0033:0x7f9d93406b19 [ 738.692733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 738.692744] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 738.692756] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 738.692764] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 738.692771] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 738.692778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.692784] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 738.692802] [ 738.713498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 738.714053] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 738.718192] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 738.718654] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 738.720571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 738.721045] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:04:49 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:04:49 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 8) 20:04:49 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x10000000, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 738.782619] FAULT_INJECTION: forcing a failure. [ 738.782619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.783582] CPU: 0 UID: 0 PID: 7015 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 738.783601] Tainted: [W]=WARN [ 738.783604] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 738.783612] Call Trace: [ 738.783616] [ 738.783621] dump_stack_lvl+0xfa/0x120 [ 738.783643] should_fail_ex+0x4d7/0x5e0 [ 738.783668] ? page_copy_sane+0xce/0x2b0 [ 738.783689] copy_folio_from_iter_atomic+0x536/0x1820 [ 738.783714] ? fault_in_readable+0x12d/0x1d0 [ 738.783730] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 738.783746] ? fault_in_readable+0x172/0x1d0 [ 738.783759] ? __pfx_fault_in_readable+0x10/0x10 [ 738.783780] iomap_file_buffered_write+0x4fa/0xa40 [ 738.783809] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 738.783827] ? __lock_acquire+0x451/0x2250 [ 738.783860] ? __pfx_down_read+0x10/0x10 [ 738.783873] ? generic_update_time+0xcb/0xf0 [ 738.783886] ? mnt_put_write_access_file+0xb7/0xe0 [ 738.783908] ? file_update_time_flags+0x24c/0x4f0 [ 738.783924] blkdev_write_iter+0x7a0/0xd00 [ 738.783946] do_iter_readv_writev+0x5b3/0x910 [ 738.783965] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 738.783980] ? __import_iovec+0x1df/0x670 [ 738.783995] ? avc_policy_seqno+0x9/0x20 [ 738.784011] ? security_file_permission+0x22/0x90 [ 738.784033] vfs_writev+0x2d4/0xcd0 [ 738.784050] ? perf_trace_lock+0xb5/0x5d0 [ 738.784063] ? __lock_acquire+0x451/0x2250 [ 738.784077] ? __pfx_vfs_writev+0x10/0x10 [ 738.784092] ? __pfx_perf_trace_lock+0x10/0x10 [ 738.784110] ? __fget_files+0x34/0x3b0 [ 738.784127] ? find_held_lock+0x2b/0x80 [ 738.784144] ? __fget_files+0x203/0x3b0 [ 738.784161] ? lock_release+0xc8/0x270 [ 738.784177] ? __fget_files+0x20d/0x3b0 [ 738.784200] do_pwritev+0x1ab/0x280 [ 738.784217] ? __pfx_do_pwritev+0x10/0x10 [ 738.784233] ? find_held_lock+0x2b/0x80 [ 738.784250] ? syscall_trace_enter+0x1cf/0x230 [ 738.784266] __x64_sys_pwritev2+0xef/0x160 [ 738.784279] do_syscall_64+0xbf/0x420 [ 738.784296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.784308] RIP: 0033:0x7f9d93406b19 [ 738.784318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 738.784329] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 738.784341] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 738.784349] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 738.784356] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 738.784362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.784369] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 738.784387] [ 738.808727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 738.809219] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 738.810362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 738.810810] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:04:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:04:49 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 9) [ 738.894620] FAULT_INJECTION: forcing a failure. [ 738.894620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.896648] CPU: 1 UID: 0 PID: 7020 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 738.896685] Tainted: [W]=WARN [ 738.896692] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 738.896706] Call Trace: [ 738.896713] [ 738.896722] dump_stack_lvl+0xfa/0x120 [ 738.896759] should_fail_ex+0x4d7/0x5e0 [ 738.896795] ? page_copy_sane+0xce/0x2b0 [ 738.896831] copy_folio_from_iter_atomic+0x536/0x1820 [ 738.896885] ? fault_in_readable+0x12d/0x1d0 [ 738.896922] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 738.896955] ? fault_in_readable+0x172/0x1d0 [ 738.896986] ? __pfx_fault_in_readable+0x10/0x10 [ 738.897028] iomap_file_buffered_write+0x4fa/0xa40 [ 738.897084] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 738.897122] ? __lock_acquire+0x451/0x2250 [ 738.897185] ? __pfx_down_read+0x10/0x10 [ 738.897229] ? generic_update_time+0xcb/0xf0 [ 738.897253] ? mnt_put_write_access_file+0xb7/0xe0 [ 738.897289] ? file_update_time_flags+0x24c/0x4f0 [ 738.897321] blkdev_write_iter+0x7a0/0xd00 [ 738.897362] do_iter_readv_writev+0x5b3/0x910 [ 738.897398] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 738.897428] ? __import_iovec+0x1df/0x670 [ 738.897458] ? avc_policy_seqno+0x9/0x20 [ 738.897489] ? security_file_permission+0x22/0x90 [ 738.897532] vfs_writev+0x2d4/0xcd0 [ 738.897565] ? perf_trace_lock+0xb5/0x5d0 [ 738.897590] ? __lock_acquire+0x451/0x2250 [ 738.897618] ? __pfx_vfs_writev+0x10/0x10 [ 738.897649] ? __pfx_perf_trace_lock+0x10/0x10 [ 738.897684] ? __fget_files+0x34/0x3b0 [ 738.897719] ? find_held_lock+0x2b/0x80 [ 738.897751] ? __fget_files+0x203/0x3b0 [ 738.897786] ? lock_release+0xc8/0x270 [ 738.897816] ? __fget_files+0x20d/0x3b0 [ 738.897863] do_pwritev+0x1ab/0x280 [ 738.897897] ? __pfx_do_pwritev+0x10/0x10 [ 738.897929] ? find_held_lock+0x2b/0x80 [ 738.897962] ? syscall_trace_enter+0x1cf/0x230 [ 738.897993] __x64_sys_pwritev2+0xef/0x160 [ 738.898019] do_syscall_64+0xbf/0x420 [ 738.898050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.898073] RIP: 0033:0x7f9d93406b19 [ 738.898091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 738.898113] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 738.898136] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 738.898151] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 738.898165] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 738.898179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.898192] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 738.898227] 20:04:49 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x3}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 738.998290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 738.999062] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 739.000193] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.000630] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 739.352029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.353128] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 739.354772] buffer_io_error: 2070 callbacks suppressed [ 739.354790] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 739.357072] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 739.358418] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 739.359769] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 739.361104] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 739.362478] Buffer I/O error on dev sr0, logical block 5, lost async page write [ 739.363816] Buffer I/O error on dev sr0, logical block 6, lost async page write [ 739.365162] Buffer I/O error on dev sr0, logical block 7, lost async page write [ 739.366540] Buffer I/O error on dev sr0, logical block 8, lost async page write [ 739.367874] Buffer I/O error on dev sr0, logical block 9, lost async page write [ 739.369867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.371012] I/O error, dev sr0, sector 127 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 739.376302] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.383600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.392165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.399085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.410503] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.411288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.420927] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.421681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.426254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.427376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.433425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.434326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.440099] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.440996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 739.446522] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 739.447328] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 739.447943] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 739.448573] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 fc 00 00 0c 00 20:04:58 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 10) 20:04:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:04:58 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x4}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:04:58 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:04:58 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:04:58 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x40000000, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:04:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, 0x0) dup2(r0, r1) 20:04:58 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:04:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, 0x0) dup2(r0, r1) [ 747.771368] FAULT_INJECTION: forcing a failure. [ 747.771368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 747.773250] CPU: 1 UID: 0 PID: 7048 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 747.773286] Tainted: [W]=WARN [ 747.773294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 747.773307] Call Trace: [ 747.773327] [ 747.773337] dump_stack_lvl+0xfa/0x120 [ 747.773375] should_fail_ex+0x4d7/0x5e0 [ 747.773412] ? page_copy_sane+0xce/0x2b0 [ 747.773455] copy_folio_from_iter_atomic+0x536/0x1820 [ 747.773510] ? fault_in_readable+0x12d/0x1d0 [ 747.773540] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 747.773574] ? fault_in_readable+0x172/0x1d0 [ 747.773601] ? __pfx_fault_in_readable+0x10/0x10 [ 747.773644] iomap_file_buffered_write+0x4fa/0xa40 [ 747.773706] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 747.773748] ? __lock_acquire+0x451/0x2250 [ 747.773813] ? __pfx_down_read+0x10/0x10 [ 747.773843] ? generic_update_time+0xcb/0xf0 [ 747.773869] ? mnt_put_write_access_file+0xb7/0xe0 [ 747.773904] ? file_update_time_flags+0x24c/0x4f0 [ 747.773936] blkdev_write_iter+0x7a0/0xd00 [ 747.773978] do_iter_readv_writev+0x5b3/0x910 [ 747.774013] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 747.774044] ? __import_iovec+0x1df/0x670 [ 747.774074] ? avc_policy_seqno+0x9/0x20 [ 747.774105] ? security_file_permission+0x22/0x90 [ 747.774149] vfs_writev+0x2d4/0xcd0 [ 747.774182] ? perf_trace_lock+0xb5/0x5d0 [ 747.774207] ? __lock_acquire+0x451/0x2250 [ 747.774236] ? __pfx_vfs_writev+0x10/0x10 [ 747.774266] ? __pfx_perf_trace_lock+0x10/0x10 [ 747.774302] ? __fget_files+0x34/0x3b0 [ 747.774336] ? find_held_lock+0x2b/0x80 [ 747.774369] ? __fget_files+0x203/0x3b0 [ 747.774403] ? lock_release+0xc8/0x270 [ 747.774434] ? __fget_files+0x20d/0x3b0 [ 747.774482] do_pwritev+0x1ab/0x280 [ 747.774516] ? __pfx_do_pwritev+0x10/0x10 [ 747.774548] ? find_held_lock+0x2b/0x80 [ 747.774580] ? syscall_trace_enter+0x1cf/0x230 [ 747.774612] __x64_sys_pwritev2+0xef/0x160 [ 747.774639] do_syscall_64+0xbf/0x420 [ 747.774670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.774694] RIP: 0033:0x7f9d93406b19 [ 747.774712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 747.774733] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 747.774756] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 747.774771] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 747.774785] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 747.774799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 747.774812] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 747.774847] 20:04:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, 0x0) dup2(r0, r1) 20:04:58 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x5}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:04:58 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xeffdffff, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:04:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 747.868692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 747.869715] blk_print_req_error: 15 callbacks suppressed [ 747.869731] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 747.885185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 747.886168] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:04:58 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x6}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:04:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:04:58 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(0xffffffffffffffff, r0) 20:04:58 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 11) [ 748.028326] FAULT_INJECTION: forcing a failure. [ 748.028326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 748.029398] CPU: 0 UID: 0 PID: 7071 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 748.029417] Tainted: [W]=WARN [ 748.029422] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 748.029429] Call Trace: [ 748.029434] [ 748.029438] dump_stack_lvl+0xfa/0x120 [ 748.029460] should_fail_ex+0x4d7/0x5e0 [ 748.029478] ? page_copy_sane+0xce/0x2b0 [ 748.029496] copy_folio_from_iter_atomic+0x536/0x1820 [ 748.029526] ? fault_in_readable+0x12d/0x1d0 [ 748.029544] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 748.029563] ? fault_in_readable+0x172/0x1d0 [ 748.029578] ? __pfx_fault_in_readable+0x10/0x10 [ 748.029600] iomap_file_buffered_write+0x4fa/0xa40 [ 748.029637] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 748.029661] ? __lock_acquire+0x451/0x2250 [ 748.029695] ? __pfx_down_read+0x10/0x10 [ 748.029713] ? generic_update_time+0xcb/0xf0 [ 748.029727] ? mnt_put_write_access_file+0xb7/0xe0 [ 748.029752] ? file_update_time_flags+0x24c/0x4f0 [ 748.029768] blkdev_write_iter+0x7a0/0xd00 [ 748.029790] do_iter_readv_writev+0x5b3/0x910 [ 748.029808] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 748.029824] ? __import_iovec+0x1df/0x670 [ 748.029839] ? avc_policy_seqno+0x9/0x20 [ 748.029855] ? security_file_permission+0x22/0x90 [ 748.029877] vfs_writev+0x2d4/0xcd0 [ 748.029897] ? perf_trace_lock+0xb5/0x5d0 [ 748.029911] ? __lock_acquire+0x451/0x2250 [ 748.029925] ? __pfx_vfs_writev+0x10/0x10 [ 748.029940] ? __pfx_perf_trace_lock+0x10/0x10 [ 748.029958] ? __fget_files+0x34/0x3b0 [ 748.029975] ? find_held_lock+0x2b/0x80 [ 748.029992] ? __fget_files+0x203/0x3b0 [ 748.030009] ? lock_release+0xc8/0x270 [ 748.030025] ? __fget_files+0x20d/0x3b0 [ 748.030048] do_pwritev+0x1ab/0x280 [ 748.030065] ? __pfx_do_pwritev+0x10/0x10 [ 748.030081] ? find_held_lock+0x2b/0x80 [ 748.030098] ? syscall_trace_enter+0x1cf/0x230 [ 748.030114] __x64_sys_pwritev2+0xef/0x160 [ 748.030128] do_syscall_64+0xbf/0x420 [ 748.030144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.030156] RIP: 0033:0x7f9d93406b19 [ 748.030166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 748.030177] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 748.030189] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 748.030197] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 748.030203] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 748.030210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 748.030217] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 748.030235] [ 748.100200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 748.101188] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 748.120726] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 748.121637] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:05:08 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(0xffffffffffffffff, r0) 20:05:08 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:05:08 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 12) 20:05:08 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:05:08 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:05:08 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfcfdffff, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:05:08 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, 0xffffffffffffffff) 20:05:08 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x8}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 757.557411] FAULT_INJECTION: forcing a failure. [ 757.557411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.558391] CPU: 0 UID: 0 PID: 7084 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 757.558411] Tainted: [W]=WARN [ 757.558414] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 757.558421] Call Trace: [ 757.558426] [ 757.558430] dump_stack_lvl+0xfa/0x120 [ 757.558452] should_fail_ex+0x4d7/0x5e0 [ 757.558469] ? page_copy_sane+0xce/0x2b0 [ 757.558486] copy_folio_from_iter_atomic+0x536/0x1820 [ 757.558512] ? fault_in_readable+0x12d/0x1d0 [ 757.558527] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 757.558543] ? fault_in_readable+0x172/0x1d0 [ 757.558557] ? __pfx_fault_in_readable+0x10/0x10 [ 757.558578] iomap_file_buffered_write+0x4fa/0xa40 [ 757.558607] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 757.558626] ? __lock_acquire+0x451/0x2250 [ 757.558659] ? __pfx_down_read+0x10/0x10 [ 757.558675] ? generic_update_time+0xcb/0xf0 [ 757.558688] ? mnt_put_write_access_file+0xb7/0xe0 [ 757.558707] ? file_update_time_flags+0x24c/0x4f0 [ 757.558723] blkdev_write_iter+0x7a0/0xd00 [ 757.558745] do_iter_readv_writev+0x5b3/0x910 [ 757.558763] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 757.558779] ? __import_iovec+0x1df/0x670 [ 757.558794] ? avc_policy_seqno+0x9/0x20 [ 757.558810] ? security_file_permission+0x22/0x90 [ 757.558832] vfs_writev+0x2d4/0xcd0 [ 757.558848] ? perf_trace_lock+0xb5/0x5d0 [ 757.558862] ? __lock_acquire+0x451/0x2250 [ 757.558876] ? __pfx_vfs_writev+0x10/0x10 [ 757.558895] ? __pfx_perf_trace_lock+0x10/0x10 [ 757.558913] ? __fget_files+0x34/0x3b0 [ 757.558931] ? find_held_lock+0x2b/0x80 [ 757.558948] ? __fget_files+0x203/0x3b0 [ 757.558965] ? lock_release+0xc8/0x270 [ 757.558980] ? __fget_files+0x20d/0x3b0 [ 757.559004] do_pwritev+0x1ab/0x280 [ 757.559021] ? __pfx_do_pwritev+0x10/0x10 [ 757.559037] ? find_held_lock+0x2b/0x80 [ 757.559053] ? syscall_trace_enter+0x1cf/0x230 [ 757.559070] __x64_sys_pwritev2+0xef/0x160 [ 757.559083] do_syscall_64+0xbf/0x420 [ 757.559099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.559112] RIP: 0033:0x7f9d93406b19 [ 757.559121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 757.559132] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 757.559144] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 757.559152] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 757.559159] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 757.559166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 757.559172] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 757.559190] [ 757.596083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 757.596581] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 757.598114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 757.598587] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:05:08 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 13) 20:05:08 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0xa}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:05:08 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfefdffff, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 757.702747] FAULT_INJECTION: forcing a failure. [ 757.702747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.703729] CPU: 0 UID: 0 PID: 7104 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 757.703747] Tainted: [W]=WARN [ 757.703751] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 757.703758] Call Trace: [ 757.703763] [ 757.703768] dump_stack_lvl+0xfa/0x120 [ 757.703788] should_fail_ex+0x4d7/0x5e0 [ 757.703812] ? page_copy_sane+0xce/0x2b0 [ 757.703832] copy_folio_from_iter_atomic+0x536/0x1820 [ 757.703863] ? fault_in_readable+0x12d/0x1d0 [ 757.703880] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 757.703904] ? fault_in_readable+0x172/0x1d0 [ 757.703919] ? __pfx_fault_in_readable+0x10/0x10 [ 757.703941] iomap_file_buffered_write+0x4fa/0xa40 [ 757.703978] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 757.704002] ? __lock_acquire+0x451/0x2250 [ 757.704037] ? __pfx_down_read+0x10/0x10 [ 757.704055] ? generic_update_time+0xcb/0xf0 [ 757.704069] ? mnt_put_write_access_file+0xb7/0xe0 [ 757.704093] ? file_update_time_flags+0x24c/0x4f0 [ 757.704109] blkdev_write_iter+0x7a0/0xd00 [ 757.704131] do_iter_readv_writev+0x5b3/0x910 [ 757.704149] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 757.704165] ? __import_iovec+0x1df/0x670 [ 757.704180] ? avc_policy_seqno+0x9/0x20 [ 757.704196] ? security_file_permission+0x22/0x90 [ 757.704218] vfs_writev+0x2d4/0xcd0 [ 757.704234] ? perf_trace_lock+0xb5/0x5d0 [ 757.704248] ? __lock_acquire+0x451/0x2250 [ 757.704262] ? __pfx_vfs_writev+0x10/0x10 [ 757.704278] ? __pfx_perf_trace_lock+0x10/0x10 [ 757.704295] ? __fget_files+0x34/0x3b0 [ 757.704313] ? find_held_lock+0x2b/0x80 [ 757.704329] ? __fget_files+0x203/0x3b0 [ 757.704346] ? lock_release+0xc8/0x270 [ 757.704362] ? __fget_files+0x20d/0x3b0 [ 757.704386] do_pwritev+0x1ab/0x280 [ 757.704403] ? __pfx_do_pwritev+0x10/0x10 [ 757.704419] ? find_held_lock+0x2b/0x80 [ 757.704435] ? syscall_trace_enter+0x1cf/0x230 [ 757.704451] __x64_sys_pwritev2+0xef/0x160 [ 757.704465] do_syscall_64+0xbf/0x420 [ 757.704481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.704493] RIP: 0033:0x7f9d93406b19 [ 757.704503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 757.704514] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 757.704526] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 757.704533] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 757.704540] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 757.704547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 757.704554] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 757.704572] 20:05:08 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0xc}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 757.754502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 757.755661] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 757.766768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 757.768057] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:05:08 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfffffdef, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:05:17 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:05:17 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfffffdfc, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:05:17 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, 0xffffffffffffffff) 20:05:17 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(0xffffffffffffffff, r0) 20:05:17 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 14) 20:05:17 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0xe}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:05:17 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:05:17 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 767.163293] FAULT_INJECTION: forcing a failure. [ 767.163293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.164276] CPU: 0 UID: 0 PID: 7132 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 767.164295] Tainted: [W]=WARN [ 767.164299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 767.164306] Call Trace: [ 767.164311] [ 767.164316] dump_stack_lvl+0xfa/0x120 [ 767.164338] should_fail_ex+0x4d7/0x5e0 [ 767.164362] ? page_copy_sane+0xce/0x2b0 [ 767.164384] copy_folio_from_iter_atomic+0x536/0x1820 [ 767.164415] ? fault_in_readable+0x12d/0x1d0 [ 767.164432] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 767.164452] ? fault_in_readable+0x172/0x1d0 [ 767.164467] ? __pfx_fault_in_readable+0x10/0x10 [ 767.164490] iomap_file_buffered_write+0x4fa/0xa40 [ 767.164527] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 767.164547] ? __lock_acquire+0x451/0x2250 [ 767.164580] ? __pfx_down_read+0x10/0x10 [ 767.164594] ? generic_update_time+0xcb/0xf0 [ 767.164608] ? mnt_put_write_access_file+0xb7/0xe0 [ 767.164626] ? file_update_time_flags+0x24c/0x4f0 [ 767.164642] blkdev_write_iter+0x7a0/0xd00 [ 767.164664] do_iter_readv_writev+0x5b3/0x910 [ 767.164683] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 767.164698] ? __import_iovec+0x1df/0x670 [ 767.164713] ? avc_policy_seqno+0x9/0x20 [ 767.164730] ? security_file_permission+0x22/0x90 [ 767.164752] vfs_writev+0x2d4/0xcd0 [ 767.164768] ? perf_trace_lock+0xb5/0x5d0 [ 767.164782] ? __lock_acquire+0x451/0x2250 [ 767.164796] ? __pfx_vfs_writev+0x10/0x10 [ 767.164812] ? __pfx_perf_trace_lock+0x10/0x10 [ 767.164829] ? __fget_files+0x34/0x3b0 [ 767.164847] ? find_held_lock+0x2b/0x80 [ 767.164864] ? __fget_files+0x203/0x3b0 [ 767.164881] ? lock_release+0xc8/0x270 [ 767.164900] ? __fget_files+0x20d/0x3b0 [ 767.164924] do_pwritev+0x1ab/0x280 [ 767.164941] ? __pfx_do_pwritev+0x10/0x10 [ 767.164958] ? find_held_lock+0x2b/0x80 [ 767.164974] ? syscall_trace_enter+0x1cf/0x230 [ 767.164990] __x64_sys_pwritev2+0xef/0x160 [ 767.165003] do_syscall_64+0xbf/0x420 [ 767.165020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.165032] RIP: 0033:0x7f9d93406b19 [ 767.165042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 767.165053] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 767.165065] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 767.165073] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 767.165079] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 767.165086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 767.165093] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 767.165111] 20:05:17 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfffffdfe, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:05:17 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x10}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 767.227808] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 767.228852] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 767.248579] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 767.249667] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:05:18 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 15) 20:05:18 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xfffffe00, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:05:18 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x300}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 767.399301] FAULT_INJECTION: forcing a failure. [ 767.399301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.400443] CPU: 0 UID: 0 PID: 7151 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 767.400462] Tainted: [W]=WARN [ 767.400465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 767.400473] Call Trace: [ 767.400477] [ 767.400482] dump_stack_lvl+0xfa/0x120 [ 767.400505] should_fail_ex+0x4d7/0x5e0 [ 767.400528] ? page_copy_sane+0xce/0x2b0 [ 767.400549] copy_folio_from_iter_atomic+0x536/0x1820 [ 767.400580] ? fault_in_readable+0x12d/0x1d0 [ 767.400597] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 767.400617] ? fault_in_readable+0x172/0x1d0 [ 767.400631] ? __pfx_fault_in_readable+0x10/0x10 [ 767.400652] iomap_file_buffered_write+0x4fa/0xa40 [ 767.400682] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 767.400701] ? __lock_acquire+0x451/0x2250 [ 767.400734] ? __pfx_down_read+0x10/0x10 [ 767.400748] ? generic_update_time+0xcb/0xf0 [ 767.400762] ? mnt_put_write_access_file+0xb7/0xe0 [ 767.400781] ? file_update_time_flags+0x24c/0x4f0 [ 767.400797] blkdev_write_iter+0x7a0/0xd00 [ 767.400820] do_iter_readv_writev+0x5b3/0x910 [ 767.400839] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 767.400855] ? __import_iovec+0x1df/0x670 [ 767.400870] ? avc_policy_seqno+0x9/0x20 [ 767.400886] ? security_file_permission+0x22/0x90 [ 767.400913] vfs_writev+0x2d4/0xcd0 [ 767.400933] ? perf_trace_lock+0xb5/0x5d0 [ 767.400946] ? __lock_acquire+0x451/0x2250 [ 767.400960] ? __pfx_vfs_writev+0x10/0x10 [ 767.400976] ? __pfx_perf_trace_lock+0x10/0x10 [ 767.400993] ? __fget_files+0x34/0x3b0 [ 767.401011] ? find_held_lock+0x2b/0x80 [ 767.401027] ? __fget_files+0x203/0x3b0 [ 767.401045] ? lock_release+0xc8/0x270 [ 767.401060] ? __fget_files+0x20d/0x3b0 [ 767.401084] do_pwritev+0x1ab/0x280 [ 767.401101] ? __pfx_do_pwritev+0x10/0x10 [ 767.401117] ? find_held_lock+0x2b/0x80 [ 767.401133] ? syscall_trace_enter+0x1cf/0x230 [ 767.401150] __x64_sys_pwritev2+0xef/0x160 [ 767.401163] do_syscall_64+0xbf/0x420 [ 767.401179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.401192] RIP: 0033:0x7f9d93406b19 [ 767.401201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 767.401212] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 767.401224] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 767.401232] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 767.401239] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 767.401246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 767.401253] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 767.401270] 20:05:18 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:05:18 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x500}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 767.469388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 767.469940] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 767.477128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 767.477614] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:05:18 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 16) [ 767.579351] FAULT_INJECTION: forcing a failure. [ 767.579351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.580428] CPU: 0 UID: 0 PID: 7160 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 767.580448] Tainted: [W]=WARN [ 767.580452] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 767.580459] Call Trace: [ 767.580463] [ 767.580468] dump_stack_lvl+0xfa/0x120 [ 767.580492] should_fail_ex+0x4d7/0x5e0 [ 767.580515] ? page_copy_sane+0xce/0x2b0 [ 767.580538] copy_folio_from_iter_atomic+0x536/0x1820 [ 767.580568] ? fault_in_readable+0x12d/0x1d0 [ 767.580585] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 767.580604] ? fault_in_readable+0x172/0x1d0 [ 767.580619] ? __pfx_fault_in_readable+0x10/0x10 [ 767.580641] iomap_file_buffered_write+0x4fa/0xa40 [ 767.580679] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 767.580704] ? __lock_acquire+0x451/0x2250 [ 767.580720] ? __schedule+0x18d1/0x46a0 [ 767.580748] ? __pfx_down_read+0x10/0x10 [ 767.580762] ? generic_update_time+0xcb/0xf0 [ 767.580775] ? mnt_put_write_access_file+0xc0/0xe0 [ 767.580793] ? file_update_time_flags+0x24c/0x4f0 [ 767.580809] blkdev_write_iter+0x7a0/0xd00 [ 767.580831] do_iter_readv_writev+0x5b3/0x910 [ 767.580850] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 767.580865] ? __import_iovec+0x1df/0x670 [ 767.580880] ? avc_policy_seqno+0x9/0x20 [ 767.580901] ? security_file_permission+0x22/0x90 [ 767.580923] vfs_writev+0x2d4/0xcd0 [ 767.580942] ? perf_trace_lock+0xb5/0x5d0 [ 767.580958] ? __lock_acquire+0x451/0x2250 [ 767.580972] ? __pfx_vfs_writev+0x10/0x10 [ 767.580987] ? __pfx_perf_trace_lock+0x10/0x10 [ 767.581005] ? __fget_files+0x34/0x3b0 [ 767.581022] ? find_held_lock+0x2b/0x80 [ 767.581039] ? __fget_files+0x203/0x3b0 [ 767.581056] ? lock_release+0xc8/0x270 [ 767.581071] ? __fget_files+0x20d/0x3b0 [ 767.581095] do_pwritev+0x1ab/0x280 [ 767.581112] ? __pfx_do_pwritev+0x10/0x10 [ 767.581128] ? find_held_lock+0x2b/0x80 [ 767.581144] ? syscall_trace_enter+0x1cf/0x230 [ 767.581161] __x64_sys_pwritev2+0xef/0x160 [ 767.581174] do_syscall_64+0xbf/0x420 [ 767.581190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.581203] RIP: 0033:0x7f9d93406b19 [ 767.581212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 767.581223] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 767.581235] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 767.581243] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 767.581250] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 767.581257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 767.581263] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 767.581281] [ 767.621854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 767.622493] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 767.627406] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 767.627863] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:05:27 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:05:27 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, 0xffffffffffffffff) 20:05:27 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 17) 20:05:27 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x600}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:05:27 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:05:27 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:05:27 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, 0xffffffffffffffff) 20:05:27 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:05:27 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x810}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 776.939942] FAULT_INJECTION: forcing a failure. [ 776.939942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 776.941690] CPU: 1 UID: 0 PID: 7179 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 776.941725] Tainted: [W]=WARN [ 776.941732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 776.941745] Call Trace: [ 776.941753] [ 776.941762] dump_stack_lvl+0xfa/0x120 [ 776.941797] should_fail_ex+0x4d7/0x5e0 [ 776.941827] ? page_copy_sane+0xce/0x2b0 [ 776.941859] copy_folio_from_iter_atomic+0x536/0x1820 [ 776.941915] ? fault_in_readable+0x12d/0x1d0 [ 776.941943] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 776.941973] ? fault_in_readable+0x172/0x1d0 [ 776.941999] ? __pfx_fault_in_readable+0x10/0x10 [ 776.942039] iomap_file_buffered_write+0x4fa/0xa40 [ 776.942092] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 776.942128] ? __lock_acquire+0x451/0x2250 [ 776.942189] ? __pfx_down_read+0x10/0x10 [ 776.942214] ? generic_update_time+0xcb/0xf0 [ 776.942238] ? mnt_put_write_access_file+0xb7/0xe0 [ 776.942272] ? file_update_time_flags+0x24c/0x4f0 [ 776.942303] blkdev_write_iter+0x7a0/0xd00 [ 776.942343] do_iter_readv_writev+0x5b3/0x910 [ 776.942378] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 776.942407] ? __import_iovec+0x1df/0x670 [ 776.942435] ? avc_policy_seqno+0x9/0x20 [ 776.942465] ? security_file_permission+0x22/0x90 [ 776.942507] vfs_writev+0x2d4/0xcd0 [ 776.942538] ? perf_trace_lock+0xb5/0x5d0 [ 776.942562] ? __lock_acquire+0x451/0x2250 [ 776.942589] ? __pfx_vfs_writev+0x10/0x10 [ 776.942619] ? __pfx_perf_trace_lock+0x10/0x10 [ 776.942653] ? __fget_files+0x34/0x3b0 [ 776.942686] ? find_held_lock+0x2b/0x80 [ 776.942717] ? __fget_files+0x203/0x3b0 [ 776.942750] ? lock_release+0xc8/0x270 [ 776.942779] ? __fget_files+0x20d/0x3b0 [ 776.942825] do_pwritev+0x1ab/0x280 [ 776.942858] ? __pfx_do_pwritev+0x10/0x10 [ 776.942889] ? find_held_lock+0x2b/0x80 [ 776.942920] ? syscall_trace_enter+0x1cf/0x230 [ 776.942951] __x64_sys_pwritev2+0xef/0x160 [ 776.942976] do_syscall_64+0xbf/0x420 [ 776.943006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.943029] RIP: 0033:0x7f9d93406b19 [ 776.943046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 776.943067] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 776.943089] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 776.943104] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 776.943117] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 776.943130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 776.943143] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 776.943177] 20:05:27 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x2, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:05:27 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0xa00}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 777.032853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 777.033985] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 777.035788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 777.036768] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:05:27 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 18) 20:05:27 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:05:27 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0xc00}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 777.149983] FAULT_INJECTION: forcing a failure. [ 777.149983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.150977] CPU: 0 UID: 0 PID: 7196 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 777.150999] Tainted: [W]=WARN [ 777.151007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 777.151015] Call Trace: [ 777.151020] [ 777.151025] dump_stack_lvl+0xfa/0x120 [ 777.151050] should_fail_ex+0x4d7/0x5e0 [ 777.151076] ? page_copy_sane+0xce/0x2b0 [ 777.151098] copy_folio_from_iter_atomic+0x536/0x1820 [ 777.151131] ? fault_in_readable+0x12d/0x1d0 [ 777.151149] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 777.151172] ? fault_in_readable+0x172/0x1d0 [ 777.151187] ? __pfx_fault_in_readable+0x10/0x10 [ 777.151212] iomap_file_buffered_write+0x4fa/0xa40 [ 777.151254] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 777.151283] ? __lock_acquire+0x451/0x2250 [ 777.151319] ? __pfx_down_read+0x10/0x10 [ 777.151337] ? generic_update_time+0xcb/0xf0 [ 777.151352] ? mnt_put_write_access_file+0xb7/0xe0 [ 777.151380] ? file_update_time_flags+0x24c/0x4f0 [ 777.151398] blkdev_write_iter+0x7a0/0xd00 [ 777.151425] do_iter_readv_writev+0x5b3/0x910 [ 777.151445] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 777.151460] ? __import_iovec+0x1df/0x670 [ 777.151476] ? avc_policy_seqno+0x9/0x20 [ 777.151493] ? security_file_permission+0x22/0x90 [ 777.151516] vfs_writev+0x2d4/0xcd0 [ 777.151533] ? perf_trace_lock+0xb5/0x5d0 [ 777.151547] ? __lock_acquire+0x451/0x2250 [ 777.151561] ? __pfx_vfs_writev+0x10/0x10 [ 777.151577] ? __pfx_perf_trace_lock+0x10/0x10 [ 777.151596] ? __fget_files+0x34/0x3b0 [ 777.151614] ? find_held_lock+0x2b/0x80 [ 777.151631] ? __fget_files+0x203/0x3b0 [ 777.151649] ? lock_release+0xc8/0x270 [ 777.151665] ? __fget_files+0x20d/0x3b0 [ 777.151690] do_pwritev+0x1ab/0x280 [ 777.151708] ? __pfx_do_pwritev+0x10/0x10 [ 777.151725] ? find_held_lock+0x2b/0x80 [ 777.151742] ? syscall_trace_enter+0x1cf/0x230 [ 777.151759] __x64_sys_pwritev2+0xef/0x160 [ 777.151773] do_syscall_64+0xbf/0x420 [ 777.151789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.151802] RIP: 0033:0x7f9d93406b19 [ 777.151812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 777.151824] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 777.151836] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 777.151844] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 777.151851] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 777.151859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 777.151866] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 777.151884] [ 777.200815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 777.201348] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 777.202263] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 777.202716] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:05:27 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x4, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:05:27 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0xe00}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 778.756276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 778.756984] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 778.757690] buffer_io_error: 2070 callbacks suppressed [ 778.757698] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 778.758704] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 778.759301] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 778.759877] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 778.760472] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 778.761067] Buffer I/O error on dev sr0, logical block 5, lost async page write [ 778.761641] Buffer I/O error on dev sr0, logical block 6, lost async page write [ 778.762242] Buffer I/O error on dev sr0, logical block 7, lost async page write [ 778.762833] Buffer I/O error on dev sr0, logical block 8, lost async page write [ 778.763432] Buffer I/O error on dev sr0, logical block 9, lost async page write [ 778.764440] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 778.765034] I/O error, dev sr0, sector 127 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 778.767421] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 778.768050] I/O error, dev sr0, sector 254 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 778.769215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 778.769929] I/O error, dev sr0, sector 381 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 778.773539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 778.774045] I/O error, dev sr0, sector 508 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 778.775065] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 778.775647] I/O error, dev sr0, sector 635 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 778.778422] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 778.779408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 778.782983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 778.784094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 778.789545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 778.790444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 778.792710] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 778.794147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 778.796324] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 778.797255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 778.811706] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 778.812608] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 778.813249] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 778.814011] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 fc 00 00 0c 00 20:05:37 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x1008}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:05:37 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 19) 20:05:37 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x5, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:05:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, 0xffffffffffffffff) 20:05:37 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:05:37 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:05:37 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:05:37 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(0xffffffffffffffff, r0) 20:05:37 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x6, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 786.420658] FAULT_INJECTION: forcing a failure. [ 786.420658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.422533] CPU: 1 UID: 0 PID: 7227 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 786.422566] Tainted: [W]=WARN [ 786.422573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 786.422586] Call Trace: [ 786.422593] [ 786.422601] dump_stack_lvl+0xfa/0x120 [ 786.422634] should_fail_ex+0x4d7/0x5e0 [ 786.422662] ? page_copy_sane+0xce/0x2b0 [ 786.422693] copy_folio_from_iter_atomic+0x536/0x1820 [ 786.422740] ? fault_in_readable+0x12d/0x1d0 [ 786.422766] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 786.422795] ? fault_in_readable+0x172/0x1d0 [ 786.422820] ? __pfx_fault_in_readable+0x10/0x10 [ 786.422859] iomap_file_buffered_write+0x4fa/0xa40 [ 786.422917] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 786.422952] ? __lock_acquire+0x451/0x2250 [ 786.423011] ? __pfx_down_read+0x10/0x10 [ 786.423035] ? generic_update_time+0xcb/0xf0 [ 786.423058] ? mnt_put_write_access_file+0xb7/0xe0 [ 786.423091] ? file_update_time_flags+0x24c/0x4f0 [ 786.423121] blkdev_write_iter+0x7a0/0xd00 [ 786.423159] do_iter_readv_writev+0x5b3/0x910 [ 786.423193] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 786.423221] ? __import_iovec+0x1df/0x670 [ 786.423249] ? avc_policy_seqno+0x9/0x20 [ 786.423278] ? security_file_permission+0x22/0x90 [ 786.423318] vfs_writev+0x2d4/0xcd0 [ 786.423348] ? perf_trace_lock+0xb5/0x5d0 [ 786.423372] ? __lock_acquire+0x451/0x2250 [ 786.423398] ? __pfx_vfs_writev+0x10/0x10 [ 786.423427] ? __pfx_perf_trace_lock+0x10/0x10 [ 786.423460] ? __fget_files+0x34/0x3b0 [ 786.423491] ? find_held_lock+0x2b/0x80 [ 786.423522] ? __fget_files+0x203/0x3b0 [ 786.423553] ? lock_release+0xc8/0x270 [ 786.423582] ? __fget_files+0x20d/0x3b0 [ 786.423626] do_pwritev+0x1ab/0x280 [ 786.423657] ? __pfx_do_pwritev+0x10/0x10 [ 786.423687] ? find_held_lock+0x2b/0x80 [ 786.423717] ? syscall_trace_enter+0x1cf/0x230 [ 786.423746] __x64_sys_pwritev2+0xef/0x160 [ 786.423771] do_syscall_64+0xbf/0x420 [ 786.423800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.423823] RIP: 0033:0x7f9d93406b19 [ 786.423839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 786.423859] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 786.423880] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 786.423894] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 786.423907] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 786.423920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 786.423932] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 786.423965] [ 786.477865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 786.478502] blk_print_req_error: 11 callbacks suppressed [ 786.478512] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 786.487699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 786.488287] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:05:37 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:05:37 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 20) 20:05:37 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 786.568705] FAULT_INJECTION: forcing a failure. [ 786.568705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.569673] CPU: 0 UID: 0 PID: 7243 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 786.569691] Tainted: [W]=WARN [ 786.569699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 786.569706] Call Trace: [ 786.569711] [ 786.569716] dump_stack_lvl+0xfa/0x120 [ 786.569740] should_fail_ex+0x4d7/0x5e0 [ 786.569771] ? page_copy_sane+0xce/0x2b0 [ 786.569793] copy_folio_from_iter_atomic+0x536/0x1820 [ 786.569823] ? fault_in_readable+0x12d/0x1d0 [ 786.569840] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 786.569860] ? fault_in_readable+0x172/0x1d0 [ 786.569875] ? __pfx_fault_in_readable+0x10/0x10 [ 786.569897] iomap_file_buffered_write+0x4fa/0xa40 [ 786.569935] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 786.569959] ? __lock_acquire+0x451/0x2250 [ 786.569976] ? __schedule+0x18d1/0x46a0 [ 786.570004] ? __pfx_down_read+0x10/0x10 [ 786.570021] ? generic_update_time+0xcb/0xf0 [ 786.570036] ? mnt_put_write_access_file+0xc0/0xe0 [ 786.570061] ? file_update_time_flags+0x24c/0x4f0 [ 786.570079] blkdev_write_iter+0x7a0/0xd00 [ 786.570105] do_iter_readv_writev+0x5b3/0x910 [ 786.570130] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 786.570146] ? __import_iovec+0x1df/0x670 [ 786.570161] ? avc_policy_seqno+0x9/0x20 [ 786.570178] ? security_file_permission+0x22/0x90 [ 786.570200] vfs_writev+0x2d4/0xcd0 [ 786.570216] ? perf_trace_lock+0xb5/0x5d0 [ 786.570230] ? __lock_acquire+0x451/0x2250 [ 786.570244] ? __pfx_vfs_writev+0x10/0x10 [ 786.570260] ? __pfx_perf_trace_lock+0x10/0x10 [ 786.570277] ? __fget_files+0x34/0x3b0 [ 786.570295] ? find_held_lock+0x2b/0x80 [ 786.570312] ? __fget_files+0x203/0x3b0 [ 786.570329] ? lock_release+0xc8/0x270 [ 786.570344] ? __fget_files+0x20d/0x3b0 [ 786.570368] do_pwritev+0x1ab/0x280 [ 786.570385] ? __pfx_do_pwritev+0x10/0x10 [ 786.570401] ? find_held_lock+0x2b/0x80 [ 786.570417] ? syscall_trace_enter+0x1cf/0x230 [ 786.570434] __x64_sys_pwritev2+0xef/0x160 [ 786.570447] do_syscall_64+0xbf/0x420 [ 786.570463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.570476] RIP: 0033:0x7f9d93406b19 [ 786.570485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 786.570496] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 786.570508] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 786.570516] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 786.570523] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 786.570530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 786.570537] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 786.570555] 20:05:37 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x3f00}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 786.612890] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 786.614265] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 786.629916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 786.630360] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:05:37 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x10, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:05:37 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x4000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:05:37 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 21) [ 786.745812] FAULT_INJECTION: forcing a failure. [ 786.745812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.746773] CPU: 0 UID: 0 PID: 7255 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 786.746792] Tainted: [W]=WARN [ 786.746796] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 786.746803] Call Trace: [ 786.746809] [ 786.746815] dump_stack_lvl+0xfa/0x120 [ 786.746843] should_fail_ex+0x4d7/0x5e0 [ 786.746866] ? page_copy_sane+0xce/0x2b0 [ 786.746886] copy_folio_from_iter_atomic+0x536/0x1820 [ 786.746916] ? fault_in_readable+0x12d/0x1d0 [ 786.746934] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 786.746953] ? fault_in_readable+0x172/0x1d0 [ 786.746967] ? __pfx_fault_in_readable+0x10/0x10 [ 786.746989] iomap_file_buffered_write+0x4fa/0xa40 [ 786.747026] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 786.747052] ? __lock_acquire+0x451/0x2250 [ 786.747085] ? __pfx_down_read+0x10/0x10 [ 786.747103] ? generic_update_time+0xcb/0xf0 [ 786.747117] ? mnt_put_write_access_file+0xb7/0xe0 [ 786.747135] ? file_update_time_flags+0x24c/0x4f0 [ 786.747151] blkdev_write_iter+0x7a0/0xd00 [ 786.747174] do_iter_readv_writev+0x5b3/0x910 [ 786.747193] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 786.747208] ? __import_iovec+0x1df/0x670 [ 786.747223] ? avc_policy_seqno+0x9/0x20 [ 786.747239] ? security_file_permission+0x22/0x90 [ 786.747262] vfs_writev+0x2d4/0xcd0 [ 786.747278] ? perf_trace_lock+0xb5/0x5d0 [ 786.747291] ? __lock_acquire+0x451/0x2250 [ 786.747305] ? __pfx_vfs_writev+0x10/0x10 [ 786.747321] ? __pfx_perf_trace_lock+0x10/0x10 [ 786.747339] ? __fget_files+0x34/0x3b0 [ 786.747356] ? find_held_lock+0x2b/0x80 [ 786.747373] ? __fget_files+0x203/0x3b0 [ 786.747390] ? lock_release+0xc8/0x270 [ 786.747405] ? __fget_files+0x20d/0x3b0 [ 786.747429] do_pwritev+0x1ab/0x280 [ 786.747446] ? __pfx_do_pwritev+0x10/0x10 [ 786.747462] ? find_held_lock+0x2b/0x80 [ 786.747479] ? syscall_trace_enter+0x1cf/0x230 [ 786.747495] __x64_sys_pwritev2+0xef/0x160 [ 786.747509] do_syscall_64+0xbf/0x420 [ 786.747525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.747537] RIP: 0033:0x7f9d93406b19 [ 786.747547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 786.747558] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 786.747569] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 786.747577] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 786.747584] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 786.747591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 786.747598] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 786.747615] [ 786.794565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 786.795481] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 786.805181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 786.805650] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:05:46 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, 0xffffffffffffffff) 20:05:46 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 22) 20:05:46 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:05:46 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:05:46 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(0xffffffffffffffff, r0) 20:05:46 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x20000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:05:46 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:05:46 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 796.249665] FAULT_INJECTION: forcing a failure. [ 796.249665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.250653] CPU: 0 UID: 0 PID: 7266 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 796.250672] Tainted: [W]=WARN [ 796.250676] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 796.250684] Call Trace: [ 796.250688] [ 796.250693] dump_stack_lvl+0xfa/0x120 [ 796.250714] should_fail_ex+0x4d7/0x5e0 [ 796.250738] ? page_copy_sane+0xce/0x2b0 [ 796.250760] copy_folio_from_iter_atomic+0x536/0x1820 [ 796.250790] ? fault_in_readable+0x12d/0x1d0 [ 796.250808] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 796.250827] ? fault_in_readable+0x172/0x1d0 [ 796.250841] ? __pfx_fault_in_readable+0x10/0x10 [ 796.250864] iomap_file_buffered_write+0x4fa/0xa40 [ 796.250906] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 796.250931] ? __lock_acquire+0x451/0x2250 [ 796.250948] ? __schedule+0x18d1/0x46a0 [ 796.250976] ? __pfx_down_read+0x10/0x10 [ 796.250994] ? generic_update_time+0xcb/0xf0 [ 796.251009] ? mnt_put_write_access_file+0xc0/0xe0 [ 796.251027] ? file_update_time_flags+0x24c/0x4f0 [ 796.251043] blkdev_write_iter+0x7a0/0xd00 [ 796.251065] do_iter_readv_writev+0x5b3/0x910 [ 796.251084] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 796.251100] ? __import_iovec+0x1df/0x670 [ 796.251115] ? avc_policy_seqno+0x9/0x20 [ 796.251131] ? security_file_permission+0x22/0x90 [ 796.251153] vfs_writev+0x2d4/0xcd0 [ 796.251169] ? perf_trace_lock+0xb5/0x5d0 [ 796.251182] ? __lock_acquire+0x451/0x2250 [ 796.251196] ? __pfx_vfs_writev+0x10/0x10 [ 796.251212] ? __pfx_perf_trace_lock+0x10/0x10 [ 796.251230] ? __fget_files+0x34/0x3b0 [ 796.251247] ? find_held_lock+0x2b/0x80 [ 796.251264] ? __fget_files+0x203/0x3b0 [ 796.251281] ? lock_release+0xc8/0x270 [ 796.251296] ? __fget_files+0x20d/0x3b0 [ 796.251320] do_pwritev+0x1ab/0x280 [ 796.251337] ? __pfx_do_pwritev+0x10/0x10 [ 796.251353] ? find_held_lock+0x2b/0x80 [ 796.251370] ? syscall_trace_enter+0x1cf/0x230 [ 796.251386] __x64_sys_pwritev2+0xef/0x160 [ 796.251399] do_syscall_64+0xbf/0x420 [ 796.251416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.251428] RIP: 0033:0x7f9d93406b19 [ 796.251437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 796.251448] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 796.251460] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 796.251468] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 796.251475] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 796.251482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 796.251488] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 796.251506] 20:05:47 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 796.341227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 796.342133] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:05:47 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:05:47 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:05:47 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x300, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 796.361075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 796.361774] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:05:47 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x40000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:05:47 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 23) 20:05:47 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, 0x0) dup2(r0, r1) 20:05:47 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 796.474314] FAULT_INJECTION: forcing a failure. [ 796.474314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.475452] CPU: 0 UID: 0 PID: 7293 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 796.475471] Tainted: [W]=WARN [ 796.475475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 796.475483] Call Trace: [ 796.475488] [ 796.475493] dump_stack_lvl+0xfa/0x120 [ 796.475515] should_fail_ex+0x4d7/0x5e0 [ 796.475539] ? page_copy_sane+0xce/0x2b0 [ 796.475560] copy_folio_from_iter_atomic+0x536/0x1820 [ 796.475591] ? fault_in_readable+0x12d/0x1d0 [ 796.475609] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 796.475628] ? fault_in_readable+0x172/0x1d0 [ 796.475643] ? __pfx_fault_in_readable+0x10/0x10 [ 796.475665] iomap_file_buffered_write+0x4fa/0xa40 [ 796.475704] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 796.475728] ? __lock_acquire+0x451/0x2250 [ 796.475764] ? __pfx_down_read+0x10/0x10 [ 796.475781] ? generic_update_time+0xcb/0xf0 [ 796.475795] ? mnt_put_write_access_file+0xb7/0xe0 [ 796.475814] ? file_update_time_flags+0x24c/0x4f0 [ 796.475830] blkdev_write_iter+0x7a0/0xd00 [ 796.475852] do_iter_readv_writev+0x5b3/0x910 [ 796.475871] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 796.475886] ? __import_iovec+0x1df/0x670 [ 796.475906] ? avc_policy_seqno+0x9/0x20 [ 796.475922] ? security_file_permission+0x22/0x90 [ 796.475945] vfs_writev+0x2d4/0xcd0 [ 796.475961] ? perf_trace_lock+0xb5/0x5d0 [ 796.475974] ? __lock_acquire+0x451/0x2250 [ 796.475988] ? __pfx_vfs_writev+0x10/0x10 [ 796.476004] ? __pfx_perf_trace_lock+0x10/0x10 [ 796.476021] ? __fget_files+0x34/0x3b0 [ 796.476039] ? find_held_lock+0x2b/0x80 [ 796.476056] ? __fget_files+0x203/0x3b0 [ 796.476073] ? lock_release+0xc8/0x270 [ 796.476088] ? __fget_files+0x20d/0x3b0 [ 796.476112] do_pwritev+0x1ab/0x280 [ 796.476129] ? __pfx_do_pwritev+0x10/0x10 [ 796.476145] ? find_held_lock+0x2b/0x80 [ 796.476162] ? syscall_trace_enter+0x1cf/0x230 [ 796.476178] __x64_sys_pwritev2+0xef/0x160 [ 796.476192] do_syscall_64+0xbf/0x420 [ 796.476208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.476220] RIP: 0033:0x7f9d93406b19 [ 796.476230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 796.476241] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 796.476253] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 796.476261] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 796.476268] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 796.476275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 796.476281] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 796.476299] [ 796.534652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 796.535719] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 796.537273] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 796.537770] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:05:56 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 24) 20:05:56 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:05:56 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x500, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:05:56 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, 0x0) dup2(r0, r1) 20:05:56 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, 0x0) dup2(r0, r1) 20:05:56 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(0xffffffffffffffff, r0) 20:05:56 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x60000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:05:56 executing program 2: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 805.536461] FAULT_INJECTION: forcing a failure. 20:05:56 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, 0x0) dup2(r0, r1) [ 805.536461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 805.537740] CPU: 0 UID: 0 PID: 7308 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 805.537760] Tainted: [W]=WARN [ 805.537764] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 805.537771] Call Trace: [ 805.537775] [ 805.537781] dump_stack_lvl+0xfa/0x120 [ 805.537803] should_fail_ex+0x4d7/0x5e0 [ 805.537826] ? page_copy_sane+0xce/0x2b0 [ 805.537847] copy_folio_from_iter_atomic+0x536/0x1820 [ 805.537878] ? fault_in_readable+0x12d/0x1d0 [ 805.537900] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 805.537920] ? fault_in_readable+0x172/0x1d0 [ 805.537935] ? __pfx_fault_in_readable+0x10/0x10 [ 805.537967] iomap_file_buffered_write+0x4fa/0xa40 [ 805.537996] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 805.538016] ? __lock_acquire+0x451/0x2250 [ 805.538049] ? __pfx_down_read+0x10/0x10 [ 805.538063] ? generic_update_time+0xcb/0xf0 [ 805.538077] ? mnt_put_write_access_file+0xb7/0xe0 [ 805.538096] ? file_update_time_flags+0x24c/0x4f0 [ 805.538112] blkdev_write_iter+0x7a0/0xd00 [ 805.538135] do_iter_readv_writev+0x5b3/0x910 [ 805.538154] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 805.538170] ? __import_iovec+0x1df/0x670 [ 805.538185] ? avc_policy_seqno+0x9/0x20 [ 805.538201] ? security_file_permission+0x22/0x90 [ 805.538224] vfs_writev+0x2d4/0xcd0 [ 805.538241] ? perf_trace_lock+0xb5/0x5d0 [ 805.538254] ? __lock_acquire+0x451/0x2250 [ 805.538268] ? __pfx_vfs_writev+0x10/0x10 [ 805.538284] ? __pfx_perf_trace_lock+0x10/0x10 [ 805.538302] ? __fget_files+0x34/0x3b0 [ 805.538319] ? find_held_lock+0x2b/0x80 [ 805.538336] ? __fget_files+0x203/0x3b0 [ 805.538353] ? lock_release+0xc8/0x270 [ 805.538369] ? __fget_files+0x20d/0x3b0 [ 805.538392] do_pwritev+0x1ab/0x280 [ 805.538409] ? __pfx_do_pwritev+0x10/0x10 [ 805.538426] ? find_held_lock+0x2b/0x80 [ 805.538442] ? syscall_trace_enter+0x1cf/0x230 [ 805.538458] __x64_sys_pwritev2+0xef/0x160 [ 805.538472] do_syscall_64+0xbf/0x420 [ 805.538488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.538503] RIP: 0033:0x7f9d93406b19 [ 805.538514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 805.538526] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 805.538538] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 805.538545] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 805.538552] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 805.538560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 805.538567] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 805.538584] [ 805.563633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 805.564274] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 805.565193] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 805.565645] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:05:56 executing program 2: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:05:56 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 25) 20:05:56 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x80000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:05:56 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, 0x0) dup2(r0, r1) [ 805.696109] FAULT_INJECTION: forcing a failure. [ 805.696109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 805.697082] CPU: 0 UID: 0 PID: 7324 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 805.697100] Tainted: [W]=WARN [ 805.697104] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 805.697112] Call Trace: [ 805.697116] [ 805.697121] dump_stack_lvl+0xfa/0x120 [ 805.697142] should_fail_ex+0x4d7/0x5e0 [ 805.697160] ? page_copy_sane+0xce/0x2b0 [ 805.697177] copy_folio_from_iter_atomic+0x536/0x1820 [ 805.697207] ? fault_in_readable+0x12d/0x1d0 [ 805.697225] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 805.697244] ? fault_in_readable+0x172/0x1d0 [ 805.697259] ? __pfx_fault_in_readable+0x10/0x10 [ 805.697281] iomap_file_buffered_write+0x4fa/0xa40 [ 805.697318] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 805.697344] ? __lock_acquire+0x451/0x2250 [ 805.697379] ? __pfx_down_read+0x10/0x10 [ 805.697397] ? generic_update_time+0xcb/0xf0 [ 805.697412] ? mnt_put_write_access_file+0xb7/0xe0 [ 805.697437] ? file_update_time_flags+0x24c/0x4f0 [ 805.697454] blkdev_write_iter+0x7a0/0xd00 [ 805.697481] do_iter_readv_writev+0x5b3/0x910 [ 805.697503] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 805.697518] ? __import_iovec+0x1df/0x670 [ 805.697533] ? avc_policy_seqno+0x9/0x20 [ 805.697549] ? security_file_permission+0x22/0x90 [ 805.697571] vfs_writev+0x2d4/0xcd0 [ 805.697588] ? perf_trace_lock+0xb5/0x5d0 [ 805.697601] ? __lock_acquire+0x451/0x2250 [ 805.697615] ? __pfx_vfs_writev+0x10/0x10 [ 805.697630] ? __pfx_perf_trace_lock+0x10/0x10 [ 805.697648] ? __fget_files+0x34/0x3b0 [ 805.697666] ? find_held_lock+0x2b/0x80 [ 805.697682] ? __fget_files+0x203/0x3b0 [ 805.697699] ? lock_release+0xc8/0x270 [ 805.697715] ? __fget_files+0x20d/0x3b0 [ 805.697739] do_pwritev+0x1ab/0x280 [ 805.697756] ? __pfx_do_pwritev+0x10/0x10 [ 805.697772] ? find_held_lock+0x2b/0x80 [ 805.697788] ? syscall_trace_enter+0x1cf/0x230 [ 805.697805] __x64_sys_pwritev2+0xef/0x160 [ 805.697818] do_syscall_64+0xbf/0x420 [ 805.697835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.697847] RIP: 0033:0x7f9d93406b19 [ 805.697857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 805.697868] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 805.697880] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 805.697888] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 20:05:56 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x600, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 805.697899] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 805.697906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 805.697913] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 805.697931] [ 805.738599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 805.739079] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 805.750561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 805.751044] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:05:56 executing program 2: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:05:56 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0xa0000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:05:56 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 26) [ 805.909533] FAULT_INJECTION: forcing a failure. [ 805.909533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 805.911534] CPU: 1 UID: 0 PID: 7342 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 805.911570] Tainted: [W]=WARN [ 805.911578] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 805.911592] Call Trace: [ 805.911600] [ 805.911608] dump_stack_lvl+0xfa/0x120 [ 805.911643] should_fail_ex+0x4d7/0x5e0 [ 805.911674] ? page_copy_sane+0xce/0x2b0 [ 805.911706] copy_folio_from_iter_atomic+0x536/0x1820 [ 805.911757] ? fault_in_readable+0x12d/0x1d0 [ 805.911786] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 805.911818] ? fault_in_readable+0x172/0x1d0 [ 805.911845] ? __pfx_fault_in_readable+0x10/0x10 [ 805.911887] iomap_file_buffered_write+0x4fa/0xa40 [ 805.911948] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 805.911986] ? __lock_acquire+0x451/0x2250 [ 805.912050] ? __pfx_down_read+0x10/0x10 [ 805.912075] ? generic_update_time+0xcb/0xf0 [ 805.912099] ? mnt_put_write_access_file+0xb7/0xe0 [ 805.912135] ? file_update_time_flags+0x24c/0x4f0 [ 805.912167] blkdev_write_iter+0x7a0/0xd00 [ 805.912210] do_iter_readv_writev+0x5b3/0x910 [ 805.912246] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 805.912277] ? __import_iovec+0x1df/0x670 [ 805.912307] ? avc_policy_seqno+0x9/0x20 [ 805.912337] ? security_file_permission+0x22/0x90 [ 805.912381] vfs_writev+0x2d4/0xcd0 [ 805.912413] ? perf_trace_lock+0xb5/0x5d0 [ 805.912439] ? __lock_acquire+0x451/0x2250 [ 805.912467] ? __pfx_vfs_writev+0x10/0x10 [ 805.912498] ? __pfx_perf_trace_lock+0x10/0x10 [ 805.912533] ? __fget_files+0x34/0x3b0 [ 805.912567] ? find_held_lock+0x2b/0x80 [ 805.912600] ? __fget_files+0x203/0x3b0 [ 805.912634] ? lock_release+0xc8/0x270 [ 805.912665] ? __fget_files+0x20d/0x3b0 [ 805.912712] do_pwritev+0x1ab/0x280 [ 805.912746] ? __pfx_do_pwritev+0x10/0x10 [ 805.912778] ? find_held_lock+0x2b/0x80 [ 805.912811] ? syscall_trace_enter+0x1cf/0x230 [ 805.912842] __x64_sys_pwritev2+0xef/0x160 [ 805.912869] do_syscall_64+0xbf/0x420 [ 805.912900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.912924] RIP: 0033:0x7f9d93406b19 [ 805.912941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 805.912963] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 805.912986] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 805.913001] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 805.913015] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 805.913029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 805.913042] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 805.913078] [ 805.970363] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 805.971588] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 805.975727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 805.977301] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 811.589855] kmemleak: 80 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 20:06:07 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0xc0000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:06:07 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:06:07 executing program 6: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:06:07 executing program 3: syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(0xffffffffffffffff, r0) 20:06:07 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x810, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:06:07 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 27) 20:06:07 executing program 2: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:06:07 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, 0x0) dup2(r0, r1) [ 817.143996] FAULT_INJECTION: forcing a failure. [ 817.143996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.145159] CPU: 0 UID: 0 PID: 7350 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 817.145179] Tainted: [W]=WARN [ 817.145183] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 817.145191] Call Trace: [ 817.145196] [ 817.145200] dump_stack_lvl+0xfa/0x120 [ 817.145226] should_fail_ex+0x4d7/0x5e0 [ 817.145251] ? page_copy_sane+0xce/0x2b0 [ 817.145274] copy_folio_from_iter_atomic+0x536/0x1820 [ 817.145305] ? fault_in_readable+0x12d/0x1d0 [ 817.145324] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 817.145345] ? fault_in_readable+0x172/0x1d0 [ 817.145360] ? __pfx_fault_in_readable+0x10/0x10 [ 817.145382] iomap_file_buffered_write+0x4fa/0xa40 [ 817.145418] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 817.145438] ? __lock_acquire+0x451/0x2250 [ 817.145471] ? __pfx_down_read+0x10/0x10 [ 817.145486] ? generic_update_time+0xcb/0xf0 [ 817.145500] ? mnt_put_write_access_file+0xb7/0xe0 [ 817.145519] ? file_update_time_flags+0x24c/0x4f0 [ 817.145535] blkdev_write_iter+0x7a0/0xd00 [ 817.145558] do_iter_readv_writev+0x5b3/0x910 [ 817.145586] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 817.145602] ? __import_iovec+0x1df/0x670 [ 817.145617] ? avc_policy_seqno+0x9/0x20 [ 817.145634] ? security_file_permission+0x22/0x90 [ 817.145657] vfs_writev+0x2d4/0xcd0 [ 817.145674] ? perf_trace_lock+0xb5/0x5d0 [ 817.145687] ? __lock_acquire+0x451/0x2250 [ 817.145701] ? __pfx_vfs_writev+0x10/0x10 [ 817.145717] ? __pfx_perf_trace_lock+0x10/0x10 [ 817.145734] ? __fget_files+0x34/0x3b0 [ 817.145752] ? find_held_lock+0x2b/0x80 [ 817.145769] ? __fget_files+0x203/0x3b0 [ 817.145786] ? lock_release+0xc8/0x270 [ 817.145802] ? __fget_files+0x20d/0x3b0 [ 817.145825] do_pwritev+0x1ab/0x280 [ 817.145842] ? __pfx_do_pwritev+0x10/0x10 [ 817.145858] ? find_held_lock+0x2b/0x80 [ 817.145875] ? syscall_trace_enter+0x1cf/0x230 [ 817.145896] __x64_sys_pwritev2+0xef/0x160 [ 817.145909] do_syscall_64+0xbf/0x420 [ 817.145926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.145939] RIP: 0033:0x7f9d93406b19 [ 817.145948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 817.145960] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 817.145971] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 817.145979] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 817.145986] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 817.145993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 817.146000] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 817.146018] [ 817.191740] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 817.192801] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 817.194286] buffer_io_error: 2070 callbacks suppressed [ 817.194301] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 817.196364] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 817.197583] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 817.198800] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 817.200022] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 817.205123] Buffer I/O error on dev sr0, logical block 5, lost async page write [ 817.208959] Buffer I/O error on dev sr0, logical block 6, lost async page write [ 817.210154] Buffer I/O error on dev sr0, logical block 7, lost async page write [ 817.211561] Buffer I/O error on dev sr0, logical block 8, lost async page write [ 817.212645] Buffer I/O error on dev sr0, logical block 9, lost async page write 20:06:07 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x1008, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:06:07 executing program 5: syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(0xffffffffffffffff, r0) [ 817.234552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 817.235436] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 817.250466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 817.251627] I/O error, dev sr0, sector 127 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 817.253544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 817.254434] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 817.281669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 817.282524] I/O error, dev sr0, sector 254 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 20:06:08 executing program 2: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 817.324666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 817.325582] I/O error, dev sr0, sector 381 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 817.329772] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 817.330660] I/O error, dev sr0, sector 508 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 817.357202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 817.358188] I/O error, dev sr0, sector 635 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 817.360185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 817.361075] I/O error, dev sr0, sector 762 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 20:06:08 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 28) 20:06:08 executing program 6: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:06:08 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0xe0000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 817.471007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 817.471887] I/O error, dev sr0, sector 889 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 817.473780] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 817.489803] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 817.506670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 817.509576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 817.526881] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 817.529557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:06:08 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x4000, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 817.563752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:06:08 executing program 2: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 817.582772] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 817.590571] FAULT_INJECTION: forcing a failure. [ 817.590571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 817.592258] CPU: 1 UID: 0 PID: 7379 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 817.592292] Tainted: [W]=WARN [ 817.592299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 817.592312] Call Trace: [ 817.592320] [ 817.592329] dump_stack_lvl+0xfa/0x120 [ 817.592366] should_fail_ex+0x4d7/0x5e0 [ 817.592401] ? page_copy_sane+0xce/0x2b0 [ 817.592436] copy_folio_from_iter_atomic+0x536/0x1820 [ 817.592487] ? fault_in_readable+0x12d/0x1d0 [ 817.592516] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 817.592547] ? fault_in_readable+0x172/0x1d0 [ 817.592572] ? __pfx_fault_in_readable+0x10/0x10 [ 817.592611] iomap_file_buffered_write+0x4fa/0xa40 [ 817.592663] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 817.592699] ? __lock_acquire+0x451/0x2250 [ 817.592758] ? __pfx_down_read+0x10/0x10 [ 817.592784] ? generic_update_time+0xcb/0xf0 [ 817.592807] ? mnt_put_write_access_file+0xb7/0xe0 [ 817.592841] ? file_update_time_flags+0x24c/0x4f0 [ 817.592871] blkdev_write_iter+0x7a0/0xd00 [ 817.592918] do_iter_readv_writev+0x5b3/0x910 [ 817.592952] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 817.592980] ? __import_iovec+0x1df/0x670 [ 817.593008] ? avc_policy_seqno+0x9/0x20 [ 817.593037] ? security_file_permission+0x22/0x90 [ 817.593078] vfs_writev+0x2d4/0xcd0 [ 817.593109] ? perf_trace_lock+0xb5/0x5d0 [ 817.593133] ? __lock_acquire+0x451/0x2250 [ 817.593159] ? __pfx_vfs_writev+0x10/0x10 [ 817.593188] ? __pfx_perf_trace_lock+0x10/0x10 [ 817.593221] ? __fget_files+0x34/0x3b0 [ 817.593253] ? find_held_lock+0x2b/0x80 [ 817.593283] ? __fget_files+0x203/0x3b0 [ 817.593315] ? lock_release+0xc8/0x270 [ 817.593344] ? __fget_files+0x20d/0x3b0 [ 817.593388] do_pwritev+0x1ab/0x280 [ 817.593419] ? __pfx_do_pwritev+0x10/0x10 [ 817.593450] ? find_held_lock+0x2b/0x80 [ 817.593480] ? syscall_trace_enter+0x1cf/0x230 [ 817.593509] __x64_sys_pwritev2+0xef/0x160 [ 817.593534] do_syscall_64+0xbf/0x420 [ 817.593563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.593586] RIP: 0033:0x7f9d93406b19 [ 817.593603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 817.593623] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 817.593644] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 817.593659] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 817.593672] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 817.593685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 817.593697] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 817.593730] [ 817.643311] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 817.645083] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 817.646280] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 817.647455] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 fc 00 00 0c 00 20:06:08 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x100000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 817.695181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 817.696936] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:06:18 executing program 5: syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(0xffffffffffffffff, r0) 20:06:18 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0xeffd, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:06:18 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 29) 20:06:18 executing program 3: syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(0xffffffffffffffff, r0) 20:06:18 executing program 6: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:06:18 executing program 2: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:06:18 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0xf0ff7f}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:06:18 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:06:18 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0xfcfd, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:06:18 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 827.770869] FAULT_INJECTION: forcing a failure. [ 827.770869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 827.773080] CPU: 1 UID: 0 PID: 7416 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 827.773114] Tainted: [W]=WARN [ 827.773121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 827.773134] Call Trace: [ 827.773141] [ 827.773149] dump_stack_lvl+0xfa/0x120 [ 827.773182] should_fail_ex+0x4d7/0x5e0 [ 827.773211] ? page_copy_sane+0xce/0x2b0 [ 827.773241] copy_folio_from_iter_atomic+0x536/0x1820 [ 827.773288] ? fault_in_readable+0x12d/0x1d0 [ 827.773314] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 827.773344] ? fault_in_readable+0x172/0x1d0 [ 827.773369] ? __pfx_fault_in_readable+0x10/0x10 [ 827.773408] iomap_file_buffered_write+0x4fa/0xa40 [ 827.773459] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 827.773494] ? __lock_acquire+0x451/0x2250 [ 827.773553] ? __pfx_down_read+0x10/0x10 [ 827.773578] ? generic_update_time+0xcb/0xf0 [ 827.773600] ? mnt_put_write_access_file+0xb7/0xe0 [ 827.773633] ? file_update_time_flags+0x24c/0x4f0 [ 827.773663] blkdev_write_iter+0x7a0/0xd00 [ 827.773702] do_iter_readv_writev+0x5b3/0x910 [ 827.773735] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 827.773764] ? __import_iovec+0x1df/0x670 [ 827.773791] ? avc_policy_seqno+0x9/0x20 [ 827.773820] ? security_file_permission+0x22/0x90 [ 827.773860] vfs_writev+0x2d4/0xcd0 [ 827.773898] ? perf_trace_lock+0xb5/0x5d0 20:06:18 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0xfdef, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 827.773922] ? __lock_acquire+0x451/0x2250 [ 827.773948] ? __pfx_vfs_writev+0x10/0x10 [ 827.773977] ? __pfx_perf_trace_lock+0x10/0x10 [ 827.774010] ? __fget_files+0x34/0x3b0 [ 827.774042] ? find_held_lock+0x2b/0x80 [ 827.774072] ? __fget_files+0x203/0x3b0 [ 827.774104] ? lock_release+0xc8/0x270 [ 827.774133] ? __fget_files+0x20d/0x3b0 [ 827.774177] do_pwritev+0x1ab/0x280 [ 827.774223] ? __pfx_do_pwritev+0x10/0x10 [ 827.774253] ? find_held_lock+0x2b/0x80 [ 827.774284] ? syscall_trace_enter+0x1cf/0x230 [ 827.774313] __x64_sys_pwritev2+0xef/0x160 [ 827.774338] do_syscall_64+0xbf/0x420 [ 827.774367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.774389] RIP: 0033:0x7f9d93406b19 [ 827.774406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 827.774427] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 827.774448] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 827.774462] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 827.774475] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 827.774488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 827.774500] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 827.774533] [ 827.828747] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 827.829266] blk_print_req_error: 11 callbacks suppressed [ 827.829275] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 827.830668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 827.831705] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:06:18 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:06:18 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0xfdfc, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:06:18 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:06:18 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0xfeff3f}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:06:18 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 30) [ 827.966742] FAULT_INJECTION: forcing a failure. [ 827.966742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 827.967777] CPU: 0 UID: 0 PID: 7439 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 827.967796] Tainted: [W]=WARN [ 827.967800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 827.967808] Call Trace: [ 827.967813] [ 827.967818] dump_stack_lvl+0xfa/0x120 [ 827.967843] should_fail_ex+0x4d7/0x5e0 [ 827.967870] ? page_copy_sane+0xce/0x2b0 [ 827.967896] copy_folio_from_iter_atomic+0x536/0x1820 [ 827.967928] ? fault_in_readable+0x12d/0x1d0 [ 827.967947] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 827.967968] ? fault_in_readable+0x172/0x1d0 [ 827.967983] ? __pfx_fault_in_readable+0x10/0x10 [ 827.968005] iomap_file_buffered_write+0x4fa/0xa40 [ 827.968047] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 827.968074] ? __lock_acquire+0x451/0x2250 [ 827.968110] ? __pfx_down_read+0x10/0x10 [ 827.968127] ? generic_update_time+0xcb/0xf0 [ 827.968141] ? mnt_put_write_access_file+0xb7/0xe0 [ 827.968160] ? file_update_time_flags+0x24c/0x4f0 [ 827.968176] blkdev_write_iter+0x7a0/0xd00 [ 827.968198] do_iter_readv_writev+0x5b3/0x910 [ 827.968217] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 827.968233] ? __import_iovec+0x1df/0x670 [ 827.968248] ? avc_policy_seqno+0x9/0x20 [ 827.968264] ? security_file_permission+0x22/0x90 [ 827.968287] vfs_writev+0x2d4/0xcd0 [ 827.968303] ? perf_trace_lock+0xb5/0x5d0 [ 827.968316] ? __lock_acquire+0x451/0x2250 [ 827.968330] ? __pfx_vfs_writev+0x10/0x10 [ 827.968346] ? __pfx_perf_trace_lock+0x10/0x10 [ 827.968364] ? __fget_files+0x34/0x3b0 [ 827.968382] ? find_held_lock+0x2b/0x80 [ 827.968398] ? __fget_files+0x203/0x3b0 [ 827.968415] ? lock_release+0xc8/0x270 [ 827.968431] ? __fget_files+0x20d/0x3b0 [ 827.968455] do_pwritev+0x1ab/0x280 [ 827.968472] ? __pfx_do_pwritev+0x10/0x10 [ 827.968488] ? find_held_lock+0x2b/0x80 [ 827.968504] ? syscall_trace_enter+0x1cf/0x230 [ 827.968521] __x64_sys_pwritev2+0xef/0x160 [ 827.968535] do_syscall_64+0xbf/0x420 [ 827.968551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.968563] RIP: 0033:0x7f9d93406b19 [ 827.968573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 827.968585] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 827.968597] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 827.968605] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 827.968612] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 827.968619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 827.968626] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 827.968644] [ 828.044952] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 828.046138] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 828.067125] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 828.068400] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:06:27 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:06:27 executing program 5: syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(0xffffffffffffffff, r0) 20:06:27 executing program 2: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:06:27 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:06:27 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0xfdfe, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:06:27 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 31) 20:06:27 executing program 3: syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(0xffffffffffffffff, r0) 20:06:27 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x1000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:06:27 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0xfe00, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 836.994472] FAULT_INJECTION: forcing a failure. [ 836.994472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.995856] CPU: 0 UID: 0 PID: 7460 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 836.995876] Tainted: [W]=WARN [ 836.995880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 836.995891] Call Trace: [ 836.995895] [ 836.995900] dump_stack_lvl+0xfa/0x120 [ 836.995923] should_fail_ex+0x4d7/0x5e0 [ 836.995940] ? page_copy_sane+0xce/0x2b0 [ 836.995959] copy_folio_from_iter_atomic+0x536/0x1820 [ 836.995985] ? fault_in_readable+0x12d/0x1d0 [ 836.996001] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 836.996017] ? fault_in_readable+0x172/0x1d0 [ 836.996031] ? __pfx_fault_in_readable+0x10/0x10 [ 836.996054] iomap_file_buffered_write+0x4fa/0xa40 [ 836.996093] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 836.996119] ? __lock_acquire+0x451/0x2250 [ 836.996154] ? __pfx_down_read+0x10/0x10 [ 836.996172] ? generic_update_time+0xcb/0xf0 [ 836.996187] ? mnt_put_write_access_file+0xb7/0xe0 [ 836.996214] ? file_update_time_flags+0x24c/0x4f0 [ 836.996231] blkdev_write_iter+0x7a0/0xd00 [ 836.996258] do_iter_readv_writev+0x5b3/0x910 [ 836.996284] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 836.996303] ? __import_iovec+0x1df/0x670 [ 836.996322] ? avc_policy_seqno+0x9/0x20 [ 836.996340] ? security_file_permission+0x22/0x90 [ 836.996369] vfs_writev+0x2d4/0xcd0 [ 836.996385] ? perf_trace_lock+0xb5/0x5d0 [ 836.996398] ? __lock_acquire+0x451/0x2250 [ 836.996412] ? __pfx_vfs_writev+0x10/0x10 [ 836.996428] ? __pfx_perf_trace_lock+0x10/0x10 [ 836.996446] ? __fget_files+0x34/0x3b0 [ 836.996464] ? find_held_lock+0x2b/0x80 [ 836.996481] ? __fget_files+0x203/0x3b0 [ 836.996498] ? lock_release+0xc8/0x270 [ 836.996514] ? __fget_files+0x20d/0x3b0 [ 836.996538] do_pwritev+0x1ab/0x280 [ 836.996555] ? __pfx_do_pwritev+0x10/0x10 [ 836.996571] ? find_held_lock+0x2b/0x80 [ 836.996587] ? syscall_trace_enter+0x1cf/0x230 [ 836.996604] __x64_sys_pwritev2+0xef/0x160 [ 836.996618] do_syscall_64+0xbf/0x420 [ 836.996635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.996652] RIP: 0033:0x7f9d93406b19 [ 836.996662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 836.996673] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 836.996685] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 836.996693] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 836.996700] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 836.996707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 836.996714] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 836.996732] 20:06:27 executing program 2: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:06:27 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 837.064601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 837.065125] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 837.079101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 837.079555] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:06:27 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0xfefd, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:06:27 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:06:27 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:06:27 executing program 2: r0 = openat$sr(0xffffffffffffff9c, 0x0, 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:06:27 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 32) 20:06:27 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 837.236468] FAULT_INJECTION: forcing a failure. [ 837.236468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.237605] CPU: 0 UID: 0 PID: 7486 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 837.237625] Tainted: [W]=WARN [ 837.237629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 837.237637] Call Trace: [ 837.237641] [ 837.237646] dump_stack_lvl+0xfa/0x120 [ 837.237668] should_fail_ex+0x4d7/0x5e0 [ 837.237686] ? page_copy_sane+0xce/0x2b0 [ 837.237704] copy_folio_from_iter_atomic+0x536/0x1820 [ 837.237730] ? fault_in_readable+0x12d/0x1d0 [ 837.237746] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 837.237762] ? fault_in_readable+0x172/0x1d0 [ 837.237776] ? __pfx_fault_in_readable+0x10/0x10 [ 837.237797] iomap_file_buffered_write+0x4fa/0xa40 [ 837.237827] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 837.237847] ? __lock_acquire+0x451/0x2250 [ 837.237881] ? __pfx_down_read+0x10/0x10 [ 837.237901] ? generic_update_time+0xcb/0xf0 [ 837.237915] ? mnt_put_write_access_file+0xb7/0xe0 [ 837.237935] ? file_update_time_flags+0x24c/0x4f0 [ 837.237952] blkdev_write_iter+0x7a0/0xd00 [ 837.237974] do_iter_readv_writev+0x5b3/0x910 [ 837.237995] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 837.238010] ? __import_iovec+0x1df/0x670 [ 837.238025] ? avc_policy_seqno+0x9/0x20 [ 837.238041] ? security_file_permission+0x22/0x90 [ 837.238064] vfs_writev+0x2d4/0xcd0 [ 837.238080] ? perf_trace_lock+0xb5/0x5d0 [ 837.238094] ? __lock_acquire+0x451/0x2250 [ 837.238108] ? __pfx_vfs_writev+0x10/0x10 [ 837.238123] ? __pfx_perf_trace_lock+0x10/0x10 [ 837.238141] ? __fget_files+0x34/0x3b0 [ 837.238159] ? find_held_lock+0x2b/0x80 [ 837.238175] ? __fget_files+0x203/0x3b0 [ 837.238193] ? lock_release+0xc8/0x270 [ 837.238208] ? __fget_files+0x20d/0x3b0 [ 837.238232] do_pwritev+0x1ab/0x280 [ 837.238249] ? __pfx_do_pwritev+0x10/0x10 [ 837.238265] ? find_held_lock+0x2b/0x80 [ 837.238281] ? syscall_trace_enter+0x1cf/0x230 [ 837.238298] __x64_sys_pwritev2+0xef/0x160 [ 837.238312] do_syscall_64+0xbf/0x420 [ 837.238337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.238350] RIP: 0033:0x7f9d93406b19 [ 837.238360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 837.238371] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 837.238383] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 837.238391] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 837.238398] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 837.238405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 837.238412] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 837.238430] [ 837.293566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 837.294494] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 837.296458] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 837.296964] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 847.200659] kmemleak: 34 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 848.390484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 848.391564] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 848.393137] buffer_io_error: 2070 callbacks suppressed [ 848.393154] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 848.395365] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 848.396657] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 848.397959] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 848.399267] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 848.400554] Buffer I/O error on dev sr0, logical block 5, lost async page write [ 848.401834] Buffer I/O error on dev sr0, logical block 6, lost async page write [ 848.403137] Buffer I/O error on dev sr0, logical block 7, lost async page write [ 848.404435] Buffer I/O error on dev sr0, logical block 8, lost async page write [ 848.405723] Buffer I/O error on dev sr0, logical block 9, lost async page write [ 848.407610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 848.408624] I/O error, dev sr0, sector 127 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 848.417782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 848.418821] I/O error, dev sr0, sector 254 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 848.421032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 848.422029] I/O error, dev sr0, sector 381 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 848.427027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 848.428051] I/O error, dev sr0, sector 508 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 848.430285] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 848.431381] I/O error, dev sr0, sector 635 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 848.442732] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 848.443768] I/O error, dev sr0, sector 762 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 848.445958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 848.446980] I/O error, dev sr0, sector 889 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 848.452109] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 848.453147] I/O error, dev sr0, sector 1016 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 848.455393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 848.456400] I/O error, dev sr0, sector 1143 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 848.461302] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 848.463047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 848.466698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 848.468156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 848.471753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 848.473186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 848.542165] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 848.543692] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 848.545070] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 848.546187] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 fc 00 00 0c 00 20:06:43 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, 0xffffffffffffffff) 20:06:43 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:06:43 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:06:43 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x3000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:06:43 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:06:43 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 33) 20:06:43 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:06:43 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, 0xffffffffffffffff) 20:06:43 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, 0x0) dup2(r0, r1) [ 853.153827] FAULT_INJECTION: forcing a failure. [ 853.153827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.154846] CPU: 0 UID: 0 PID: 7508 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 853.154865] Tainted: [W]=WARN [ 853.154869] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 853.154877] Call Trace: [ 853.154881] [ 853.154890] dump_stack_lvl+0xfa/0x120 [ 853.154920] should_fail_ex+0x4d7/0x5e0 [ 853.154950] ? page_copy_sane+0xce/0x2b0 [ 853.154972] copy_folio_from_iter_atomic+0x536/0x1820 [ 853.155004] ? fault_in_readable+0x12d/0x1d0 [ 853.155023] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 853.155044] ? fault_in_readable+0x172/0x1d0 [ 853.155058] ? __pfx_fault_in_readable+0x10/0x10 [ 853.155081] iomap_file_buffered_write+0x4fa/0xa40 [ 853.155121] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 853.155144] ? __lock_acquire+0x451/0x2250 [ 853.155177] ? __pfx_down_read+0x10/0x10 [ 853.155191] ? generic_update_time+0xcb/0xf0 [ 853.155205] ? mnt_put_write_access_file+0xb7/0xe0 [ 853.155223] ? file_update_time_flags+0x24c/0x4f0 [ 853.155239] blkdev_write_iter+0x7a0/0xd00 [ 853.155262] do_iter_readv_writev+0x5b3/0x910 [ 853.155281] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 853.155296] ? __import_iovec+0x1df/0x670 [ 853.155311] ? avc_policy_seqno+0x9/0x20 [ 853.155328] ? security_file_permission+0x22/0x90 [ 853.155351] vfs_writev+0x2d4/0xcd0 [ 853.155367] ? perf_trace_lock+0xb5/0x5d0 [ 853.155381] ? __lock_acquire+0x451/0x2250 [ 853.155395] ? __pfx_vfs_writev+0x10/0x10 [ 853.155410] ? __pfx_perf_trace_lock+0x10/0x10 [ 853.155428] ? __fget_files+0x34/0x3b0 [ 853.155445] ? find_held_lock+0x2b/0x80 [ 853.155462] ? __fget_files+0x203/0x3b0 [ 853.155479] ? lock_release+0xc8/0x270 [ 853.155495] ? __fget_files+0x20d/0x3b0 [ 853.155519] do_pwritev+0x1ab/0x280 [ 853.155536] ? __pfx_do_pwritev+0x10/0x10 [ 853.155552] ? find_held_lock+0x2b/0x80 [ 853.155568] ? syscall_trace_enter+0x1cf/0x230 [ 853.155585] __x64_sys_pwritev2+0xef/0x160 [ 853.155599] do_syscall_64+0xbf/0x420 [ 853.155615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.155627] RIP: 0033:0x7f9d93406b19 [ 853.155637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 853.155648] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 853.155660] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 853.155668] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 853.155675] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 853.155682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 853.155689] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 853.155707] 20:06:43 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:06:43 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 853.213759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 853.215059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:06:43 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, 0x0) dup2(r0, r1) 20:06:44 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x100000, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:06:44 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x5000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:06:44 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 34) 20:06:44 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, 0x0) dup2(r0, r1) [ 853.462962] FAULT_INJECTION: forcing a failure. [ 853.462962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.465072] CPU: 1 UID: 0 PID: 7533 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 853.465112] Tainted: [W]=WARN [ 853.465120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 853.465135] Call Trace: [ 853.465143] [ 853.465152] dump_stack_lvl+0xfa/0x120 [ 853.465192] should_fail_ex+0x4d7/0x5e0 [ 853.465231] ? page_copy_sane+0xce/0x2b0 [ 853.465270] copy_folio_from_iter_atomic+0x536/0x1820 [ 853.465324] ? fault_in_readable+0x12d/0x1d0 [ 853.465354] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 853.465388] ? fault_in_readable+0x172/0x1d0 [ 853.465417] ? __pfx_fault_in_readable+0x10/0x10 [ 853.465462] iomap_file_buffered_write+0x4fa/0xa40 [ 853.465521] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 853.465562] ? __lock_acquire+0x451/0x2250 [ 853.465630] ? __pfx_down_read+0x10/0x10 [ 853.465658] ? generic_update_time+0xcb/0xf0 [ 853.465686] ? mnt_put_write_access_file+0xb7/0xe0 [ 853.465724] ? file_update_time_flags+0x24c/0x4f0 [ 853.465759] blkdev_write_iter+0x7a0/0xd00 [ 853.465803] do_iter_readv_writev+0x5b3/0x910 [ 853.465841] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 853.465874] ? __import_iovec+0x1df/0x670 [ 853.465918] ? avc_policy_seqno+0x9/0x20 [ 853.465952] ? security_file_permission+0x22/0x90 [ 853.465998] vfs_writev+0x2d4/0xcd0 [ 853.466033] ? perf_trace_lock+0xb5/0x5d0 [ 853.466061] ? __lock_acquire+0x451/0x2250 [ 853.466091] ? __pfx_vfs_writev+0x10/0x10 [ 853.466124] ? __pfx_perf_trace_lock+0x10/0x10 [ 853.466162] ? __fget_files+0x34/0x3b0 [ 853.466199] ? find_held_lock+0x2b/0x80 [ 853.466234] ? __fget_files+0x203/0x3b0 [ 853.466271] ? lock_release+0xc8/0x270 [ 853.466304] ? __fget_files+0x20d/0x3b0 [ 853.466354] do_pwritev+0x1ab/0x280 [ 853.466391] ? __pfx_do_pwritev+0x10/0x10 [ 853.466425] ? find_held_lock+0x2b/0x80 [ 853.466460] ? syscall_trace_enter+0x1cf/0x230 [ 853.466493] __x64_sys_pwritev2+0xef/0x160 [ 853.466534] do_syscall_64+0xbf/0x420 [ 853.466567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.466592] RIP: 0033:0x7f9d93406b19 [ 853.466612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 853.466635] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 853.466659] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 853.466676] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 853.466691] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 853.466706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 853.466720] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 853.466758] [ 853.536313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 853.537673] blk_print_req_error: 9 callbacks suppressed [ 853.537689] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 853.549429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 853.550570] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:06:53 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, 0xffffffffffffffff) 20:06:53 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, 0xffffffffffffffff) 20:06:53 executing program 6: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:06:53 executing program 2: openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:06:53 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x6000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:06:53 executing program 1: syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(0xffffffffffffffff, r0) 20:06:53 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 35) 20:06:53 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0xfeffff, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 863.145696] FAULT_INJECTION: forcing a failure. [ 863.145696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 863.146782] CPU: 0 UID: 0 PID: 7543 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 863.146802] Tainted: [W]=WARN [ 863.146806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 863.146814] Call Trace: [ 863.146818] [ 863.146823] dump_stack_lvl+0xfa/0x120 [ 863.146847] should_fail_ex+0x4d7/0x5e0 [ 863.146872] ? page_copy_sane+0xce/0x2b0 [ 863.146898] copy_folio_from_iter_atomic+0x536/0x1820 [ 863.146929] ? fault_in_readable+0x12d/0x1d0 [ 863.146948] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 863.146969] ? fault_in_readable+0x172/0x1d0 [ 863.146984] ? __pfx_fault_in_readable+0x10/0x10 [ 863.147007] iomap_file_buffered_write+0x4fa/0xa40 [ 863.147047] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 863.147073] ? __lock_acquire+0x451/0x2250 [ 863.147109] ? __pfx_down_read+0x10/0x10 [ 863.147128] ? generic_update_time+0xcb/0xf0 [ 863.147143] ? mnt_put_write_access_file+0xb7/0xe0 [ 863.147170] ? file_update_time_flags+0x24c/0x4f0 [ 863.147187] blkdev_write_iter+0x7a0/0xd00 [ 863.147214] do_iter_readv_writev+0x5b3/0x910 [ 863.147240] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 863.147260] ? __import_iovec+0x1df/0x670 [ 863.147276] ? avc_policy_seqno+0x9/0x20 [ 863.147292] ? security_file_permission+0x22/0x90 [ 863.147315] vfs_writev+0x2d4/0xcd0 [ 863.147331] ? perf_trace_lock+0xb5/0x5d0 [ 863.147345] ? __lock_acquire+0x451/0x2250 [ 863.147359] ? __pfx_vfs_writev+0x10/0x10 [ 863.147374] ? __pfx_perf_trace_lock+0x10/0x10 [ 863.147392] ? __fget_files+0x34/0x3b0 [ 863.147409] ? find_held_lock+0x2b/0x80 [ 863.147426] ? __fget_files+0x203/0x3b0 [ 863.147443] ? lock_release+0xc8/0x270 [ 863.147458] ? __fget_files+0x20d/0x3b0 [ 863.147482] do_pwritev+0x1ab/0x280 [ 863.147499] ? __pfx_do_pwritev+0x10/0x10 [ 863.147515] ? find_held_lock+0x2b/0x80 [ 863.147531] ? syscall_trace_enter+0x1cf/0x230 [ 863.147548] __x64_sys_pwritev2+0xef/0x160 [ 863.147561] do_syscall_64+0xbf/0x420 [ 863.147578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.147591] RIP: 0033:0x7f9d93406b19 [ 863.147601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 863.147612] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 863.147624] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 863.147632] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 863.147639] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 863.147646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 863.147653] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 863.147670] [ 863.177019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 863.177473] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 863.180187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 863.180638] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:06:53 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x1000000, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:06:53 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 36) 20:06:53 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x8000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:06:53 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 863.269779] FAULT_INJECTION: forcing a failure. [ 863.269779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 863.270760] CPU: 0 UID: 0 PID: 7563 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 863.270779] Tainted: [W]=WARN [ 863.270783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 863.270791] Call Trace: [ 863.270796] [ 863.270800] dump_stack_lvl+0xfa/0x120 [ 863.270825] should_fail_ex+0x4d7/0x5e0 [ 863.270848] ? page_copy_sane+0xce/0x2b0 [ 863.270869] copy_folio_from_iter_atomic+0x536/0x1820 [ 863.270902] ? fault_in_readable+0x12d/0x1d0 [ 863.270919] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 863.270938] ? fault_in_readable+0x172/0x1d0 [ 863.270952] ? __pfx_fault_in_readable+0x10/0x10 [ 863.270973] iomap_file_buffered_write+0x4fa/0xa40 [ 863.271002] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 863.271021] ? __lock_acquire+0x451/0x2250 [ 863.271054] ? __pfx_down_read+0x10/0x10 [ 863.271068] ? generic_update_time+0xcb/0xf0 [ 863.271082] ? mnt_put_write_access_file+0xb7/0xe0 [ 863.271101] ? file_update_time_flags+0x24c/0x4f0 [ 863.271117] blkdev_write_iter+0x7a0/0xd00 [ 863.271139] do_iter_readv_writev+0x5b3/0x910 [ 863.271158] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 863.271174] ? __import_iovec+0x1df/0x670 [ 863.271189] ? avc_policy_seqno+0x9/0x20 [ 863.271205] ? security_file_permission+0x22/0x90 [ 863.271228] vfs_writev+0x2d4/0xcd0 [ 863.271244] ? perf_trace_lock+0xb5/0x5d0 [ 863.271257] ? __lock_acquire+0x451/0x2250 [ 863.271271] ? __pfx_vfs_writev+0x10/0x10 [ 863.271287] ? __pfx_perf_trace_lock+0x10/0x10 [ 863.271304] ? __fget_files+0x34/0x3b0 [ 863.271322] ? find_held_lock+0x2b/0x80 [ 863.271339] ? __fget_files+0x203/0x3b0 [ 863.271356] ? lock_release+0xc8/0x270 [ 863.271371] ? __fget_files+0x20d/0x3b0 [ 863.271395] do_pwritev+0x1ab/0x280 [ 863.271412] ? __pfx_do_pwritev+0x10/0x10 [ 863.271428] ? find_held_lock+0x2b/0x80 [ 863.271445] ? syscall_trace_enter+0x1cf/0x230 [ 863.271461] __x64_sys_pwritev2+0xef/0x160 [ 863.271475] do_syscall_64+0xbf/0x420 [ 863.271490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.271503] RIP: 0033:0x7f9d93406b19 [ 863.271512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 863.271524] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 863.271536] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 863.271543] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 863.271551] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 863.271557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 863.271564] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 863.271582] [ 863.301667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 863.302708] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:06:54 executing program 2: openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 863.314846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 863.316068] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:06:54 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 37) 20:06:54 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x8100000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:06:54 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x2000000, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 863.429729] FAULT_INJECTION: forcing a failure. [ 863.429729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 863.431394] CPU: 0 UID: 0 PID: 7574 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 863.431413] Tainted: [W]=WARN [ 863.431417] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 863.431425] Call Trace: [ 863.431429] [ 863.431434] dump_stack_lvl+0xfa/0x120 [ 863.431457] should_fail_ex+0x4d7/0x5e0 [ 863.431475] ? page_copy_sane+0xce/0x2b0 [ 863.431496] copy_folio_from_iter_atomic+0x536/0x1820 [ 863.431522] ? fault_in_readable+0x12d/0x1d0 [ 863.431537] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 863.431554] ? fault_in_readable+0x172/0x1d0 [ 863.431568] ? __pfx_fault_in_readable+0x10/0x10 [ 863.431589] iomap_file_buffered_write+0x4fa/0xa40 [ 863.431617] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 863.431637] ? __lock_acquire+0x451/0x2250 [ 863.431670] ? __pfx_down_read+0x10/0x10 [ 863.431685] ? generic_update_time+0xcb/0xf0 [ 863.431699] ? mnt_put_write_access_file+0xb7/0xe0 [ 863.431718] ? file_update_time_flags+0x24c/0x4f0 [ 863.431734] blkdev_write_iter+0x7a0/0xd00 [ 863.431757] do_iter_readv_writev+0x5b3/0x910 [ 863.431777] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 863.431792] ? __import_iovec+0x1df/0x670 [ 863.431808] ? avc_policy_seqno+0x9/0x20 [ 863.431824] ? security_file_permission+0x22/0x90 [ 863.431847] vfs_writev+0x2d4/0xcd0 [ 863.431863] ? perf_trace_lock+0xb5/0x5d0 [ 863.431877] ? __lock_acquire+0x451/0x2250 [ 863.431895] ? __pfx_vfs_writev+0x10/0x10 [ 863.431911] ? __pfx_perf_trace_lock+0x10/0x10 [ 863.431929] ? __fget_files+0x34/0x3b0 [ 863.431947] ? find_held_lock+0x2b/0x80 [ 863.431964] ? __fget_files+0x203/0x3b0 [ 863.431981] ? lock_release+0xc8/0x270 [ 863.431996] ? __fget_files+0x20d/0x3b0 [ 863.432020] do_pwritev+0x1ab/0x280 [ 863.432037] ? __pfx_do_pwritev+0x10/0x10 [ 863.432053] ? find_held_lock+0x2b/0x80 [ 863.432070] ? syscall_trace_enter+0x1cf/0x230 [ 863.432087] __x64_sys_pwritev2+0xef/0x160 [ 863.432100] do_syscall_64+0xbf/0x420 [ 863.432117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.432129] RIP: 0033:0x7f9d93406b19 [ 863.432139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 863.432150] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 863.432162] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 863.432170] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 863.432177] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 863.432184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 863.432191] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 863.432209] [ 863.497882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 863.498811] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 863.500321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 863.500842] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:07:04 executing program 1: syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(0xffffffffffffffff, r0) 20:07:04 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, 0xffffffffffffffff) 20:07:04 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:07:04 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 38) 20:07:04 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x3000000, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:07:04 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x10000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:07:04 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, 0xffffffffffffffff) 20:07:04 executing program 2: openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:07:04 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x4000000, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 873.433834] FAULT_INJECTION: forcing a failure. [ 873.433834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 873.435715] CPU: 1 UID: 0 PID: 7601 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 873.435752] Tainted: [W]=WARN [ 873.435759] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 873.435773] Call Trace: [ 873.435781] [ 873.435790] dump_stack_lvl+0xfa/0x120 [ 873.435826] should_fail_ex+0x4d7/0x5e0 [ 873.435857] ? page_copy_sane+0xce/0x2b0 [ 873.435897] copy_folio_from_iter_atomic+0x536/0x1820 [ 873.435948] ? fault_in_readable+0x12d/0x1d0 [ 873.435976] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 873.436008] ? fault_in_readable+0x172/0x1d0 [ 873.436035] ? __pfx_fault_in_readable+0x10/0x10 [ 873.436077] iomap_file_buffered_write+0x4fa/0xa40 [ 873.436131] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 873.436169] ? __lock_acquire+0x451/0x2250 [ 873.436232] ? __pfx_down_read+0x10/0x10 [ 873.436258] ? generic_update_time+0xcb/0xf0 [ 873.436282] ? mnt_put_write_access_file+0xb7/0xe0 [ 873.436318] ? file_update_time_flags+0x24c/0x4f0 [ 873.436350] blkdev_write_iter+0x7a0/0xd00 [ 873.436391] do_iter_readv_writev+0x5b3/0x910 [ 873.436427] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 873.436457] ? __import_iovec+0x1df/0x670 [ 873.436487] ? avc_policy_seqno+0x9/0x20 [ 873.436517] ? security_file_permission+0x22/0x90 [ 873.436561] vfs_writev+0x2d4/0xcd0 [ 873.436594] ? perf_trace_lock+0xb5/0x5d0 [ 873.436619] ? __lock_acquire+0x451/0x2250 [ 873.436647] ? __pfx_vfs_writev+0x10/0x10 [ 873.436678] ? __pfx_perf_trace_lock+0x10/0x10 [ 873.436713] ? __fget_files+0x34/0x3b0 [ 873.436747] ? find_held_lock+0x2b/0x80 [ 873.436780] ? __fget_files+0x203/0x3b0 [ 873.436814] ? lock_release+0xc8/0x270 [ 873.436844] ? __fget_files+0x20d/0x3b0 [ 873.436892] do_pwritev+0x1ab/0x280 [ 873.436926] ? __pfx_do_pwritev+0x10/0x10 [ 873.436958] ? find_held_lock+0x2b/0x80 [ 873.436990] ? syscall_trace_enter+0x1cf/0x230 [ 873.437022] __x64_sys_pwritev2+0xef/0x160 [ 873.437048] do_syscall_64+0xbf/0x420 [ 873.437080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.437103] RIP: 0033:0x7f9d93406b19 [ 873.437121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 873.437143] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 873.437166] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 873.437181] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 873.437195] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 873.437209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 873.437222] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 873.437257] 20:07:04 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x20000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:07:04 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 873.527519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 873.528685] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:07:04 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 873.533186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 873.534369] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:07:04 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 39) 20:07:04 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x5000000, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 873.632375] FAULT_INJECTION: forcing a failure. [ 873.632375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 873.633378] CPU: 0 UID: 0 PID: 7617 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 873.633397] Tainted: [W]=WARN [ 873.633401] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 873.633409] Call Trace: [ 873.633413] [ 873.633419] dump_stack_lvl+0xfa/0x120 [ 873.633444] should_fail_ex+0x4d7/0x5e0 [ 873.633469] ? page_copy_sane+0xce/0x2b0 [ 873.633492] copy_folio_from_iter_atomic+0x536/0x1820 [ 873.633524] ? fault_in_readable+0x12d/0x1d0 [ 873.633542] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 873.633563] ? fault_in_readable+0x172/0x1d0 [ 873.633578] ? __pfx_fault_in_readable+0x10/0x10 [ 873.633601] iomap_file_buffered_write+0x4fa/0xa40 [ 873.633642] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 873.633670] ? __lock_acquire+0x451/0x2250 [ 873.633705] ? __pfx_down_read+0x10/0x10 [ 873.633719] ? generic_update_time+0xcb/0xf0 [ 873.633732] ? mnt_put_write_access_file+0xb7/0xe0 [ 873.633751] ? file_update_time_flags+0x24c/0x4f0 [ 873.633767] blkdev_write_iter+0x7a0/0xd00 [ 873.633789] do_iter_readv_writev+0x5b3/0x910 [ 873.633808] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 873.633823] ? __import_iovec+0x1df/0x670 [ 873.633838] ? avc_policy_seqno+0x9/0x20 [ 873.633854] ? security_file_permission+0x22/0x90 [ 873.633877] vfs_writev+0x2d4/0xcd0 [ 873.633897] ? perf_trace_lock+0xb5/0x5d0 [ 873.633911] ? __lock_acquire+0x451/0x2250 [ 873.633925] ? __pfx_vfs_writev+0x10/0x10 [ 873.633941] ? __pfx_perf_trace_lock+0x10/0x10 [ 873.633958] ? __fget_files+0x34/0x3b0 [ 873.633976] ? find_held_lock+0x2b/0x80 [ 873.633993] ? __fget_files+0x203/0x3b0 [ 873.634010] ? lock_release+0xc8/0x270 [ 873.634025] ? __fget_files+0x20d/0x3b0 [ 873.634049] do_pwritev+0x1ab/0x280 [ 873.634066] ? __pfx_do_pwritev+0x10/0x10 [ 873.634082] ? find_held_lock+0x2b/0x80 [ 873.634099] ? syscall_trace_enter+0x1cf/0x230 [ 873.634116] __x64_sys_pwritev2+0xef/0x160 [ 873.634129] do_syscall_64+0xbf/0x420 [ 873.634146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.634158] RIP: 0033:0x7f9d93406b19 [ 873.634168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 873.634179] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 873.634191] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 873.634199] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 873.634206] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 873.634213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 873.634220] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 873.634238] 20:07:04 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x3f000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:07:04 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 873.697532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 873.698065] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 873.704156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 873.705094] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:07:14 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 40) 20:07:14 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x3ffffe00}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:07:14 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:07:14 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x6000000, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:07:14 executing program 1: syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(0xffffffffffffffff, r0) 20:07:14 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:07:14 executing program 5: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x80000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:07:14 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) (fail_nth: 1) dup2(r0, r1) [ 884.206034] FAULT_INJECTION: forcing a failure. [ 884.206034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.207058] CPU: 0 UID: 0 PID: 7645 Comm: syz-executor.3 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 884.207077] Tainted: [W]=WARN [ 884.207081] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 884.207089] Call Trace: [ 884.207093] [ 884.207098] dump_stack_lvl+0xfa/0x120 [ 884.207121] should_fail_ex+0x4d7/0x5e0 [ 884.207148] _copy_from_user+0x30/0xd0 [ 884.207173] vt_ioctl+0x1602/0x2e60 [ 884.207195] ? __pfx_vt_ioctl+0x10/0x10 [ 884.207208] ? lock_acquire+0x15e/0x2d0 [ 884.207227] ? perf_trace_lock+0xb5/0x5d0 [ 884.207244] ? find_held_lock+0x2b/0x80 [ 884.207268] ? get_pid_task+0xfd/0x250 [ 884.207283] ? perf_trace_lock+0xb5/0x5d0 [ 884.207301] ? __pfx_perf_trace_lock+0x10/0x10 [ 884.207316] ? proc_fail_nth_write+0x97/0x220 [ 884.207332] ? find_held_lock+0x2b/0x80 [ 884.207354] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 884.207379] ? __pfx_vt_ioctl+0x10/0x10 [ 884.207396] tty_ioctl+0x78b/0x17f0 [ 884.207414] ? __pfx_tty_ioctl+0x10/0x10 [ 884.207428] ? ioctl_has_perm.constprop.0.isra.0+0x32e/0x4e0 [ 884.207447] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 884.207465] ? save_trace+0x3ce/0x3d0 [ 884.207475] ? __fget_files+0x34/0x3b0 [ 884.207493] ? find_held_lock+0x2b/0x80 [ 884.207510] ? __fget_files+0x203/0x3b0 [ 884.207527] ? lock_release+0xc8/0x270 [ 884.207545] ? selinux_file_ioctl+0xb9/0x280 [ 884.207562] ? __pfx_tty_ioctl+0x10/0x10 [ 884.207576] __x64_sys_ioctl+0x18f/0x210 [ 884.207593] do_syscall_64+0xbf/0x420 [ 884.207610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.207623] RIP: 0033:0x7f50239eeb19 [ 884.207632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 884.207644] RSP: 002b:00007f5020f64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 884.207656] RAX: ffffffffffffffda RBX: 00007f5023b01f60 RCX: 00007f50239eeb19 [ 884.207664] RDX: 0000000020000100 RSI: 000000000000560e RDI: 0000000000000005 [ 884.207672] RBP: 00007f5020f641d0 R08: 0000000000000000 R09: 0000000000000000 [ 884.207679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.207686] R13: 00007ffc2c46128f R14: 00007f5020f64300 R15: 0000000000022000 [ 884.207704] [ 884.241232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 884.242289] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 884.243858] buffer_io_error: 2070 callbacks suppressed [ 884.243875] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 884.246054] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 884.246317] FAULT_INJECTION: forcing a failure. [ 884.246317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.247333] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 884.248252] CPU: 0 UID: 0 PID: 7644 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 884.248273] Tainted: [W]=WARN [ 884.248278] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 884.248285] Call Trace: [ 884.248289] [ 884.248294] dump_stack_lvl+0xfa/0x120 [ 884.248312] should_fail_ex+0x4d7/0x5e0 [ 884.248331] ? page_copy_sane+0xce/0x2b0 [ 884.248353] copy_folio_from_iter_atomic+0x536/0x1820 [ 884.248385] ? fault_in_readable+0x12d/0x1d0 [ 884.248403] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 884.248424] ? fault_in_readable+0x172/0x1d0 [ 884.248440] ? __pfx_fault_in_readable+0x10/0x10 [ 884.248462] iomap_file_buffered_write+0x4fa/0xa40 [ 884.248501] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 884.248527] ? __lock_acquire+0x451/0x2250 [ 884.248560] ? __pfx_down_read+0x10/0x10 [ 884.248574] ? generic_update_time+0xcb/0xf0 [ 884.248586] ? mnt_put_write_access_file+0xb7/0xe0 [ 884.248605] ? file_update_time_flags+0x24c/0x4f0 [ 884.248621] blkdev_write_iter+0x7a0/0xd00 [ 884.248643] do_iter_readv_writev+0x5b3/0x910 [ 884.248662] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 884.248677] ? __import_iovec+0x1df/0x670 [ 884.248692] ? avc_policy_seqno+0x9/0x20 [ 884.248708] ? security_file_permission+0x22/0x90 [ 884.248731] vfs_writev+0x2d4/0xcd0 [ 884.248748] ? perf_trace_lock+0xb5/0x5d0 [ 884.248760] ? __lock_acquire+0x451/0x2250 [ 884.248774] ? __pfx_vfs_writev+0x10/0x10 [ 884.248790] ? __pfx_perf_trace_lock+0x10/0x10 [ 884.248808] ? __fget_files+0x34/0x3b0 [ 884.248825] ? find_held_lock+0x2b/0x80 [ 884.248842] ? __fget_files+0x203/0x3b0 [ 884.248859] ? lock_release+0xc8/0x270 [ 884.248875] ? __fget_files+0x20d/0x3b0 [ 884.248904] do_pwritev+0x1ab/0x280 [ 884.248921] ? __pfx_do_pwritev+0x10/0x10 [ 884.248938] ? find_held_lock+0x2b/0x80 [ 884.248954] ? syscall_trace_enter+0x1cf/0x230 [ 884.248971] __x64_sys_pwritev2+0xef/0x160 [ 884.248985] do_syscall_64+0xbf/0x420 [ 884.249000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.249012] RIP: 0033:0x7f9d93406b19 [ 884.249021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 884.249033] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 884.249045] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 884.249053] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 884.249060] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 884.249068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 884.249075] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 884.249092] [ 884.297446] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 884.298637] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 884.299838] Buffer I/O error on dev sr0, logical block 5, lost async page write [ 884.301033] Buffer I/O error on dev sr0, logical block 6, lost async page write [ 884.302238] Buffer I/O error on dev sr0, logical block 7, lost async page write [ 884.303769] Buffer I/O error on dev sr0, logical block 8, lost async page write [ 884.304955] Buffer I/O error on dev sr0, logical block 9, lost async page write [ 884.307280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 884.308023] I/O error, dev sr0, sector 127 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 20:07:15 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:07:15 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x8100000, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 884.322801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 884.323790] I/O error, dev sr0, sector 254 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 884.325755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 884.326632] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 884.328280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 884.328742] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:07:15 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) (fail_nth: 2) dup2(r0, r1) [ 884.368275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 884.368779] I/O error, dev sr0, sector 381 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 884.390987] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 884.391475] I/O error, dev sr0, sector 508 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 20:07:15 executing program 5: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x80000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:07:15 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x40000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:07:15 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 41) [ 884.433223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 884.433764] I/O error, dev sr0, sector 635 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 20:07:15 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x0) [ 884.465282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 884.465769] I/O error, dev sr0, sector 762 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 884.467078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 884.467540] I/O error, dev sr0, sector 889 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 884.471828] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 884.472617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 884.479782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 884.480626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 884.482989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 884.483787] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 884.486634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 884.487512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 884.498647] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 884.499432] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 884.500071] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 884.500715] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 fc 00 00 0c 00 [ 884.501590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 884.506362] FAULT_INJECTION: forcing a failure. [ 884.506362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.508328] CPU: 1 UID: 0 PID: 7658 Comm: syz-executor.3 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 884.508364] Tainted: [W]=WARN [ 884.508371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 884.508384] Call Trace: [ 884.508391] [ 884.508399] dump_stack_lvl+0xfa/0x120 [ 884.508433] should_fail_ex+0x4d7/0x5e0 [ 884.508470] _copy_to_user+0x32/0xd0 [ 884.508503] simple_read_from_buffer+0xe0/0x180 [ 884.508538] proc_fail_nth_read+0x18a/0x240 [ 884.508565] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 884.508590] ? security_file_permission+0x22/0x90 [ 884.508628] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 884.508653] vfs_read+0x1eb/0xc70 [ 884.508688] ? __pfx___mutex_lock+0x10/0x10 [ 884.508712] ? __fget_files+0x34/0x3b0 [ 884.508745] ? __pfx_vfs_read+0x10/0x10 [ 884.508778] ? lock_release+0xc8/0x270 [ 884.508809] ? __fget_files+0x20d/0x3b0 [ 884.508853] ksys_read+0x121/0x240 [ 884.508885] ? __pfx_ksys_read+0x10/0x10 [ 884.508935] do_syscall_64+0xbf/0x420 [ 884.508965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.508987] RIP: 0033:0x7f50239a169c [ 884.509005] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 884.509026] RSP: 002b:00007f5020f64170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 884.509048] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f50239a169c [ 884.509063] RDX: 000000000000000f RSI: 00007f5020f641e0 RDI: 0000000000000006 [ 884.509076] RBP: 00007f5020f641d0 R08: 0000000000000000 R09: 0000000000000000 [ 884.509090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.509103] R13: 00007ffc2c46128f R14: 00007f5020f64300 R15: 0000000000022000 [ 884.509136] [ 884.542812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 884.570645] FAULT_INJECTION: forcing a failure. [ 884.570645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.571785] CPU: 0 UID: 0 PID: 7666 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 884.571805] Tainted: [W]=WARN [ 884.571809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 884.571818] Call Trace: [ 884.571822] [ 884.571828] dump_stack_lvl+0xfa/0x120 [ 884.571855] should_fail_ex+0x4d7/0x5e0 [ 884.571884] ? page_copy_sane+0xce/0x2b0 [ 884.571910] copy_folio_from_iter_atomic+0x536/0x1820 [ 884.571942] ? fault_in_readable+0x12d/0x1d0 [ 884.571960] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 884.571981] ? fault_in_readable+0x172/0x1d0 [ 884.571997] ? __pfx_fault_in_readable+0x10/0x10 [ 884.572020] iomap_file_buffered_write+0x4fa/0xa40 [ 884.572059] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 884.572085] ? __lock_acquire+0x451/0x2250 [ 884.572127] ? __pfx_down_read+0x10/0x10 [ 884.572147] ? generic_update_time+0xcb/0xf0 [ 884.572163] ? mnt_put_write_access_file+0xb7/0xe0 [ 884.572193] ? file_update_time_flags+0x24c/0x4f0 [ 884.572210] blkdev_write_iter+0x7a0/0xd00 [ 884.572232] do_iter_readv_writev+0x5b3/0x910 [ 884.572252] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 884.572268] ? __import_iovec+0x1df/0x670 [ 884.572283] ? avc_policy_seqno+0x9/0x20 [ 884.572300] ? security_file_permission+0x22/0x90 [ 884.572323] vfs_writev+0x2d4/0xcd0 [ 884.572340] ? perf_trace_lock+0xb5/0x5d0 [ 884.572353] ? __lock_acquire+0x451/0x2250 [ 884.572368] ? __pfx_vfs_writev+0x10/0x10 [ 884.572383] ? __pfx_perf_trace_lock+0x10/0x10 [ 884.572401] ? __fget_files+0x34/0x3b0 [ 884.572420] ? find_held_lock+0x2b/0x80 [ 884.572436] ? __fget_files+0x203/0x3b0 [ 884.572454] ? lock_release+0xc8/0x270 [ 884.572470] ? __fget_files+0x20d/0x3b0 [ 884.572494] do_pwritev+0x1ab/0x280 [ 884.572511] ? __pfx_do_pwritev+0x10/0x10 [ 884.572527] ? find_held_lock+0x2b/0x80 [ 884.572544] ? syscall_trace_enter+0x1cf/0x230 [ 884.572560] __x64_sys_pwritev2+0xef/0x160 [ 884.572574] do_syscall_64+0xbf/0x420 [ 884.572591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.572604] RIP: 0033:0x7f9d93406b19 [ 884.572615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 884.572626] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 884.572639] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 884.572648] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 884.572655] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 884.572662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 884.572669] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 884.572687] 20:07:15 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x10000000, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:07:15 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) (fail_nth: 1) dup2(r0, r1) 20:07:15 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 884.662486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 884.663380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 884.705354] FAULT_INJECTION: forcing a failure. [ 884.705354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.706383] CPU: 0 UID: 0 PID: 7677 Comm: syz-executor.5 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 884.706402] Tainted: [W]=WARN [ 884.706406] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 884.706414] Call Trace: [ 884.706419] [ 884.706423] dump_stack_lvl+0xfa/0x120 [ 884.706447] should_fail_ex+0x4d7/0x5e0 [ 884.706475] _copy_from_user+0x30/0xd0 [ 884.706501] vt_ioctl+0x1602/0x2e60 [ 884.706524] ? __pfx_vt_ioctl+0x10/0x10 [ 884.706539] ? lock_acquire+0x15e/0x2d0 [ 884.706558] ? perf_trace_lock+0xb5/0x5d0 [ 884.706576] ? find_held_lock+0x2b/0x80 [ 884.706600] ? get_pid_task+0xfd/0x250 [ 884.706615] ? perf_trace_lock+0xb5/0x5d0 [ 884.706632] ? __pfx_perf_trace_lock+0x10/0x10 [ 884.706645] ? proc_fail_nth_write+0x97/0x220 [ 884.706660] ? find_held_lock+0x2b/0x80 [ 884.706678] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 884.706698] ? __pfx_vt_ioctl+0x10/0x10 [ 884.706712] tty_ioctl+0x78b/0x17f0 [ 884.706728] ? __pfx_tty_ioctl+0x10/0x10 [ 884.706741] ? ioctl_has_perm.constprop.0.isra.0+0x32e/0x4e0 [ 884.706760] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 884.706778] ? save_trace+0x3ce/0x3d0 [ 884.706788] ? __fget_files+0x34/0x3b0 [ 884.706808] ? find_held_lock+0x2b/0x80 [ 884.706825] ? __fget_files+0x203/0x3b0 [ 884.706843] ? lock_release+0xc8/0x270 [ 884.706877] ? selinux_file_ioctl+0xb9/0x280 [ 884.706897] ? __pfx_tty_ioctl+0x10/0x10 [ 884.706911] __x64_sys_ioctl+0x18f/0x210 [ 884.706930] do_syscall_64+0xbf/0x420 [ 884.706946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.706959] RIP: 0033:0x7fc0d06e1b19 [ 884.706969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 884.706981] RSP: 002b:00007fc0cdc57188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 884.706993] RAX: ffffffffffffffda RBX: 00007fc0d07f4f60 RCX: 00007fc0d06e1b19 [ 884.707001] RDX: 0000000020000100 RSI: 000000000000560e RDI: 0000000000000005 [ 884.707009] RBP: 00007fc0cdc571d0 R08: 0000000000000000 R09: 0000000000000000 [ 884.707016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.707023] R13: 00007ffd7f93e66f R14: 00007fc0cdc57300 R15: 0000000000022000 [ 884.707040] 20:07:24 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x7fef9ff8}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:07:24 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, 0xffffffffffffffff) 20:07:24 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:07:24 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) (fail_nth: 2) dup2(r0, r1) 20:07:24 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x40000000, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:07:24 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 20:07:24 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 42) 20:07:24 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x2, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 893.833977] FAULT_INJECTION: forcing a failure. [ 893.833977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 893.834993] CPU: 0 UID: 0 PID: 7691 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 893.835012] Tainted: [W]=WARN [ 893.835016] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 893.835023] Call Trace: [ 893.835028] [ 893.835033] dump_stack_lvl+0xfa/0x120 [ 893.835054] should_fail_ex+0x4d7/0x5e0 [ 893.835074] ? page_copy_sane+0xce/0x2b0 [ 893.835090] copy_folio_from_iter_atomic+0x536/0x1820 [ 893.835116] ? fault_in_readable+0x12d/0x1d0 [ 893.835132] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 893.835148] ? fault_in_readable+0x172/0x1d0 [ 893.835165] ? __pfx_fault_in_readable+0x10/0x10 [ 893.835187] iomap_file_buffered_write+0x4fa/0xa40 [ 893.835215] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 893.835234] ? __lock_acquire+0x451/0x2250 [ 893.835267] ? __pfx_down_read+0x10/0x10 [ 893.835281] ? generic_update_time+0xcb/0xf0 [ 893.835294] ? mnt_put_write_access_file+0xb7/0xe0 [ 893.835312] ? file_update_time_flags+0x24c/0x4f0 [ 893.835329] blkdev_write_iter+0x7a0/0xd00 [ 893.835351] do_iter_readv_writev+0x5b3/0x910 [ 893.835370] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 893.835386] ? __import_iovec+0x1df/0x670 [ 893.835401] ? avc_policy_seqno+0x9/0x20 [ 893.835417] ? security_file_permission+0x22/0x90 [ 893.835439] vfs_writev+0x2d4/0xcd0 [ 893.835456] ? perf_trace_lock+0xb5/0x5d0 [ 893.835469] ? __lock_acquire+0x451/0x2250 [ 893.835483] ? __pfx_vfs_writev+0x10/0x10 [ 893.835499] ? __pfx_perf_trace_lock+0x10/0x10 [ 893.835516] ? __fget_files+0x34/0x3b0 [ 893.835534] ? find_held_lock+0x2b/0x80 [ 893.835550] ? __fget_files+0x203/0x3b0 [ 893.835567] ? lock_release+0xc8/0x270 [ 893.835583] ? __fget_files+0x20d/0x3b0 [ 893.835607] do_pwritev+0x1ab/0x280 [ 893.835624] ? __pfx_do_pwritev+0x10/0x10 [ 893.835642] ? find_held_lock+0x2b/0x80 [ 893.835663] ? syscall_trace_enter+0x1cf/0x230 [ 893.835680] __x64_sys_pwritev2+0xef/0x160 [ 893.835694] do_syscall_64+0xbf/0x420 [ 893.835710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.835723] RIP: 0033:0x7f9d93406b19 [ 893.835733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 893.835744] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 893.835757] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 893.835765] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 893.835772] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 893.835779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 893.835786] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 893.835805] 20:07:24 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0xeffdffff, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 893.897060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 893.897964] blk_print_req_error: 13 callbacks suppressed [ 893.897981] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:07:24 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x7fefa1f8}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 893.936500] FAULT_INJECTION: forcing a failure. 20:07:24 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0xfcfdffff, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 893.936500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 893.937382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 893.937802] CPU: 0 UID: 0 PID: 7698 Comm: syz-executor.5 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 893.937824] Tainted: [W]=WARN [ 893.937828] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 893.937836] Call Trace: [ 893.937840] [ 893.937845] dump_stack_lvl+0xfa/0x120 [ 893.937866] should_fail_ex+0x4d7/0x5e0 [ 893.937887] _copy_to_user+0x32/0xd0 [ 893.937911] simple_read_from_buffer+0xe0/0x180 [ 893.937931] proc_fail_nth_read+0x18a/0x240 [ 893.937946] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 893.937960] ? security_file_permission+0x22/0x90 [ 893.937981] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 893.937995] vfs_read+0x1eb/0xc70 [ 893.938014] ? __pfx___mutex_lock+0x10/0x10 [ 893.938028] ? __fget_files+0x34/0x3b0 [ 893.938046] ? __pfx_vfs_read+0x10/0x10 [ 893.938064] ? lock_release+0xc8/0x270 [ 893.938082] ? __fget_files+0x20d/0x3b0 [ 893.938106] ksys_read+0x121/0x240 [ 893.938125] ? __pfx_ksys_read+0x10/0x10 [ 893.938151] do_syscall_64+0xbf/0x420 [ 893.938167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.938180] RIP: 0033:0x7fc0d069469c [ 893.938189] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 893.938201] RSP: 002b:00007fc0cdc57170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 893.938213] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fc0d069469c [ 893.938221] RDX: 000000000000000f RSI: 00007fc0cdc571e0 RDI: 0000000000000006 [ 893.938228] RBP: 00007fc0cdc571d0 R08: 0000000000000000 R09: 0000000000000000 [ 893.938236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.938243] R13: 00007ffd7f93e66f R14: 00007fc0cdc57300 R15: 0000000000022000 [ 893.938261] [ 893.964712] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:07:24 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 20:07:24 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b2f, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:07:24 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:07:35 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:07:35 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0xfefdffff, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:07:35 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, 0xffffffffffffffff) 20:07:35 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) 20:07:35 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 43) 20:07:35 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x7ffff000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:07:35 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b30, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:07:35 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x2, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 905.194176] FAULT_INJECTION: forcing a failure. [ 905.194176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 905.195195] CPU: 0 UID: 0 PID: 7734 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 905.195214] Tainted: [W]=WARN [ 905.195218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 905.195226] Call Trace: [ 905.195230] [ 905.195235] dump_stack_lvl+0xfa/0x120 [ 905.195257] should_fail_ex+0x4d7/0x5e0 [ 905.195274] ? page_copy_sane+0xce/0x2b0 [ 905.195292] copy_folio_from_iter_atomic+0x536/0x1820 [ 905.195317] ? fault_in_readable+0x12d/0x1d0 [ 905.195333] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 905.195349] ? fault_in_readable+0x172/0x1d0 [ 905.195363] ? __pfx_fault_in_readable+0x10/0x10 [ 905.195384] iomap_file_buffered_write+0x4fa/0xa40 [ 905.195413] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 905.195432] ? __lock_acquire+0x451/0x2250 [ 905.195465] ? __pfx_down_read+0x10/0x10 [ 905.195479] ? generic_update_time+0xcb/0xf0 [ 905.195492] ? mnt_put_write_access_file+0xb7/0xe0 [ 905.195510] ? file_update_time_flags+0x24c/0x4f0 [ 905.195527] blkdev_write_iter+0x7a0/0xd00 [ 905.195548] do_iter_readv_writev+0x5b3/0x910 [ 905.195567] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 905.195582] ? __import_iovec+0x1df/0x670 [ 905.195597] ? avc_policy_seqno+0x9/0x20 [ 905.195613] ? security_file_permission+0x22/0x90 [ 905.195636] vfs_writev+0x2d4/0xcd0 [ 905.195653] ? perf_trace_lock+0xb5/0x5d0 [ 905.195666] ? __lock_acquire+0x451/0x2250 [ 905.195680] ? __pfx_vfs_writev+0x10/0x10 [ 905.195696] ? __pfx_perf_trace_lock+0x10/0x10 [ 905.195714] ? __fget_files+0x34/0x3b0 [ 905.195731] ? find_held_lock+0x2b/0x80 [ 905.195748] ? __fget_files+0x203/0x3b0 [ 905.195765] ? lock_release+0xc8/0x270 [ 905.195780] ? __fget_files+0x20d/0x3b0 [ 905.195804] do_pwritev+0x1ab/0x280 [ 905.195821] ? __pfx_do_pwritev+0x10/0x10 [ 905.195838] ? find_held_lock+0x2b/0x80 [ 905.195855] ? syscall_trace_enter+0x1cf/0x230 [ 905.195872] __x64_sys_pwritev2+0xef/0x160 [ 905.195885] do_syscall_64+0xbf/0x420 [ 905.195906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.195919] RIP: 0033:0x7f9d93406b19 [ 905.195929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 905.195940] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 905.195953] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 905.195961] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 905.195968] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 905.195976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 905.195983] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 905.196001] 20:07:35 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b2f, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 905.277580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 905.278089] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 905.284275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 905.284731] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:07:36 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0xf89fef7f}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:07:36 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 44) 20:07:36 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) 20:07:36 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0xfffffdef, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:07:36 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b31, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 905.349351] FAULT_INJECTION: forcing a failure. [ 905.349351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 905.350336] CPU: 0 UID: 0 PID: 7753 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 905.350355] Tainted: [W]=WARN [ 905.350359] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 905.350367] Call Trace: [ 905.350372] [ 905.350376] dump_stack_lvl+0xfa/0x120 [ 905.350397] should_fail_ex+0x4d7/0x5e0 [ 905.350415] ? page_copy_sane+0xce/0x2b0 [ 905.350432] copy_folio_from_iter_atomic+0x536/0x1820 [ 905.350458] ? fault_in_readable+0x12d/0x1d0 [ 905.350473] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 905.350489] ? fault_in_readable+0x172/0x1d0 [ 905.350503] ? __pfx_fault_in_readable+0x10/0x10 [ 905.350524] iomap_file_buffered_write+0x4fa/0xa40 [ 905.350552] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 905.350571] ? __lock_acquire+0x451/0x2250 [ 905.350604] ? __pfx_down_read+0x10/0x10 [ 905.350617] ? generic_update_time+0xcb/0xf0 [ 905.350630] ? mnt_put_write_access_file+0xb7/0xe0 [ 905.350648] ? file_update_time_flags+0x24c/0x4f0 [ 905.350665] blkdev_write_iter+0x7a0/0xd00 [ 905.350687] do_iter_readv_writev+0x5b3/0x910 [ 905.350706] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 905.350722] ? __import_iovec+0x1df/0x670 [ 905.350737] ? avc_policy_seqno+0x9/0x20 [ 905.350753] ? security_file_permission+0x22/0x90 [ 905.350776] vfs_writev+0x2d4/0xcd0 [ 905.350792] ? perf_trace_lock+0xb5/0x5d0 [ 905.350805] ? __lock_acquire+0x451/0x2250 [ 905.350820] ? __pfx_vfs_writev+0x10/0x10 [ 905.350835] ? __pfx_perf_trace_lock+0x10/0x10 [ 905.350853] ? __fget_files+0x34/0x3b0 [ 905.350871] ? find_held_lock+0x2b/0x80 [ 905.350891] ? __fget_files+0x203/0x3b0 [ 905.350908] ? lock_release+0xc8/0x270 [ 905.350924] ? __fget_files+0x20d/0x3b0 [ 905.350948] do_pwritev+0x1ab/0x280 [ 905.350965] ? __pfx_do_pwritev+0x10/0x10 [ 905.350982] ? find_held_lock+0x2b/0x80 [ 905.350998] ? syscall_trace_enter+0x1cf/0x230 [ 905.351015] __x64_sys_pwritev2+0xef/0x160 [ 905.351028] do_syscall_64+0xbf/0x420 [ 905.351044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.351056] RIP: 0033:0x7f9d93406b19 [ 905.351066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 905.351085] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 905.351098] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 905.351106] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 905.351113] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 905.351120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 905.351128] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 905.351145] [ 905.429666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 905.430309] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 905.431326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 905.431777] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:07:45 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0xfffffdfc, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:07:45 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, 0xffffffffffffffff) 20:07:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:07:45 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 45) 20:07:45 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b30, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:07:45 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0xf8a1ef7f}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:07:45 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x0) 20:07:45 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b32, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 914.651680] FAULT_INJECTION: forcing a failure. [ 914.651680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.652687] CPU: 0 UID: 0 PID: 7774 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 914.652706] Tainted: [W]=WARN [ 914.652710] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 914.652718] Call Trace: [ 914.652723] [ 914.652728] dump_stack_lvl+0xfa/0x120 [ 914.652749] should_fail_ex+0x4d7/0x5e0 [ 914.652766] ? page_copy_sane+0xce/0x2b0 [ 914.652784] copy_folio_from_iter_atomic+0x536/0x1820 [ 914.652811] ? fault_in_readable+0x12d/0x1d0 [ 914.652826] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 914.652842] ? fault_in_readable+0x172/0x1d0 [ 914.652856] ? __pfx_fault_in_readable+0x10/0x10 [ 914.652877] iomap_file_buffered_write+0x4fa/0xa40 [ 914.652909] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 914.652928] ? __lock_acquire+0x451/0x2250 [ 914.652961] ? __pfx_down_read+0x10/0x10 [ 914.652974] ? generic_update_time+0xcb/0xf0 [ 914.652988] ? mnt_put_write_access_file+0xb7/0xe0 [ 914.653006] ? file_update_time_flags+0x24c/0x4f0 [ 914.653022] blkdev_write_iter+0x7a0/0xd00 [ 914.653044] do_iter_readv_writev+0x5b3/0x910 [ 914.653064] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 914.653079] ? __import_iovec+0x1df/0x670 [ 914.653094] ? avc_policy_seqno+0x9/0x20 [ 914.653110] ? security_file_permission+0x22/0x90 [ 914.653133] vfs_writev+0x2d4/0xcd0 [ 914.653149] ? perf_trace_lock+0xb5/0x5d0 [ 914.653162] ? __lock_acquire+0x451/0x2250 [ 914.653179] ? __pfx_vfs_writev+0x10/0x10 [ 914.653197] ? __pfx_perf_trace_lock+0x10/0x10 [ 914.653215] ? __fget_files+0x34/0x3b0 [ 914.653232] ? find_held_lock+0x2b/0x80 [ 914.653249] ? __fget_files+0x203/0x3b0 [ 914.653266] ? lock_release+0xc8/0x270 [ 914.653281] ? __fget_files+0x20d/0x3b0 [ 914.653305] do_pwritev+0x1ab/0x280 [ 914.653322] ? __pfx_do_pwritev+0x10/0x10 [ 914.653339] ? find_held_lock+0x2b/0x80 [ 914.653355] ? syscall_trace_enter+0x1cf/0x230 [ 914.653372] __x64_sys_pwritev2+0xef/0x160 [ 914.653385] do_syscall_64+0xbf/0x420 [ 914.653402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.653414] RIP: 0033:0x7f9d93406b19 [ 914.653424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 914.653436] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 914.653448] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 914.653457] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 914.653464] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 914.653471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 914.653478] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 914.653496] 20:07:45 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0xfffffdfe, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 914.723878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 914.724423] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 914.728099] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 914.728560] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:07:45 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)}], 0x2, 0x0, 0x0, 0x0) 20:07:45 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x7ffffffff000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:07:45 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b31, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:07:45 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b33, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:07:45 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 46) 20:07:45 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0xfffffe00, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 914.943118] FAULT_INJECTION: forcing a failure. [ 914.943118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.945048] CPU: 1 UID: 0 PID: 7812 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 914.945079] Tainted: [W]=WARN [ 914.945085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 914.945097] Call Trace: [ 914.945103] [ 914.945110] dump_stack_lvl+0xfa/0x120 [ 914.945140] should_fail_ex+0x4d7/0x5e0 [ 914.945166] ? page_copy_sane+0xce/0x2b0 [ 914.945192] copy_folio_from_iter_atomic+0x536/0x1820 [ 914.945233] ? fault_in_readable+0x12d/0x1d0 [ 914.945257] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 914.945283] ? fault_in_readable+0x172/0x1d0 [ 914.945305] ? __pfx_fault_in_readable+0x10/0x10 [ 914.945338] iomap_file_buffered_write+0x4fa/0xa40 [ 914.945382] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 914.945413] ? __lock_acquire+0x451/0x2250 [ 914.945465] ? __pfx_down_read+0x10/0x10 [ 914.945486] ? generic_update_time+0xcb/0xf0 [ 914.945506] ? mnt_put_write_access_file+0xb7/0xe0 [ 914.945535] ? file_update_time_flags+0x24c/0x4f0 [ 914.945561] blkdev_write_iter+0x7a0/0xd00 [ 914.945595] do_iter_readv_writev+0x5b3/0x910 [ 914.945624] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 914.945649] ? __import_iovec+0x1df/0x670 [ 914.945673] ? avc_policy_seqno+0x9/0x20 [ 914.945698] ? security_file_permission+0x22/0x90 [ 914.945739] vfs_writev+0x2d4/0xcd0 [ 914.945766] ? perf_trace_lock+0xb5/0x5d0 [ 914.945787] ? __lock_acquire+0x451/0x2250 [ 914.945810] ? __pfx_vfs_writev+0x10/0x10 [ 914.945835] ? __pfx_perf_trace_lock+0x10/0x10 [ 914.945863] ? __fget_files+0x34/0x3b0 [ 914.945898] ? find_held_lock+0x2b/0x80 [ 914.945924] ? __fget_files+0x203/0x3b0 [ 914.945952] ? lock_release+0xc8/0x270 [ 914.945977] ? __fget_files+0x20d/0x3b0 [ 914.946015] do_pwritev+0x1ab/0x280 [ 914.946042] ? __pfx_do_pwritev+0x10/0x10 [ 914.946068] ? find_held_lock+0x2b/0x80 [ 914.946094] ? syscall_trace_enter+0x1cf/0x230 [ 914.946120] __x64_sys_pwritev2+0xef/0x160 [ 914.946142] do_syscall_64+0xbf/0x420 [ 914.946168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.946187] RIP: 0033:0x7f9d93406b19 [ 914.946202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 914.946220] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 914.946239] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 914.946252] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 914.946263] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 914.946275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 914.946286] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 914.946314] [ 915.000527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 915.001236] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 915.006517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 915.007023] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 915.462568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 915.463757] I/O error, dev sr0, sector 127 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 915.465355] buffer_io_error: 2214 callbacks suppressed [ 915.465373] Buffer I/O error on dev sr0, logical block 127, lost async page write [ 915.467557] Buffer I/O error on dev sr0, logical block 128, lost async page write [ 915.468829] Buffer I/O error on dev sr0, logical block 129, lost async page write [ 915.470094] Buffer I/O error on dev sr0, logical block 130, lost async page write [ 915.471395] Buffer I/O error on dev sr0, logical block 131, lost async page write [ 915.472690] Buffer I/O error on dev sr0, logical block 132, lost async page write [ 915.473998] Buffer I/O error on dev sr0, logical block 133, lost async page write [ 915.475295] Buffer I/O error on dev sr0, logical block 134, lost async page write [ 915.476645] Buffer I/O error on dev sr0, logical block 135, lost async page write [ 915.477964] Buffer I/O error on dev sr0, logical block 136, lost async page write [ 915.479895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 915.480989] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 915.485873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 915.486995] I/O error, dev sr0, sector 254 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 915.489203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 915.490207] I/O error, dev sr0, sector 381 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 915.495170] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 915.496244] I/O error, dev sr0, sector 508 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 915.498399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 915.499407] I/O error, dev sr0, sector 635 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 915.504351] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 915.511279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 915.518703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 915.520626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 915.525450] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 915.527150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 915.531549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 915.532987] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 915.536598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 915.537958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 915.562012] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 915.562906] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 915.563565] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 915.564253] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 fc 00 00 0c 00 20:07:54 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)}], 0x2, 0x0, 0x0, 0x0) 20:07:54 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:07:54 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0xffffffff, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:07:54 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b32, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:07:54 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b34, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:07:54 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 47) 20:07:54 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2000000000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:07:54 executing program 1: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x40000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:07:54 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 923.860993] FAULT_INJECTION: forcing a failure. [ 923.860993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 923.862772] CPU: 1 UID: 0 PID: 7834 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 923.862806] Tainted: [W]=WARN [ 923.862814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 923.862826] Call Trace: [ 923.862834] [ 923.862843] dump_stack_lvl+0xfa/0x120 [ 923.862877] should_fail_ex+0x4d7/0x5e0 [ 923.862914] ? page_copy_sane+0xce/0x2b0 [ 923.862945] copy_folio_from_iter_atomic+0x536/0x1820 [ 923.862993] ? fault_in_readable+0x12d/0x1d0 [ 923.863020] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 923.863050] ? fault_in_readable+0x172/0x1d0 [ 923.863075] ? __pfx_fault_in_readable+0x10/0x10 [ 923.863114] iomap_file_buffered_write+0x4fa/0xa40 [ 923.863165] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 923.863200] ? __lock_acquire+0x451/0x2250 [ 923.863260] ? __pfx_down_read+0x10/0x10 [ 923.863296] ? generic_update_time+0xcb/0xf0 [ 923.863319] ? mnt_put_write_access_file+0xb7/0xe0 [ 923.863353] ? file_update_time_flags+0x24c/0x4f0 [ 923.863384] blkdev_write_iter+0x7a0/0xd00 [ 923.863423] do_iter_readv_writev+0x5b3/0x910 [ 923.863456] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 923.863485] ? __import_iovec+0x1df/0x670 [ 923.863513] ? avc_policy_seqno+0x9/0x20 [ 923.863543] ? security_file_permission+0x22/0x90 [ 923.863584] vfs_writev+0x2d4/0xcd0 [ 923.863614] ? perf_trace_lock+0xb5/0x5d0 [ 923.863638] ? __lock_acquire+0x451/0x2250 [ 923.863665] ? __pfx_vfs_writev+0x10/0x10 [ 923.863694] ? __pfx_perf_trace_lock+0x10/0x10 [ 923.863727] ? __fget_files+0x34/0x3b0 [ 923.863759] ? find_held_lock+0x2b/0x80 [ 923.863789] ? __fget_files+0x203/0x3b0 [ 923.863821] ? lock_release+0xc8/0x270 [ 923.863850] ? __fget_files+0x20d/0x3b0 [ 923.863895] do_pwritev+0x1ab/0x280 [ 923.863926] ? __pfx_do_pwritev+0x10/0x10 [ 923.863957] ? find_held_lock+0x2b/0x80 [ 923.863987] ? syscall_trace_enter+0x1cf/0x230 [ 923.864017] __x64_sys_pwritev2+0xef/0x160 [ 923.864042] do_syscall_64+0xbf/0x420 [ 923.864071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.864094] RIP: 0033:0x7f9d93406b19 [ 923.864111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 923.864133] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 923.864154] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 923.864169] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 923.864182] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 923.864195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 923.864208] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 923.864241] 20:07:54 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b33, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:07:54 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) (fail_nth: 1) dup2(r0, r1) 20:07:54 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 923.960688] FAULT_INJECTION: forcing a failure. [ 923.960688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 923.961742] CPU: 0 UID: 0 PID: 7847 Comm: syz-executor.1 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 923.961761] Tainted: [W]=WARN [ 923.961765] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 923.961772] Call Trace: [ 923.961777] [ 923.961781] dump_stack_lvl+0xfa/0x120 [ 923.961803] should_fail_ex+0x4d7/0x5e0 [ 923.961823] _copy_from_user+0x30/0xd0 [ 923.961841] vt_ioctl+0x1602/0x2e60 [ 923.961860] ? __pfx_vt_ioctl+0x10/0x10 [ 923.961873] ? lock_acquire+0x15e/0x2d0 [ 923.961893] ? perf_trace_lock+0xb5/0x5d0 [ 923.961906] ? find_held_lock+0x2b/0x80 [ 923.961922] ? get_pid_task+0xfd/0x250 [ 923.961936] ? perf_trace_lock+0xb5/0x5d0 [ 923.961953] ? __pfx_perf_trace_lock+0x10/0x10 [ 923.961965] ? proc_fail_nth_write+0x97/0x220 [ 923.961980] ? find_held_lock+0x2b/0x80 [ 923.961997] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 923.962017] ? __pfx_vt_ioctl+0x10/0x10 [ 923.962032] tty_ioctl+0x78b/0x17f0 [ 923.962047] ? __pfx_tty_ioctl+0x10/0x10 [ 923.962059] ? ioctl_has_perm.constprop.0.isra.0+0x32e/0x4e0 [ 923.962079] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 923.962097] ? save_trace+0x3ce/0x3d0 [ 923.962106] ? __fget_files+0x34/0x3b0 [ 923.962125] ? find_held_lock+0x2b/0x80 [ 923.962141] ? __fget_files+0x203/0x3b0 [ 923.962159] ? lock_release+0xc8/0x270 [ 923.962177] ? selinux_file_ioctl+0xb9/0x280 [ 923.962193] ? __pfx_tty_ioctl+0x10/0x10 [ 923.962207] __x64_sys_ioctl+0x18f/0x210 [ 923.962225] do_syscall_64+0xbf/0x420 [ 923.962242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.962255] RIP: 0033:0x7f20100a7b19 [ 923.962264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 923.962276] RSP: 002b:00007f200d61d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 923.962288] RAX: ffffffffffffffda RBX: 00007f20101baf60 RCX: 00007f20100a7b19 [ 923.962296] RDX: 0000000020000100 RSI: 000000000000560e RDI: 0000000000000005 [ 923.962303] RBP: 00007f200d61d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 923.962310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.962317] R13: 00007fff5271502f R14: 00007f200d61d300 R15: 0000000000022000 [ 923.962334] 20:07:54 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)}], 0x2, 0x0, 0x0, 0x0) [ 924.020648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 924.021465] blk_print_req_error: 11 callbacks suppressed [ 924.021598] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:07:54 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b35, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:07:54 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b34, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 924.033344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 924.034240] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:07:54 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 48) 20:07:54 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) (fail_nth: 2) dup2(r0, r1) 20:07:54 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x1000}]) [ 924.178362] FAULT_INJECTION: forcing a failure. [ 924.178362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 924.180055] CPU: 1 UID: 0 PID: 7866 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 924.180081] Tainted: [W]=WARN [ 924.180086] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 924.180096] Call Trace: [ 924.180102] [ 924.180108] dump_stack_lvl+0xfa/0x120 [ 924.180134] should_fail_ex+0x4d7/0x5e0 [ 924.180157] ? page_copy_sane+0xce/0x2b0 [ 924.180180] copy_folio_from_iter_atomic+0x536/0x1820 [ 924.180216] ? fault_in_readable+0x12d/0x1d0 [ 924.180237] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 924.180260] ? fault_in_readable+0x172/0x1d0 [ 924.180279] ? __pfx_fault_in_readable+0x10/0x10 [ 924.180308] iomap_file_buffered_write+0x4fa/0xa40 [ 924.180346] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 924.180373] ? __lock_acquire+0x451/0x2250 [ 924.180417] ? __pfx_down_read+0x10/0x10 [ 924.180435] ? generic_update_time+0xcb/0xf0 [ 924.180452] ? mnt_put_write_access_file+0xb7/0xe0 [ 924.180477] ? file_update_time_flags+0x24c/0x4f0 [ 924.180500] blkdev_write_iter+0x7a0/0xd00 [ 924.180528] do_iter_readv_writev+0x5b3/0x910 [ 924.180554] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 924.180580] ? __import_iovec+0x1df/0x670 [ 924.180600] ? avc_policy_seqno+0x9/0x20 [ 924.180622] ? security_file_permission+0x22/0x90 [ 924.180653] vfs_writev+0x2d4/0xcd0 [ 924.180675] ? perf_trace_lock+0xb5/0x5d0 [ 924.180693] ? __lock_acquire+0x451/0x2250 [ 924.180712] ? __pfx_vfs_writev+0x10/0x10 [ 924.180734] ? __pfx_perf_trace_lock+0x10/0x10 [ 924.180759] ? __fget_files+0x34/0x3b0 [ 924.180782] ? find_held_lock+0x2b/0x80 [ 924.180805] ? __fget_files+0x203/0x3b0 [ 924.180829] ? lock_release+0xc8/0x270 [ 924.180850] ? __fget_files+0x20d/0x3b0 [ 924.180889] do_pwritev+0x1ab/0x280 [ 924.180913] ? __pfx_do_pwritev+0x10/0x10 [ 924.180935] ? find_held_lock+0x2b/0x80 [ 924.180958] ? syscall_trace_enter+0x1cf/0x230 [ 924.180981] __x64_sys_pwritev2+0xef/0x160 [ 924.180999] do_syscall_64+0xbf/0x420 [ 924.181021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.181038] RIP: 0033:0x7f9d93406b19 [ 924.181051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 924.181067] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 924.181083] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 924.181094] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 924.181104] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 924.181114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 924.181124] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 924.181148] [ 924.230462] FAULT_INJECTION: forcing a failure. [ 924.230462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 924.231817] CPU: 1 UID: 0 PID: 7860 Comm: syz-executor.1 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 924.231843] Tainted: [W]=WARN [ 924.231849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 924.231858] Call Trace: [ 924.231864] [ 924.231870] dump_stack_lvl+0xfa/0x120 [ 924.231900] should_fail_ex+0x4d7/0x5e0 [ 924.231926] _copy_to_user+0x32/0xd0 [ 924.231951] simple_read_from_buffer+0xe0/0x180 [ 924.231979] proc_fail_nth_read+0x18a/0x240 [ 924.232000] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 924.232021] ? security_file_permission+0x22/0x90 [ 924.232061] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 924.232083] vfs_read+0x1eb/0xc70 [ 924.232109] ? __pfx___mutex_lock+0x10/0x10 [ 924.232126] ? __fget_files+0x34/0x3b0 [ 924.232150] ? __pfx_vfs_read+0x10/0x10 [ 924.232176] ? lock_release+0xc8/0x270 [ 924.232198] ? __fget_files+0x20d/0x3b0 [ 924.232232] ksys_read+0x121/0x240 [ 924.232256] ? __pfx_ksys_read+0x10/0x10 [ 924.232288] do_syscall_64+0xbf/0x420 [ 924.232310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.232326] RIP: 0033:0x7f201005a69c [ 924.232339] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 924.232356] RSP: 002b:00007f200d61d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 924.232372] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f201005a69c [ 924.232383] RDX: 000000000000000f RSI: 00007f200d61d1e0 RDI: 0000000000000006 [ 924.232393] RBP: 00007f200d61d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 924.232403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 924.232413] R13: 00007fff5271502f R14: 00007f200d61d300 R15: 0000000000022000 [ 924.232438] [ 924.232640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 924.247023] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 924.273537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 924.274248] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 927.847065] kmemleak: 36 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 20:08:03 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x4000000000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:08:03 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b36, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:03 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:08:03 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="c4", 0x1}], 0x1, 0x0, 0x0, 0x0) 20:08:03 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b35, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:03 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:03 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:03 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 49) [ 932.884791] FAULT_INJECTION: forcing a failure. [ 932.884791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 932.885870] CPU: 0 UID: 0 PID: 7882 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 932.885892] Tainted: [W]=WARN [ 932.885896] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 932.885903] Call Trace: [ 932.885907] [ 932.885912] dump_stack_lvl+0xfa/0x120 [ 932.885933] should_fail_ex+0x4d7/0x5e0 [ 932.885950] ? page_copy_sane+0xce/0x2b0 [ 932.885967] copy_folio_from_iter_atomic+0x536/0x1820 [ 932.885993] ? fault_in_readable+0x12d/0x1d0 [ 932.886008] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 932.886024] ? fault_in_readable+0x172/0x1d0 [ 932.886038] ? __pfx_fault_in_readable+0x10/0x10 [ 932.886059] iomap_file_buffered_write+0x4fa/0xa40 [ 932.886087] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 932.886106] ? __lock_acquire+0x451/0x2250 [ 932.886139] ? __pfx_down_read+0x10/0x10 [ 932.886152] ? generic_update_time+0xcb/0xf0 [ 932.886165] ? mnt_put_write_access_file+0xb7/0xe0 [ 932.886183] ? file_update_time_flags+0x24c/0x4f0 [ 932.886199] blkdev_write_iter+0x7a0/0xd00 [ 932.886220] do_iter_readv_writev+0x5b3/0x910 [ 932.886239] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 932.886254] ? __import_iovec+0x1df/0x670 [ 932.886269] ? avc_policy_seqno+0x9/0x20 [ 932.886285] ? security_file_permission+0x22/0x90 [ 932.886308] vfs_writev+0x2d4/0xcd0 [ 932.886324] ? perf_trace_lock+0xb5/0x5d0 [ 932.886337] ? __lock_acquire+0x451/0x2250 [ 932.886352] ? __pfx_vfs_writev+0x10/0x10 [ 932.886367] ? __pfx_perf_trace_lock+0x10/0x10 [ 932.886385] ? __fget_files+0x34/0x3b0 [ 932.886402] ? find_held_lock+0x2b/0x80 [ 932.886419] ? __fget_files+0x203/0x3b0 [ 932.886436] ? lock_release+0xc8/0x270 [ 932.886452] ? __fget_files+0x20d/0x3b0 [ 932.886476] do_pwritev+0x1ab/0x280 [ 932.886493] ? __pfx_do_pwritev+0x10/0x10 [ 932.886509] ? find_held_lock+0x2b/0x80 [ 932.886526] ? syscall_trace_enter+0x1cf/0x230 [ 932.886544] __x64_sys_pwritev2+0xef/0x160 [ 932.886559] do_syscall_64+0xbf/0x420 [ 932.886577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.886590] RIP: 0033:0x7f9d93406b19 [ 932.886600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 932.886611] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 932.886623] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 932.886631] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 932.886639] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 932.886646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 932.886653] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 932.886671] 20:08:03 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x6000000000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:08:03 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="c4", 0x1}], 0x1, 0x0, 0x0, 0x0) 20:08:03 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b37, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 932.985347] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:08:03 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:08:03 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x2, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 932.985869] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 932.994709] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 932.995202] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:08:03 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 50) 20:08:03 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x8000000000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:08:03 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x1000}]) 20:08:03 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b2f, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:03 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b36, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 933.124129] FAULT_INJECTION: forcing a failure. [ 933.124129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 933.125242] CPU: 0 UID: 0 PID: 7914 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 933.125261] Tainted: [W]=WARN [ 933.125265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 933.125273] Call Trace: [ 933.125277] [ 933.125281] dump_stack_lvl+0xfa/0x120 [ 933.125302] should_fail_ex+0x4d7/0x5e0 [ 933.125320] ? page_copy_sane+0xce/0x2b0 [ 933.125337] copy_folio_from_iter_atomic+0x536/0x1820 [ 933.125363] ? fault_in_readable+0x12d/0x1d0 [ 933.125378] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 933.125394] ? fault_in_readable+0x172/0x1d0 [ 933.125407] ? __pfx_fault_in_readable+0x10/0x10 [ 933.125429] iomap_file_buffered_write+0x4fa/0xa40 [ 933.125457] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 933.125476] ? __lock_acquire+0x451/0x2250 [ 933.125509] ? __pfx_down_read+0x10/0x10 [ 933.125522] ? generic_update_time+0xcb/0xf0 [ 933.125535] ? mnt_put_write_access_file+0xb7/0xe0 [ 933.125553] ? file_update_time_flags+0x24c/0x4f0 [ 933.125569] blkdev_write_iter+0x7a0/0xd00 [ 933.125591] do_iter_readv_writev+0x5b3/0x910 [ 933.125610] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 933.125625] ? __import_iovec+0x1df/0x670 [ 933.125640] ? avc_policy_seqno+0x9/0x20 [ 933.125657] ? security_file_permission+0x22/0x90 [ 933.125679] vfs_writev+0x2d4/0xcd0 [ 933.125695] ? perf_trace_lock+0xb5/0x5d0 [ 933.125709] ? __lock_acquire+0x451/0x2250 [ 933.125723] ? __pfx_vfs_writev+0x10/0x10 [ 933.125738] ? __pfx_perf_trace_lock+0x10/0x10 [ 933.125756] ? __fget_files+0x34/0x3b0 [ 933.125773] ? find_held_lock+0x2b/0x80 [ 933.125790] ? __fget_files+0x203/0x3b0 [ 933.125807] ? lock_release+0xc8/0x270 [ 933.125822] ? __fget_files+0x20d/0x3b0 [ 933.125846] do_pwritev+0x1ab/0x280 [ 933.125863] ? __pfx_do_pwritev+0x10/0x10 [ 933.125880] ? find_held_lock+0x2b/0x80 [ 933.125900] ? syscall_trace_enter+0x1cf/0x230 [ 933.125917] __x64_sys_pwritev2+0xef/0x160 [ 933.125931] do_syscall_64+0xbf/0x420 [ 933.125948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.125960] RIP: 0033:0x7f9d93406b19 [ 933.125970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 933.125982] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 933.125994] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 933.126002] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 933.126010] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 933.126017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 933.126024] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 933.126042] 20:08:03 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="c4", 0x1}], 0x1, 0x0, 0x0, 0x0) [ 933.213308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 933.214246] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 933.215789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 933.216465] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:08:03 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x2, r1, 0x0, 0x0, 0x1000}]) 20:08:03 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b3a, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:03 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b30, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:12 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b37, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:12 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 51) 20:08:12 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0xa000000000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:08:12 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b31, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:12 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b3b, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:12 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:12 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 1) 20:08:12 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x3, r1, 0x0, 0x0, 0x1000}]) [ 942.162084] FAULT_INJECTION: forcing a failure. [ 942.162084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.164517] CPU: 1 UID: 0 PID: 7951 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 942.164560] Tainted: [W]=WARN [ 942.164568] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 942.164582] Call Trace: [ 942.164591] [ 942.164600] dump_stack_lvl+0xfa/0x120 [ 942.164636] should_fail_ex+0x4d7/0x5e0 [ 942.164668] ? page_copy_sane+0xce/0x2b0 [ 942.164702] copy_folio_from_iter_atomic+0x536/0x1820 [ 942.164753] ? fault_in_readable+0x12d/0x1d0 [ 942.164781] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 942.164814] ? fault_in_readable+0x172/0x1d0 [ 942.164840] ? __pfx_fault_in_readable+0x10/0x10 [ 942.164883] iomap_file_buffered_write+0x4fa/0xa40 [ 942.164945] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 942.164983] ? __lock_acquire+0x451/0x2250 20:08:12 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b32, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 942.165047] ? __pfx_down_read+0x10/0x10 [ 942.165072] ? generic_update_time+0xcb/0xf0 [ 942.165097] ? mnt_put_write_access_file+0xb7/0xe0 [ 942.165132] ? file_update_time_flags+0x24c/0x4f0 [ 942.165165] blkdev_write_iter+0x7a0/0xd00 [ 942.165206] do_iter_readv_writev+0x5b3/0x910 [ 942.165242] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 942.165272] ? __import_iovec+0x1df/0x670 [ 942.165302] ? avc_policy_seqno+0x9/0x20 [ 942.165333] ? security_file_permission+0x22/0x90 [ 942.165378] vfs_writev+0x2d4/0xcd0 [ 942.165410] ? perf_trace_lock+0xb5/0x5d0 [ 942.165436] ? __lock_acquire+0x451/0x2250 [ 942.165465] ? __pfx_vfs_writev+0x10/0x10 [ 942.165496] ? __pfx_perf_trace_lock+0x10/0x10 [ 942.165531] ? __fget_files+0x34/0x3b0 [ 942.165566] ? find_held_lock+0x2b/0x80 [ 942.165599] ? __fget_files+0x203/0x3b0 [ 942.165633] ? lock_release+0xc8/0x270 [ 942.165664] ? __fget_files+0x20d/0x3b0 [ 942.165711] do_pwritev+0x1ab/0x280 [ 942.165745] ? __pfx_do_pwritev+0x10/0x10 [ 942.165778] ? find_held_lock+0x2b/0x80 [ 942.165811] ? syscall_trace_enter+0x1cf/0x230 [ 942.165843] __x64_sys_pwritev2+0xef/0x160 [ 942.165869] do_syscall_64+0xbf/0x420 [ 942.165901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.165924] RIP: 0033:0x7f9d93406b19 [ 942.165942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 942.165965] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 942.165988] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 942.166003] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 942.166018] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 942.166032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 942.166046] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 942.166081] [ 942.212300] FAULT_INJECTION: forcing a failure. [ 942.212300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.214341] CPU: 1 UID: 0 PID: 7964 Comm: syz-executor.2 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 942.214378] Tainted: [W]=WARN [ 942.214385] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 942.214399] Call Trace: [ 942.214406] [ 942.214415] dump_stack_lvl+0xfa/0x120 [ 942.214450] should_fail_ex+0x4d7/0x5e0 [ 942.214487] _copy_to_user+0x32/0xd0 [ 942.214523] simple_read_from_buffer+0xe0/0x180 [ 942.214560] proc_fail_nth_read+0x18a/0x240 [ 942.214588] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 942.214616] ? security_file_permission+0x22/0x90 [ 942.214655] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 942.214682] vfs_read+0x1eb/0xc70 [ 942.214719] ? __pfx___mutex_lock+0x10/0x10 [ 942.214744] ? __fget_files+0x34/0x3b0 [ 942.214779] ? __pfx_vfs_read+0x10/0x10 [ 942.214815] ? lock_release+0xc8/0x270 [ 942.214847] ? __fget_files+0x20d/0x3b0 [ 942.214902] ksys_read+0x121/0x240 [ 942.214936] ? __pfx_ksys_read+0x10/0x10 [ 942.214982] do_syscall_64+0xbf/0x420 [ 942.215013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.215037] RIP: 0033:0x7fc5b5b4169c [ 942.215055] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 942.215077] RSP: 002b:00007fc5b30e3170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 942.215100] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fc5b5b4169c [ 942.215115] RDX: 000000000000000f RSI: 00007fc5b30e31e0 RDI: 0000000000000004 [ 942.215130] RBP: 00007fc5b30e31d0 R08: 0000000000000000 R09: 0000000000000000 [ 942.215143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 942.215157] R13: 00007fffc27408ef R14: 00007fc5b30e3300 R15: 0000000000022000 [ 942.215193] [ 942.273105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 942.274217] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 942.275859] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 942.276779] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:08:23 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b33, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:23 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4, r1, 0x0, 0x0, 0x1000}]) 20:08:23 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:23 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0xc000000000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:08:23 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:08:23 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b3c, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:23 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 52) 20:08:23 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b3a, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 953.246203] FAULT_INJECTION: forcing a failure. [ 953.246203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 953.248054] CPU: 0 UID: 0 PID: 7982 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 953.248088] Tainted: [W]=WARN [ 953.248096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 953.248108] Call Trace: [ 953.248115] [ 953.248123] dump_stack_lvl+0xfa/0x120 [ 953.248157] should_fail_ex+0x4d7/0x5e0 [ 953.248186] ? page_copy_sane+0xce/0x2b0 [ 953.248217] copy_folio_from_iter_atomic+0x536/0x1820 [ 953.248265] ? fault_in_readable+0x12d/0x1d0 [ 953.248292] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 953.248322] ? fault_in_readable+0x172/0x1d0 [ 953.248347] ? __pfx_fault_in_readable+0x10/0x10 [ 953.248386] iomap_file_buffered_write+0x4fa/0xa40 [ 953.248437] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 953.248472] ? __lock_acquire+0x451/0x2250 [ 953.248531] ? __pfx_down_read+0x10/0x10 [ 953.248555] ? generic_update_time+0xcb/0xf0 [ 953.248578] ? mnt_put_write_access_file+0xb7/0xe0 [ 953.248611] ? file_update_time_flags+0x24c/0x4f0 [ 953.248641] blkdev_write_iter+0x7a0/0xd00 [ 953.248680] do_iter_readv_writev+0x5b3/0x910 [ 953.248714] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 953.248743] ? __import_iovec+0x1df/0x670 [ 953.248771] ? avc_policy_seqno+0x9/0x20 [ 953.248800] ? security_file_permission+0x22/0x90 [ 953.248841] vfs_writev+0x2d4/0xcd0 [ 953.248871] ? perf_trace_lock+0xb5/0x5d0 [ 953.248903] ? __lock_acquire+0x451/0x2250 [ 953.248930] ? __pfx_vfs_writev+0x10/0x10 [ 953.248959] ? __pfx_perf_trace_lock+0x10/0x10 [ 953.248992] ? __fget_files+0x34/0x3b0 [ 953.249024] ? find_held_lock+0x2b/0x80 [ 953.249055] ? __fget_files+0x203/0x3b0 [ 953.249087] ? lock_release+0xc8/0x270 [ 953.249116] ? __fget_files+0x20d/0x3b0 [ 953.249160] do_pwritev+0x1ab/0x280 [ 953.249192] ? __pfx_do_pwritev+0x10/0x10 [ 953.249222] ? find_held_lock+0x2b/0x80 [ 953.249253] ? syscall_trace_enter+0x1cf/0x230 [ 953.249283] __x64_sys_pwritev2+0xef/0x160 [ 953.249307] do_syscall_64+0xbf/0x420 [ 953.249337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.249359] RIP: 0033:0x7f9d93406b19 [ 953.249376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 953.249397] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 953.249418] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 953.249433] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 953.249446] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 953.249459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 953.249472] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 953.249504] [ 953.329804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 953.330988] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 953.333242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 953.334241] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:08:24 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0xe000000000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:08:24 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x5, r1, 0x0, 0x0, 0x1000}]) 20:08:24 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b34, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:24 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b3d, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:24 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0xffffffff, 0x0, 0x0) 20:08:24 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 53) 20:08:24 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b3b, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:24 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x10000000000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 953.620520] FAULT_INJECTION: forcing a failure. [ 953.620520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 953.622274] CPU: 0 UID: 0 PID: 8011 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 953.622309] Tainted: [W]=WARN [ 953.622316] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 953.622328] Call Trace: [ 953.622337] [ 953.622346] dump_stack_lvl+0xfa/0x120 [ 953.622380] should_fail_ex+0x4d7/0x5e0 [ 953.622409] ? page_copy_sane+0xce/0x2b0 [ 953.622440] copy_folio_from_iter_atomic+0x536/0x1820 [ 953.622488] ? fault_in_readable+0x12d/0x1d0 [ 953.622514] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 953.622544] ? fault_in_readable+0x172/0x1d0 [ 953.622569] ? __pfx_fault_in_readable+0x10/0x10 [ 953.622609] iomap_file_buffered_write+0x4fa/0xa40 [ 953.622664] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 953.622699] ? __lock_acquire+0x451/0x2250 [ 953.622759] ? __pfx_down_read+0x10/0x10 [ 953.622784] ? generic_update_time+0xcb/0xf0 [ 953.622806] ? mnt_put_write_access_file+0xb7/0xe0 [ 953.622840] ? file_update_time_flags+0x24c/0x4f0 [ 953.622870] blkdev_write_iter+0x7a0/0xd00 [ 953.622916] do_iter_readv_writev+0x5b3/0x910 [ 953.622949] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 953.622978] ? __import_iovec+0x1df/0x670 [ 953.623005] ? avc_policy_seqno+0x9/0x20 [ 953.623034] ? security_file_permission+0x22/0x90 [ 953.623075] vfs_writev+0x2d4/0xcd0 [ 953.623106] ? perf_trace_lock+0xb5/0x5d0 [ 953.623130] ? __lock_acquire+0x451/0x2250 [ 953.623156] ? __pfx_vfs_writev+0x10/0x10 [ 953.623185] ? __pfx_perf_trace_lock+0x10/0x10 [ 953.623218] ? __fget_files+0x34/0x3b0 [ 953.623250] ? find_held_lock+0x2b/0x80 [ 953.623280] ? __fget_files+0x203/0x3b0 [ 953.623312] ? lock_release+0xc8/0x270 [ 953.623341] ? __fget_files+0x20d/0x3b0 [ 953.623385] do_pwritev+0x1ab/0x280 [ 953.623416] ? __pfx_do_pwritev+0x10/0x10 [ 953.623446] ? find_held_lock+0x2b/0x80 [ 953.623477] ? syscall_trace_enter+0x1cf/0x230 [ 953.623507] __x64_sys_pwritev2+0xef/0x160 [ 953.623532] do_syscall_64+0xbf/0x420 [ 953.623561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.623583] RIP: 0033:0x7f9d93406b19 [ 953.623601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 953.623634] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 953.623656] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 953.623671] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 953.623684] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 953.623697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 953.623710] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 953.623742] 20:08:24 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x6, r1, 0x0, 0x0, 0x1000}]) 20:08:24 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0xffffffff, 0x0) [ 953.746415] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 953.747347] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 953.758583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 953.759520] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 954.896828] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 954.898026] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 954.899644] buffer_io_error: 2070 callbacks suppressed [ 954.899660] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 954.901925] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 954.903230] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 954.904551] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 954.905870] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 954.907210] Buffer I/O error on dev sr0, logical block 5, lost async page write [ 954.908526] Buffer I/O error on dev sr0, logical block 6, lost async page write [ 954.909846] Buffer I/O error on dev sr0, logical block 7, lost async page write [ 954.911179] Buffer I/O error on dev sr0, logical block 8, lost async page write [ 954.912542] Buffer I/O error on dev sr0, logical block 9, lost async page write [ 954.916108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 954.917145] I/O error, dev sr0, sector 127 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 954.923384] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 954.924483] I/O error, dev sr0, sector 254 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 954.926728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 954.927867] I/O error, dev sr0, sector 381 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 954.944743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 954.945828] I/O error, dev sr0, sector 508 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 954.948145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 954.949424] I/O error, dev sr0, sector 635 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 954.956268] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 954.958528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 954.963830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 954.965357] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 954.970524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 954.972033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 954.976586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 954.978173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 954.983970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 954.985447] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 955.000107] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 955.001452] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 955.002153] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 955.002848] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 fc 00 00 0c 00 20:08:34 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b3c, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:34 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0xffffffffffffffff) 20:08:34 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b35, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:34 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 54) 20:08:34 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:34 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x8, r1, 0x0, 0x0, 0x1000}]) 20:08:34 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b40, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:34 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0xf0ff7f00000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 963.495240] FAULT_INJECTION: forcing a failure. [ 963.495240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 963.497087] CPU: 0 UID: 0 PID: 8037 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 963.497122] Tainted: [W]=WARN [ 963.497131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 963.497145] Call Trace: [ 963.497152] [ 963.497160] dump_stack_lvl+0xfa/0x120 [ 963.497193] should_fail_ex+0x4d7/0x5e0 [ 963.497223] ? page_copy_sane+0xce/0x2b0 [ 963.497254] copy_folio_from_iter_atomic+0x536/0x1820 [ 963.497306] ? fault_in_readable+0x12d/0x1d0 [ 963.497333] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 963.497363] ? fault_in_readable+0x172/0x1d0 [ 963.497389] ? __pfx_fault_in_readable+0x10/0x10 [ 963.497428] iomap_file_buffered_write+0x4fa/0xa40 20:08:34 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b36, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 963.497479] ? __pfx_iomap_file_buffered_write+0x10/0x10 20:08:34 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x10, r1, 0x0, 0x0, 0x1000}]) [ 963.497514] ? __lock_acquire+0x451/0x2250 20:08:34 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0xf0ffffff7f0000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 963.497574] ? __pfx_down_read+0x10/0x10 [ 963.497598] ? generic_update_time+0xcb/0xf0 [ 963.497621] ? mnt_put_write_access_file+0xb7/0xe0 [ 963.497655] ? file_update_time_flags+0x24c/0x4f0 [ 963.497685] blkdev_write_iter+0x7a0/0xd00 [ 963.497724] do_iter_readv_writev+0x5b3/0x910 [ 963.497758] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 963.497786] ? __import_iovec+0x1df/0x670 [ 963.497814] ? avc_policy_seqno+0x9/0x20 [ 963.497843] ? security_file_permission+0x22/0x90 [ 963.497892] vfs_writev+0x2d4/0xcd0 [ 963.497923] ? perf_trace_lock+0xb5/0x5d0 [ 963.497947] ? __lock_acquire+0x451/0x2250 [ 963.497973] ? __pfx_vfs_writev+0x10/0x10 [ 963.498002] ? __pfx_perf_trace_lock+0x10/0x10 20:08:34 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 55) [ 963.498035] ? __fget_files+0x34/0x3b0 [ 963.498068] ? find_held_lock+0x2b/0x80 [ 963.498099] ? __fget_files+0x203/0x3b0 [ 963.498131] ? lock_release+0xc8/0x270 [ 963.498159] ? __fget_files+0x20d/0x3b0 [ 963.498204] do_pwritev+0x1ab/0x280 [ 963.498236] ? __pfx_do_pwritev+0x10/0x10 [ 963.498266] ? find_held_lock+0x2b/0x80 [ 963.498296] ? syscall_trace_enter+0x1cf/0x230 [ 963.498326] __x64_sys_pwritev2+0xef/0x160 [ 963.498351] do_syscall_64+0xbf/0x420 [ 963.498380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.498402] RIP: 0033:0x7f9d93406b19 [ 963.498419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 963.498440] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 963.498461] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 963.498476] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 963.498489] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 963.498502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 963.498515] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 963.498548] [ 963.540154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 963.540209] blk_print_req_error: 11 callbacks suppressed [ 963.540222] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 963.558261] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:08:34 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xfe, r1, 0x0, 0x0, 0x1000}]) [ 963.558314] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:08:34 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) sendmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpgrp(0x0) sendmsg$unix(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20}, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x4000) recvmsg$unix(r5, &(0x7f0000001680)={&(0x7f0000000400), 0x6e, &(0x7f0000001540)=[{&(0x7f0000000480)=""/168, 0xa8}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x2, &(0x7f0000001580)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpgrp(0x0) sendmsg$unix(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r7}}}], 0x20}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = getpgrp(0x0) sendmsg$unix(r8, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r9}}}], 0x20}, 0x0) r10 = gettid() clone3(&(0x7f0000000340)={0x141080000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180), {0x1a}, &(0x7f00000001c0)=""/101, 0x65, &(0x7f00000002c0)=""/40, &(0x7f0000000300)=[r2, r2, r4, r7, r9, r2, r10, r2], 0x8}, 0x58) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f00000016c0), 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001740)=""/178, 0xb2}, {&(0x7f0000001800)=""/182, 0xb6}, {&(0x7f00000018c0)=""/212, 0xd4}], 0x3, &(0x7f0000001b00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c0000faffffff00010000000200000081cf4ece820585e86ea1900cd42930071eca7e760bdf2a6a6cd53c1760754ea4ca", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x98}, 0x200) syz_open_procfs(r2, &(0x7f00000000c0)='net/sctp\x00') 20:08:34 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0xfeff3f00000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 963.801077] FAULT_INJECTION: forcing a failure. [ 963.801077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 963.802792] CPU: 0 UID: 0 PID: 8062 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 963.802828] Tainted: [W]=WARN [ 963.802836] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 963.802848] Call Trace: [ 963.802854] [ 963.802862] dump_stack_lvl+0xfa/0x120 [ 963.802901] should_fail_ex+0x4d7/0x5e0 [ 963.802933] ? page_copy_sane+0xce/0x2b0 [ 963.802964] copy_folio_from_iter_atomic+0x536/0x1820 [ 963.803011] ? fault_in_readable+0x12d/0x1d0 [ 963.803037] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 963.803066] ? fault_in_readable+0x172/0x1d0 [ 963.803090] ? __pfx_fault_in_readable+0x10/0x10 [ 963.803125] iomap_file_buffered_write+0x4fa/0xa40 [ 963.803180] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 963.803216] ? __lock_acquire+0x451/0x2250 [ 963.803272] ? __pfx_down_read+0x10/0x10 [ 963.803295] ? generic_update_time+0xcb/0xf0 [ 963.803316] ? mnt_put_write_access_file+0xb7/0xe0 [ 963.803347] ? file_update_time_flags+0x24c/0x4f0 [ 963.803374] blkdev_write_iter+0x7a0/0xd00 [ 963.803410] do_iter_readv_writev+0x5b3/0x910 [ 963.803441] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 963.803467] ? __import_iovec+0x1df/0x670 [ 963.803493] ? avc_policy_seqno+0x9/0x20 [ 963.803520] ? security_file_permission+0x22/0x90 [ 963.803557] vfs_writev+0x2d4/0xcd0 [ 963.803586] ? perf_trace_lock+0xb5/0x5d0 [ 963.803607] ? __lock_acquire+0x451/0x2250 [ 963.803632] ? __pfx_vfs_writev+0x10/0x10 [ 963.803658] ? __pfx_perf_trace_lock+0x10/0x10 [ 963.803688] ? __fget_files+0x34/0x3b0 [ 963.803717] ? find_held_lock+0x2b/0x80 [ 963.803757] ? __fget_files+0x203/0x3b0 [ 963.803786] ? lock_release+0xc8/0x270 [ 963.803812] ? __fget_files+0x20d/0x3b0 [ 963.803852] do_pwritev+0x1ab/0x280 [ 963.803880] ? __pfx_do_pwritev+0x10/0x10 [ 963.803907] ? find_held_lock+0x2b/0x80 [ 963.803935] ? syscall_trace_enter+0x1cf/0x230 [ 963.803962] __x64_sys_pwritev2+0xef/0x160 [ 963.803984] do_syscall_64+0xbf/0x420 [ 963.804011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.804031] RIP: 0033:0x7f9d93406b19 [ 963.804046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 963.804065] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 963.804085] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 963.804098] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 963.804110] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 963.804121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 963.804132] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 963.804162] 20:08:34 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b3d, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:34 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:34 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b41, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:34 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b37, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 963.912318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 963.913073] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 963.926135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 963.926807] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 969.300213] kmemleak: 116 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 20:08:45 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 56) 20:08:45 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x300, r1, 0x0, 0x0, 0x1000}]) 20:08:45 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x100000000000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:08:45 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:45 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/nf_conntrack_expect\x00') r1 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) close_range(r1, r0, 0x2) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r2, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:08:45 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b40, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:45 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b3a, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:45 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b44, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:45 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b41, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 974.982463] FAULT_INJECTION: forcing a failure. [ 974.982463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 974.983767] CPU: 0 UID: 0 PID: 8105 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 974.983788] Tainted: [W]=WARN [ 974.983792] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 974.983800] Call Trace: [ 974.983804] [ 974.983809] dump_stack_lvl+0xfa/0x120 [ 974.983831] should_fail_ex+0x4d7/0x5e0 [ 974.983848] ? page_copy_sane+0xce/0x2b0 [ 974.983879] copy_folio_from_iter_atomic+0x536/0x1820 [ 974.983913] ? fault_in_readable+0x12d/0x1d0 [ 974.983931] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 974.983951] ? fault_in_readable+0x172/0x1d0 [ 974.983966] ? __pfx_fault_in_readable+0x10/0x10 [ 974.983989] iomap_file_buffered_write+0x4fa/0xa40 [ 974.984027] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 974.984053] ? __lock_acquire+0x451/0x2250 [ 974.984088] ? __pfx_down_read+0x10/0x10 [ 974.984106] ? generic_update_time+0xcb/0xf0 [ 974.984121] ? mnt_put_write_access_file+0xb7/0xe0 [ 974.984147] ? file_update_time_flags+0x24c/0x4f0 [ 974.984164] blkdev_write_iter+0x7a0/0xd00 [ 974.984186] do_iter_readv_writev+0x5b3/0x910 [ 974.984205] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 974.984220] ? __import_iovec+0x1df/0x670 [ 974.984235] ? avc_policy_seqno+0x9/0x20 [ 974.984252] ? security_file_permission+0x22/0x90 [ 974.984275] vfs_writev+0x2d4/0xcd0 [ 974.984291] ? perf_trace_lock+0xb5/0x5d0 [ 974.984305] ? __lock_acquire+0x451/0x2250 [ 974.984319] ? __pfx_vfs_writev+0x10/0x10 [ 974.984335] ? __pfx_perf_trace_lock+0x10/0x10 [ 974.984352] ? __fget_files+0x34/0x3b0 [ 974.984370] ? find_held_lock+0x2b/0x80 [ 974.984387] ? __fget_files+0x203/0x3b0 [ 974.984404] ? lock_release+0xc8/0x270 [ 974.984420] ? __fget_files+0x20d/0x3b0 [ 974.984444] do_pwritev+0x1ab/0x280 [ 974.984461] ? __pfx_do_pwritev+0x10/0x10 [ 974.984477] ? find_held_lock+0x2b/0x80 [ 974.984493] ? syscall_trace_enter+0x1cf/0x230 [ 974.984510] __x64_sys_pwritev2+0xef/0x160 [ 974.984524] do_syscall_64+0xbf/0x420 [ 974.984540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.984553] RIP: 0033:0x7f9d93406b19 [ 974.984563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 974.984575] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 974.984588] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 974.984596] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 974.984603] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 974.984611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 974.984618] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 974.984636] [ 975.056784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 975.057466] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:08:45 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x200000000000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 975.068336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 975.068804] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:08:45 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f00000012c0)=[{&(0x7f0000001340)="0558b16526190552a1e9b2d5b68f2502591122e11f7d2e7dbc19baa24339c86bfc18f8852fdcd2f3c8991b14f8e6ea90036b3112a9b6e0bb05861ce383be22515ccd4a82bee72e66a9d0eaf33e80d0b63577ac723413f046766b1cc01342d7e00de913941d17d26a497efe69c524dc7c7ce083697b94b2291902832aad030e54c5d5158e555b6913cf38d3b7e6b47c7891da78d7058db1758cd85353893a3237cbca5dd7cb7782d9453092d03c0df330dcfb1d75bec65b517bb98258f698b18b175a6764643507e8b4154d95b018b8d0324ad33ae4505a00f72c0bbbb457cde8a7efcb5b5ab6fd0d94e0a1432187243cf9c59b059a6aa134326e51d7357887dc5779e5025bd594d7dffa830079d56d012e8bda81b4f59c0bd889575466c3634e33612fec6096880ea7268690de5b993eb9a0e2d00601177e441dde185ac12771bebb35d1526a4ffae640216686fd59824cee66dff1d4fae4d3829011574c146955632c18ca66b9b50c0f690ec684dcad4827c850aee720bf4e4b14ec03e9019615ad8504ecb272de462590061a4744f42998778b9c3e63c42ae9e3438130c7317fd899916cf22dc2c2eecb3035c47d5843279dee425a391bac74b455a8993e5b4f5994f97b13001ad190234598950b65e1c960520efe229ce53992cecf8c777a382803c4fd87046a4babe10041f324c420c71de895a3c9e973f0dceb7e1de263c37703b69943e91f6d085fb7df1c15405f53e90cdd00ea7db9a1bc4a464e2a4d24185e968d9d01a43e64e0deab616764d7115daa4c6189646438d427fe9ec78978498b2bf57eba063ef94d5bfbd9414f168d412a34e315541d64ffbacb2d2a5edbfd548cf8f6279bcd855747a17c4f6e7b78454c96f9e375cec6b1ac478eefd8c541acf82c81dae959695f0dd2ed79050247bf2fbbcd6e7864620814c43c98a0c1731a3673caa50c9414dd21c352e7fca92b4acda55d38a42edeaedf720ca48b4257bbbb0514c4829aabde7a798415bb3bd2c20f8d2d3c191d54bad148a6ead13af757b5ad7711f2d4b8f078834b050955b1ff0851aefd90429fff6a3b742aef8f7e9ee960187c0f1a05c118f9724dbf5ee0edc17df49565d8ef60555090a82c9ac6b74d42e4e89e9306366d63ff1e5d98f85342e7e89ef9d049209536784a0f54a26db861496f1d45067cf5ae23dac04f134f269696b3ed748fd082d382b698c8fc8f9d00c8baf44fa0657990392e59eab57f08829401ff2524dabe0a04cb82cfaa65a5e21f088b9c55569007e0cca979a811b2f943ff1e063882bacffa5f38c1381911990ac754b886c98f121ebfe48f28520b0b6eae788f2426346ed8bc3d60d54415335e1245b397ed74634fbaedb20aa76aa226d412ceae97e2637b1b2b68c0d7aec2000c823fae5bd4188d9b1469b282f3f3103b3cdcb8fc72a94a7d84e2ee436cfb7f71bf7e0ecf342fb8cd6e172c6ce04399332984ce5a69b238cd9c18f2d968d57d0f66f5fc34f8eb5cf589f6fb19c64b6581ced725d506f9da7957859bbc51caeb53e9a4b14a61885a3d6ad6728b035b2a33e20d21f2fa1391869d3852cae86980b520f6d447af9fe9c215ecb2096c9dea4673960ceaabc7ba865372484c0da6833840640503851f7268a2942c55b1076b846cc4707c552ecf6a45f205d40631b44a3d1754937d94104a75c503634df4af5fe4b9b74094bc3c7d9ae2e3b54b0232097cfde76bc7b1bd4637b5a621db0f17d4e10c644334035328802e5f03d3eb7c0f2d7c2ebc6acfdd801e7328ef937c307871e547c31f11b12d5d8784e9f6be981dd051b9dac0c4914726b02dbce8c934239f9e2ded4241d4430fc6d2e872f5081cced46348d4eec7f3086fdb02669611972dbbb0cd7d9fd62d30804db1c73e5d585687c89e5852ffe4cf0885a40d00c77b9688a31c86d6b34acce9755beb1bd83a4de8ce3aec6c6150e57e261447dcfee58e10562a974047165ddca4ff4b518689d97acd794dabe5181e4bc58b33f5447d098a859b39fd6981bc4501e5b6fa7689c97241662a780990b958422b6a9de4a2bfcde8d767004aa9137255a16316afa3af851e30d0cdea95675062ec37e004322fa1d8a576cc7c4015e21a4b03fa17a3713663f44a14cffca2293f11fc17eb9b1666ffe88b642e1542578c39899e438430f7aed7d53ed096bc85da90f4646d11acf578ee489980cea7fbf443f046db7ad6378ba15191fbc1f61a6d3d8b98ca1beb7d6b45ac4f0af35cc9478ac467a394d6db1684e60a3bea97e20341a4d87a9a340e843a48a2cf83c7be4cf1a08d7186faa458d84b3fa32261f955569f854f02bf1c4338ec243afd68d8588feac5ec64db8b454f16f336d00c58f66a4bb1d35561ff4fd37328243d9eba0716551e482d21bad5e723943bd4572fd00440e12d5996eb653b7abbffa7c80c232a94ea5305989314987651c26095c57bc13f4e5c223abb6fcaf88b543e07b09c6f92bb19449734a45dc4e9351fd44237cb536f7f8467e2b3b8231a7f14efa7fd4643b16129b26bfa7d7d9cafa4db45bada2e38fd283de837439311bb6a79a03a2592276ee90e936140a005dfb8834d1dcf52071bbd863b7abfa5a4ba7cf0551d402908a8f8971939d61489d0296784b9da06f4df147a1e9e3695983898721bcbf9003df54aebeee844ffd9e9f533f57b34bad4b0112528929a192082b2e834e1c74ba7a11dd622641827b418426d44dabf25fb5d191f8b59c2efed2166515a09bda8a90929dc299da826720df446235f15161d9adfb6c5d75bbdd7de07bdcd8abc20191c7b42652651a8db0be426ef216b0792d0e215efbeabd9bd681f3d3ac5c713c5d7369d0735bd75dea37289cd3bd064d63822ce1ccfdd5b2e6af264d627eec6c9f849f7a849dd302daa386d31d267e4275320f69b42627dc745c21630e71ef1dedcadae5c1808117ea723badb8d7205965a9d8be738d80c1d46f59a9e9921ca6aaa8cf3e92fc5d474a05ca530661a5814a3be5e9702c43b439f1380f4be42784a790f0b28f67374652ff51d4cacc05d6d4ea23f63dd30dd80a791f128386b7b964e8748b0cae32c15e179cc55716c6015c38c9a4267116832a8740bb5ce9f26c99034f4360f40cd2ad8b849549bae9522433e386064e54af5f5d5b39214ffa388a395840e9e239a60f9400013232a416f1bdb97869e1275e3d974bc7e7e0b31f4f7ab6d5a3fd49f0f8e747833a41078e71b3835eddba8e69a1b412d91e490efad045adda303f3719603c22135da68d0f4238f345ce4c3992fd47345915c6752372cebb40a34b8b33f27db8792f2266c4d0117681e26119365bcafd3574a1f2d1edaf1d22f44fdc1413c1b37d169ec9049ee126ea6a253df53899003a276aacbba3d562958147f60eae87a583aceec7b7672b7f7436c898530d0a89558713ee7cc575d36a1a37d36bd382bdf0ff78b729653d5c2c36f6f87e692d2ceea969a74080d5ba6d3187c9b385b0ff8c58fd49405dd0a53936ca5d805c24ad4144d9bec8b6d2f2c20a563be33eb29ca2ec6ced4539ac9bd16a9b7431d12e275e2db6fd1e38cf2fdfc9ec6c78d2547b8973ea4078f0d1736c71d2ec2c076dfce82f04dba8210f761d295011af38e61648ca7fbad8a8dba20b4fec1ca509ec18facf1fb81ed6f65f55aad8d9ea514fb6266fd64fa221942db73b60d761b5f64154c5905ec43849e1e9edb9bef36d7467c0e28aff66641a90da20da02c2b34a1f15fc030b68992e5bbb784d2808a8cf7c2d60a5ad11fdb34f16cba9146a6acffaa4058bfcb58242013104b7d072d538b8323ca77d44169e2446f79b09b7db2d2c97931c2f51d2247bef28843e4284337023504efaf18c66cf2a89853c03a4bdb04b608081e0d15e9334906e00b07fbe09780d5ab093b2ead920a5183e466c5dd520299416523dae37987f9d5cd2596df37e64f3b8494702634640e06f86f0131fc8636646d97c3014e4607ea599a79c0336a308670fdc14858c5b8dff710c842f3798b4a83511f11c9bed89921c4919fd4b2d6336a9dc807eb936d23707819d17ae1722e58f2cd879c1a48561d0490d898ba5dd2ec077bb98cfa46c1360a7804d8609f185dfbc01e4c11957f372fed55d6ccc79124d918c741a07b1e0255fdd1891f3d5c92fe0b903e25246ed06e8134919c66c40dcc6f8d3e3921dfe2c4dc27e3ce43f795af323c12896d3af2d798eaa43365c10be33091ee604568976eb847da78dfd0a9ed6ef0c40628f93ea8b4a416d2a3837f91c40d2c9fd38c11dbb0913809bfbc776198644e368788401c91a4ed498d0cd7b8f89ca6e9f681bc5ff765cace81c34392ef17fa4de1a93f537ffaf68b5bca6a4ba21795baece0f01be54ed581051c12de2cee69fe297713e33a9270ba48609e1e1add2772751cb634a60681b021a717f690c604895a34b196bfd268b88579bd6609034fba480a1794e35f5a89071755fdffdd8c21fc60b5c56bdd91805c4da2eab5e0d34bd360d0d5f17d01c7c7497e933f0d21ef2d1ac3175060388683377eab40e603f5339a8930d39781eaa25208916b8e2b1ad51016ba0a59360b7e395dd65840de202a99662678894965631c4b9ec8ec497233c6f223657a1de4d3b1ef8421605c7f976f9feaa75fe46f926edca3b2d81e781cdbb9656734b4028093fee143ddd4c8e62305f3ef5a1d1e0b822afaffb78e2e2ddba90097f99acebd30db0affe2bf92a1a1e38a2f83b0fe947ad88034d5619c9bf7e8ebfc7ccfaa2c0f57408bbff8bb820dddd9c18c9509fbad8378019465204843414d14deedd0eba63c871dc42b129052a4b3c8bb599f1df3118168574a57a4a1a5905417ca8a0f7815164658a34401f3707e075f561ccadf9fc2fb7f9eabe4f4256175c62fd8fb31e6469b2aa18f129e92dde8ca41abb5dc2a4c33dd004b4b509f1a086b51debc8f59844bf78871dc0c1b8ebee3bad624dc351ef5a552749f61c9547c4e5610f687f664650a8cc591361beff5ee995b4165affa145f8681ed68dd211f39fc4b34a03a4b30f1124057ff9f968c4a02f7fa1643311d56664103d8fa9dde948e83e017665a8cee18d497c449614772727a9f661d4afbc3e8e88bdf49982f45565382140b9d8d61743428acd3987c34858e66a470f0a4daf58043c22a6e7daed62216d3657b15a77e5ca205a339b2dead6e942f392c9f17120cbbcfa623adbf47b46a883eb399fd12363795bd8adf2998cfa721564104b056ccbb15d7ab1177199e7c69febaa023f214c79b29cb67f67651801228770d9fb4fbc3c33551af5183c724724233508297485562e4837a62f458f6128d5961d71884d192d1876b4f631623c7c6ebfec8f025d47037bad17e161d5a741b357187f9badf544d6c4f2e751d93c011f0e01755b91c7799b0b8a0239e9d3c32a5d95b0be8516db9aaf0c356813157ec9b71fb7691db69ff732727f9f1a02bb62e46d6614b9a89e8aedc6457462b8eeb3faa584380572bc9f1f814b5e9c25eb8bd75acd9910fe2113acc313705226485b3cd79a2dca349b61ac99bcce2a540ce6532a4d6ac374b053b334dad6a9f7039380e5faab3ad9f5ad5a75dbedb2e42087388fa99ad2d2081ba07aed3c5deff61e101fd6bd8da98ee9837a681154bffe2ff4e05443a5809e83daa54c762f8bc9a463b38b1444e6877fd0c09f0a1ba35f4aa8b9ad93ceafbf3399b44ed04d00c28d3b1051c19784210d8e6c26c2ef6c289c26a9d74d51af9d1ac810156114f41bbb66013160b587132363791d9", 0x1000}, {&(0x7f0000001040)="0c44cde063a10abc91a11c097fe02ef7c07d9c62cde8f46cfc778daa997a5d6676e240c47016f2a4be7bc27d38f079968f1c38d39bf282b679dd9d75bf98acdb89009e30d930e8344ce82af45fe98afcaae9af88ec3190af789e84cf28311b6596a30a34baa6b59ee694ae571eacf90b9b5b534a796d7180ac4cada5c74cd1bdba35fcf7473692f6378a1bfeb140f03adf96d4fd2fc25a01b9feef8c3d3a694fef06bcf67daf9b05076b460dc998e9b17bf7a6cd61e640fb439b1c57c3", 0xbd}, {&(0x7f0000001100)="e9395e4e446c14f48c24bc53be5a29f9e98da89ed011d2a885d36233149526274e2d8408d1d82e4fed21500060e997f47d29", 0x32}, {&(0x7f0000001140)="3c7044c539a3f752d62377b8c856140fdacf8ec2e287bb58fd9d3cf05cc76529b903ef3f0b04116276f2bb502255b5e69f7ac5f368c7f1c1bc41245175ab31ea45862a5f8ffad89b926495cb01a3328d7a46cf23c90b13935259bdcb6917f4eaf6a781e505894e93fc26bca28445ba703d9f495a6861db5159890801079f81c59510b4110ebca849bed8b03ae231b49613f7592f89b104ecf2dbbcfc658d3f779e625ce82f9ed0e7739fa8f85542ad8f3ea4", 0xb2}, {&(0x7f0000001200)="2f2692609fef03bd7f5fd321f8521fd00612ef6ed8b817ad9c7d799831463676e8cac162cdca6bf8980801f10c6fca33827a2fed9d316c7188414cfe3153628c8236f8f39488084f2aefe1ac711ce725c7d216ace979f4cb2e2a970a4659826f8d6b594b93bebdf40107595e42468bcfeb785c133391e77cf7a1a114b4f728da50f2153382", 0x85}], 0x5, 0x0, 0xffffffff, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x940) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2f, 0x7f, 0x0, 0x4bc5, 0x20, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x20, 0xffffffff, 0x7fff80}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6tnl0\x00', r2, 0x29, 0x0, 0x20, 0xffff, 0x1, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x40, 0x8001, 0x9}}) 20:08:45 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x500, r1, 0x0, 0x0, 0x1000}]) 20:08:45 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b45, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:45 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b3b, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:45 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 57) 20:08:45 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b44, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 975.293442] FAULT_INJECTION: forcing a failure. [ 975.293442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 975.294479] CPU: 0 UID: 0 PID: 8137 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 975.294498] Tainted: [W]=WARN [ 975.294502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 975.294510] Call Trace: [ 975.294515] [ 975.294520] dump_stack_lvl+0xfa/0x120 [ 975.294544] should_fail_ex+0x4d7/0x5e0 [ 975.294569] ? page_copy_sane+0xce/0x2b0 [ 975.294589] copy_folio_from_iter_atomic+0x536/0x1820 [ 975.294621] ? fault_in_readable+0x12d/0x1d0 [ 975.294640] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 975.294660] ? fault_in_readable+0x172/0x1d0 [ 975.294675] ? __pfx_fault_in_readable+0x10/0x10 [ 975.294697] iomap_file_buffered_write+0x4fa/0xa40 [ 975.294736] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 975.294761] ? __lock_acquire+0x451/0x2250 [ 975.294796] ? __pfx_down_read+0x10/0x10 [ 975.294815] ? generic_update_time+0xcb/0xf0 [ 975.294830] ? mnt_put_write_access_file+0xb7/0xe0 [ 975.294856] ? file_update_time_flags+0x24c/0x4f0 [ 975.294873] blkdev_write_iter+0x7a0/0xd00 [ 975.294903] do_iter_readv_writev+0x5b3/0x910 [ 975.294928] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 975.294947] ? __import_iovec+0x1df/0x670 [ 975.294962] ? avc_policy_seqno+0x9/0x20 [ 975.294978] ? security_file_permission+0x22/0x90 [ 975.295001] vfs_writev+0x2d4/0xcd0 [ 975.295017] ? perf_trace_lock+0xb5/0x5d0 [ 975.295031] ? __lock_acquire+0x451/0x2250 [ 975.295045] ? __pfx_vfs_writev+0x10/0x10 [ 975.295061] ? __pfx_perf_trace_lock+0x10/0x10 [ 975.295078] ? __fget_files+0x34/0x3b0 [ 975.295096] ? find_held_lock+0x2b/0x80 [ 975.295113] ? __fget_files+0x203/0x3b0 [ 975.295130] ? lock_release+0xc8/0x270 [ 975.295146] ? __fget_files+0x20d/0x3b0 [ 975.295170] do_pwritev+0x1ab/0x280 [ 975.295187] ? __pfx_do_pwritev+0x10/0x10 [ 975.295203] ? find_held_lock+0x2b/0x80 [ 975.295220] ? syscall_trace_enter+0x1cf/0x230 [ 975.295236] __x64_sys_pwritev2+0xef/0x160 [ 975.295250] do_syscall_64+0xbf/0x420 [ 975.295266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.295278] RIP: 0033:0x7f9d93406b19 [ 975.295288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 975.295300] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 975.295312] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 975.295320] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 975.295327] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 975.295334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 975.295342] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 975.295359] [ 975.373326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 975.373848] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 975.378070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 975.378525] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:08:58 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x300000000000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:08:58 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x600, r1, 0x0, 0x0, 0x1000}]) 20:08:58 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:58 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 58) 20:08:58 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b46, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:58 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b3c, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:58 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b45, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:08:58 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000010000000000000000000000400000000000000000000000000000400904000000003800000000000100000051e5740400010000b0f80000000000000700000000000000010000000000000007000000000000007f000000000000000500000000000000"], 0x78) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) [ 987.700661] FAULT_INJECTION: forcing a failure. [ 987.700661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 987.702613] CPU: 1 UID: 0 PID: 8161 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 987.702649] Tainted: [W]=WARN [ 987.702655] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 987.702668] Call Trace: [ 987.702677] [ 987.702686] dump_stack_lvl+0xfa/0x120 20:08:58 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x810, r1, 0x0, 0x0, 0x1000}]) [ 987.702719] should_fail_ex+0x4d7/0x5e0 [ 987.702749] ? page_copy_sane+0xce/0x2b0 [ 987.702780] copy_folio_from_iter_atomic+0x536/0x1820 [ 987.702828] ? fault_in_readable+0x12d/0x1d0 20:08:58 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x500000000000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 987.702855] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 987.702892] ? fault_in_readable+0x172/0x1d0 [ 987.702918] ? __pfx_fault_in_readable+0x10/0x10 [ 987.702957] iomap_file_buffered_write+0x4fa/0xa40 [ 987.703008] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 987.703044] ? __lock_acquire+0x451/0x2250 [ 987.703069] ? __schedule+0x18d1/0x46a0 [ 987.703121] ? __pfx_down_read+0x10/0x10 [ 987.703144] ? generic_update_time+0xcb/0xf0 [ 987.703168] ? mnt_put_write_access_file+0xc0/0xe0 [ 987.703201] ? file_update_time_flags+0x24c/0x4f0 [ 987.703231] blkdev_write_iter+0x7a0/0xd00 [ 987.703270] do_iter_readv_writev+0x5b3/0x910 [ 987.703303] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 987.703332] ? __import_iovec+0x1df/0x670 [ 987.703360] ? avc_policy_seqno+0x9/0x20 [ 987.703389] ? security_file_permission+0x22/0x90 [ 987.703430] vfs_writev+0x2d4/0xcd0 [ 987.703461] ? perf_trace_lock+0xb5/0x5d0 [ 987.703484] ? __lock_acquire+0x451/0x2250 [ 987.703511] ? __pfx_vfs_writev+0x10/0x10 [ 987.703540] ? __pfx_perf_trace_lock+0x10/0x10 [ 987.703573] ? __fget_files+0x34/0x3b0 [ 987.703605] ? find_held_lock+0x2b/0x80 [ 987.703635] ? __fget_files+0x203/0x3b0 [ 987.703668] ? lock_release+0xc8/0x270 [ 987.703696] ? __fget_files+0x20d/0x3b0 [ 987.703741] do_pwritev+0x1ab/0x280 [ 987.703773] ? __pfx_do_pwritev+0x10/0x10 [ 987.703803] ? find_held_lock+0x2b/0x80 [ 987.703833] ? syscall_trace_enter+0x1cf/0x230 [ 987.703864] __x64_sys_pwritev2+0xef/0x160 [ 987.703892] do_syscall_64+0xbf/0x420 [ 987.703921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.703944] RIP: 0033:0x7f9d93406b19 [ 987.703961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 987.703983] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 987.704019] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 987.704034] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 987.704047] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 987.704060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 987.704073] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 987.704107] 20:08:58 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b47, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 987.786924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 987.787430] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 987.804566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 987.805483] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:08:58 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1008, r1, 0x0, 0x0, 0x1000}]) 20:08:58 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b3d, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 988.499810] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 988.500808] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 988.510333] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 988.511973] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 988.520744] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 988.521463] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 988.526985] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 988.528681] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 988.531960] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 988.533189] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 988.537451] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 988.538168] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 988.541027] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 988.541740] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 988.544515] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 988.546339] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 989.696068] Bluetooth: hci1: command 0x0406 tx timeout [ 990.528017] Bluetooth: hci3: command 0x0406 tx timeout [ 990.529069] Bluetooth: hci2: command 0x0406 tx timeout [ 990.529960] Bluetooth: hci0: command 0x0406 tx timeout [ 990.591977] Bluetooth: hci7: command 0x0406 tx timeout [ 990.592801] Bluetooth: hci6: command 0x0406 tx timeout [ 990.592846] Bluetooth: hci5: command 0x0406 tx timeout [ 990.593622] Bluetooth: hci4: command 0x0406 tx timeout [ 991.744102] Bluetooth: hci1: command 0x0406 tx timeout [ 992.576001] Bluetooth: hci2: command 0x0406 tx timeout [ 992.576640] Bluetooth: hci0: command 0x0406 tx timeout [ 992.576695] Bluetooth: hci3: command 0x0406 tx timeout [ 992.640003] Bluetooth: hci4: command 0x0406 tx timeout [ 992.640030] Bluetooth: hci6: command 0x0406 tx timeout [ 992.640072] Bluetooth: hci5: command 0x0406 tx timeout [ 992.641167] Bluetooth: hci7: command 0x0406 tx timeout [ 994.313730] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 994.314694] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 994.316445] buffer_io_error: 2070 callbacks suppressed [ 994.316461] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 994.318313] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 994.319487] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 994.320812] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 994.322041] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 994.323119] Buffer I/O error on dev sr0, logical block 5, lost async page write [ 994.324218] Buffer I/O error on dev sr0, logical block 6, lost async page write [ 994.325293] Buffer I/O error on dev sr0, logical block 7, lost async page write [ 994.326382] Buffer I/O error on dev sr0, logical block 8, lost async page write [ 994.327462] Buffer I/O error on dev sr0, logical block 9, lost async page write [ 994.329110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 994.330003] I/O error, dev sr0, sector 127 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 994.334145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 994.335046] I/O error, dev sr0, sector 254 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 994.336858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 994.337709] I/O error, dev sr0, sector 381 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 994.341942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 994.342776] I/O error, dev sr0, sector 508 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 994.344625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 994.345474] I/O error, dev sr0, sector 635 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 994.349598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 994.350471] I/O error, dev sr0, sector 762 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 994.352348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 994.355117] I/O error, dev sr0, sector 889 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 994.361610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 994.362489] I/O error, dev sr0, sector 1016 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 994.364477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 994.365483] I/O error, dev sr0, sector 1143 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 994.369627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 994.371049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 994.374658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 994.376127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 994.379707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 994.381137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 994.397606] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 994.399003] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 994.400097] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 994.401227] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 fc 00 00 0c 00 20:09:10 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x600000000000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:09:10 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 59) 20:09:10 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) pwritev2(r1, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) r2 = syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x81, 0x5, &(0x7f0000001440)=[{&(0x7f0000000140)="42361f7d7f4ba510a69ac4e5668c5e9f1ec1d9a3d1b1548f40adb09e6395c6ab2c358a5297b64b73aaf8e2f753d2a70c8290692b2c0ca42f26c9c17453bb4a044808d60e484b885a14837977eb9953fccda1a3e073a3323eab0782e75699295c51762d44da8b21e7df14f9d59cd69072b12917a4aaf578c6c5582c275ecb3fe79db35b161d8929fc767ed243173ec11e96f0ffbba7ceede8f16f517a8e23e706cac7d4981fb396ecf810bcaff83abb391e1d23f27e0c6c5a7990792b6713e3e9312c536ff0", 0xc5, 0x3}, {&(0x7f0000000240)="07cc102f9ca6e43d9dd261bde7cedd66b80d9986d6ddc29f851e6253afe1f19a1f299146aa7f71a0c6c9293f04f11695cf9248060000006477a53328195589b4005d3b260b25c4d735e8e0b290bdf2917a914c814c35d8a760fdb2ddb5d60f6bbe", 0x61, 0x8}, {&(0x7f00000002c0)="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", 0x1000, 0x2}, {&(0x7f00000012c0)="22043ca1c3c23562f2a5692214d3a3c46bc869ccdd31b9bbc8c4bf897cac5208320fc941b26b95000990e3ac29346047980be37fa5573f4dada2a7aedabb783b305a5251347690920f7411d6b4d36610449e0c4fdb", 0x55, 0x93}, {&(0x7f0000003580)="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", 0x12c, 0x81}], 0x2004, &(0x7f0000001340)={[], [{@hash}, {@euid_lt}, {@seclabel}]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000002580)={0x0, 0x0, "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", "0835524bfb6dd7337379b5d45c6915595216121d00bbba2a93af65389dce1a65f325b66ce86f681c69cbe1e6e6e93a6e1d1428a5a2cdd704cfedf84f59c5973c67b571a3c9a29073daf383371b72a724217f2567a706f2fce71fcad9eefe0921988e36528f66a7b7170b75ea2e2efc36c93b4ea2fb689a282fa28d296a15e11cec81be6ce70884724098bb543e5f2ecd6a11fd44aaf85fc996d52282e36e33efa5b07c04aa45761e21ab6e62718f1a53b4432ecbc82c1369a9fd58a14bc108d5c517d5e69e83218b7a589c2c06bd7e7c228354c279d1b5a88990d56b4e032e17cf6956e401bfa39ac1e198115c094df1293b758705b8543d0dd63c50228f44c3a764d592fe5da6f1a8233a98b94ef3db00b027c280887b4e265336eb2b04e1f1f4d9e2043bde10b4e781f94d8fff60dc8c61f50db36941b29d50e797fda521354d2ede5f5a144c4cbed0606f20ec8169c52a16f92a36e2b81f728712de3d06feb2a13ccbd193bad50ea9c8bb5c0c7184cfb80ad99694e0aa2b361bd6392c0daea64e5ab8e5df7dfb4b4d24bf0e700a43b6fa664066df0eec4fa905b32fda6be15bfd8b05a0d618f8dcd6a87177f8ec645addba8255137c334686ac02fab56e2bc2048d2f8560059e197c698fb1efc921194e6ffc4d49c260e2845e8de40cfd851fc934b66a7833d1ad5c5b4f1a729dfc7825028a5660ba7639e288c852caedaa0a23075d4c2578971f1bd547708a38bfcac6a3d33d6cbd0fe4eab3c0021af3f89e2b734717225b374dc71533eef57eab571d9723bef5a4f282534c13706cc60404407e6f2ba3742a32112cf07636a28163492549d2658bfff6fd92ee84f1ce8a9f1776126701695531d446e37bf4965815c5be3d868bbd4e8473e26589777165a98625f349ffb14a760d1d01c0739a2bc3cef4fd85bde44ce8449c7e85a6ac72f8289e30e2f753e8dfd3e12025d6ff8c608064330c93d20018a7af9670811a85f2912f4ae8fcca933ebb70db30f6eb376610a6899720883441a6a5d4a4930cb5a3d7ba5704d2bb02f99dd89cec12da68961c0edfaeca41caa7d0df3ebe4e6142acf52aacd0cc7fdb22a844fa586c1ea1ed39efcf8a608f229478bd20097860fdd7a0ad41575ef838678016b97d8196157bf2eeed19cdcae5c7233263371d0d4d15ae0298e3629065d41b64a91dbe5ef0407ac8842880e181016e614e80bbf949e638dc24a67857342330954b3d78cdce3bc6daf79ae24f90a967c071e85de58b32f7c9fa1b963fa5d07ec17165e953fec69e94d85c8ab24e9b5ea41ba7e1a9e85aa12e4e11d109a21d49b4bd6a060f719d0f22c866c4af735b67e6c05d2cd5b22d9d4c35c6c768e1aae0620ca2e205ea3dfd6bc6dfc9a7f6c95a92a9073ea59286c1c88c68151cd4826666b444afd6c3af0918213712bf0bacfe51087758f335662122aeb5c7c31ea04f425637abb2bc20667780c04c00c561cfaa3fafc698e0a57b6874308fffa89efe076f10d3997a4b469cfb8a19bfdabcc60dfac67b06b5dfb0a858654d9f784122734dd5d4198573173958f99dd9ca485ce4b6740a69691347d714aaa017019dd7b6d2d9b87bc410890c199064883b1ed6f0986631716bfaae0ef119f61a9d57be9bae6766093da9c91b88f0c089c2f81c9231de2bee583f450dbf7cd0b5e45fc84f1b5149620c327fea01b39dd1009fb03839ae3991af88132189cad01ae147a14b61b4f484ea78ecdbd2c18315ed548c46eb841447ae7062f0b4c590131e03e75b521da26969617abe4d4a4c6205181ee5eb5af021cfeb4e39fa188afa9fdf8d1f77de76e454b6ca552f4288c8dbc550e6b3d85130a54d50b15f7c8adf3f80d2aadb369bfefff04c040095b8c4414f43d2ac021c883c52069da1cd461bb8789562fa0ca0e49dd2ed905722a71746492161319c3717c57b9dc409257879fb728d563c2392ab57a30216617439c2ab795bf7c04a3ab55265bdcb6378899df0bb35906e1afc46ed5ee89c27bee3dbe2c18a22d2cc74b41eecab62ffea80265ddd5dc6aff03d1c2ed207c9363f5d52b653c117cfd64b9349450ea391790ad1f43035fc75b17b07cc76630abc6c1a61c348071334bf9a80b6e142e6f7680128e56c15feabd4d7130d4c053b4d3f77dfaf7ca8020334c68bc30a90c8d01f53ef7f4eccdb50f26a62bede0e16a0bfc7fe5606c54d7da3b32811f202001bf6aa6973bb275c8996dd3b6ea2b81690282481a999127cb21adc2d84c0b9d86c15b28c46a7b5f7175bd8df38466a27d4b38c52c7b7ca9dd95200d64abff59c461fe5c5b8968c7798dc4ff3372cf21e8455253edbcb1dcc0603bb7351d20b7747f173e261a981ca0893e3b4019802b9557c37635ab6c92f56e920b2269e074001745d5b1d0534d8f8a6e5fa273625035c9dc34b6ebac2133aba59a72f75a91b74d6565ff08d0a94f0885110a3d2512734f60146efcb21cd62a623e6017b845423b387b7b982e4b67a9bc8d8297ffdcad7b7f1c32102fe47ddd7c32f52535ac4b71ef45c3f77cbc3534c97d3bd43f5917c6df0548e2f87058a898319ebd2ff98e071d9a845f752270171289ea0fecdd5c19f0b98beff0113e09edd8bacd0936ddc203c438490f565995583458fff7f0722b977b7a5658da152087da7cb867f65405fae2b3154d6427c4f36558d141424decfe8c18b087c4050ea0df44087dd529b0f3564bead75f903a102ba639dd60c0cffb6b532a57c2dcc251c20070736a3869c97f0dcef18c33cf7cebd84142e5e63a98ca4a53e6665742fbeaa75c5fa2f29d416bfbdfb10fe37cc65b04a318c0b90ad9902d84b85cade2b3da475619db49fbd93f101245b90e75eed1145ea17ac13078f697844a4b682ef4fe6c4d4e2fcb558de4fa17ec8ae371af3f101591c90041570abb0008f9b9a9ee0e019cbe6870a873ee585c42bfdb705904f8f4eddbc05fad29df14d0b86e69cf2df80e3e5c53ec2c8f104d4feace8b8b1ebd8b10ce0ac54ffecbf2c92f89960e047501fc84f2676a8f7057141dd93bc6a3b85da9d2025075d0432f7a253e53078484790142f1a89395b7cb36406d62d267b96f99e6d7bbf90defed1292813dfcf867b1c764322be8cfd5ce89d9389a5055466712f0b5613ee5ea7a68df1163dcd187c7ab1757e486f443a31b6ff42c422f5d768e37e854e12f28adac81702f33fb78256a8d3fc0490fbac5a168e5dc1df3f3d781af330d720eea7ca54b17a081114af4c2b19217163ac6eac1c9d5d68e9761cead83e9979a34c096392026890c22266ab7590675b756139ba957f24ecaf83b36af31a7e0ccd2eb1a7918ea4dbec92ca13a2006f8cb28c20d6038622ae741b5f7dadbc7d3085e9f4031bdb83abe8043e3376c4fea1b13e648bf0e64530339e8a46b044bc17cb37278d77cb6616d5550e85727d91feb0a3fb841ea4c50ece19471565d6cf2622f75b7ec645a4b3b8d24c2a667a8db802146ef336c37d97255e86fb2499fd9a763162ea89ef9c074cd0dbe6d7706b043f20b37ee809414d925b2c919e90446709fa4cb67106e94fb8637db4bb7e8ebab3d19f00d4cbb804ada3545962b5d3b3b9c2a02888e3b379e2e747731ca090c8c7fcddc08e91a948c69529deab8ec2ad1508ead51291cc1b135e3c171a0113b03860471a62c9cfce410c53f3b6053e015d4eadbe8473aa629025e5511f92d712fecf530d3779ec91ec317de2c0b608fef62bd0c48c8675719538f0417a63145b7f2667bdb153f6769cea5e5bc47bda6f4d613ff3278b8525104d6970cdbbccfbfd50fb538a2fd1f76664a3eb427778649ca2f0070b0440b7ed4efc2cdaa398971826cc5a2baffe569f9184580a13cf8da4c24101eccf245ede757e4e4a4a10a6917ca3a3c71dab0742d2ab7906fc78c808711756d2ce3aba96daeb41c1b81a7ec286aeb1bd473310cb4f5c1b22363d1e98b1a2c928e7ab888b29c0cb9d84745fb016aa3dbc1188b8ce4859777f73b47f276fa36bb2a5ce77604310da5329d731f15039a1d45555ee11eac71f969f4f25a2c33b0f3164bc0f86c462fbc6b309cffd09a8c34ce2358aa1cd9dff45506af800a699a7beb182fea69b7ea8fbe1276bab64d7ed61eaee5ee8b223c87f14dcb7a7888afac01ae4b9990395d3ec2cd64fd0861cd4724b7734a9c3b75d8b4cc89a29aef78de12e0bbd8a317846ecb1042af0bc78f48d2db3b4d34cccaae957d31e810c29e736af5ae65addc5fb1d09b580cb084d32e731ff58fc68bb2e920762dbddb8091b6f2e34805c50571df798fb286c04f635fa97dc08d4ddef511790df3c761e0575f761fbece21779c396afef403307a4d88da67ed0e71124e4649b1eea901200342d5818d489aa2e30e7ea77f3a0daed8b75f4f261d28dd4ae6b9891e12c3e07aaa7bea50e528e9e829d245903f742c30fdbea696ab3da1ec5b19966c2919d3230a6ff5c1771e841b9a0d51832f5de66283868fa4894cf7a2936be8e3d739639ea7e2e0602bd24ca3dc992c41518efa2ecc38fe925c5ecf74cd92b2e349d7d44a1471dad08598e15d7f0635ec6697cbb2f07cec0f7ef071338fdf4b0fa55c181057b039f49edc38e460dfdb35345e9c9db3b2d26f7d0b9398976f77902e10bfb75bd6d5710a566d989ea5f035f2bd90c934b40269ae5003b99956ffc98ca5c0c023a3a4fca57d10acaf4b028f76242783124f5b79a7e677084d7653d9302740891a8b1045d45655f6f2f7441b06634b6c851d85f5ba63423352d5fb38065b731bf5aafae893bbecf956785165467dbefc4f1dbce705eaeaac1b9db42f2b4990cecf78672f49474a6bb4925f916d83cdbee412eb72a5fca5fc02c54543fa1984918cd07df5b8ba4a9ce530df0808dac370e3fd41d18ec844360dd19b867d954ffd450809f6fe928e8bd00e2fa2b3e454191837ca84ed5f78d5a275a5b5f6c03247ae189cc66936daf0f19255f5b5f2daee3f0696187fc108b0d5beab55adbcfe389f61fe6bffb668c25b54d464988fedf6ec034a200d45dc365d5b2f92d0e2366edc156feb1cc5d47274b9a9aed5543519930eeee2217247bf322c8cfa9048c2aafe07fdb127843628d8e8ce5089c50a7f0c2a80900c60193f27791501e696f4f25f68559bcacfe521acd28881f855bed2b5737b782672b0fe62646c18c726d50e725ecc8b188d8724070a81b76f95972999276565906b9580a56680f8a29d97108475a0341d58efb47aba447f41a8f24be0cc068b1e860521566e4ee1dbf9457dfcce4e36fa78b07e184361cafaa9d63dabebaea534a07ed995767a58cc97175e791e0941a3717b02e2f3f8c513dd32b5de2dbd260350d97e6cda862d3f199172d12f66b1facc64e54a02000ce497ebba619df44ababf2b3"}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000014c0)=0x0) mount$9p_tcp(&(0x7f0000001380), &(0x7f00000013c0)='./file0\x00', &(0x7f0000001400), 0x40401, &(0x7f0000003780)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@access_any}, {@cache_mmap}, {@nodevmap}, {@access_client}], [{@smackfsroot={'smackfsroot', 0x3d, '-'}}, {@euid_lt={'euid<', r3}}, {@smackfshat={'smackfshat', 0x3d, 'iso9660\x00'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@hash}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_hash}]}}) open$dir(&(0x7f0000001540)='./file0\x00', 0x412000, 0x0) 20:09:10 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:10 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b48, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:10 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4000, r1, 0x0, 0x0, 0x1000}]) 20:09:10 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b40, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:10 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b46, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:10 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xeffd, r1, 0x0, 0x0, 0x1000}]) 20:09:10 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b47, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:10 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x800000000000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 999.809118] loop2: detected capacity change from 0 to 8 [ 999.833506] FAULT_INJECTION: forcing a failure. [ 999.833506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 999.835317] CPU: 1 UID: 0 PID: 8210 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 999.835352] Tainted: [W]=WARN [ 999.835359] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 999.835372] Call Trace: [ 999.835379] [ 999.835387] dump_stack_lvl+0xfa/0x120 [ 999.835422] should_fail_ex+0x4d7/0x5e0 [ 999.835451] ? page_copy_sane+0xce/0x2b0 [ 999.835482] copy_folio_from_iter_atomic+0x536/0x1820 [ 999.835529] ? fault_in_readable+0x12d/0x1d0 [ 999.835555] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 999.835585] ? fault_in_readable+0x172/0x1d0 [ 999.835610] ? __pfx_fault_in_readable+0x10/0x10 [ 999.835650] iomap_file_buffered_write+0x4fa/0xa40 [ 999.835701] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 999.835736] ? __lock_acquire+0x451/0x2250 [ 999.835796] ? __pfx_down_read+0x10/0x10 [ 999.835821] ? generic_update_time+0xcb/0xf0 [ 999.835843] ? mnt_put_write_access_file+0xb7/0xe0 [ 999.835877] ? file_update_time_flags+0x24c/0x4f0 [ 999.835915] blkdev_write_iter+0x7a0/0xd00 [ 999.835954] do_iter_readv_writev+0x5b3/0x910 [ 999.835987] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 999.836016] ? __import_iovec+0x1df/0x670 [ 999.836043] ? avc_policy_seqno+0x9/0x20 [ 999.836073] ? security_file_permission+0x22/0x90 [ 999.836113] vfs_writev+0x2d4/0xcd0 [ 999.836157] ? perf_trace_lock+0xb5/0x5d0 [ 999.836180] ? __lock_acquire+0x451/0x2250 [ 999.836207] ? __pfx_vfs_writev+0x10/0x10 [ 999.836235] ? __pfx_perf_trace_lock+0x10/0x10 [ 999.836269] ? __fget_files+0x34/0x3b0 [ 999.836300] ? find_held_lock+0x2b/0x80 [ 999.836331] ? __fget_files+0x203/0x3b0 [ 999.836363] ? lock_release+0xc8/0x270 [ 999.836391] ? __fget_files+0x20d/0x3b0 [ 999.836436] do_pwritev+0x1ab/0x280 [ 999.836467] ? __pfx_do_pwritev+0x10/0x10 [ 999.836497] ? find_held_lock+0x2b/0x80 [ 999.836528] ? syscall_trace_enter+0x1cf/0x230 [ 999.836558] __x64_sys_pwritev2+0xef/0x160 [ 999.836582] do_syscall_64+0xbf/0x420 [ 999.836611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.836634] RIP: 0033:0x7f9d93406b19 [ 999.836651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 999.836672] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 999.836694] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 999.836709] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 999.836722] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 999.836736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 999.836749] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 999.836782] [ 999.876576] loop2: detected capacity change from 0 to 8 20:09:10 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b41, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:10 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b48, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:10 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b49, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:10 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b44, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:10 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xfcfd, r1, 0x0, 0x0, 0x1000}]) [ 999.956144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 999.956618] blk_print_req_error: 7 callbacks suppressed [ 999.956628] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 999.969595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 999.970083] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:09:10 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x810000000000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:09:20 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b49, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:20 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x0, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:20 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b45, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:20 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 60) 20:09:20 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b4a, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:20 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x1000000000000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:09:20 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xfdef, r1, 0x0, 0x0, 0x1000}]) 20:09:20 executing program 2: symlinkat(&(0x7f0000000180)='./file1\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000000c0)="c429085e22a434bc12f21c435b0d2493e565ce4533f787e8e15b68f0b06a7b57f41d5dba3836fe5735ec70b3c674a658a019d0b682e50e0698483a636230f7e476575e84c2c6721358d78225cb5118c5f3078699001a8c0c29055f304ba8009f5e62c4f064ceec9c0410e48224b81696cc2b8e1753c81933cf6518cc66f842b1f99a7ff4b8f0ff", 0x87}], 0x2, 0x0, 0x3, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x63bff192b248fba0) [ 1009.513499] FAULT_INJECTION: forcing a failure. [ 1009.513499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1009.514519] CPU: 0 UID: 0 PID: 8264 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 1009.514539] Tainted: [W]=WARN [ 1009.514543] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1009.514551] Call Trace: [ 1009.514555] [ 1009.514560] dump_stack_lvl+0xfa/0x120 [ 1009.514585] should_fail_ex+0x4d7/0x5e0 [ 1009.514609] ? page_copy_sane+0xce/0x2b0 [ 1009.514632] copy_folio_from_iter_atomic+0x536/0x1820 20:09:20 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b4a, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 1009.514663] ? fault_in_readable+0x12d/0x1d0 [ 1009.514681] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1009.514702] ? fault_in_readable+0x172/0x1d0 [ 1009.514718] ? __pfx_fault_in_readable+0x10/0x10 [ 1009.514742] iomap_file_buffered_write+0x4fa/0xa40 [ 1009.514777] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1009.514797] ? __lock_acquire+0x451/0x2250 [ 1009.514812] ? __schedule+0x18d1/0x46a0 [ 1009.514841] ? __pfx_down_read+0x10/0x10 [ 1009.514855] ? generic_update_time+0xcb/0xf0 [ 1009.514869] ? mnt_put_write_access_file+0xc0/0xe0 [ 1009.514893] ? file_update_time_flags+0x24c/0x4f0 [ 1009.514910] blkdev_write_iter+0x7a0/0xd00 [ 1009.514931] do_iter_readv_writev+0x5b3/0x910 [ 1009.514950] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1009.514966] ? __import_iovec+0x1df/0x670 [ 1009.514983] ? avc_policy_seqno+0x9/0x20 [ 1009.515003] ? security_file_permission+0x22/0x90 [ 1009.515025] vfs_writev+0x2d4/0xcd0 [ 1009.515041] ? perf_trace_lock+0xb5/0x5d0 [ 1009.515055] ? __lock_acquire+0x451/0x2250 [ 1009.515069] ? __pfx_vfs_writev+0x10/0x10 [ 1009.515085] ? __pfx_perf_trace_lock+0x10/0x10 [ 1009.515102] ? __fget_files+0x34/0x3b0 [ 1009.515120] ? find_held_lock+0x2b/0x80 [ 1009.515137] ? __fget_files+0x203/0x3b0 [ 1009.515154] ? lock_release+0xc8/0x270 [ 1009.515169] ? __fget_files+0x20d/0x3b0 [ 1009.515193] do_pwritev+0x1ab/0x280 [ 1009.515210] ? __pfx_do_pwritev+0x10/0x10 [ 1009.515226] ? find_held_lock+0x2b/0x80 [ 1009.515243] ? syscall_trace_enter+0x1cf/0x230 [ 1009.515260] __x64_sys_pwritev2+0xef/0x160 [ 1009.515273] do_syscall_64+0xbf/0x420 [ 1009.515289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.515302] RIP: 0033:0x7f9d93406b19 [ 1009.515312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1009.515323] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1009.515335] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 1009.515343] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 1009.515350] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1009.515357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1009.515365] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 1009.515382] [ 1009.557421] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1009.571281] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1009.571452] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1009.573071] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:09:20 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 61) 20:09:20 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2000000000000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:09:20 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b4b, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:20 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xfdfc, r1, 0x0, 0x0, 0x1000}]) 20:09:20 executing program 2: sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001340)={&(0x7f0000000100)={0x1234, 0x12, 0x8, 0x70bd2a, 0x25dfdbfb, {0x1, 0x9, 0x1, 0x3f, {0x4e23, 0x4e24, [0x2, 0x7e40, 0xfbf4, 0x9873], [0x8, 0x0, 0x10001, 0x49a9], 0x0, [0xf5, 0x1]}, 0x73, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0x9c, 0x1, "c85d4f2eadbe9e5956ede87c8b10195e77866b65bbb156530bf36554ca7035f650c77b03fe3927d0aa1b0b4baef7e8a86cb56878204a41b09d5c1183f93c67c2db4db6359222c583356b3f80da9762be725bbdc865d677d9396ba4f7292415d69bb3a554481b61a87bb2b8439988f8fc8e4ec8c3ffd9460886e2a77726e60d8cb4b40271e4d6b4108fc00739d398dd20c2109027bc08306b"}, @INET_DIAG_REQ_BYTECODE={0xec, 0x1, "00e184417590d489f8f9ec59986ca07d915606390e2c338b0280cdf81bc85f58a58990ea4527ecfdcadd427c83bdcf72368c8cfb3efac2f4236633ad6e4d96c2c8ad442a8cf64206147a07737668d9204487bec8b1e8eec6ba9beaf3278f14210f24c4a62f1faef0bde3b3a8380c32c4a717cec6b5841a1e7264cdfd1ddf60016877e2394cdd781488d979d7447d19be77bb9051e20810283f8701f6c40bea0c5aac99d1845515255a2532c1152719c667f5da2f15cf686287dd509c638131d331e2b32b4bbc52e05d62afc5227d66bb16c399f04b3ff19b7301c24b683a28a88e9145c9b12b6cc7"}, @INET_DIAG_REQ_BYTECODE={0x55, 0x1, "80c05cb341daf3b3406374d111ebcbb2fd1d2e5c56445d6d414c9bedd467b1ad870e381cb33ccc2ac9f5841299ba3440c3da2a39681fc3eeaf146b86029771b5856d9e9e425d5e63e643f20dac25576c42"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x1234}}, 0x8c94) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) write$binfmt_elf64(r1, &(0x7f0000001580)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xff}, [], "46cc1d494c019342e6317c17517348f113005a105c9a57dc4c54598e97462e1255e2072b583778a01b7496517021a9adc93a35574ef6bf64bc3ccde2b51bf8581cc259f53efc4850f490e03b6269d9f3032b083931a4b5f4b05c52bdb1e9b9d9628083db2aadd983da154440939745d60b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6b1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r6, 0x0) write$binfmt_elf64(r6, &(0x7f0000001c40)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40, 0x212}}, 0x40) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f00000014c0)={'filter\x00', 0x4}, 0x68) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x1c, r3, 0x339, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2400d005}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x34, r3, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x8, 0x34, @random="d231478c"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x34}}, 0x40000) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:09:20 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b4b, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:20 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:20 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b46, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:20 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x3f00000000000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 1009.803304] FAULT_INJECTION: forcing a failure. [ 1009.803304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1009.804343] CPU: 0 UID: 0 PID: 8294 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 1009.804362] Tainted: [W]=WARN [ 1009.804366] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1009.804374] Call Trace: [ 1009.804379] [ 1009.804384] dump_stack_lvl+0xfa/0x120 [ 1009.804405] should_fail_ex+0x4d7/0x5e0 [ 1009.804423] ? page_copy_sane+0xce/0x2b0 [ 1009.804442] copy_folio_from_iter_atomic+0x536/0x1820 [ 1009.804473] ? fault_in_readable+0x12d/0x1d0 [ 1009.804491] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1009.804511] ? fault_in_readable+0x172/0x1d0 [ 1009.804525] ? __pfx_fault_in_readable+0x10/0x10 [ 1009.804548] iomap_file_buffered_write+0x4fa/0xa40 [ 1009.804587] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1009.804612] ? __lock_acquire+0x451/0x2250 [ 1009.804648] ? __pfx_down_read+0x10/0x10 [ 1009.804666] ? generic_update_time+0xcb/0xf0 [ 1009.804681] ? mnt_put_write_access_file+0xb7/0xe0 [ 1009.804706] ? file_update_time_flags+0x24c/0x4f0 [ 1009.804723] blkdev_write_iter+0x7a0/0xd00 [ 1009.804749] do_iter_readv_writev+0x5b3/0x910 [ 1009.804768] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1009.804783] ? __import_iovec+0x1df/0x670 [ 1009.804799] ? avc_policy_seqno+0x9/0x20 [ 1009.804815] ? security_file_permission+0x22/0x90 [ 1009.804838] vfs_writev+0x2d4/0xcd0 [ 1009.804854] ? perf_trace_lock+0xb5/0x5d0 [ 1009.804867] ? __lock_acquire+0x451/0x2250 [ 1009.804885] ? __pfx_vfs_writev+0x10/0x10 [ 1009.804901] ? __pfx_perf_trace_lock+0x10/0x10 [ 1009.804919] ? __fget_files+0x34/0x3b0 [ 1009.804937] ? find_held_lock+0x2b/0x80 [ 1009.804954] ? __fget_files+0x203/0x3b0 [ 1009.804971] ? lock_release+0xc8/0x270 [ 1009.804986] ? __fget_files+0x20d/0x3b0 [ 1009.805010] do_pwritev+0x1ab/0x280 [ 1009.805027] ? __pfx_do_pwritev+0x10/0x10 [ 1009.805043] ? find_held_lock+0x2b/0x80 [ 1009.805060] ? syscall_trace_enter+0x1cf/0x230 [ 1009.805077] __x64_sys_pwritev2+0xef/0x160 [ 1009.805090] do_syscall_64+0xbf/0x420 [ 1009.805106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.805119] RIP: 0033:0x7f9d93406b19 [ 1009.805129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1009.805141] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1009.805153] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 1009.805161] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 1009.805168] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1009.805175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1009.805182] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 1009.805200] 20:09:20 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xfdfe, r1, 0x0, 0x0, 0x1000}]) 20:09:20 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b4c, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 1009.889814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1009.890757] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1009.892410] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1009.892937] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:09:31 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:31 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 62) 20:09:31 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b4d, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:31 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b47, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:31 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x4000000000000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:09:31 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xfe00, r1, 0x0, 0x0, 0x1000}]) 20:09:31 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)="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", 0x1a0}], 0x2, 0x0, 0x0, 0x0) 20:09:31 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b4c, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 1020.549059] FAULT_INJECTION: forcing a failure. [ 1020.549059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.550352] CPU: 0 UID: 0 PID: 8326 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 1020.550378] Tainted: [W]=WARN [ 1020.550383] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1020.550393] Call Trace: [ 1020.550399] [ 1020.550405] dump_stack_lvl+0xfa/0x120 [ 1020.550430] should_fail_ex+0x4d7/0x5e0 [ 1020.550453] ? page_copy_sane+0xce/0x2b0 [ 1020.550480] copy_folio_from_iter_atomic+0x536/0x1820 [ 1020.550514] ? fault_in_readable+0x12d/0x1d0 [ 1020.550533] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1020.550555] ? fault_in_readable+0x172/0x1d0 [ 1020.550572] ? __pfx_fault_in_readable+0x10/0x10 [ 1020.550600] iomap_file_buffered_write+0x4fa/0xa40 [ 1020.550637] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1020.550663] ? __lock_acquire+0x451/0x2250 [ 1020.550705] ? __pfx_down_read+0x10/0x10 [ 1020.550723] ? generic_update_time+0xcb/0xf0 [ 1020.550740] ? mnt_put_write_access_file+0xb7/0xe0 [ 1020.550764] ? file_update_time_flags+0x24c/0x4f0 [ 1020.550788] blkdev_write_iter+0x7a0/0xd00 [ 1020.550819] do_iter_readv_writev+0x5b3/0x910 [ 1020.550843] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1020.550864] ? __import_iovec+0x1df/0x670 [ 1020.550888] ? avc_policy_seqno+0x9/0x20 [ 1020.550909] ? security_file_permission+0x22/0x90 [ 1020.550938] vfs_writev+0x2d4/0xcd0 [ 1020.550960] ? perf_trace_lock+0xb5/0x5d0 [ 1020.550977] ? __lock_acquire+0x451/0x2250 [ 1020.550995] ? __pfx_vfs_writev+0x10/0x10 [ 1020.551016] ? __pfx_perf_trace_lock+0x10/0x10 [ 1020.551039] ? __fget_files+0x34/0x3b0 [ 1020.551061] ? find_held_lock+0x2b/0x80 [ 1020.551083] ? __fget_files+0x203/0x3b0 [ 1020.551105] ? lock_release+0xc8/0x270 [ 1020.551126] ? __fget_files+0x20d/0x3b0 [ 1020.551157] do_pwritev+0x1ab/0x280 [ 1020.551179] ? __pfx_do_pwritev+0x10/0x10 [ 1020.551200] ? find_held_lock+0x2b/0x80 [ 1020.551221] ? syscall_trace_enter+0x1cf/0x230 [ 1020.551243] __x64_sys_pwritev2+0xef/0x160 [ 1020.551260] do_syscall_64+0xbf/0x420 [ 1020.551281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.551297] RIP: 0033:0x7f9d93406b19 [ 1020.551309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1020.551325] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1020.551340] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 1020.551350] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 1020.551360] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1020.551369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1020.551378] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 1020.551401] [ 1020.597181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1020.597840] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1020.607757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1020.608422] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:09:31 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 63) 20:09:31 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0xf89fef7f00000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:09:31 executing program 2: openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x560e, &(0x7f0000000100)=0xa) pwritev2(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0xffffffffffffff3b}, {&(0x7f0000000040)="c4", 0x1}], 0x2, 0x0, 0x0, 0x1b) 20:09:31 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b4e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:31 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b48, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 1020.785642] FAULT_INJECTION: forcing a failure. [ 1020.785642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.787622] CPU: 1 UID: 0 PID: 8345 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 1020.787657] Tainted: [W]=WARN [ 1020.787664] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1020.787677] Call Trace: [ 1020.787684] [ 1020.787692] dump_stack_lvl+0xfa/0x120 [ 1020.787726] should_fail_ex+0x4d7/0x5e0 [ 1020.787755] ? page_copy_sane+0xce/0x2b0 [ 1020.787786] copy_folio_from_iter_atomic+0x536/0x1820 [ 1020.787834] ? fault_in_readable+0x12d/0x1d0 [ 1020.787861] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1020.787898] ? fault_in_readable+0x172/0x1d0 [ 1020.787923] ? __pfx_fault_in_readable+0x10/0x10 [ 1020.787963] iomap_file_buffered_write+0x4fa/0xa40 [ 1020.788014] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1020.788049] ? __lock_acquire+0x451/0x2250 [ 1020.788109] ? __pfx_down_read+0x10/0x10 [ 1020.788133] ? generic_update_time+0xcb/0xf0 [ 1020.788156] ? mnt_put_write_access_file+0xb7/0xe0 [ 1020.788190] ? file_update_time_flags+0x24c/0x4f0 [ 1020.788219] blkdev_write_iter+0x7a0/0xd00 [ 1020.788258] do_iter_readv_writev+0x5b3/0x910 [ 1020.788292] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1020.788320] ? __import_iovec+0x1df/0x670 [ 1020.788348] ? avc_policy_seqno+0x9/0x20 [ 1020.788389] ? security_file_permission+0x22/0x90 [ 1020.788430] vfs_writev+0x2d4/0xcd0 [ 1020.788460] ? perf_trace_lock+0xb5/0x5d0 [ 1020.788484] ? __lock_acquire+0x451/0x2250 [ 1020.788511] ? __pfx_vfs_writev+0x10/0x10 [ 1020.788540] ? __pfx_perf_trace_lock+0x10/0x10 [ 1020.788573] ? __fget_files+0x34/0x3b0 [ 1020.788605] ? find_held_lock+0x2b/0x80 [ 1020.788635] ? __fget_files+0x203/0x3b0 [ 1020.788667] ? lock_release+0xc8/0x270 [ 1020.788696] ? __fget_files+0x20d/0x3b0 [ 1020.788741] do_pwritev+0x1ab/0x280 [ 1020.788773] ? __pfx_do_pwritev+0x10/0x10 [ 1020.788803] ? find_held_lock+0x2b/0x80 [ 1020.788833] ? syscall_trace_enter+0x1cf/0x230 [ 1020.788864] __x64_sys_pwritev2+0xef/0x160 [ 1020.788888] do_syscall_64+0xbf/0x420 [ 1020.788918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.788940] RIP: 0033:0x7f9d93406b19 [ 1020.788958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1020.788979] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1020.789001] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 1020.789015] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 1020.789029] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1020.789041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1020.789054] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 1020.789087] [ 1020.873942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1020.875961] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1020.886841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1020.887469] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1030.664951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1030.666124] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1030.667740] buffer_io_error: 2070 callbacks suppressed [ 1030.667757] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1030.670010] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1030.671318] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1030.672648] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1030.673956] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 1030.675284] Buffer I/O error on dev sr0, logical block 5, lost async page write [ 1030.676612] Buffer I/O error on dev sr0, logical block 6, lost async page write [ 1030.677931] Buffer I/O error on dev sr0, logical block 7, lost async page write [ 1030.679262] Buffer I/O error on dev sr0, logical block 8, lost async page write [ 1030.680589] Buffer I/O error on dev sr0, logical block 9, lost async page write [ 1030.684228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1030.685422] I/O error, dev sr0, sector 127 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1030.690860] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1030.692027] I/O error, dev sr0, sector 254 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1030.694465] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1030.695511] I/O error, dev sr0, sector 381 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1030.702283] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1030.704045] I/O error, dev sr0, sector 508 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1030.709655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1030.713494] I/O error, dev sr0, sector 635 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1030.720605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1030.721947] I/O error, dev sr0, sector 762 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1030.724189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1030.725235] I/O error, dev sr0, sector 889 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1030.730257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1030.731320] I/O error, dev sr0, sector 1016 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1030.733571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1030.734615] I/O error, dev sr0, sector 1143 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1030.739362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1030.740840] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1030.744787] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1030.746354] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1030.750286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1030.751772] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1030.770417] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1030.771947] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 1030.773093] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 1030.774283] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 fc 00 00 0c 00 20:09:43 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b52, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:43 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b4d, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:43 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xfefd, r1, 0x0, 0x0, 0x1000}]) 20:09:43 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b49, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:43 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0xf8a1ef7f00000000}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:09:43 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 64) 20:09:43 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) io_setup(0xfff, &(0x7f0000000040)=0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x140241, 0x0) io_submit(r1, 0xa, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000)='\n', 0x1}]) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r3, 0x560e, &(0x7f0000000100)=0xa) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000001580)={r0, 0x2, 0x5, 0x397a}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r5, 0x560e, &(0x7f0000000100)=0xa) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001900)='/proc/keys\x00', 0x0, 0x0) io_submit(r1, 0x6, &(0x7f0000001a00)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x5, 0x5, r3, &(0x7f0000001400)="4ea4cb291c2e3d960952346991b1a9f365e1dc0825a064112a558a3409419195c87352f1cf315bb46472b8d05c7eb900c81da422417c04bb2ebdf09cf62ddad995fd22ee3bd5600022e228fd91aa26ed5d2d729cadfc5ae22103d4af50d7fa28701c681c7e0cefe683281eb2d9e233ed6f536ccb52f3c66f414fd1c1411afd2823f4994d218c2a861fedeb611af0936c7a59fb285e02b04ebbea7c23a0ab060e3c47b5d29b11bdec561c99a157b4e3d2e902f59dfbc7ebad540f767f4e0adb4bfacea04fe8a3dbe318ca367c3053f124bde99c71ee81", 0xd6, 0x7fffffff, 0x0, 0x1}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000001540)="4ff37a269d", 0x5, 0x9, 0x0, 0x2, r4}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x5, 0x18, r0, &(0x7f0000001600)="e7bfbaa7e612e5417087571314d38338ba6858c27566e5152a3998e4f9e50f69b1c4f3bd09dff579ebe8351e2346483e522fc1027f47533c36ff7580208269f0a33e9f53425efdbf5dd0d54b936b99154bdb89500e73230e2822f816633b89bce07b0fe95131e56715e33f29ee75b321e0c39ba35dfb2fc5de87d1946b6f5e78b0bb7cd01dd3400bb359fe87967e78819783e451c1635d6c8db6dea9b81a065771dfeeb035ba73189bafb26e823539dae7682defc2bdf29025e0db861940f3e7d14518247dbe96c17b7e87a612bb4de8ef8bf615f2bcae8a11fdc0bb8183419a6febca8a", 0xe4, 0x2, 0x0, 0x2, r0}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x8, 0x9, r0, &(0x7f0000001740)="77c61858d3cc76b98b2881f1461efd3474b378a4a39744f23c33b9f562b513377c19bbe62d846eb3d35b5ac7f15bbe88577293dc64cb4411dd1caf88f145b27b36ce625c0efcd1fc5fc5dc02f317c89726c7d23b777f7de94cb80c4b1133ecc33bab9e0978a093781e4294877fed254858d524b472", 0x75, 0x6, 0x0, 0x2}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x8, 0xa8c, r5, &(0x7f0000001800)="30305b570a0491ce3cb5aae1aea6820bc8d36d502048b8a6b1a08a057e9438a53fb9279b4b3b70da126319e2d0da87c631ed909290165eeb44d95a1e5c302e9539047f055103f817f4aa3e3d3dfcd4ff74d97fa99906448171e2c07d84f919b508c0ca7a272fc9af18b535cab6bd22ae2444664b40d352ba8eaf4751e358d52d2a801548edc25dcb1245dad8e6fc9459677466d8c428843eee45", 0x9a, 0x2, 0x0, 0x2}, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x7, 0x800, r6, &(0x7f0000001940)="b61657d0cc8b74ee22eb1110d3310d884a6ba56eed6808caa31319cc4591a197c9203d55e428809ad9532a63b3eba793233af15dc50b174efd90a8e6aae9ab1653", 0x41, 0x4}]) sendmsg$nl_netfilter(r0, &(0x7f00000013c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001380)={&(0x7f0000000100)={0x1264, 0x0, 0x5, 0x101, 0x70bd2d, 0x25dfdbfc, {0xc, 0x0, 0x9}, [@nested={0x113b, 0x27, 0x0, 0x1, [@generic="49a45a5e67526451664ca8e9c1981f7ee5dde2a4e47a02a6bdb63f503fc967146d22bd7da035d1121a3db337dc2b263a045adf2c0ddf3e76ef49f9fbe3d36b7de1e2906baed5a0b0820f59324b51fd1aa8bf6fa8fd0c6d90c735d4edc9358442ea685b1c89fe78bdd214fc6c0a148b152d55ba097b957f2240e6401baf44739aaf04bc49906d856beef0848b178a896b447c1f939b203809153183e8df984098da103e52aff9a1e132e4a187f728a0d0fe22e7dbd5581a6a852121e33fc55fdce70b8de88af6c29a5f41a2b66f5bebd9e37c2398a9e8be5a5e17454620740a9171a23ec750fc11", @generic="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", @typed={0x8, 0x75, 0x0, 0x0, @fd=r0}, @generic="f72ce4f960c245739fae00b834378c616fcb6a856a6d78ef3516d6018f3368fc26d0b8e862e6db49f351516267e7271bb3a09b48cd0d11611c1bebc847fa8209ffe608f4303fa03f"]}, @nested={0xd7, 0x2f, 0x0, 0x1, [@generic="8b693ac99fa69140c45f8c301abb99c3b0467aae095f4c482869d9b65125eeb32d17a7ea226cbf22e736", @generic="9cf6630f054427c6b425ec4c8b339e7f632d46ac71051c31148c876b0e1bf05f5054a4f1c300d3b961193277b218245bc9f94fcecba5a0dd0db90304c827e0d35ffc3cd9aa450e38e0166ef21636c46dcf3999332e9c818cbefc63077b315d19e57854c67ca448fc6b3fa0742443092e7c6511dcc95d23a5b3", @typed={0x8, 0x1e, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2a}}, @typed={0xd, 0x74, 0x0, 0x0, @str='/dev/sr0\x00'}, @typed={0x8, 0x90, 0x0, 0x0, @fd=r0}, @typed={0xd, 0x35, 0x0, 0x0, @str='/dev/sr0\x00'}]}, @generic="14e1bcdf6d32bbd23b86bba5695322865006711275b5091d239b8b8124ed64fb02cb7e0c05768d10a4644801b7b697", @typed={0xc, 0x21, 0x0, 0x0, @u64=0x1}]}, 0x1264}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:09:43 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:43 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b4e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:43 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xffff, r1, 0x0, 0x0, 0x1000}]) [ 1033.141314] FAULT_INJECTION: forcing a failure. [ 1033.141314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.142673] CPU: 0 UID: 0 PID: 8375 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 1033.142698] Tainted: [W]=WARN [ 1033.142704] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1033.142713] Call Trace: [ 1033.142720] [ 1033.142726] dump_stack_lvl+0xfa/0x120 [ 1033.142752] should_fail_ex+0x4d7/0x5e0 [ 1033.142775] ? page_copy_sane+0xce/0x2b0 [ 1033.142802] copy_folio_from_iter_atomic+0x536/0x1820 [ 1033.142841] ? fault_in_readable+0x12d/0x1d0 [ 1033.142864] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1033.142895] ? fault_in_readable+0x172/0x1d0 [ 1033.142915] ? __pfx_fault_in_readable+0x10/0x10 [ 1033.142948] iomap_file_buffered_write+0x4fa/0xa40 [ 1033.142994] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1033.143025] ? __lock_acquire+0x451/0x2250 [ 1033.143071] ? __pfx_down_read+0x10/0x10 [ 1033.143094] ? generic_update_time+0xcb/0xf0 [ 1033.143113] ? mnt_put_write_access_file+0xb7/0xe0 [ 1033.143145] ? file_update_time_flags+0x24c/0x4f0 [ 1033.143167] blkdev_write_iter+0x7a0/0xd00 [ 1033.143196] do_iter_readv_writev+0x5b3/0x910 [ 1033.143221] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1033.143242] ? __import_iovec+0x1df/0x670 [ 1033.143262] ? avc_policy_seqno+0x9/0x20 [ 1033.143284] ? security_file_permission+0x22/0x90 [ 1033.143314] vfs_writev+0x2d4/0xcd0 [ 1033.143336] ? perf_trace_lock+0xb5/0x5d0 [ 1033.143354] ? __lock_acquire+0x451/0x2250 [ 1033.143374] ? __pfx_vfs_writev+0x10/0x10 [ 1033.143395] ? __pfx_perf_trace_lock+0x10/0x10 [ 1033.143418] ? __fget_files+0x34/0x3b0 [ 1033.143442] ? find_held_lock+0x2b/0x80 [ 1033.143465] ? __fget_files+0x203/0x3b0 [ 1033.143488] ? lock_release+0xc8/0x270 [ 1033.143509] ? __fget_files+0x20d/0x3b0 [ 1033.143542] do_pwritev+0x1ab/0x280 [ 1033.143565] ? __pfx_do_pwritev+0x10/0x10 [ 1033.143587] ? find_held_lock+0x2b/0x80 [ 1033.143609] ? syscall_trace_enter+0x1cf/0x230 [ 1033.143631] __x64_sys_pwritev2+0xef/0x160 [ 1033.143649] do_syscall_64+0xbf/0x420 [ 1033.143671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.143688] RIP: 0033:0x7f9d93406b19 [ 1033.143700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1033.143715] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1033.143732] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 1033.143743] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 1033.143752] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1033.143762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1033.143772] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 1033.143796] [ 1033.228805] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1033.238621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:09:43 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b52, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:43 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0xffffffffffffffff}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:09:43 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b4a, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:44 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b62, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:44 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x2, 0x1000}]) 20:09:44 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 65) 20:09:44 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x2000}], 0xa, 0x0, 0x0, 0x0) 20:09:44 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3, 0x1000}]) [ 1033.454112] FAULT_INJECTION: forcing a failure. [ 1033.454112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.455276] CPU: 0 UID: 0 PID: 8411 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 1033.455298] Tainted: [W]=WARN [ 1033.455302] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1033.455310] Call Trace: [ 1033.455315] [ 1033.455320] dump_stack_lvl+0xfa/0x120 [ 1033.455342] should_fail_ex+0x4d7/0x5e0 [ 1033.455366] ? page_copy_sane+0xce/0x2b0 [ 1033.455389] copy_folio_from_iter_atomic+0x536/0x1820 [ 1033.455422] ? fault_in_readable+0x12d/0x1d0 [ 1033.455440] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1033.455462] ? fault_in_readable+0x172/0x1d0 [ 1033.455478] ? __pfx_fault_in_readable+0x10/0x10 [ 1033.455503] iomap_file_buffered_write+0x4fa/0xa40 [ 1033.455543] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1033.455570] ? __lock_acquire+0x451/0x2250 [ 1033.455608] ? __pfx_down_read+0x10/0x10 [ 1033.455627] ? generic_update_time+0xcb/0xf0 [ 1033.455643] ? mnt_put_write_access_file+0xb7/0xe0 [ 1033.455670] ? file_update_time_flags+0x24c/0x4f0 [ 1033.455688] blkdev_write_iter+0x7a0/0xd00 [ 1033.455711] do_iter_readv_writev+0x5b3/0x910 [ 1033.455731] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1033.455748] ? __import_iovec+0x1df/0x670 [ 1033.455764] ? avc_policy_seqno+0x9/0x20 [ 1033.455782] ? security_file_permission+0x22/0x90 [ 1033.455806] vfs_writev+0x2d4/0xcd0 [ 1033.455824] ? perf_trace_lock+0xb5/0x5d0 [ 1033.455838] ? __lock_acquire+0x451/0x2250 [ 1033.455854] ? __pfx_vfs_writev+0x10/0x10 [ 1033.455871] ? __pfx_perf_trace_lock+0x10/0x10 [ 1033.455895] ? __fget_files+0x34/0x3b0 [ 1033.455914] ? find_held_lock+0x2b/0x80 [ 1033.455932] ? __fget_files+0x203/0x3b0 [ 1033.455954] ? lock_release+0xc8/0x270 [ 1033.455971] ? __fget_files+0x20d/0x3b0 [ 1033.455997] do_pwritev+0x1ab/0x280 [ 1033.456015] ? __pfx_do_pwritev+0x10/0x10 [ 1033.456033] ? find_held_lock+0x2b/0x80 [ 1033.456051] ? syscall_trace_enter+0x1cf/0x230 [ 1033.456069] __x64_sys_pwritev2+0xef/0x160 [ 1033.456084] do_syscall_64+0xbf/0x420 [ 1033.456101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.456117] RIP: 0033:0x7f9d93406b19 [ 1033.456130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1033.456143] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1033.456155] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 1033.456164] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 1033.456172] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1033.456180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1033.456188] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 1033.456207] 20:09:44 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b4b, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 1033.509101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1033.509791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:09:56 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b62, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:56 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b63, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:56 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) pread64(r1, &(0x7f00000000c0)=""/63, 0x3f, 0x16c) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:09:56 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:56 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x3000}], 0xa, 0x0, 0x0, 0x0) 20:09:56 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b4c, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:56 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x4, 0x1000}]) 20:09:56 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 66) [ 1046.242120] FAULT_INJECTION: forcing a failure. [ 1046.242120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1046.243772] CPU: 0 UID: 0 PID: 8438 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 1046.243801] Tainted: [W]=WARN [ 1046.243808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1046.243819] Call Trace: [ 1046.243825] [ 1046.243832] dump_stack_lvl+0xfa/0x120 [ 1046.243861] should_fail_ex+0x4d7/0x5e0 [ 1046.243891] ? page_copy_sane+0xce/0x2b0 [ 1046.243917] copy_folio_from_iter_atomic+0x536/0x1820 [ 1046.243957] ? fault_in_readable+0x12d/0x1d0 [ 1046.243979] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1046.244003] ? fault_in_readable+0x172/0x1d0 [ 1046.244024] ? __pfx_fault_in_readable+0x10/0x10 [ 1046.244056] iomap_file_buffered_write+0x4fa/0xa40 [ 1046.244098] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1046.244128] ? __lock_acquire+0x451/0x2250 [ 1046.244176] ? __pfx_down_read+0x10/0x10 [ 1046.244197] ? generic_update_time+0xcb/0xf0 [ 1046.244217] ? mnt_put_write_access_file+0xb7/0xe0 [ 1046.244247] ? file_update_time_flags+0x24c/0x4f0 [ 1046.244271] blkdev_write_iter+0x7a0/0xd00 [ 1046.244303] do_iter_readv_writev+0x5b3/0x910 [ 1046.244331] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1046.244354] ? __import_iovec+0x1df/0x670 [ 1046.244377] ? avc_policy_seqno+0x9/0x20 [ 1046.244400] ? security_file_permission+0x22/0x90 [ 1046.244434] vfs_writev+0x2d4/0xcd0 [ 1046.244458] ? perf_trace_lock+0xb5/0x5d0 [ 1046.244478] ? __lock_acquire+0x451/0x2250 [ 1046.244499] ? __pfx_vfs_writev+0x10/0x10 [ 1046.244522] ? __pfx_perf_trace_lock+0x10/0x10 [ 1046.244549] ? __fget_files+0x34/0x3b0 [ 1046.244575] ? find_held_lock+0x2b/0x80 [ 1046.244600] ? __fget_files+0x203/0x3b0 [ 1046.244625] ? lock_release+0xc8/0x270 [ 1046.244649] ? __fget_files+0x20d/0x3b0 [ 1046.244695] do_pwritev+0x1ab/0x280 [ 1046.244721] ? __pfx_do_pwritev+0x10/0x10 [ 1046.244745] ? find_held_lock+0x2b/0x80 [ 1046.244769] ? syscall_trace_enter+0x1cf/0x230 [ 1046.244793] __x64_sys_pwritev2+0xef/0x160 [ 1046.244814] do_syscall_64+0xbf/0x420 [ 1046.244837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.244856] RIP: 0033:0x7f9d93406b19 [ 1046.244870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1046.244887] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1046.244905] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 1046.244916] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 1046.244927] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1046.244937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1046.244948] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 1046.244974] 20:09:57 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x5, 0x1000}]) 20:09:57 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x4000}], 0xa, 0x0, 0x0, 0x0) 20:09:57 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b64, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:57 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b4d, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 1046.383589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1046.384535] blk_print_req_error: 11 callbacks suppressed [ 1046.384552] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:09:57 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b63, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 1046.396123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1046.396753] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:09:57 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000001140)) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) fallocate(r0, 0x10, 0x4, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0xfb, 0x1015, 0x0, 0x8, "a348d103792d7e638224bc74c4cc7aa1", "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"}, 0x1015, 0x1) 20:09:57 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b65, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:09:57 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x5000}], 0xa, 0x0, 0x0, 0x0) [ 1050.422703] kmemleak: 15 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 20:10:06 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x6, 0x1000}]) 20:10:06 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 67) 20:10:06 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:06 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b4e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:06 executing program 2: ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000100)={{0x1, 0x8}, 0x0, 0x7f, 0x1, {0x9, 0x1}, 0x5, 0x1000000}) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x321bc1, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:10:06 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x6000}], 0xa, 0x0, 0x0, 0x0) 20:10:06 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b66, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:06 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b64, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 1055.820380] FAULT_INJECTION: forcing a failure. [ 1055.820380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1055.821375] CPU: 0 UID: 0 PID: 8493 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 1055.821394] Tainted: [W]=WARN [ 1055.821398] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1055.821407] Call Trace: [ 1055.821411] [ 1055.821415] dump_stack_lvl+0xfa/0x120 [ 1055.821440] should_fail_ex+0x4d7/0x5e0 [ 1055.821463] ? page_copy_sane+0xce/0x2b0 [ 1055.821485] copy_folio_from_iter_atomic+0x536/0x1820 [ 1055.821517] ? fault_in_readable+0x12d/0x1d0 [ 1055.821534] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1055.821555] ? fault_in_readable+0x172/0x1d0 [ 1055.821570] ? __pfx_fault_in_readable+0x10/0x10 [ 1055.821593] iomap_file_buffered_write+0x4fa/0xa40 [ 1055.821633] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1055.821659] ? __lock_acquire+0x451/0x2250 [ 1055.821694] ? __pfx_down_read+0x10/0x10 [ 1055.821712] ? generic_update_time+0xcb/0xf0 [ 1055.821726] ? mnt_put_write_access_file+0xb7/0xe0 [ 1055.821754] ? file_update_time_flags+0x24c/0x4f0 [ 1055.821771] blkdev_write_iter+0x7a0/0xd00 [ 1055.821797] do_iter_readv_writev+0x5b3/0x910 [ 1055.821820] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1055.821836] ? __import_iovec+0x1df/0x670 [ 1055.821851] ? avc_policy_seqno+0x9/0x20 [ 1055.821868] ? security_file_permission+0x22/0x90 [ 1055.821895] vfs_writev+0x2d4/0xcd0 [ 1055.821911] ? perf_trace_lock+0xb5/0x5d0 [ 1055.821925] ? __lock_acquire+0x451/0x2250 [ 1055.821939] ? __pfx_vfs_writev+0x10/0x10 [ 1055.821955] ? __pfx_perf_trace_lock+0x10/0x10 [ 1055.821973] ? __fget_files+0x34/0x3b0 [ 1055.821990] ? find_held_lock+0x2b/0x80 [ 1055.822007] ? __fget_files+0x203/0x3b0 [ 1055.822024] ? lock_release+0xc8/0x270 [ 1055.822040] ? __fget_files+0x20d/0x3b0 [ 1055.822064] do_pwritev+0x1ab/0x280 [ 1055.822081] ? __pfx_do_pwritev+0x10/0x10 [ 1055.822097] ? find_held_lock+0x2b/0x80 [ 1055.822114] ? syscall_trace_enter+0x1cf/0x230 [ 1055.822130] __x64_sys_pwritev2+0xef/0x160 [ 1055.822143] do_syscall_64+0xbf/0x420 [ 1055.822160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.822173] RIP: 0033:0x7f9d93406b19 [ 1055.822182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1055.822194] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1055.822207] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 1055.822215] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 1055.822222] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1055.822229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1055.822236] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 1055.822254] [ 1055.859516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1055.860299] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1055.868494] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1055.869029] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1063.949851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1063.951048] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1063.952634] buffer_io_error: 2070 callbacks suppressed [ 1063.952651] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1063.954924] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1063.956252] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1063.957588] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1063.958931] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 1063.960282] Buffer I/O error on dev sr0, logical block 5, lost async page write [ 1063.961622] Buffer I/O error on dev sr0, logical block 6, lost async page write [ 1063.962941] Buffer I/O error on dev sr0, logical block 7, lost async page write [ 1063.964278] Buffer I/O error on dev sr0, logical block 8, lost async page write [ 1063.965605] Buffer I/O error on dev sr0, logical block 9, lost async page write [ 1063.969089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1063.970141] I/O error, dev sr0, sector 127 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1063.975165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1063.976260] I/O error, dev sr0, sector 254 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1063.978521] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1063.979779] I/O error, dev sr0, sector 381 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1063.995301] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1063.996556] I/O error, dev sr0, sector 508 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1063.998835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1064.000087] I/O error, dev sr0, sector 635 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1064.005249] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1064.006342] I/O error, dev sr0, sector 762 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1064.008559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1064.009624] I/O error, dev sr0, sector 889 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1064.014798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1064.015868] I/O error, dev sr0, sector 1016 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1064.018107] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1064.018955] I/O error, dev sr0, sector 1143 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1064.023236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1064.024577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1064.028340] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1064.029757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1064.033586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1064.035317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1064.049245] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1064.051211] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 1064.052598] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 1064.053925] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 fc 00 00 0c 00 20:10:18 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="cdda7caa2312ddd631fe47e6888e", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x3, 0xff, 0x401, 0xa, @local, @remote, 0x7, 0x7, 0x4f1, 0x1f5}}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="cdda7caa2312ddd631fe47e6888e", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r7, &(0x7f0000000080)="cdda7caa2312ddd631fe47e6888e", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendto$packet(r10, &(0x7f0000000080)="cdda7caa2312ddd631fe47e6888e", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xf0, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8040}, 0x10) r13 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r13, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:10:18 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b52, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:18 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b65, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:18 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x0, &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:18 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 68) 20:10:18 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b67, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:18 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x8, 0x1000}]) 20:10:18 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x7000}], 0xa, 0x0, 0x0, 0x0) 20:10:19 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x9000}], 0xa, 0x0, 0x0, 0x0) [ 1068.410688] FAULT_INJECTION: forcing a failure. [ 1068.410688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1068.412439] CPU: 1 UID: 0 PID: 8527 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 1068.412475] Tainted: [W]=WARN [ 1068.412482] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1068.412495] Call Trace: [ 1068.412503] [ 1068.412512] dump_stack_lvl+0xfa/0x120 [ 1068.412546] should_fail_ex+0x4d7/0x5e0 [ 1068.412576] ? page_copy_sane+0xce/0x2b0 [ 1068.412606] copy_folio_from_iter_atomic+0x536/0x1820 [ 1068.412654] ? fault_in_readable+0x12d/0x1d0 [ 1068.412681] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1068.412711] ? fault_in_readable+0x172/0x1d0 [ 1068.412736] ? __pfx_fault_in_readable+0x10/0x10 [ 1068.412775] iomap_file_buffered_write+0x4fa/0xa40 [ 1068.412826] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1068.412862] ? __lock_acquire+0x451/0x2250 [ 1068.412939] ? __pfx_down_read+0x10/0x10 [ 1068.412964] ? generic_update_time+0xcb/0xf0 [ 1068.412988] ? mnt_put_write_access_file+0xb7/0xe0 [ 1068.413022] ? file_update_time_flags+0x24c/0x4f0 [ 1068.413052] blkdev_write_iter+0x7a0/0xd00 [ 1068.413091] do_iter_readv_writev+0x5b3/0x910 [ 1068.413124] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1068.413153] ? __import_iovec+0x1df/0x670 [ 1068.413181] ? avc_policy_seqno+0x9/0x20 [ 1068.413210] ? security_file_permission+0x22/0x90 [ 1068.413250] vfs_writev+0x2d4/0xcd0 [ 1068.413281] ? perf_trace_lock+0xb5/0x5d0 [ 1068.413305] ? __lock_acquire+0x451/0x2250 [ 1068.413331] ? __pfx_vfs_writev+0x10/0x10 [ 1068.413360] ? __pfx_perf_trace_lock+0x10/0x10 [ 1068.413393] ? __fget_files+0x34/0x3b0 [ 1068.413425] ? find_held_lock+0x2b/0x80 [ 1068.413456] ? __fget_files+0x203/0x3b0 [ 1068.413488] ? lock_release+0xc8/0x270 [ 1068.413517] ? __fget_files+0x20d/0x3b0 [ 1068.413561] do_pwritev+0x1ab/0x280 [ 1068.413593] ? __pfx_do_pwritev+0x10/0x10 [ 1068.413623] ? find_held_lock+0x2b/0x80 [ 1068.413654] ? syscall_trace_enter+0x1cf/0x230 [ 1068.413684] __x64_sys_pwritev2+0xef/0x160 [ 1068.413709] do_syscall_64+0xbf/0x420 [ 1068.413738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.413761] RIP: 0033:0x7f9d93406b19 [ 1068.413778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1068.413800] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1068.413821] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 1068.413836] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 1068.413849] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1068.413862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1068.413875] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 1068.413908] 20:10:19 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x10, 0x1000}]) 20:10:19 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b62, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 1068.507026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1068.514718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:10:19 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b68, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:19 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b66, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:19 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x5) 20:10:19 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 69) 20:10:19 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xa000}], 0xa, 0x0, 0x0, 0x0) 20:10:19 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b63, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:19 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b69, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:19 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0xfe, 0x1000}]) [ 1068.737409] FAULT_INJECTION: forcing a failure. [ 1068.737409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1068.739075] CPU: 0 UID: 0 PID: 8552 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 1068.739105] Tainted: [W]=WARN [ 1068.739111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1068.739122] Call Trace: [ 1068.739128] [ 1068.739135] dump_stack_lvl+0xfa/0x120 [ 1068.739164] should_fail_ex+0x4d7/0x5e0 [ 1068.739189] ? page_copy_sane+0xce/0x2b0 [ 1068.739216] copy_folio_from_iter_atomic+0x536/0x1820 [ 1068.739256] ? fault_in_readable+0x12d/0x1d0 [ 1068.739279] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1068.739305] ? fault_in_readable+0x172/0x1d0 [ 1068.739326] ? __pfx_fault_in_readable+0x10/0x10 [ 1068.739359] iomap_file_buffered_write+0x4fa/0xa40 [ 1068.739402] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1068.739432] ? __lock_acquire+0x451/0x2250 [ 1068.739454] ? __schedule+0x18d1/0x46a0 [ 1068.739497] ? __pfx_down_read+0x10/0x10 [ 1068.739517] ? generic_update_time+0xcb/0xf0 [ 1068.739537] ? mnt_put_write_access_file+0xb7/0xe0 [ 1068.739565] ? file_update_time_flags+0x24c/0x4f0 [ 1068.739591] blkdev_write_iter+0x7a0/0xd00 [ 1068.739625] do_iter_readv_writev+0x5b3/0x910 [ 1068.739653] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1068.739677] ? __import_iovec+0x1df/0x670 [ 1068.739700] ? avc_policy_seqno+0x9/0x20 [ 1068.739725] ? security_file_permission+0x22/0x90 [ 1068.739759] vfs_writev+0x2d4/0xcd0 [ 1068.739785] ? perf_trace_lock+0xb5/0x5d0 [ 1068.739806] ? __lock_acquire+0x451/0x2250 [ 1068.739828] ? __pfx_vfs_writev+0x10/0x10 [ 1068.739852] ? __pfx_perf_trace_lock+0x10/0x10 [ 1068.739886] ? __fget_files+0x34/0x3b0 [ 1068.739914] ? find_held_lock+0x2b/0x80 [ 1068.739940] ? __fget_files+0x203/0x3b0 [ 1068.739967] ? lock_release+0xc8/0x270 [ 1068.739991] ? __fget_files+0x20d/0x3b0 [ 1068.740028] do_pwritev+0x1ab/0x280 [ 1068.740055] ? __pfx_do_pwritev+0x10/0x10 [ 1068.740080] ? find_held_lock+0x2b/0x80 [ 1068.740106] ? syscall_trace_enter+0x1cf/0x230 [ 1068.740130] __x64_sys_pwritev2+0xef/0x160 [ 1068.740151] do_syscall_64+0xbf/0x420 [ 1068.740176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.740195] RIP: 0033:0x7f9d93406b19 [ 1068.740210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1068.740228] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1068.740247] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 1068.740259] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 1068.740270] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1068.740282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1068.740292] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 1068.740320] [ 1068.854659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1068.855784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 20:10:29 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b6a, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:29 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:29 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b67, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:29 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000180)={0x2, [0x0, 0x0]}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000140)={0x306e, 0x1}) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="ff66696c653000"/16]) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r3, 0x560e, &(0x7f0000000100)=0xa) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000600)={{'\x00', 0x1}, {0x10001}, 0x48, 0x0, 0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)="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", 0x1fa, 0x0, &(0x7f0000000480)={0x2, 0x11b, {0x0, 0xc, 0xc0, "1d79adb1c67bfc4d7a756881bc6a245ae105ccbd74ba8ece20952f366c4132e61cc541fcbac4844382862799f6fc4b80908e13f2ebba79357ff97bcd04fd94650b036dc7a9438f471a58a936091485215444f33e7b4eec9e4c05140e3490d64b4c010787e4599c5e1df45fea35773b148010eef0b4b91ee73d83b3b29985865608be64e2ca94982ddc7a460d72e6c63a2e14afdc31563974eb5cc145139b63ac6834b2d00685326bd69a0111071c251d5db073bcfae778315f4e1282f6624d75", 0x4e, "7e333cb25bc046b43f15120d71442b2c7a2ccc3cddf9463f6073beafc934020ee45ea3ac9f38739cf87e10767426d31301172dd1cb833b4874f459091732e4a5a0b26905606bc057f4d5e1b0408d"}, 0x46, "0c351d07d107035282a2f39ca93acf116b0e3c006311a8a2aa6da110369123c29f61ce5d7f118803db6a132b2f1e46b30ba4245f340d207a80a8b7b731a318b7370a2814aa77"}, 0x16d}) 20:10:29 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b64, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:29 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 70) 20:10:29 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x300, 0x1000}]) 20:10:29 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xb000}], 0xa, 0x0, 0x0, 0x0) 20:10:29 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x500, 0x1000}]) [ 1078.709285] FAULT_INJECTION: forcing a failure. [ 1078.709285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1078.711194] CPU: 1 UID: 0 PID: 8588 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 1078.711231] Tainted: [W]=WARN [ 1078.711238] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1078.711252] Call Trace: [ 1078.711261] [ 1078.711271] dump_stack_lvl+0xfa/0x120 [ 1078.711307] should_fail_ex+0x4d7/0x5e0 [ 1078.711340] ? page_copy_sane+0xce/0x2b0 [ 1078.711373] copy_folio_from_iter_atomic+0x536/0x1820 [ 1078.711425] ? fault_in_readable+0x12d/0x1d0 [ 1078.711453] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1078.711485] ? fault_in_readable+0x172/0x1d0 [ 1078.711512] ? __pfx_fault_in_readable+0x10/0x10 [ 1078.711555] iomap_file_buffered_write+0x4fa/0xa40 [ 1078.711610] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1078.711648] ? __lock_acquire+0x451/0x2250 [ 1078.711712] ? __pfx_down_read+0x10/0x10 [ 1078.711738] ? generic_update_time+0xcb/0xf0 [ 1078.711763] ? mnt_put_write_access_file+0xb7/0xe0 [ 1078.711798] ? file_update_time_flags+0x24c/0x4f0 [ 1078.711830] blkdev_write_iter+0x7a0/0xd00 [ 1078.711872] do_iter_readv_writev+0x5b3/0x910 [ 1078.711915] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1078.711946] ? __import_iovec+0x1df/0x670 [ 1078.711976] ? avc_policy_seqno+0x9/0x20 [ 1078.712007] ? security_file_permission+0x22/0x90 [ 1078.712051] vfs_writev+0x2d4/0xcd0 [ 1078.712084] ? perf_trace_lock+0xb5/0x5d0 [ 1078.712109] ? __lock_acquire+0x451/0x2250 [ 1078.712137] ? __pfx_vfs_writev+0x10/0x10 [ 1078.712169] ? __pfx_perf_trace_lock+0x10/0x10 [ 1078.712204] ? __fget_files+0x34/0x3b0 [ 1078.712239] ? find_held_lock+0x2b/0x80 [ 1078.712271] ? __fget_files+0x203/0x3b0 [ 1078.712306] ? lock_release+0xc8/0x270 [ 1078.712337] ? __fget_files+0x20d/0x3b0 [ 1078.712384] do_pwritev+0x1ab/0x280 [ 1078.712418] ? __pfx_do_pwritev+0x10/0x10 [ 1078.712451] ? find_held_lock+0x2b/0x80 [ 1078.712487] ? syscall_trace_enter+0x1cf/0x230 [ 1078.712519] __x64_sys_pwritev2+0xef/0x160 [ 1078.712546] do_syscall_64+0xbf/0x420 [ 1078.712577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.712601] RIP: 0033:0x7f9d93406b19 [ 1078.712619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1078.712642] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1078.712665] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 1078.712681] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 1078.712696] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1078.712710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1078.712724] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 1078.712760] [ 1078.801784] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1078.803037] blk_print_req_error: 11 callbacks suppressed [ 1078.803055] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:10:29 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b65, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:29 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b68, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 1078.815598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1078.816569] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:10:29 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x600, 0x1000}]) 20:10:29 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xc000}], 0xa, 0x0, 0x0, 0x0) 20:10:29 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b70, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:29 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 71) 20:10:29 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b66, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 1078.978746] FAULT_INJECTION: forcing a failure. [ 1078.978746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1078.979909] CPU: 0 UID: 0 PID: 8616 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 1078.979937] Tainted: [W]=WARN [ 1078.979941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1078.979949] Call Trace: [ 1078.979954] [ 1078.979958] dump_stack_lvl+0xfa/0x120 [ 1078.979980] should_fail_ex+0x4d7/0x5e0 [ 1078.979998] ? page_copy_sane+0xce/0x2b0 [ 1078.980016] copy_folio_from_iter_atomic+0x536/0x1820 [ 1078.980042] ? fault_in_readable+0x12d/0x1d0 [ 1078.980058] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1078.980074] ? fault_in_readable+0x172/0x1d0 [ 1078.980088] ? __pfx_fault_in_readable+0x10/0x10 [ 1078.980110] iomap_file_buffered_write+0x4fa/0xa40 [ 1078.980139] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1078.980159] ? __lock_acquire+0x451/0x2250 [ 1078.980192] ? __pfx_down_read+0x10/0x10 [ 1078.980207] ? generic_update_time+0xcb/0xf0 [ 1078.980220] ? mnt_put_write_access_file+0xb7/0xe0 [ 1078.980239] ? file_update_time_flags+0x24c/0x4f0 [ 1078.980256] blkdev_write_iter+0x7a0/0xd00 [ 1078.980279] do_iter_readv_writev+0x5b3/0x910 [ 1078.980298] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1078.980314] ? __import_iovec+0x1df/0x670 [ 1078.980329] ? avc_policy_seqno+0x9/0x20 [ 1078.980346] ? security_file_permission+0x22/0x90 [ 1078.980369] vfs_writev+0x2d4/0xcd0 [ 1078.980385] ? perf_trace_lock+0xb5/0x5d0 [ 1078.980399] ? __lock_acquire+0x451/0x2250 [ 1078.980413] ? __pfx_vfs_writev+0x10/0x10 [ 1078.980429] ? __pfx_perf_trace_lock+0x10/0x10 [ 1078.980447] ? __fget_files+0x34/0x3b0 [ 1078.980465] ? find_held_lock+0x2b/0x80 [ 1078.980482] ? __fget_files+0x203/0x3b0 [ 1078.980499] ? lock_release+0xc8/0x270 [ 1078.980515] ? __fget_files+0x20d/0x3b0 [ 1078.980539] do_pwritev+0x1ab/0x280 [ 1078.980556] ? __pfx_do_pwritev+0x10/0x10 [ 1078.980572] ? find_held_lock+0x2b/0x80 [ 1078.980589] ? syscall_trace_enter+0x1cf/0x230 [ 1078.980606] __x64_sys_pwritev2+0xef/0x160 [ 1078.980619] do_syscall_64+0xbf/0x420 [ 1078.980636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.980649] RIP: 0033:0x7f9d93406b19 [ 1078.980659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1078.980671] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1078.980683] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 1078.980691] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 1078.980699] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1078.980706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1078.980714] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 1078.980732] [ 1079.000787] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1079.002335] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:10:29 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x810, 0x1000}]) [ 1079.021327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1079.022339] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1084.390540] kmemleak: 112 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 20:10:41 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b67, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:41 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b69, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:41 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 72) 20:10:41 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b71, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:41 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xd000}], 0xa, 0x0, 0x0, 0x0) 20:10:41 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x1008, 0x1000}]) 20:10:41 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:41 executing program 2: add_key$user(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="297815609e27da34eb58a4125daea8f1604de7b00905fe2d0f3f7ef241dc8afa2f47e6033612e36d89fbc70831f47bd9ce609bc7c92ddffd61cdf016ad09291f15ed008a7784034499ad1cb9dcb12f9aee60a19e1a4eeff488a71dd2542fd6fa33b08798822b5f66a0", 0x69, 0xfffffffffffffffd) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xf4) io_submit(r1, 0x2, &(0x7f00000002c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0xfffc, r2, &(0x7f0000000100)="e3419a8bd4f9d2c0ff1a70602ddd89d1d00427e99bd5a1d2ed92a64e925a4846067a03c32aad2a29c15121c626b7c8cec711aca0697cf34a52ec119e43dac842dec1cb9c0a7b8dc81cf98e2fbaef7640b1283617f704cb039aedb399efeee629dc7ef47943e396c7158c2842ff8511b80d747c7ccae8db6f3243b4ede3818af8b4f77e623d38c80f6623dd4ce3aaa47e4581675533b838e1462cc1f2ab1cfa4506a5fc5f55519d18f5cf8e88a0db14c4e78e5d7f85", 0xb5, 0x2, 0x0, 0x1, r0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000240)="331c2aa418784f1cc569fd86256224edf047b35a10b4d3da42b4b5cc74b9abd1f99874fc889d5017eafd8c095cca3a8d02c081c00064d2299fc7", 0x3a, 0x6, 0x0, 0x0, r4}]) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) [ 1090.757058] FAULT_INJECTION: forcing a failure. [ 1090.757058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1090.758598] CPU: 0 UID: 0 PID: 8641 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 1090.758628] Tainted: [W]=WARN [ 1090.758634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1090.758646] Call Trace: [ 1090.758653] [ 1090.758660] dump_stack_lvl+0xfa/0x120 [ 1090.758694] should_fail_ex+0x4d7/0x5e0 [ 1090.758726] ? page_copy_sane+0xce/0x2b0 [ 1090.758758] copy_folio_from_iter_atomic+0x536/0x1820 [ 1090.758803] ? fault_in_readable+0x12d/0x1d0 [ 1090.758829] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1090.758859] ? fault_in_readable+0x172/0x1d0 [ 1090.758887] ? __pfx_fault_in_readable+0x10/0x10 [ 1090.758922] iomap_file_buffered_write+0x4fa/0xa40 [ 1090.758978] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1090.759013] ? __lock_acquire+0x451/0x2250 [ 1090.759067] ? __pfx_down_read+0x10/0x10 [ 1090.759094] ? generic_update_time+0xcb/0xf0 [ 1090.759116] ? mnt_put_write_access_file+0xb7/0xe0 [ 1090.759152] ? file_update_time_flags+0x24c/0x4f0 [ 1090.759178] blkdev_write_iter+0x7a0/0xd00 [ 1090.759216] do_iter_readv_writev+0x5b3/0x910 [ 1090.759252] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1090.759283] ? __import_iovec+0x1df/0x670 [ 1090.759310] ? avc_policy_seqno+0x9/0x20 [ 1090.759336] ? security_file_permission+0x22/0x90 [ 1090.759377] vfs_writev+0x2d4/0xcd0 [ 1090.759403] ? perf_trace_lock+0xb5/0x5d0 [ 1090.759425] ? __lock_acquire+0x451/0x2250 [ 1090.759447] ? __pfx_vfs_writev+0x10/0x10 [ 1090.759472] ? __pfx_perf_trace_lock+0x10/0x10 [ 1090.759501] ? __fget_files+0x34/0x3b0 [ 1090.759529] ? find_held_lock+0x2b/0x80 [ 1090.759555] ? __fget_files+0x203/0x3b0 [ 1090.759583] ? lock_release+0xc8/0x270 [ 1090.759607] ? __fget_files+0x20d/0x3b0 [ 1090.759645] do_pwritev+0x1ab/0x280 [ 1090.759672] ? __pfx_do_pwritev+0x10/0x10 [ 1090.759697] ? find_held_lock+0x2b/0x80 [ 1090.759723] ? syscall_trace_enter+0x1cf/0x230 [ 1090.759750] __x64_sys_pwritev2+0xef/0x160 [ 1090.759772] do_syscall_64+0xbf/0x420 [ 1090.759797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.759816] RIP: 0033:0x7f9d93406b19 [ 1090.759832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1090.759850] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1090.759869] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 1090.759881] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 1090.759893] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1090.759904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1090.759915] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 1090.759943] 20:10:41 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xe000}], 0xa, 0x0, 0x0, 0x0) 20:10:41 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b72, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:41 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x4000, 0x1000}]) [ 1090.913383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1090.914473] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1090.919524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1090.923388] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:10:41 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b68, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:41 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b6a, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:41 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0xf000}], 0xa, 0x0, 0x0, 0x0) 20:10:41 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 73) 20:10:41 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0xeffd, 0x1000}]) 20:10:41 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x11000}], 0xa, 0x0, 0x0, 0x0) [ 1091.159169] FAULT_INJECTION: forcing a failure. [ 1091.159169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1091.161184] CPU: 1 UID: 0 PID: 8674 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 1091.161224] Tainted: [W]=WARN [ 1091.161232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1091.161248] Call Trace: [ 1091.161256] [ 1091.161266] dump_stack_lvl+0xfa/0x120 [ 1091.161307] should_fail_ex+0x4d7/0x5e0 [ 1091.161345] ? page_copy_sane+0xce/0x2b0 [ 1091.161384] copy_folio_from_iter_atomic+0x536/0x1820 [ 1091.161442] ? fault_in_readable+0x12d/0x1d0 [ 1091.161474] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1091.161510] ? fault_in_readable+0x172/0x1d0 [ 1091.161539] ? __pfx_fault_in_readable+0x10/0x10 [ 1091.161587] iomap_file_buffered_write+0x4fa/0xa40 [ 1091.161652] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1091.161695] ? __lock_acquire+0x451/0x2250 [ 1091.161764] ? __pfx_down_read+0x10/0x10 [ 1091.161792] ? generic_update_time+0xcb/0xf0 [ 1091.161818] ? mnt_put_write_access_file+0xb7/0xe0 [ 1091.161857] ? file_update_time_flags+0x24c/0x4f0 [ 1091.161899] blkdev_write_iter+0x7a0/0xd00 [ 1091.161944] do_iter_readv_writev+0x5b3/0x910 [ 1091.161983] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1091.162015] ? __import_iovec+0x1df/0x670 [ 1091.162047] ? avc_policy_seqno+0x9/0x20 [ 1091.162081] ? security_file_permission+0x22/0x90 [ 1091.162128] vfs_writev+0x2d4/0xcd0 [ 1091.162163] ? perf_trace_lock+0xb5/0x5d0 [ 1091.162191] ? __lock_acquire+0x451/0x2250 [ 1091.162221] ? __pfx_vfs_writev+0x10/0x10 [ 1091.162254] ? __pfx_perf_trace_lock+0x10/0x10 [ 1091.162292] ? __fget_files+0x34/0x3b0 [ 1091.162329] ? find_held_lock+0x2b/0x80 [ 1091.162365] ? __fget_files+0x203/0x3b0 [ 1091.162402] ? lock_release+0xc8/0x270 [ 1091.162435] ? __fget_files+0x20d/0x3b0 [ 1091.162486] do_pwritev+0x1ab/0x280 [ 1091.162522] ? __pfx_do_pwritev+0x10/0x10 [ 1091.162557] ? find_held_lock+0x2b/0x80 [ 1091.162592] ? syscall_trace_enter+0x1cf/0x230 [ 1091.162626] __x64_sys_pwritev2+0xef/0x160 [ 1091.162654] do_syscall_64+0xbf/0x420 [ 1091.162688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.162713] RIP: 0033:0x7f9d93406b19 [ 1091.162733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1091.162756] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1091.162781] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 1091.162798] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 1091.162813] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1091.162828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1091.162843] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 1091.162881] [ 1091.231084] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1091.232194] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1091.246690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1091.247644] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1099.277770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1099.278954] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1099.280525] buffer_io_error: 2070 callbacks suppressed [ 1099.280541] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1099.282775] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1099.284082] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1099.285390] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1099.286706] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 1099.288036] Buffer I/O error on dev sr0, logical block 5, lost async page write [ 1099.289343] Buffer I/O error on dev sr0, logical block 6, lost async page write [ 1099.290670] Buffer I/O error on dev sr0, logical block 7, lost async page write [ 1099.291977] Buffer I/O error on dev sr0, logical block 8, lost async page write [ 1099.293313] Buffer I/O error on dev sr0, logical block 9, lost async page write [ 1099.295312] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1099.296398] I/O error, dev sr0, sector 127 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1099.306933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1099.308014] I/O error, dev sr0, sector 254 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1099.310320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1099.311401] I/O error, dev sr0, sector 381 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1099.324835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1099.325969] I/O error, dev sr0, sector 508 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1099.328236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1099.329302] I/O error, dev sr0, sector 635 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1099.334451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1099.335558] I/O error, dev sr0, sector 762 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1099.337788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1099.338840] I/O error, dev sr0, sector 889 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1099.343801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1099.344785] I/O error, dev sr0, sector 1016 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1099.346856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1099.347782] I/O error, dev sr0, sector 1143 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1099.352367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1099.353976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1099.358038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1099.359587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1099.363523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1099.365086] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1099.374572] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1099.376090] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 1099.377345] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 1099.378570] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 fc 00 00 0c 00 20:10:57 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b69, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:57 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r1, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) r2 = memfd_secret(0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xd2421) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r2, 0x0) ftruncate(r2, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x13, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, &(0x7f0000000000), 0x0, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r4, 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40}}, 0x40) syz_io_uring_submit(r3, 0x0, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r4, 0x0, &(0x7f0000000100)="051756c8aa7b958f4348973d5203f4720f47028de17b4005bcf860a7006fa70bf87ac4201528e5e1908ddbf7ab8c35250e71c40162532eb4600ea2111692b84cafcd301a48b59c95f1e3fb98bcbc538673bfdcfbbb9d6d8761197c34110ab064dfdb95a3c5f2bbb434c077b11095c44b0edcc5b1872cedde718a082e87ac41a775ef698ae13720db566dd3c05cfac890b8d5cac50526148d54dffdbb1c0dddc1f9de4e6b927d14d662f5e34178985a5e23b6b532471270ffe0c0370e2de2f88b4be1c94af0f840eda081ee90ea239e794a7533918169ec7496456fa7bf4ffd223324688b2bd656991426742e421bf42fcda14b63", 0xf4, 0x44004, 0x1}, 0x4) 20:10:57 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:57 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 74) 20:10:57 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4bfa, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:57 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b70, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:57 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0xfcfd, 0x1000}]) 20:10:57 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x12000}], 0xa, 0x0, 0x0, 0x0) [ 1106.772384] FAULT_INJECTION: forcing a failure. [ 1106.772384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1106.774329] CPU: 1 UID: 0 PID: 8690 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 1106.774372] Tainted: [W]=WARN [ 1106.774380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1106.774394] Call Trace: [ 1106.774402] [ 1106.774411] dump_stack_lvl+0xfa/0x120 [ 1106.774448] should_fail_ex+0x4d7/0x5e0 [ 1106.774481] ? page_copy_sane+0xce/0x2b0 [ 1106.774515] copy_folio_from_iter_atomic+0x536/0x1820 [ 1106.774567] ? fault_in_readable+0x12d/0x1d0 [ 1106.774596] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1106.774629] ? fault_in_readable+0x172/0x1d0 [ 1106.774657] ? __pfx_fault_in_readable+0x10/0x10 [ 1106.774699] iomap_file_buffered_write+0x4fa/0xa40 [ 1106.774755] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1106.774794] ? __lock_acquire+0x451/0x2250 [ 1106.774859] ? __pfx_down_read+0x10/0x10 [ 1106.774892] ? generic_update_time+0xcb/0xf0 [ 1106.774917] ? mnt_put_write_access_file+0xb7/0xe0 [ 1106.774954] ? file_update_time_flags+0x24c/0x4f0 [ 1106.774987] blkdev_write_iter+0x7a0/0xd00 [ 1106.775029] do_iter_readv_writev+0x5b3/0x910 [ 1106.775066] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1106.775098] ? __import_iovec+0x1df/0x670 [ 1106.775128] ? avc_policy_seqno+0x9/0x20 [ 1106.775160] ? security_file_permission+0x22/0x90 [ 1106.775205] vfs_writev+0x2d4/0xcd0 [ 1106.775238] ? perf_trace_lock+0xb5/0x5d0 [ 1106.775264] ? __lock_acquire+0x451/0x2250 [ 1106.775293] ? __pfx_vfs_writev+0x10/0x10 [ 1106.775325] ? __pfx_perf_trace_lock+0x10/0x10 [ 1106.775361] ? __fget_files+0x34/0x3b0 [ 1106.775396] ? find_held_lock+0x2b/0x80 [ 1106.775429] ? __fget_files+0x203/0x3b0 [ 1106.775464] ? lock_release+0xc8/0x270 [ 1106.775496] ? __fget_files+0x20d/0x3b0 [ 1106.775544] do_pwritev+0x1ab/0x280 [ 1106.775579] ? __pfx_do_pwritev+0x10/0x10 [ 1106.775612] ? find_held_lock+0x2b/0x80 [ 1106.775646] ? syscall_trace_enter+0x1cf/0x230 [ 1106.775678] __x64_sys_pwritev2+0xef/0x160 [ 1106.775705] do_syscall_64+0xbf/0x420 [ 1106.775738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.775763] RIP: 0033:0x7f9d93406b19 [ 1106.775781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1106.775805] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1106.775828] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 1106.775844] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 1106.775858] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1106.775872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1106.775886] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 1106.775923] 20:10:57 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0xfdef, 0x1000}]) 20:10:57 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4bfb, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:57 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x13000}], 0xa, 0x0, 0x0, 0x0) [ 1106.854590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1106.855231] blk_print_req_error: 7 callbacks suppressed [ 1106.855241] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1106.856858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1106.857965] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:10:57 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b71, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:57 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 75) 20:10:57 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b6a, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:10:57 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x1}], 0x2, 0x0, 0x7, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [{0x20, '%:)}^{'}, {0x20, '/dev/sr0\x00'}, {}, {0x20, '/dev/sr0\x00'}, {0x20, '%\xcd%'}], 0xa, "1f2e321178d95fdecb83f32d94d7cd3fde750d8e5843eb8c4332dd5354ebca77f474c825af83c53aad3c1f8e058299b53dfb2331fab31c58ecb3bc9c9b174d5058c0a150e52e07a11348923a5ddd3627b7ca59bc837eeeea6e577a3f031c0e2bdbc4993301a579fa1e06372cf860662bd7918f0e5efdf14da3c1ddb6a583e5fc327b4529c80cbf992971f7f7fe0dda9c9a3b9331e70be2e1d02b423d969d3775ef1be68149d5a4b76f67525eeeda2c5db3123f56fd860cb6f73e719a08ae"}, 0xe9) 20:10:57 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x5409, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 1107.020502] FAULT_INJECTION: forcing a failure. [ 1107.020502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1107.022250] CPU: 1 UID: 0 PID: 8717 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 1107.022284] Tainted: [W]=WARN [ 1107.022291] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1107.022304] Call Trace: [ 1107.022312] [ 1107.022321] dump_stack_lvl+0xfa/0x120 [ 1107.022355] should_fail_ex+0x4d7/0x5e0 [ 1107.022384] ? page_copy_sane+0xce/0x2b0 [ 1107.022415] copy_folio_from_iter_atomic+0x536/0x1820 [ 1107.022463] ? fault_in_readable+0x12d/0x1d0 [ 1107.022490] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1107.022520] ? fault_in_readable+0x172/0x1d0 [ 1107.022546] ? __pfx_fault_in_readable+0x10/0x10 [ 1107.022586] iomap_file_buffered_write+0x4fa/0xa40 [ 1107.022637] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1107.022672] ? __lock_acquire+0x451/0x2250 [ 1107.022732] ? __pfx_down_read+0x10/0x10 [ 1107.022757] ? generic_update_time+0xcb/0xf0 [ 1107.022780] ? mnt_put_write_access_file+0xb7/0xe0 [ 1107.022813] ? file_update_time_flags+0x24c/0x4f0 [ 1107.022843] blkdev_write_iter+0x7a0/0xd00 [ 1107.022889] do_iter_readv_writev+0x5b3/0x910 [ 1107.022923] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1107.022951] ? __import_iovec+0x1df/0x670 [ 1107.022980] ? avc_policy_seqno+0x9/0x20 [ 1107.023009] ? security_file_permission+0x22/0x90 [ 1107.023050] vfs_writev+0x2d4/0xcd0 [ 1107.023081] ? perf_trace_lock+0xb5/0x5d0 [ 1107.023105] ? __lock_acquire+0x451/0x2250 [ 1107.023132] ? __pfx_vfs_writev+0x10/0x10 [ 1107.023161] ? __pfx_perf_trace_lock+0x10/0x10 [ 1107.023194] ? __fget_files+0x34/0x3b0 [ 1107.023226] ? find_held_lock+0x2b/0x80 [ 1107.023257] ? __fget_files+0x203/0x3b0 [ 1107.023289] ? lock_release+0xc8/0x270 [ 1107.023318] ? __fget_files+0x20d/0x3b0 [ 1107.023362] do_pwritev+0x1ab/0x280 [ 1107.023394] ? __pfx_do_pwritev+0x10/0x10 [ 1107.023424] ? find_held_lock+0x2b/0x80 [ 1107.023455] ? syscall_trace_enter+0x1cf/0x230 [ 1107.023485] __x64_sys_pwritev2+0xef/0x160 [ 1107.023510] do_syscall_64+0xbf/0x420 [ 1107.023540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.023563] RIP: 0033:0x7f9d93406b19 [ 1107.023581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1107.023602] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1107.023624] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 1107.023639] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 1107.023652] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1107.023665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1107.023678] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 1107.023711] [ 1107.045174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1107.045236] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1107.045419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1107.045470] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:11:06 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 76) 20:11:06 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:11:06 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x14000}], 0xa, 0x0, 0x0, 0x0) 20:11:06 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) 20:11:06 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x540b, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:11:06 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b70, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:11:06 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b72, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:11:06 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0xfdfc, 0x1000}]) 20:11:06 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4bfa, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 1115.854142] FAULT_INJECTION: forcing a failure. [ 1115.854142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1115.855365] CPU: 0 UID: 0 PID: 8748 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 1115.855385] Tainted: [W]=WARN [ 1115.855389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1115.855397] Call Trace: [ 1115.855401] [ 1115.855405] dump_stack_lvl+0xfa/0x120 [ 1115.855429] should_fail_ex+0x4d7/0x5e0 [ 1115.855452] ? page_copy_sane+0xce/0x2b0 [ 1115.855474] copy_folio_from_iter_atomic+0x536/0x1820 [ 1115.855505] ? fault_in_readable+0x12d/0x1d0 [ 1115.855522] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1115.855542] ? fault_in_readable+0x172/0x1d0 [ 1115.855557] ? __pfx_fault_in_readable+0x10/0x10 [ 1115.855581] iomap_file_buffered_write+0x4fa/0xa40 [ 1115.855616] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1115.855636] ? __lock_acquire+0x451/0x2250 [ 1115.855669] ? __pfx_down_read+0x10/0x10 [ 1115.855683] ? generic_update_time+0xcb/0xf0 [ 1115.855696] ? mnt_put_write_access_file+0xb7/0xe0 [ 1115.855716] ? file_update_time_flags+0x24c/0x4f0 [ 1115.855733] blkdev_write_iter+0x7a0/0xd00 [ 1115.855755] do_iter_readv_writev+0x5b3/0x910 [ 1115.855775] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1115.855790] ? __import_iovec+0x1df/0x670 [ 1115.855806] ? avc_policy_seqno+0x9/0x20 [ 1115.855823] ? security_file_permission+0x22/0x90 [ 1115.855846] vfs_writev+0x2d4/0xcd0 [ 1115.855862] ? perf_trace_lock+0xb5/0x5d0 [ 1115.855881] ? __lock_acquire+0x451/0x2250 [ 1115.855895] ? __pfx_vfs_writev+0x10/0x10 [ 1115.855911] ? __pfx_perf_trace_lock+0x10/0x10 [ 1115.855929] ? __fget_files+0x34/0x3b0 [ 1115.855947] ? find_held_lock+0x2b/0x80 [ 1115.855964] ? __fget_files+0x203/0x3b0 [ 1115.855981] ? lock_release+0xc8/0x270 [ 1115.855996] ? __fget_files+0x20d/0x3b0 [ 1115.856020] do_pwritev+0x1ab/0x280 [ 1115.856037] ? __pfx_do_pwritev+0x10/0x10 [ 1115.856054] ? find_held_lock+0x2b/0x80 [ 1115.856070] ? syscall_trace_enter+0x1cf/0x230 [ 1115.856087] __x64_sys_pwritev2+0xef/0x160 [ 1115.856100] do_syscall_64+0xbf/0x420 [ 1115.856117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1115.856129] RIP: 0033:0x7f9d93406b19 [ 1115.856140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1115.856151] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1115.856164] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 1115.856171] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 1115.856178] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1115.856185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1115.856192] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 1115.856210] 20:11:06 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0xfdfe, 0x1000}]) 20:11:06 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:11:06 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x15000}], 0xa, 0x0, 0x0, 0x0) [ 1115.959922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1115.960845] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:11:06 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4bfb, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 1115.963771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1115.964927] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:11:06 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x540c, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:11:06 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b71, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:11:06 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 77) 20:11:06 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x400}}, './file1\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x22053, r2, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x40, 0x308}}, 0x40) write$P9_ROPEN(r1, &(0x7f00000000c0)={0x18, 0x71, 0x1, {{0xc6, 0x3, 0x7}, 0x1}}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x80010, r2, 0x0) 20:11:06 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0xfe00, 0x1000}]) [ 1116.143803] FAULT_INJECTION: forcing a failure. [ 1116.143803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1116.144939] CPU: 0 UID: 0 PID: 8781 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 1116.144959] Tainted: [W]=WARN [ 1116.144963] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1116.144971] Call Trace: [ 1116.144975] [ 1116.144980] dump_stack_lvl+0xfa/0x120 [ 1116.145003] should_fail_ex+0x4d7/0x5e0 [ 1116.145027] ? page_copy_sane+0xce/0x2b0 [ 1116.145049] copy_folio_from_iter_atomic+0x536/0x1820 [ 1116.145079] ? fault_in_readable+0x12d/0x1d0 [ 1116.145097] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1116.145117] ? fault_in_readable+0x172/0x1d0 [ 1116.145132] ? __pfx_fault_in_readable+0x10/0x10 [ 1116.145155] iomap_file_buffered_write+0x4fa/0xa40 [ 1116.145192] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1116.145217] ? __lock_acquire+0x451/0x2250 [ 1116.145253] ? __pfx_down_read+0x10/0x10 [ 1116.145269] ? generic_update_time+0xcb/0xf0 [ 1116.145282] ? mnt_put_write_access_file+0xb7/0xe0 [ 1116.145301] ? file_update_time_flags+0x24c/0x4f0 [ 1116.145317] blkdev_write_iter+0x7a0/0xd00 [ 1116.145338] do_iter_readv_writev+0x5b3/0x910 [ 1116.145358] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1116.145373] ? __import_iovec+0x1df/0x670 [ 1116.145388] ? avc_policy_seqno+0x9/0x20 [ 1116.145404] ? security_file_permission+0x22/0x90 [ 1116.145427] vfs_writev+0x2d4/0xcd0 [ 1116.145452] ? perf_trace_lock+0xb5/0x5d0 [ 1116.145466] ? __lock_acquire+0x451/0x2250 [ 1116.145480] ? __pfx_vfs_writev+0x10/0x10 [ 1116.145496] ? __pfx_perf_trace_lock+0x10/0x10 [ 1116.145514] ? __fget_files+0x34/0x3b0 [ 1116.145531] ? find_held_lock+0x2b/0x80 [ 1116.145548] ? __fget_files+0x203/0x3b0 [ 1116.145565] ? lock_release+0xc8/0x270 [ 1116.145581] ? __fget_files+0x20d/0x3b0 [ 1116.145605] do_pwritev+0x1ab/0x280 [ 1116.145622] ? __pfx_do_pwritev+0x10/0x10 [ 1116.145639] ? find_held_lock+0x2b/0x80 [ 1116.145655] ? syscall_trace_enter+0x1cf/0x230 [ 1116.145672] __x64_sys_pwritev2+0xef/0x160 [ 1116.145685] do_syscall_64+0xbf/0x420 [ 1116.145702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.145714] RIP: 0033:0x7f9d93406b19 [ 1116.145724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1116.145736] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1116.145748] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 1116.145756] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 1116.145763] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1116.145770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1116.145777] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 1116.145795] [ 1116.176186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1116.176639] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1116.183395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1116.183845] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1119.344554] kmemleak: 42 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 20:11:17 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0xfefd, 0x1000}]) 20:11:17 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:11:17 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x540d, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:11:17 executing program 2: openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x301100, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r1, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46deffffff000000000089580000000000000001000000000000000000000040000000000000000000000000000000000000000000c0f6e7eb4c96d6009b3800000000000000"], 0x40) r2 = openat$incfs(r0, &(0x7f0000000140)='.log\x00', 0xa00, 0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file1/file0\x00'}) fcntl$getflags(r1, 0x408) getsockopt(r1, 0x7fffffff, 0x3, &(0x7f00000000c0), &(0x7f0000000100)) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0x10000000000000f6, 0x0, 0x0, 0x0) 20:11:17 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4b72, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:11:17 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x16000}], 0xa, 0x0, 0x0, 0x0) 20:11:17 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x5409, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:11:17 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 78) 20:11:17 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, 0x0) dup2(r0, r1) [ 1126.431273] FAULT_INJECTION: forcing a failure. [ 1126.431273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1126.432963] CPU: 0 UID: 0 PID: 8804 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 1126.432983] Tainted: [W]=WARN [ 1126.432987] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1126.432995] Call Trace: [ 1126.433000] [ 1126.433005] dump_stack_lvl+0xfa/0x120 20:11:17 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x540e, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 1126.433031] should_fail_ex+0x4d7/0x5e0 [ 1126.433059] ? page_copy_sane+0xce/0x2b0 [ 1126.433083] copy_folio_from_iter_atomic+0x536/0x1820 [ 1126.433115] ? fault_in_readable+0x12d/0x1d0 [ 1126.433134] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1126.433157] ? fault_in_readable+0x172/0x1d0 [ 1126.433173] ? __pfx_fault_in_readable+0x10/0x10 [ 1126.433196] iomap_file_buffered_write+0x4fa/0xa40 20:11:17 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x17000}], 0xa, 0x0, 0x0, 0x0) [ 1126.433239] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1126.433267] ? __lock_acquire+0x451/0x2250 [ 1126.433303] ? __pfx_down_read+0x10/0x10 [ 1126.433322] ? generic_update_time+0xcb/0xf0 20:11:17 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x80000, 0x1000}]) [ 1126.433338] ? mnt_put_write_access_file+0xb7/0xe0 [ 1126.433366] ? file_update_time_flags+0x24c/0x4f0 [ 1126.433383] blkdev_write_iter+0x7a0/0xd00 [ 1126.433406] do_iter_readv_writev+0x5b3/0x910 [ 1126.433425] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1126.433441] ? __import_iovec+0x1df/0x670 [ 1126.433456] ? avc_policy_seqno+0x9/0x20 [ 1126.433473] ? security_file_permission+0x22/0x90 [ 1126.433497] vfs_writev+0x2d4/0xcd0 [ 1126.433514] ? perf_trace_lock+0xb5/0x5d0 20:11:17 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 79) [ 1126.433527] ? __lock_acquire+0x451/0x2250 [ 1126.433541] ? __pfx_vfs_writev+0x10/0x10 [ 1126.433568] ? __pfx_perf_trace_lock+0x10/0x10 [ 1126.433585] ? __fget_files+0x34/0x3b0 [ 1126.433603] ? find_held_lock+0x2b/0x80 [ 1126.433620] ? __fget_files+0x203/0x3b0 20:11:17 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x5]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000780)=ANY=[@ANYBLOB="01ac8d8c6000000100000018000000a1ad9d4c6c08487f956251d71d58ba0101622798e9c68d9473073604fa27d05d1355a171f4e347cd0756a75cc8c4f818f9a15f138adff5d70110e74650cffb17e4f46389b4622dbc027708c310fd4e60b662f51fdc1d97bcbf5715f6a0fab1fc4460f8c8fce1465e1dfac450814e01e7861c5e2861d3f3bf4d6081ff01e2ee0b9753ddcbc72534cf9ed71ec9ad7cd574888567e0cbc38e227269081947bc15254a2617a8a302183dbbb72aa04f4ee0952e446d38723b463d12d2d18780c22466e3b0f35aaf48589e4e46ae00f86c5055b1d17a5e33d02bfc8bf61b4ac4", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r1, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000200)="c4431b08a66958cb2e7f1f7cc8f4f00c70d0c042ff7532a4c230ff131834425a8daa6b22cadd73bdb01f8d17c339d62f29acbf95257e65fda01d2326036e700999ca9921f0a34ff53e654e0e393200b880dff9baa20036a86b835f8c47d2fb7e3deb4397f56adeb9f5d006eb2d21fc06c6892d56b534a049aae4af4c470612c1b9bfe913b7bea1bc10f75d17e06d46017800b663b06fc320083cfb32194d24036ea7452b10db54a655baac1b68109390e66ac3b983a5b22e13621e4e17421f703ccdf3921e914eab188d9aada683932680c82fefa475e8161c3ee165a130bb58051daed96134b9c835b402f049802759bfde3676dbe87000a6", 0x104e08}], 0x1000004c, 0x0, 0x0, 0x18) io_submit(0x0, 0xa, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='\n', 0x1}]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/arp\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r3, 0x0) write$binfmt_elf64(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="7f454c4600000000000000cd6f8695bd1cbd7385b1502f4a5018000000000000000000010000000000000000f9ff004000000000000000000000000000000000000000000038000000000000000000"], 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7, 0x13, r4, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c46000000000000080000000000000000000400000000000000000000204000000000000000000000000000000000000000000038000100000000000000020000000002000001000000000000008000000000000000050000000000000008000000000000000010000000000000000000800000000051e57464090000000900000000000000ffffffff000000000300000000000000ffffff7f0000000004000000000000000100000000000000"], 0xb0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r5, 0x560e, &(0x7f0000000100)=0xa) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r6, 0x560e, &(0x7f0000000100)=0xa) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r7, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40}}, 0x40) io_submit(0x0, 0x4, &(0x7f0000000580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x9, r2, &(0x7f0000000140), 0x0, 0x2, 0x0, 0x1, r3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f00000001c0)="cab5d046af9f0bd3dbe4cf918a66a8975514e24a950e3e3247a482435ea5e4ec5c23e8fa67fa338304c94c9cf0880478fed0a31a9b14d365da13d32cef", 0x3d, 0x1000, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x6, 0x7ff, r5, &(0x7f0000000340)="c9caa0491e1c0a082c5cd134875e18cf4267b71299bb71152be9a20f2a399a89600b9697feadd97021299784947a58c6fe8f640bd87f8bd26328eec911dad4b7ba8fdcf8d9c3ab2cc004c4026e54a9dd258d6ca17db1c9f083b72e1438941d9c8a32d9f923e5b60e0cae5c7106d2e669b015ed26c96e9b88652684bb3defb92121aa20ef94e7fce29d964574f713403fb1b25df4ad8e7c6a821eb8c100a2b2d6d8476dd262047d66a7cc507aeac7f82a02d489a457a1efec2ad5cf634e00549b081d57badd4b951f75382c3b2aed4e922f6fdcce02102a5db1b47ced931b92f31c9297deeabdb6f12db493039b86018a301112ac76fb624b51", 0xf9, 0xe03, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x1ff, 0xffffffffffffffff, &(0x7f0000000480)="8d3ab38d92d04656c8d2cd1cda25ab69c05647cd1c603bef309f61ed8e6765ef78c7c7ad0652ed87c3a0deac2c0e1226da6efe9ff5a740de5ca46ecb0037a4911c2e0f43db16f30cf6fa0e73d962b8f8b6396a10b9460a0593c3481ab07e10fee822daf6cab80a749909d5dc474580246e32f9dec339e0fb752bde6787f959d6ca8800034270ef0e0d83e1c0d496d60ccb4a23d9e8bd09de36ee4701bde2789e41560e6efdc5bdee1b08f2d92863", 0xae, 0x7fff, 0x0, 0x2}]) [ 1126.433637] ? lock_release+0xc8/0x270 [ 1126.433653] ? __fget_files+0x20d/0x3b0 [ 1126.433677] do_pwritev+0x1ab/0x280 [ 1126.433694] ? __pfx_do_pwritev+0x10/0x10 [ 1126.433710] ? find_held_lock+0x2b/0x80 [ 1126.433727] ? syscall_trace_enter+0x1cf/0x230 [ 1126.433744] __x64_sys_pwritev2+0xef/0x160 [ 1126.433757] do_syscall_64+0xbf/0x420 [ 1126.433774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.433787] RIP: 0033:0x7f9d93406b19 [ 1126.433796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1126.433809] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1126.433821] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 1126.433829] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 1126.433836] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1126.433843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1126.433850] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 1126.433868] [ 1126.496188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1126.496234] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1126.496331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1126.496362] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:11:17 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x18000}], 0xa, 0x0, 0x0, 0x0) [ 1126.645427] FAULT_INJECTION: forcing a failure. [ 1126.645427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1126.646447] CPU: 0 UID: 0 PID: 8824 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 1126.646467] Tainted: [W]=WARN [ 1126.646471] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1126.646479] Call Trace: [ 1126.646484] [ 1126.646488] dump_stack_lvl+0xfa/0x120 [ 1126.646511] should_fail_ex+0x4d7/0x5e0 [ 1126.646532] ? page_copy_sane+0xce/0x2b0 [ 1126.646556] copy_folio_from_iter_atomic+0x536/0x1820 [ 1126.646588] ? fault_in_readable+0x12d/0x1d0 [ 1126.646607] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1126.646629] ? fault_in_readable+0x172/0x1d0 [ 1126.646643] ? __pfx_fault_in_readable+0x10/0x10 [ 1126.646667] iomap_file_buffered_write+0x4fa/0xa40 [ 1126.646709] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1126.646738] ? __lock_acquire+0x451/0x2250 [ 1126.646775] ? __pfx_down_read+0x10/0x10 [ 1126.646795] ? generic_update_time+0xcb/0xf0 [ 1126.646810] ? mnt_put_write_access_file+0xb7/0xe0 [ 1126.646838] ? file_update_time_flags+0x24c/0x4f0 [ 1126.646855] blkdev_write_iter+0x7a0/0xd00 [ 1126.646881] do_iter_readv_writev+0x5b3/0x910 [ 1126.646900] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1126.646916] ? __import_iovec+0x1df/0x670 [ 1126.646931] ? avc_policy_seqno+0x9/0x20 [ 1126.646947] ? security_file_permission+0x22/0x90 [ 1126.646970] vfs_writev+0x2d4/0xcd0 [ 1126.646987] ? perf_trace_lock+0xb5/0x5d0 [ 1126.647000] ? __lock_acquire+0x451/0x2250 [ 1126.647015] ? __pfx_vfs_writev+0x10/0x10 [ 1126.647030] ? __pfx_perf_trace_lock+0x10/0x10 [ 1126.647048] ? __fget_files+0x34/0x3b0 [ 1126.647066] ? find_held_lock+0x2b/0x80 [ 1126.647082] ? __fget_files+0x203/0x3b0 [ 1126.647099] ? lock_release+0xc8/0x270 [ 1126.647115] ? __fget_files+0x20d/0x3b0 [ 1126.647139] do_pwritev+0x1ab/0x280 [ 1126.647156] ? __pfx_do_pwritev+0x10/0x10 [ 1126.647172] ? find_held_lock+0x2b/0x80 [ 1126.647189] ? syscall_trace_enter+0x1cf/0x230 [ 1126.647206] __x64_sys_pwritev2+0xef/0x160 [ 1126.647219] do_syscall_64+0xbf/0x420 [ 1126.647236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.647249] RIP: 0033:0x7f9d93406b19 [ 1126.647259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1126.647271] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1126.647283] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 1126.647291] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 1126.647299] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1126.647306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1126.647313] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 1126.647331] [ 1126.703763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1126.704674] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:11:17 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x100000, 0x1000}]) 20:11:17 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4bfa, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 1126.729136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1126.730430] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:11:27 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x540b, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:11:27 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, 0x0) dup2(r0, r1) 20:11:27 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0xfeffff, 0x1000}]) 20:11:27 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x80500, 0x44) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf25380000000c00580073000000000000000c0058004a000000000000000c00580006000000000000000c00585a10000000000000000c0058004a00000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20008024}, 0x20000041) recvmsg$unix(r1, &(0x7f0000001400)={&(0x7f0000000240)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000001440)=""/102400, 0xd}, {&(0x7f000001a4c0)=""/4112, 0x1000}, {&(0x7f000001a440)=""/74, 0x4a}, {&(0x7f0000001380)=""/64, 0x40}], 0x38}, 0x10061) 20:11:27 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x4bfb, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:11:27 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x19000}], 0xa, 0x0, 0x0, 0x0) 20:11:27 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 80) 20:11:27 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x540f, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 1137.334733] FAULT_INJECTION: forcing a failure. [ 1137.334733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1137.336861] CPU: 1 UID: 0 PID: 8849 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 1137.336908] Tainted: [W]=WARN [ 1137.336917] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1137.336933] Call Trace: [ 1137.336942] [ 1137.336952] dump_stack_lvl+0xfa/0x120 [ 1137.336990] should_fail_ex+0x4d7/0x5e0 [ 1137.337024] ? page_copy_sane+0xce/0x2b0 [ 1137.337060] copy_folio_from_iter_atomic+0x536/0x1820 [ 1137.337115] ? fault_in_readable+0x12d/0x1d0 [ 1137.337146] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1137.337180] ? fault_in_readable+0x172/0x1d0 [ 1137.337214] ? __pfx_fault_in_readable+0x10/0x10 [ 1137.337260] iomap_file_buffered_write+0x4fa/0xa40 [ 1137.337319] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1137.337361] ? __lock_acquire+0x451/0x2250 [ 1137.337429] ? __pfx_down_read+0x10/0x10 [ 1137.337458] ? generic_update_time+0xcb/0xf0 [ 1137.337484] ? mnt_put_write_access_file+0xb7/0xe0 [ 1137.337523] ? file_update_time_flags+0x24c/0x4f0 [ 1137.337558] blkdev_write_iter+0x7a0/0xd00 [ 1137.337603] do_iter_readv_writev+0x5b3/0x910 [ 1137.337642] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1137.337675] ? __import_iovec+0x1df/0x670 [ 1137.337720] ? avc_policy_seqno+0x9/0x20 [ 1137.337753] ? security_file_permission+0x22/0x90 [ 1137.337800] vfs_writev+0x2d4/0xcd0 [ 1137.337835] ? perf_trace_lock+0xb5/0x5d0 [ 1137.337863] ? __lock_acquire+0x451/0x2250 [ 1137.337893] ? __pfx_vfs_writev+0x10/0x10 [ 1137.337927] ? __pfx_perf_trace_lock+0x10/0x10 [ 1137.337965] ? __fget_files+0x34/0x3b0 [ 1137.338001] ? find_held_lock+0x2b/0x80 [ 1137.338037] ? __fget_files+0x203/0x3b0 [ 1137.338073] ? lock_release+0xc8/0x270 [ 1137.338106] ? __fget_files+0x20d/0x3b0 [ 1137.338157] do_pwritev+0x1ab/0x280 [ 1137.338193] ? __pfx_do_pwritev+0x10/0x10 [ 1137.338228] ? find_held_lock+0x2b/0x80 [ 1137.338263] ? syscall_trace_enter+0x1cf/0x230 [ 1137.338297] __x64_sys_pwritev2+0xef/0x160 [ 1137.338326] do_syscall_64+0xbf/0x420 [ 1137.338360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.338385] RIP: 0033:0x7f9d93406b19 [ 1137.338405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1137.338429] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1137.338454] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 1137.338471] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 1137.338486] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1137.338501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1137.338516] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 1137.338554] [ 1137.413305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1137.414253] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1137.415677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1137.416783] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1137.674540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1137.675267] I/O error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1137.676238] buffer_io_error: 2070 callbacks suppressed [ 1137.676248] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 1137.677631] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 1137.678458] Buffer I/O error on dev sr0, logical block 2, lost async page write [ 1137.679287] Buffer I/O error on dev sr0, logical block 3, lost async page write [ 1137.680110] Buffer I/O error on dev sr0, logical block 4, lost async page write [ 1137.680935] Buffer I/O error on dev sr0, logical block 5, lost async page write [ 1137.681741] Buffer I/O error on dev sr0, logical block 6, lost async page write [ 1137.682566] Buffer I/O error on dev sr0, logical block 7, lost async page write [ 1137.683401] Buffer I/O error on dev sr0, logical block 8, lost async page write [ 1137.684230] Buffer I/O error on dev sr0, logical block 9, lost async page write [ 1137.685509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1137.686179] I/O error, dev sr0, sector 127 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1137.689277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1137.689952] I/O error, dev sr0, sector 254 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1137.691274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1137.691870] I/O error, dev sr0, sector 381 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1137.694919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1137.695530] I/O error, dev sr0, sector 508 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1137.696859] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1137.697486] I/O error, dev sr0, sector 635 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1137.701595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1137.702269] I/O error, dev sr0, sector 762 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1137.703599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1137.704235] I/O error, dev sr0, sector 889 op 0x1:(WRITE) flags 0x904000 phys_seg 127 prio class 2 [ 1137.707194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1137.708166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1137.711325] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1137.712303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1137.717736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1137.718722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1137.722757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1137.723965] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1137.753788] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1137.755209] sr 1:0:0:0: [sr0] tag#0 Sense Key : Illegal Request [current] [ 1137.756290] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Invalid command operation code [ 1137.757428] sr 1:0:0:0: [sr0] tag#0 CDB: Write(10) 2a 00 00 00 01 fc 00 00 0c 00 20:11:36 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 81) 20:11:36 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x5410, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:11:36 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x540c, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:11:36 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) r1 = pidfd_getfd(r0, r0, 0x0) sendmsg$AUDIT_ADD_RULE(r1, 0xffffffffffffffff, 0x0) 20:11:36 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x1000000, 0x1000}]) 20:11:36 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x1a000}], 0xa, 0x0, 0x0, 0x0) 20:11:36 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x560e, 0x0) dup2(r0, r1) 20:11:36 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x5409, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:11:37 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x560e, &(0x7f0000000100)=0xa) dup2(0xffffffffffffffff, r0) 20:11:37 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x540d, &(0x7f0000000100)=0xa) dup2(r0, r1) [ 1146.340982] FAULT_INJECTION: forcing a failure. [ 1146.340982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1146.342070] CPU: 0 UID: 0 PID: 8883 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 1146.342090] Tainted: [W]=WARN [ 1146.342094] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1146.342102] Call Trace: [ 1146.342106] [ 1146.342111] dump_stack_lvl+0xfa/0x120 [ 1146.342135] should_fail_ex+0x4d7/0x5e0 [ 1146.342159] ? page_copy_sane+0xce/0x2b0 [ 1146.342181] copy_folio_from_iter_atomic+0x536/0x1820 [ 1146.342212] ? fault_in_readable+0x12d/0x1d0 [ 1146.342230] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1146.342251] ? fault_in_readable+0x172/0x1d0 [ 1146.342267] ? __pfx_fault_in_readable+0x10/0x10 [ 1146.342290] iomap_file_buffered_write+0x4fa/0xa40 [ 1146.342329] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1146.342354] ? __lock_acquire+0x451/0x2250 [ 1146.342389] ? __pfx_down_read+0x10/0x10 [ 1146.342408] ? generic_update_time+0xcb/0xf0 [ 1146.342424] ? mnt_put_write_access_file+0xb7/0xe0 [ 1146.342451] ? file_update_time_flags+0x24c/0x4f0 [ 1146.342468] blkdev_write_iter+0x7a0/0xd00 [ 1146.342496] do_iter_readv_writev+0x5b3/0x910 [ 1146.342521] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1146.342541] ? __import_iovec+0x1df/0x670 [ 1146.342556] ? avc_policy_seqno+0x9/0x20 [ 1146.342573] ? security_file_permission+0x22/0x90 [ 1146.342596] vfs_writev+0x2d4/0xcd0 [ 1146.342612] ? perf_trace_lock+0xb5/0x5d0 [ 1146.342626] ? __lock_acquire+0x451/0x2250 [ 1146.342640] ? __pfx_vfs_writev+0x10/0x10 [ 1146.342656] ? __pfx_perf_trace_lock+0x10/0x10 [ 1146.342674] ? __fget_files+0x34/0x3b0 [ 1146.342692] ? find_held_lock+0x2b/0x80 [ 1146.342708] ? __fget_files+0x203/0x3b0 [ 1146.342726] ? lock_release+0xc8/0x270 [ 1146.342741] ? __fget_files+0x20d/0x3b0 [ 1146.342765] do_pwritev+0x1ab/0x280 [ 1146.342783] ? __pfx_do_pwritev+0x10/0x10 [ 1146.342799] ? find_held_lock+0x2b/0x80 [ 1146.342815] ? syscall_trace_enter+0x1cf/0x230 [ 1146.342832] __x64_sys_pwritev2+0xef/0x160 [ 1146.342845] do_syscall_64+0xbf/0x420 [ 1146.342862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.342879] RIP: 0033:0x7f9d93406b19 [ 1146.342889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1146.342901] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1146.342913] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 1146.342921] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 1146.342929] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1146.342936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1146.342943] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 1146.342961] 20:11:37 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x232803, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0, 0x2}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) r1 = memfd_secret(0x80000) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ff5000/0xb000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000fec000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000fed000/0x3000)=nil, &(0x7f00000000c0)="80452a571cf9c0b731f8b7", 0xb, r0}, 0x68) flock(r2, 0x4) [ 1146.410090] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1146.411118] blk_print_req_error: 9 callbacks suppressed [ 1146.411136] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1146.414676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1146.415169] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 20:11:37 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x2000000, 0x1000}]) 20:11:37 executing program 5: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x5412, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:11:37 executing program 1: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x540b, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:11:37 executing program 4: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x1b000}], 0xa, 0x0, 0x0, 0x0) 20:11:37 executing program 3: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x540e, &(0x7f0000000100)=0xa) dup2(r0, r1) 20:11:37 executing program 0: sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) pwritev2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000040)="c4", 0x104e08}], 0xa, 0x0, 0x0, 0x0) (fail_nth: 82) 20:11:37 executing program 2: openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x20901, 0x0) 20:11:37 executing program 7: creat(&(0x7f0000000300)='./file0\x00', 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000, 0x1000}]) [ 1146.611774] FAULT_INJECTION: forcing a failure. [ 1146.611774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1146.612837] CPU: 0 UID: 0 PID: 8919 Comm: syz-executor.0 Tainted: G W 6.18.0-next-20251210 #1 PREEMPT(voluntary) [ 1146.612857] Tainted: [W]=WARN [ 1146.612861] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1146.612869] Call Trace: [ 1146.612876] [ 1146.612881] dump_stack_lvl+0xfa/0x120 [ 1146.612906] should_fail_ex+0x4d7/0x5e0 [ 1146.612929] ? page_copy_sane+0xce/0x2b0 [ 1146.612952] copy_folio_from_iter_atomic+0x536/0x1820 [ 1146.612984] ? fault_in_readable+0x12d/0x1d0 [ 1146.613002] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1146.613022] ? fault_in_readable+0x172/0x1d0 [ 1146.613037] ? __pfx_fault_in_readable+0x10/0x10 [ 1146.613061] iomap_file_buffered_write+0x4fa/0xa40 [ 1146.613101] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1146.613127] ? __lock_acquire+0x451/0x2250 [ 1146.613163] ? __pfx_down_read+0x10/0x10 [ 1146.613181] ? generic_update_time+0xcb/0xf0 [ 1146.613196] ? mnt_put_write_access_file+0xb7/0xe0 [ 1146.613216] ? file_update_time_flags+0x24c/0x4f0 [ 1146.613232] blkdev_write_iter+0x7a0/0xd00 [ 1146.613255] do_iter_readv_writev+0x5b3/0x910 [ 1146.613274] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1146.613290] ? __import_iovec+0x1df/0x670 [ 1146.613305] ? avc_policy_seqno+0x9/0x20 [ 1146.613321] ? security_file_permission+0x22/0x90 [ 1146.613344] vfs_writev+0x2d4/0xcd0 [ 1146.613361] ? perf_trace_lock+0xb5/0x5d0 [ 1146.613374] ? __lock_acquire+0x451/0x2250 [ 1146.613389] ? __pfx_vfs_writev+0x10/0x10 [ 1146.613405] ? __pfx_perf_trace_lock+0x10/0x10 [ 1146.613423] ? __fget_files+0x34/0x3b0 [ 1146.613440] ? find_held_lock+0x2b/0x80 [ 1146.613458] ? __fget_files+0x203/0x3b0 [ 1146.613475] ? lock_release+0xc8/0x270 [ 1146.613490] ? __fget_files+0x20d/0x3b0 [ 1146.613514] do_pwritev+0x1ab/0x280 [ 1146.613531] ? __pfx_do_pwritev+0x10/0x10 [ 1146.613548] ? find_held_lock+0x2b/0x80 [ 1146.613564] ? syscall_trace_enter+0x1cf/0x230 [ 1146.613581] __x64_sys_pwritev2+0xef/0x160 [ 1146.613595] do_syscall_64+0xbf/0x420 [ 1146.613611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.613624] RIP: 0033:0x7f9d93406b19 [ 1146.613633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1146.613645] RSP: 002b:00007f9d9097c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1146.613657] RAX: ffffffffffffffda RBX: 00007f9d93519f60 RCX: 00007f9d93406b19 [ 1146.613665] RDX: 000000000000000a RSI: 0000000020000080 RDI: 0000000000000004 [ 1146.613672] RBP: 00007f9d9097c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1146.613679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1146.613686] R13: 00007ffc9fadb4bf R14: 00007f9d9097c300 R15: 0000000000022000 [ 1146.613704] [ 1146.701350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1146.701861] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1146.708149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1146.708609] I/O error, dev sr0, sector 2087 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1152.610824] kmemleak: 54 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 1164.546364] kmemleak: 113 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff888013f9ff00 (size 184): comm "kworker/u9:2", pid 7494, jiffies 4295804419 hex dump (first 32 bytes): 00 40 f4 13 80 88 ff ff 00 00 00 00 00 00 00 00 .@.............. 01 00 90 00 80 00 04 40 00 00 0a 00 01 00 00 00 .......@........ backtrace (crc c2b91a36): kmem_cache_alloc_noprof+0x48f/0x760 mempool_alloc_noprof+0x1b3/0x300 bio_alloc_bioset+0x3f1/0x8f0 submit_bh_wbc+0x286/0x720 __block_write_full_folio+0x723/0xde0 block_write_full_folio+0x2d0/0x390 blkdev_writepages+0x96/0x120 do_writepages+0x244/0x5c0 __writeback_single_inode+0x104/0x1220 writeback_sb_inodes+0x6c1/0x1a70 __writeback_inodes_wb+0xbe/0x270 wb_writeback+0x62d/0x9b0 wb_workfn+0x6cf/0xd90 process_one_work+0x8e1/0x1960 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 BUG: memory leak unreferenced object 0xffff888013f44000 (size 184): comm "kworker/u9:2", pid 7494, jiffies 4295804419 hex dump (first 32 bytes): 00 41 f4 13 80 88 ff ff 00 00 00 00 00 00 00 00 .A.............. 01 00 90 00 80 00 04 40 00 00 0a 00 01 00 00 00 .......@........ backtrace (crc d0d68e9b): kmem_cache_alloc_noprof+0x48f/0x760 mempool_alloc_noprof+0x1b3/0x300 bio_alloc_bioset+0x3f1/0x8f0 submit_bh_wbc+0x286/0x720 __block_write_full_folio+0x723/0xde0 block_write_full_folio+0x2d0/0x390 blkdev_writepages+0x96/0x120 do_writepages+0x244/0x5c0 __writeback_single_inode+0x104/0x1220 writeback_sb_inodes+0x6c1/0x1a70 __writeback_inodes_wb+0xbe/0x270 wb_writeback+0x62d/0x9b0 wb_workfn+0x6cf/0xd90 process_one_work+0x8e1/0x1960 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 BUG: memory leak unreferenced object 0xffff888013f44100 (size 184): comm "kworker/u9:2", pid 7494, jiffies 4295804419 hex dump (first 32 bytes): 00 42 f4 13 80 88 ff ff 00 00 00 00 00 00 00 00 .B.............. 01 00 90 00 80 00 04 40 00 00 0a 00 01 00 00 00 .......@........ backtrace (crc 363a2d54): kmem_cache_alloc_noprof+0x48f/0x760 mempool_alloc_noprof+0x1b3/0x300 bio_alloc_bioset+0x3f1/0x8f0 submit_bh_wbc+0x286/0x720 __block_write_full_folio+0x723/0xde0 block_write_full_folio+0x2d0/0x390 blkdev_writepages+0x96/0x120 do_writepages+0x244/0x5c0 __writeback_single_inode+0x104/0x1220 writeback_sb_inodes+0x6c1/0x1a70 __writeback_inodes_wb+0xbe/0x270 wb_writeback+0x62d/0x9b0 wb_workfn+0x6cf/0xd90 process_one_work+0x8e1/0x1960 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 BUG: memory leak unreferenced object 0xffff888013f44200 (size 184): comm "kworker/u9:2", pid 7494, jiffies 4295804419 hex dump (first 32 bytes): 00 43 f4 13 80 88 ff ff 00 00 00 00 00 00 00 00 .C.............. 01 00 90 00 80 00 04 40 00 00 0a 00 01 00 00 00 .......@........ backtrace (crc 9a1d5d36): kmem_cache_alloc_noprof+0x48f/0x760 mempool_alloc_noprof+0x1b3/0x300 bio_alloc_bioset+0x3f1/0x8f0 submit_bh_wbc+0x286/0x720 __block_write_full_folio+0x723/0xde0 block_write_full_folio+0x2d0/0x390 blkdev_writepages+0x96/0x120 do_writepages+0x244/0x5c0 __writeback_single_inode+0x104/0x1220 writeback_sb_inodes+0x6c1/0x1a70 __writeback_inodes_wb+0xbe/0x270 wb_writeback+0x62d/0x9b0 wb_workfn+0x6cf/0xd90 process_one_work+0x8e1/0x1960 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 BUG: leak checking failed VM DIAGNOSIS: 20:11:55 Registers: info registers vcpu 0 RAX=0000000000320ec3 RBX=0000000000000000 RCX=ffffffff84cba997 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814d37e0 RBP=dffffc0000000000 RSP=ffffffff85c07e00 R8 =0000000000000001 R9 =ffffed100d9c63da R10=ffff88806ce31ed3 R11=0000000000000001 R12=ffffffff86664750 R13=1ffffffff0b80fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84cb939e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e535c000 00000000 00000000 LDT=0000 fffffe2c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe5ad21000 CR3=0000000013854000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=2934383120657a697328203030666639 XMM03=39343720646970202c22323a39752f72 XMM04=203130202020200a2e2e2e2e2e2e2e2e XMM05=30302030302030302030302030302030 XMM06=203466203034203030202020200a3a29 XMM07=706d75642078656820200a3931343430 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000082951b RBX=0000000000000001 RCX=ffffffff84cba997 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814d37e0 RBP=dffffc0000000000 RSP=ffff8880096efe58 R8 =0000000000000001 R9 =ffffed100d9e63da R10=ffff88806cf31ed3 R11=0000000000000001 R12=ffffffff86664750 R13=1ffff110012ddfd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84cb9380 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e545c000 00000000 00000000 LDT=0000 fffffe2f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcfe5ea29b8 CR3=000000000e9fe000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004184227640000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000