0xac, 0xff) 18:19:43 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0xf08]}, 0x8) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000140)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r1, &(0x7f0000000000)=""/188, 0xbc, 0x800000ff) 18:19:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x0, &(0x7f0000000000)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r1, 0x4, &(0x7f00000017c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x81, r2, &(0x7f0000001440)="11ea0a2b02ab7b150bbe64dca1d9e5fdac5a4503625e367a58d24d6522f36a35bb185afe5832e25f84b9c967fb886668800872887b609261d782cb850c28c6a12c8874381a148b5090c72294f398877fd3e21cc24ce5d5221e82901f91fe82cf61416556526ce86610ff6ac1f0b1a17e6ea07a76fe49980ddea191528c1219305d56ed4efa9158178f19e4a12074f9e5c600c1af0b1dd9be0f9f5343dacb9d42edf1db91dd7bad9889ac5fcb0af0c8ee0e9b81bd84d1014b2fca97d9fc80dd6f73e062bf2dcd0ae12e9c0dab83c7847825c26a2745e21bd05fa9d7a882881eae5d7825ecb4", 0xe5, 0x3ff}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f0000000280)="ebe9143f59e3065f5ca302f5f42a78081c594c05b54737fe6ba3f8f7d595a402d3cfcbc730e29be65fec3b4c5dd01667c26a1ea788424c6cd890295deab1287c435092a495b4ad3b2b31b81a782b1a5570ac6a1114069415d9836194", 0x5c, 0x5}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000001580)="1ae63aa5360812b5cc29c6e840c502a96fbf4991524d7128dcc5c7b6127116ca44105b36c5f8ed501c1e63855a2b953757fbe201c5b9e9a456ee6f407eb0b4a6d879f5701aca45fa84e10800c5c3948cb0132252669344d2567cac9bc4ec464fdd43736a14d9336bf35355ad5c9903e3a995e326f489d6fe677b69d0b8aed8e7cab23ab7de1fc54b9a7c28eb5b70", 0x8e, 0x3, 0x0, 0x2}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000001680)="d8e77f9584e975c554d16cd5426c24b5c3d62e8ac52dc4e65a5ee9864076f83fd709ef643a95774a56472bcd1e85665c3fdc8f8c97fe7c0a5a161747fba0503dcceefc7e9a96e6c6569e80dae1dc107829ab106d5007bfa578be40143e376b801dabb74a83bba1327cbf73daf942cba7071897a72c7c43a68f31b35ba774d781da312b21e61ebb5b4fedfebba19689c4bb37825f6ccdfe57f1a65acd8d28fb08ab2d8e66b72effcfb06183eee59ec008a54ad246ea4d3b2b98fae66540faf5d1844649033237681646ad443a9fbb1664738fc7aecb418f9647d57cf8", 0xdc, 0x40, 0x0, 0x2}]) 18:19:43 executing program 5: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:19:57 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000500000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:19:57 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8900, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x5, 0x80000000}}, './file0\x00'}) sendfile(r0, r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}]}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x60055220}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001b7dc4e67a1c409b170d0063f1cc6db628d32125c46daf42fa10d4abe807feb5a0f04702cfb5fad63e24f5e52d8d33fb5304378c6ebdbb239fb11d16309c738218e798c48bc0bee18c9ef61c5b6dfbed0ff6973a85b1e2d583b64833a7196122f0251eb4fcdb279adce88afe8d37ca94b67f55fd59e16f626206e6dd2480767bd5fd634137ae1ab41eee0f3a2cf1399cec8a008279ad1c50e8e82d860eec987e6ca531f561316337766fb2948e08f070b971fe6f7ae1b662057421825e", @ANYRES16=0x0, @ANYBLOB="000029bd7000fddbdf256000000008000300a8587cb1e5bb04d88903f4e6580f766788d7748e8439739c0ae99bfcad26b01163066551736a54e581625f7f93c15c165ef36ef6bf0123f884bdc833d016f3696bfd00e86951976d1d1e86c21d6a75d0ed404bbc6219350b831f2f14db831474272522045f1377ec1d7d02fedbd592cce562e055913de87c13f08e340ea0f7fd40a22937b6c55a4485695eb2a6959f528b670a86816d22f2f50aa80b373ab52e0800a301302fdeedca47720edfb5e6ac5eac014c571dca031a18a670122740db67168406a7d8b38293ee3797f2c3ce21a1d3f56010646d0dab5cc5084dde0f73", @ANYRES32=r5, @ANYBLOB="2ad569814d97f4f459dd63ee64e038dff8782eea5ad598ab9895b3f3fc935de312acd1f7e3f8417a73bc835691ae449eae03c444c45f55e6a2bf9e9769e0786f557560b1d92d159396c0d2494a86d053181fb45d6b0e96426ebcae95f4adec48d846582d1ce99dfa313b2aa3c5cd30d30d0b1a33a4f6f5ab5e6a5f4c04a39b95fb18adbe3a4575070f2da848aaed0e42b9e157035fc45a014c73f116536ac1db533e5e3be6c96a0f57aa0ea139967fa9572898e51036d996b1af9f9ad1f907f2bf513e63d1c2e29aa7393bdf6aeacbbd65652f33d87d52be262e965d369cd4f45219e6cb3bd7aa0597fcdfdad8ca28"], 0x40}, 0x1, 0x0, 0x0, 0x1e6aa3efac1ecee}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='pagemap\x00') pread64(r6, 0x0, 0x0, 0xff) 18:19:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r0, &(0x7f0000000000)=""/169, 0xa9, 0xff) 18:19:57 executing program 0: signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0xf08]}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r0, &(0x7f0000000000)=""/188, 0xbc, 0x800000ff) 18:19:57 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0, 0x4000}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:19:57 executing program 5: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:19:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x0, &(0x7f0000000000)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r1, 0x4, &(0x7f00000017c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x81, r2, &(0x7f0000001440)="11ea0a2b02ab7b150bbe64dca1d9e5fdac5a4503625e367a58d24d6522f36a35bb185afe5832e25f84b9c967fb886668800872887b609261d782cb850c28c6a12c8874381a148b5090c72294f398877fd3e21cc24ce5d5221e82901f91fe82cf61416556526ce86610ff6ac1f0b1a17e6ea07a76fe49980ddea191528c1219305d56ed4efa9158178f19e4a12074f9e5c600c1af0b1dd9be0f9f5343dacb9d42edf1db91dd7bad9889ac5fcb0af0c8ee0e9b81bd84d1014b2fca97d9fc80dd6f73e062bf2dcd0ae12e9c0dab83c7847825c26a2745e21bd05fa9d7a882881eae5d7825ecb4", 0xe5, 0x3ff}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f0000000280)="ebe9143f59e3065f5ca302f5f42a78081c594c05b54737fe6ba3f8f7d595a402d3cfcbc730e29be65fec3b4c5dd01667c26a1ea788424c6cd890295deab1287c435092a495b4ad3b2b31b81a782b1a5570ac6a1114069415d9836194", 0x5c, 0x5}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000001580)="1ae63aa5360812b5cc29c6e840c502a96fbf4991524d7128dcc5c7b6127116ca44105b36c5f8ed501c1e63855a2b953757fbe201c5b9e9a456ee6f407eb0b4a6d879f5701aca45fa84e10800c5c3948cb0132252669344d2567cac9bc4ec464fdd43736a14d9336bf35355ad5c9903e3a995e326f489d6fe677b69d0b8aed8e7cab23ab7de1fc54b9a7c28eb5b70", 0x8e, 0x3, 0x0, 0x2}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000001680)="d8e77f9584e975c554d16cd5426c24b5c3d62e8ac52dc4e65a5ee9864076f83fd709ef643a95774a56472bcd1e85665c3fdc8f8c97fe7c0a5a161747fba0503dcceefc7e9a96e6c6569e80dae1dc107829ab106d5007bfa578be40143e376b801dabb74a83bba1327cbf73daf942cba7071897a72c7c43a68f31b35ba774d781da312b21e61ebb5b4fedfebba19689c4bb37825f6ccdfe57f1a65acd8d28fb08ab2d8e66b72effcfb06183eee59ec008a54ad246ea4d3b2b98fae66540faf5d1844649033237681646ad443a9fbb1664738fc7aecb418f9647d57cf8", 0xdc, 0x40, 0x0, 0x2}]) 18:19:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030000"], 0x125) 18:19:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x0, &(0x7f0000000000)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r1, 0x4, &(0x7f00000017c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x81, r2, &(0x7f0000001440)="11ea0a2b02ab7b150bbe64dca1d9e5fdac5a4503625e367a58d24d6522f36a35bb185afe5832e25f84b9c967fb886668800872887b609261d782cb850c28c6a12c8874381a148b5090c72294f398877fd3e21cc24ce5d5221e82901f91fe82cf61416556526ce86610ff6ac1f0b1a17e6ea07a76fe49980ddea191528c1219305d56ed4efa9158178f19e4a12074f9e5c600c1af0b1dd9be0f9f5343dacb9d42edf1db91dd7bad9889ac5fcb0af0c8ee0e9b81bd84d1014b2fca97d9fc80dd6f73e062bf2dcd0ae12e9c0dab83c7847825c26a2745e21bd05fa9d7a882881eae5d7825ecb4", 0xe5, 0x3ff}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f0000000280)="ebe9143f59e3065f5ca302f5f42a78081c594c05b54737fe6ba3f8f7d595a402d3cfcbc730e29be65fec3b4c5dd01667c26a1ea788424c6cd890295deab1287c435092a495b4ad3b2b31b81a782b1a5570ac6a1114069415d9836194", 0x5c, 0x5}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000001580)="1ae63aa5360812b5cc29c6e840c502a96fbf4991524d7128dcc5c7b6127116ca44105b36c5f8ed501c1e63855a2b953757fbe201c5b9e9a456ee6f407eb0b4a6d879f5701aca45fa84e10800c5c3948cb0132252669344d2567cac9bc4ec464fdd43736a14d9336bf35355ad5c9903e3a995e326f489d6fe677b69d0b8aed8e7cab23ab7de1fc54b9a7c28eb5b70", 0x8e, 0x3, 0x0, 0x2}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000001680)="d8e77f9584e975c554d16cd5426c24b5c3d62e8ac52dc4e65a5ee9864076f83fd709ef643a95774a56472bcd1e85665c3fdc8f8c97fe7c0a5a161747fba0503dcceefc7e9a96e6c6569e80dae1dc107829ab106d5007bfa578be40143e376b801dabb74a83bba1327cbf73daf942cba7071897a72c7c43a68f31b35ba774d781da312b21e61ebb5b4fedfebba19689c4bb37825f6ccdfe57f1a65acd8d28fb08ab2d8e66b72effcfb06183eee59ec008a54ad246ea4d3b2b98fae66540faf5d1844649033237681646ad443a9fbb1664738fc7aecb418f9647d57cf8", 0xdc, 0x40, 0x0, 0x2}]) 18:19:57 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x80000000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) memfd_secret(0x0) pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0xff) [ 1633.665824] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1633.665824] program syz-executor.6 not setting count and/or reply_len properly [ 1633.713923] sg_write: data in/out 134233564/251 bytes for SCSI command 0x0-- guessing data in; [ 1633.713923] program syz-executor.2 not setting count and/or reply_len properly 18:19:57 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600300500000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 1633.842824] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1633.842824] program syz-executor.6 not setting count and/or reply_len properly 18:20:08 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:20:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x4, &(0x7f00000017c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x81, r1, &(0x7f0000001440)="11ea0a2b02ab7b150bbe64dca1d9e5fdac5a4503625e367a58d24d6522f36a35bb185afe5832e25f84b9c967fb886668800872887b609261d782cb850c28c6a12c8874381a148b5090c72294f398877fd3e21cc24ce5d5221e82901f91fe82cf61416556526ce86610ff6ac1f0b1a17e6ea07a76fe49980ddea191528c1219305d56ed4efa9158178f19e4a12074f9e5c600c1af0b1dd9be0f9f5343dacb9d42edf1db91dd7bad9889ac5fcb0af0c8ee0e9b81bd84d1014b2fca97d9fc80dd6f73e062bf2dcd0ae12e9c0dab83c7847825c26a2745e21bd05fa9d7a882881eae5d7825ecb4", 0xe5, 0x3ff}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f0000000280)="ebe9143f59e3065f5ca302f5f42a78081c594c05b54737fe6ba3f8f7d595a402d3cfcbc730e29be65fec3b4c5dd01667c26a1ea788424c6cd890295deab1287c435092a495b4ad3b2b31b81a782b1a5570ac6a1114069415d9836194", 0x5c, 0x5}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000001580)="1ae63aa5360812b5cc29c6e840c502a96fbf4991524d7128dcc5c7b6127116ca44105b36c5f8ed501c1e63855a2b953757fbe201c5b9e9a456ee6f407eb0b4a6d879f5701aca45fa84e10800c5c3948cb0132252669344d2567cac9bc4ec464fdd43736a14d9336bf35355ad5c9903e3a995e326f489d6fe677b69d0b8aed8e7cab23ab7de1fc54b9a7c28eb5b70", 0x8e, 0x3, 0x0, 0x2}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000001680)="d8e77f9584e975c554d16cd5426c24b5c3d62e8ac52dc4e65a5ee9864076f83fd709ef643a95774a56472bcd1e85665c3fdc8f8c97fe7c0a5a161747fba0503dcceefc7e9a96e6c6569e80dae1dc107829ab106d5007bfa578be40143e376b801dabb74a83bba1327cbf73daf942cba7071897a72c7c43a68f31b35ba774d781da312b21e61ebb5b4fedfebba19689c4bb37825f6ccdfe57f1a65acd8d28fb08ab2d8e66b72effcfb06183eee59ec008a54ad246ea4d3b2b98fae66540faf5d1844649033237681646ad443a9fbb1664738fc7aecb418f9647d57cf8", 0xdc, 0x40, 0x0, 0x2}]) 18:20:08 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') pread64(r0, 0x0, 0x0, 0xff) 18:20:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030000"], 0x125) 18:20:08 executing program 4: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(0x0, &(0x7f0000003240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x20100000, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100), 0x0, 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x4) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x2d5d90490448afe6) syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) pread64(r1, &(0x7f0000000000)=""/173, 0xd2, 0xff) 18:20:08 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000600000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:20:08 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r0, &(0x7f0000000000)=""/188, 0xbc, 0x800000ff) 18:20:08 executing program 5: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 1644.652326] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1644.652326] program syz-executor.6 not setting count and/or reply_len properly 18:20:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x4, &(0x7f00000017c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x81, r1, &(0x7f0000001440)="11ea0a2b02ab7b150bbe64dca1d9e5fdac5a4503625e367a58d24d6522f36a35bb185afe5832e25f84b9c967fb886668800872887b609261d782cb850c28c6a12c8874381a148b5090c72294f398877fd3e21cc24ce5d5221e82901f91fe82cf61416556526ce86610ff6ac1f0b1a17e6ea07a76fe49980ddea191528c1219305d56ed4efa9158178f19e4a12074f9e5c600c1af0b1dd9be0f9f5343dacb9d42edf1db91dd7bad9889ac5fcb0af0c8ee0e9b81bd84d1014b2fca97d9fc80dd6f73e062bf2dcd0ae12e9c0dab83c7847825c26a2745e21bd05fa9d7a882881eae5d7825ecb4", 0xe5, 0x3ff}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f0000000280)="ebe9143f59e3065f5ca302f5f42a78081c594c05b54737fe6ba3f8f7d595a402d3cfcbc730e29be65fec3b4c5dd01667c26a1ea788424c6cd890295deab1287c435092a495b4ad3b2b31b81a782b1a5570ac6a1114069415d9836194", 0x5c, 0x5}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000001580)="1ae63aa5360812b5cc29c6e840c502a96fbf4991524d7128dcc5c7b6127116ca44105b36c5f8ed501c1e63855a2b953757fbe201c5b9e9a456ee6f407eb0b4a6d879f5701aca45fa84e10800c5c3948cb0132252669344d2567cac9bc4ec464fdd43736a14d9336bf35355ad5c9903e3a995e326f489d6fe677b69d0b8aed8e7cab23ab7de1fc54b9a7c28eb5b70", 0x8e, 0x3, 0x0, 0x2}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000001680)="d8e77f9584e975c554d16cd5426c24b5c3d62e8ac52dc4e65a5ee9864076f83fd709ef643a95774a56472bcd1e85665c3fdc8f8c97fe7c0a5a161747fba0503dcceefc7e9a96e6c6569e80dae1dc107829ab106d5007bfa578be40143e376b801dabb74a83bba1327cbf73daf942cba7071897a72c7c43a68f31b35ba774d781da312b21e61ebb5b4fedfebba19689c4bb37825f6ccdfe57f1a65acd8d28fb08ab2d8e66b72effcfb06183eee59ec008a54ad246ea4d3b2b98fae66540faf5d1844649033237681646ad443a9fbb1664738fc7aecb418f9647d57cf8", 0xdc, 0x40, 0x0, 0x2}]) 18:20:08 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000700000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 1644.739171] sg_write: data in/out 134233564/251 bytes for SCSI command 0x0-- guessing data in; [ 1644.739171] program syz-executor.2 not setting count and/or reply_len properly 18:20:08 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0, 0x0, 0x3}, {r1}], 0x2, 0x0, 0x0, 0x0) [ 1644.800639] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1644.800639] program syz-executor.6 not setting count and/or reply_len properly 18:20:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030000000000664c95d3633d"], 0x125) 18:20:08 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600053000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:20:08 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r0, &(0x7f0000000000)=""/188, 0xbc, 0x800000ff) 18:20:08 executing program 7: perf_event_open(&(0x7f0000000040)={0x3, 0xbd, 0x6, 0x7d, 0x1f, 0x4, 0x0, 0x8, 0x40000, 0xf, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x51, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x2841, 0x100000000, 0x4, 0x9, 0x7d63, 0x0, 0xff, 0x0, 0x1ff, 0x0, 0xffff}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0xfffffffffffffff1, 0x200) 18:20:08 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0x9, 0x7f, 0x1, 0x0, 0x20000000, 0x30, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000440)}, 0x8002, 0x0, 0x5, 0x2, 0xfffffffffffffe01, 0x9193, 0x7, 0x0, 0xe77, 0x0, 0x3ff}, 0xffffffffffffffff, 0x5, r0, 0x19) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r1, 0x8, 0x6, 0x7}) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000540)) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/190, 0xbe}, {&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000340)=""/98, 0x62}], 0x5, 0x4, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000580)={0x0, 0x0, "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", "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"}) 18:20:08 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0, 0x0, 0x8}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:20:08 executing program 4: pread64(0xffffffffffffffff, &(0x7f0000000000)=""/172, 0xac, 0xff) [ 1644.935533] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1644.935533] program syz-executor.6 not setting count and/or reply_len properly 18:20:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x4, &(0x7f00000017c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x81, r1, &(0x7f0000001440)="11ea0a2b02ab7b150bbe64dca1d9e5fdac5a4503625e367a58d24d6522f36a35bb185afe5832e25f84b9c967fb886668800872887b609261d782cb850c28c6a12c8874381a148b5090c72294f398877fd3e21cc24ce5d5221e82901f91fe82cf61416556526ce86610ff6ac1f0b1a17e6ea07a76fe49980ddea191528c1219305d56ed4efa9158178f19e4a12074f9e5c600c1af0b1dd9be0f9f5343dacb9d42edf1db91dd7bad9889ac5fcb0af0c8ee0e9b81bd84d1014b2fca97d9fc80dd6f73e062bf2dcd0ae12e9c0dab83c7847825c26a2745e21bd05fa9d7a882881eae5d7825ecb4", 0xe5, 0x3ff}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f0000000280)="ebe9143f59e3065f5ca302f5f42a78081c594c05b54737fe6ba3f8f7d595a402d3cfcbc730e29be65fec3b4c5dd01667c26a1ea788424c6cd890295deab1287c435092a495b4ad3b2b31b81a782b1a5570ac6a1114069415d9836194", 0x5c, 0x5}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000001580)="1ae63aa5360812b5cc29c6e840c502a96fbf4991524d7128dcc5c7b6127116ca44105b36c5f8ed501c1e63855a2b953757fbe201c5b9e9a456ee6f407eb0b4a6d879f5701aca45fa84e10800c5c3948cb0132252669344d2567cac9bc4ec464fdd43736a14d9336bf35355ad5c9903e3a995e326f489d6fe677b69d0b8aed8e7cab23ab7de1fc54b9a7c28eb5b70", 0x8e, 0x3, 0x0, 0x2}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000001680)="d8e77f9584e975c554d16cd5426c24b5c3d62e8ac52dc4e65a5ee9864076f83fd709ef643a95774a56472bcd1e85665c3fdc8f8c97fe7c0a5a161747fba0503dcceefc7e9a96e6c6569e80dae1dc107829ab106d5007bfa578be40143e376b801dabb74a83bba1327cbf73daf942cba7071897a72c7c43a68f31b35ba774d781da312b21e61ebb5b4fedfebba19689c4bb37825f6ccdfe57f1a65acd8d28fb08ab2d8e66b72effcfb06183eee59ec008a54ad246ea4d3b2b98fae66540faf5d1844649033237681646ad443a9fbb1664738fc7aecb418f9647d57cf8", 0xdc, 0x40, 0x0, 0x2}]) 18:20:08 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600004800000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 1645.062934] sg_write: data in/out 134233564/251 bytes for SCSI command 0x0-- guessing data in; [ 1645.062934] program syz-executor.2 not setting count and/or reply_len properly 18:20:08 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0, 0x0, 0x300}, {r1}], 0x2, 0x0, 0x0, 0x0) [ 1645.099449] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1645.099449] program syz-executor.6 not setting count and/or reply_len properly 18:20:08 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x152c, 0x2c, 0x200, 0x70bd26, 0x25dfdbfe, {0x4}, [@nested={0x2c, 0x2b, 0x0, 0x1, [@generic="16ef7063b99f2c9939bfcfd98faa04f6488b58f9e792a8903c85b56b6b48cc3f", @typed={0x8, 0x83, 0x0, 0x0, @ipv4=@remote}]}, @typed={0x4, 0x8}, @generic="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", @nested={0x4, 0x5}, @nested={0x90, 0x93, 0x0, 0x1, [@typed={0x8, 0x96, 0x0, 0x0, @pid=r0}, @typed={0x4, 0x88}, @generic="4d5031be01e33a5297e277347974a20062b9590d29e90b0c533a555d6547de4a0727e1c3c21dbc1858c27e312a18e218a0d10dd3950fa00731795f9529c121d6baf71e6a690f9a58a9797d20986026f2baabec95659882937abaff5a91ba2703645844d490e8602dc19584bdf6824fcb3e39533e97abaf16", @typed={0x8, 0x23, 0x0, 0x0, @fd=r1}]}, @typed={0x8, 0x8e, 0x0, 0x0, @uid=r2}, @typed={0x6e, 0x39, 0x0, 0x0, @binary="b477435f9d69b6f05c729d4a5245c942b4fbbeda85fbe141885a74c7508c218aceb2ab5a786bf18ace33cb23f52d5d7d53b6bc31e4a972d55d06378a49239f2f7bdc418e60c1ee46c3be1b234c8820569a1b9a9f66f99aa070acb0607e683caecdeb939cb0a601eb610f"}, @nested={0x1c8, 0x6a, 0x0, 0x1, [@typed={0x14, 0x35, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="349b6f43a6d96d6b21221e0de0761164d44115301b88ef434a25ee4fca06bf61bbb0759870104552eafe36d454", @typed={0x8, 0x86, 0x0, 0x0, @ipv4=@empty}, @generic="8825039b1c0bdb33e2313698f9e6d721f62d983049e49d06", @generic="b15b7b62274057155d9c53a678aa76cb75382e50877d0870981591265787b8484c83a0d4769843bd108d7ff8679e1ce65dbd7012b8bb0678b99873ea4537977472fb35ce8aa8ace6df2854f86388ee4b06d1c62d492093d3e0fe21bfd3ee661b5c38942c0293abaa73a4379dc3f4f5857d37e6cf610ae22bc80e37ca8653d067d810ae3e91ea02bb9e", @generic="2d82a541239abc67b9e2a53274b310836ffdc189e6d0d9cb2ba192ddd480541fdd7407051c31b1ac33485cd7dec1f3fa7ccad8fec178831a306597d13857c8d9fb9b0e636e3bae06c9f7c449a9ad8531d18329491d4a79d1ae8eba0669845fc4b6ed3d7fdae29eca81fb2fdb60aaaf6e1134ba17354599f4988c975c36978dcf516ffb9df52bcc0bdfc0595fd96010a6859ee2c62c7cb547923e133c1107e00c9216adc8198cd3a9b8607c93869398d4cad480347c8940a0", @typed={0x1a, 0x3, 0x0, 0x0, @binary="40116bf1ad81a5ff52a3a09ae64af2e3b20a7f0343ea"}, @generic="08097ebda35a"]}, @nested={0x1b4, 0x5d, 0x0, 0x1, [@typed={0xc, 0xb, 0x0, 0x0, @str='cmdline\x00'}, @generic="b2583a8fdc28310d64", @typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x23, 0x0, 0x0, @ipv4=@multicast1}, @generic="616cd5c9f462f570c75794e5f8345c0f941b30d29862e82fcb90e3ff0de625b46c974cb5655a9dbeeacd8a7207e4912267", @generic="98", @typed={0x14, 0x31, 0x0, 0x0, @ipv6=@remote}, @generic="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", @generic="8fc55d1f89e84ef8750e44ef746633ecfb8f2d1e03f696bcedea649ebc72940c6cdfd553f951a859f83dce7a9622e4139a302a68a0bba72c40e0007f2afc", @typed={0x8, 0x1e, 0x0, 0x0, @pid}]}, @generic="0080007113405ec757f9ee2e7a929afadf01eefad828043fc653538a647063ad4ccfb6272342e5d228ec4694876c2faf5d17b83b886b5713eee728868afe3d9487a194cd3285795c4c7110e6974e2938b94fb19136155c327096a4575e91"]}, 0x152c}, 0x1, 0x0, 0x0, 0x80}, 0x81) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r3, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:20:09 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600004c00000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:20:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x4, &(0x7f00000017c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x81, r1, &(0x7f0000001440)="11ea0a2b02ab7b150bbe64dca1d9e5fdac5a4503625e367a58d24d6522f36a35bb185afe5832e25f84b9c967fb886668800872887b609261d782cb850c28c6a12c8874381a148b5090c72294f398877fd3e21cc24ce5d5221e82901f91fe82cf61416556526ce86610ff6ac1f0b1a17e6ea07a76fe49980ddea191528c1219305d56ed4efa9158178f19e4a12074f9e5c600c1af0b1dd9be0f9f5343dacb9d42edf1db91dd7bad9889ac5fcb0af0c8ee0e9b81bd84d1014b2fca97d9fc80dd6f73e062bf2dcd0ae12e9c0dab83c7847825c26a2745e21bd05fa9d7a882881eae5d7825ecb4", 0xe5, 0x3ff}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f0000000280)="ebe9143f59e3065f5ca302f5f42a78081c594c05b54737fe6ba3f8f7d595a402d3cfcbc730e29be65fec3b4c5dd01667c26a1ea788424c6cd890295deab1287c435092a495b4ad3b2b31b81a782b1a5570ac6a1114069415d9836194", 0x5c, 0x5}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000001580)="1ae63aa5360812b5cc29c6e840c502a96fbf4991524d7128dcc5c7b6127116ca44105b36c5f8ed501c1e63855a2b953757fbe201c5b9e9a456ee6f407eb0b4a6d879f5701aca45fa84e10800c5c3948cb0132252669344d2567cac9bc4ec464fdd43736a14d9336bf35355ad5c9903e3a995e326f489d6fe677b69d0b8aed8e7cab23ab7de1fc54b9a7c28eb5b70", 0x8e, 0x3, 0x0, 0x2}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000001680)="d8e77f9584e975c554d16cd5426c24b5c3d62e8ac52dc4e65a5ee9864076f83fd709ef643a95774a56472bcd1e85665c3fdc8f8c97fe7c0a5a161747fba0503dcceefc7e9a96e6c6569e80dae1dc107829ab106d5007bfa578be40143e376b801dabb74a83bba1327cbf73daf942cba7071897a72c7c43a68f31b35ba774d781da312b21e61ebb5b4fedfebba19689c4bb37825f6ccdfe57f1a65acd8d28fb08ab2d8e66b72effcfb06183eee59ec008a54ad246ea4d3b2b98fae66540faf5d1844649033237681646ad443a9fbb1664738fc7aecb418f9647d57cf8", 0xdc, 0x40, 0x0, 0x2}]) [ 1645.285473] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1645.285473] program syz-executor.6 not setting count and/or reply_len properly 18:20:19 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r0, &(0x7f0000000000)=""/188, 0xbc, 0x800000ff) 18:20:19 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600006800000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:20:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030000000000664c95d3633d"], 0x125) 18:20:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0x9, 0x7f, 0x1, 0x0, 0x20000000, 0x30, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000440)}, 0x8002, 0x0, 0x5, 0x2, 0xfffffffffffffe01, 0x9193, 0x7, 0x0, 0xe77, 0x0, 0x3ff}, 0xffffffffffffffff, 0x5, r0, 0x19) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r1, 0x8, 0x6, 0x7}) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000540)) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/190, 0xbe}, {&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000340)=""/98, 0x62}], 0x5, 0x4, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000580)={0x0, 0x0, "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", "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"}) 18:20:19 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0, 0x0, 0x4000}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:20:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r0, &(0x7f00000000c0)=""/153, 0xffffffffffffff17, 0xfc) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x95, 0xc00) dup3(r1, r0, 0x80000) 18:20:19 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000340)={0x0, 0x2, 0x7f}) 18:20:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x4, &(0x7f00000017c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x81, r1, &(0x7f0000001440)="11ea0a2b02ab7b150bbe64dca1d9e5fdac5a4503625e367a58d24d6522f36a35bb185afe5832e25f84b9c967fb886668800872887b609261d782cb850c28c6a12c8874381a148b5090c72294f398877fd3e21cc24ce5d5221e82901f91fe82cf61416556526ce86610ff6ac1f0b1a17e6ea07a76fe49980ddea191528c1219305d56ed4efa9158178f19e4a12074f9e5c600c1af0b1dd9be0f9f5343dacb9d42edf1db91dd7bad9889ac5fcb0af0c8ee0e9b81bd84d1014b2fca97d9fc80dd6f73e062bf2dcd0ae12e9c0dab83c7847825c26a2745e21bd05fa9d7a882881eae5d7825ecb4", 0xe5, 0x3ff}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f0000000280)="ebe9143f59e3065f5ca302f5f42a78081c594c05b54737fe6ba3f8f7d595a402d3cfcbc730e29be65fec3b4c5dd01667c26a1ea788424c6cd890295deab1287c435092a495b4ad3b2b31b81a782b1a5570ac6a1114069415d9836194", 0x5c, 0x5}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000001580)="1ae63aa5360812b5cc29c6e840c502a96fbf4991524d7128dcc5c7b6127116ca44105b36c5f8ed501c1e63855a2b953757fbe201c5b9e9a456ee6f407eb0b4a6d879f5701aca45fa84e10800c5c3948cb0132252669344d2567cac9bc4ec464fdd43736a14d9336bf35355ad5c9903e3a995e326f489d6fe677b69d0b8aed8e7cab23ab7de1fc54b9a7c28eb5b70", 0x8e, 0x3, 0x0, 0x2}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000001680)="d8e77f9584e975c554d16cd5426c24b5c3d62e8ac52dc4e65a5ee9864076f83fd709ef643a95774a56472bcd1e85665c3fdc8f8c97fe7c0a5a161747fba0503dcceefc7e9a96e6c6569e80dae1dc107829ab106d5007bfa578be40143e376b801dabb74a83bba1327cbf73daf942cba7071897a72c7c43a68f31b35ba774d781da312b21e61ebb5b4fedfebba19689c4bb37825f6ccdfe57f1a65acd8d28fb08ab2d8e66b72effcfb06183eee59ec008a54ad246ea4d3b2b98fae66540faf5d1844649033237681646ad443a9fbb1664738fc7aecb418f9647d57cf8", 0xdc, 0x40, 0x0, 0x2}]) [ 1656.255630] sg_write: data in/out 134233564/251 bytes for SCSI command 0x0-- guessing data in; [ 1656.255630] program syz-executor.2 not setting count and/or reply_len properly [ 1656.260563] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1656.260563] program syz-executor.6 not setting count and/or reply_len properly 18:20:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0x9, 0x7f, 0x1, 0x0, 0x20000000, 0x30, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000440)}, 0x8002, 0x0, 0x5, 0x2, 0xfffffffffffffe01, 0x9193, 0x7, 0x0, 0xe77, 0x0, 0x3ff}, 0xffffffffffffffff, 0x5, r0, 0x19) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r1, 0x8, 0x6, 0x7}) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000540)) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/190, 0xbe}, {&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000340)=""/98, 0x62}], 0x5, 0x4, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000580)={0x0, 0x0, "716d9f2f14d043659622d82497c3c2b334b313e3ec096aa1c364dde2b43d7be49e89be365da12a841bf395e6afce43586c16a34594ca4d3c243566be7ff0f28875e96f8a9d3c825476e3dda12e37ef85d07e9cab8deb322490df0f40c99efa4e824b87b01e5734535f08799e2ca8c81b2b6d66a2faea2bb25d48d767927255ba601016ec418d1ec80b4cd6ae7825e0f49cdef1ea27b2ac5a02b60509e751bb6b4ce2069bbb93b9caaa4d22bfa5b55ef56f0f00a367110c66c78c413ee39fa32881a312fc08ca2120712bc114f6e4553a6fa6232b64ac5b3b6a91875320da8d4f693758a2f8f27e142eb6f394e821d4ed5b3067c07fd954ea03ffba27aff7700d", "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"}) 18:20:31 executing program 7: gettid() r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x0, 0x3, 0x3f, 0x0, 0x1ff, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x12c00, 0x100000000, 0x5, 0x2, 0x5, 0x400, 0x0, 0x0, 0xfff, 0x0, 0xab6}, r1, 0x7, r0, 0x1) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000380)={0x222, 0x0, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/ip6_flowlabel\x00') ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xff, 0x40, 0xf7, 0x7, 0x0, 0x4, 0x2120, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x40, 0x3429820f}, 0x10000, 0x5, 0x1, 0x1, 0x5, 0x5, 0xbe, 0x0, 0x80000000, 0x0, 0x200}, r1, 0x10, 0xffffffffffffffff, 0x8) pread64(r2, 0x0, 0x0, 0xff) 18:20:31 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:20:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030000000000664c95d3633d"], 0x125) 18:20:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x10) 18:20:31 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r0, &(0x7f0000000000)=""/188, 0xbc, 0x800000ff) 18:20:31 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600006c00000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:20:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x4, &(0x7f00000017c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x81, r1, &(0x7f0000001440)="11ea0a2b02ab7b150bbe64dca1d9e5fdac5a4503625e367a58d24d6522f36a35bb185afe5832e25f84b9c967fb886668800872887b609261d782cb850c28c6a12c8874381a148b5090c72294f398877fd3e21cc24ce5d5221e82901f91fe82cf61416556526ce86610ff6ac1f0b1a17e6ea07a76fe49980ddea191528c1219305d56ed4efa9158178f19e4a12074f9e5c600c1af0b1dd9be0f9f5343dacb9d42edf1db91dd7bad9889ac5fcb0af0c8ee0e9b81bd84d1014b2fca97d9fc80dd6f73e062bf2dcd0ae12e9c0dab83c7847825c26a2745e21bd05fa9d7a882881eae5d7825ecb4", 0xe5, 0x3ff}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f0000000280)="ebe9143f59e3065f5ca302f5f42a78081c594c05b54737fe6ba3f8f7d595a402d3cfcbc730e29be65fec3b4c5dd01667c26a1ea788424c6cd890295deab1287c435092a495b4ad3b2b31b81a782b1a5570ac6a1114069415d9836194", 0x5c, 0x5}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000001580)="1ae63aa5360812b5cc29c6e840c502a96fbf4991524d7128dcc5c7b6127116ca44105b36c5f8ed501c1e63855a2b953757fbe201c5b9e9a456ee6f407eb0b4a6d879f5701aca45fa84e10800c5c3948cb0132252669344d2567cac9bc4ec464fdd43736a14d9336bf35355ad5c9903e3a995e326f489d6fe677b69d0b8aed8e7cab23ab7de1fc54b9a7c28eb5b70", 0x8e, 0x3, 0x0, 0x2}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f0000001680)="d8e77f9584e975c554d16cd5426c24b5c3d62e8ac52dc4e65a5ee9864076f83fd709ef643a95774a56472bcd1e85665c3fdc8f8c97fe7c0a5a161747fba0503dcceefc7e9a96e6c6569e80dae1dc107829ab106d5007bfa578be40143e376b801dabb74a83bba1327cbf73daf942cba7071897a72c7c43a68f31b35ba774d781da312b21e61ebb5b4fedfebba19689c4bb37825f6ccdfe57f1a65acd8d28fb08ab2d8e66b72effcfb06183eee59ec008a54ad246ea4d3b2b98fae66540faf5d1844649033237681646ad443a9fbb1664738fc7aecb418f9647d57cf8", 0xdc, 0x40, 0x0, 0x2}]) 18:20:31 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1, 0x3}], 0x2, 0x0, 0x0, 0x0) [ 1668.044076] sg_write: data in/out 134233564/251 bytes for SCSI command 0x0-- guessing data in; [ 1668.044076] program syz-executor.2 not setting count and/or reply_len properly [ 1668.046345] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1668.046345] program syz-executor.6 not setting count and/or reply_len properly 18:20:31 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/188, 0xbc, 0x800000ff) 18:20:31 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001140)=""/4094, 0xffe) getdents(r1, 0x0, 0x0) r2 = accept4$unix(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x80800) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:20:31 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x0, 0x0) 18:20:31 executing program 7: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x20082000) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={r0, 0xaa, 0x4d}, &(0x7f0000000040)={'enc=', 'oaep', ' hash=', {'vmac64(des)\x00'}}, &(0x7f00000000c0)="4043954ed2764c47f43511c0ba86735dcc109cbdd6b4d65cfa5a677e651aabdc685e11d7a95e75ed494d2e1580ce83d4d7f45442be191a5b78cbce0820b09cfcc7c0e6d1d92b19dd68dd4df0f0f99ab80f91245c85724826f368eeb65121f7695849187f98e20da466f68e62e8e5f18476425c329e6f590c88887eef35d78b27e3da2f77fab70461f68fb8bc6f0f794715a09d21b019d73f087c2e305d28643514203811026aa9930a42", &(0x7f0000000180)=""/77) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r1, 0x0, 0x0, 0xff) 18:20:32 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600007400000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:20:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab0"], 0x125) 18:20:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0x9, 0x7f, 0x1, 0x0, 0x20000000, 0x30, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000440)}, 0x8002, 0x0, 0x5, 0x2, 0xfffffffffffffe01, 0x9193, 0x7, 0x0, 0xe77, 0x0, 0x3ff}, 0xffffffffffffffff, 0x5, r0, 0x19) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r1, 0x8, 0x6, 0x7}) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000540)) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/190, 0xbe}, {&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000340)=""/98, 0x62}], 0x5, 0x4, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) 18:20:32 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x0, 0x0) 18:20:32 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) tee(r0, r0, 0x7, 0xc) 18:20:32 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r1 = socket$inet6(0xa, 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x47f2c0525e0d6cf5) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0x2}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @multicast2}}}], 0x20}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003700)={{{@in6=@private2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000003800)=0xe8) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0x2}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @multicast2}}}], 0x20}, 0x0) sendmmsg$inet6(r2, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000080)="b8f5a71208fd90c34912da630288bc5a10ec1c1037480cd3d144757d1ec09ddb414a0419a203f53820889446ee70edbda78bd5b2012c3d743648059a95c90bdb32aa84e8d0f44f1c934da34f6c1dfb5250df4784b6d04daeb4219ce212b7401da6381dff0cc5f62c6079c27ae91c9f9dbfd770fe75ebafe3325441a8c790ff2ab5d7e63ec9e5a578c3bbf8ea230f510d0a4dba8d1def", 0x96}, {&(0x7f0000000200)="4267322635dd9a4034b81fe2989eaa7666edfca10d418497ee2789ba29908e524f0fdd947863cbc47e64b2cfb1ae3584c4b33e91044b685c5cd12370ddac1ff0c3be1bc3d11c46f57e90dd75c13451adbdb3d8310449b9ea73f34ffe3cf6b122f496dd5ca86d3fe11014f8bf9f8927d281738ff5d061d724e8306412f7b78bb5817aca6c3d43f75d60abd554b9bd803853b2d84b663815df09b576816ecd62e5d41e46c80ac41b6ff516939cacd0f1cfe34148dbb1", 0xb5}, {&(0x7f0000000140)="b50c7846834053c2640b49836c347ad7120589f5eb8c840dce76959883445f2a1e7ee24196b34e28c1bab28422fe894ea9a8ab80677aaf6697db1179cae746327ab034db5cc9e2d6f211b37f1baabd101023dcd3cc9fa4", 0x57}, {&(0x7f0000000340)="049b37a37eae6f5d10c015913fafa36b549d179c8e180416156d2e11495680e8993fcfa8fa9046a68e8b89e6dfad9afc77cfa869d4f628320401d605b41f59d970f05b1dc39bac1acbfb14bbf92860f939a6d5113ac5be13cc25ea05f80bc6b78d95e44400fd7adf4cf4e011151a596011d827be3c877320f5dc9d56b3e3038f6b773360468f1ffa56cfd711089659f80b9d9b4772bd4c356d76c65dfcb4f88977a598ea1229029534cfcd5974379cfbfabbfe4714a3fec71576d7468a669dc80ed13fc64466f3223cd201be5ec9834c9556365f85aa2e3721e536cfd4d6bc07a82272e0a614245ca9d7bedcb0f86c3170", 0xf1}, {&(0x7f0000000440)="1af1b76281282b785d3079427dd17a6efb9d5794d9ac217b54c6b5a004bbdc5549b7cb6f6ad6b741f1b9711e54703cb55b6689038b011d11449e9828af293ffa5ed2768470733001aa9ba5841f8620b67422b0b54ff3f934bbf7868cffa6cdf65df854cbfd639abe315f155d9b46e759a828ec48cdf6b57858481aa34b06f9b0097f622caffea31596dace97f21523901b99599690d389bc4776a11f533c947a55c51ffc6f17", 0xa6}, {&(0x7f0000000500)="c549322910e75432e5b19b33a96c787ff14bd6e52013d7cb223efb55d358f42bf5aa2cf1ca1dd66bfdd462da0c2e62fb0be067344b143723a512c977f58f82f7b17b5b98fb8e4b3e8f60a5b88fb399b5a8f403d0b3e78d509b2bb7f856a8afab943ab50d213633fdd0fe30a804697e3bc13cc2c5e905f4450da2e089c439a688233c4b3887ff3b7f6735adb10189056ab27324a2776fc603050e3583f37bcd78dc7aa9a27a10862dd883ab60cc3c13d79dac59033b31dec684458c891c939d", 0xbf}, {&(0x7f00000005c0)="8a28364a4ca5cd55658c12f4da6dd5cb69fbb2e27572ac3e02b6fb08ffced830b4e31aaef4405026f0b838e582c330d745669b7ff78643cc5d9867d83edca14f1110ae59571501dfebf884d2fc511fbf82d8ff212119f0f97dc11eaf648345a8d96cca6413d545028aef36e56e0e8456bc041889595ddf1dca3f7762e146ff9b4bdf68ac5bc6429f68984f07971851a987f8334301098ac4cd1b7eecb04dad316ca8689dfab753306086c5af1ce6488f34700b694bd7fc9813a67f4bf3e5d88a4b9405b0495b3830deb28b83986f0b6fd1a16ee685e6ae9f5793e7d05edb27ba1c47155815da2761b8", 0xe9}, {&(0x7f00000006c0)="2cc6e40deb8327212b78e43a04d48c45994451df292a7ea92c7b1e181e39ab98e7630219ed46058c9403713dc03b4454e693dff420da37683edbfbb0ca04d40d4c9e6601e0dd22140dc6b7d59664e839901d68b5f7cc8751f41936f91b50919c9435622d4eb8dda5b74f69cddd4f9243045c677d5ac9c059ca4a0538c774769607ac9ee9f3df657a6e933872b189934c7b49dd1c49d227a8a5f3b776ae9dc834a957e71eee8873e20120e63f0f7f9c78c65d6183d397e08775e7ba26f87688f66ca19984178cbb40691cf54e8634dfb9", 0xd0}, {&(0x7f00000007c0)="7581ff8ee2d449ab5f7220d5e246ffc53fbf97a93cd4ef6d02a7d3410d7b49ea6707cd30ba2515465358e646808606d02a8bd02ea2a8b006de5a0eb5f17cc000991a0dba5a1ffb7615e3093d0b805b8113a4132f72ee391dffa2e37351200aa04d517546410bfb391eeec1c549be98070397984afd6b44ea3033be80a185281810a35aeea842e549623662a1fc102dc9c1", 0x91}], 0x9, &(0x7f0000000940)=[@hoplimit={{0x14, 0x29, 0x34, 0x7fff}}, @dontfrag={{0x14, 0x29, 0x3e, 0x100}}, @hopopts={{0x98, 0x29, 0x36, {0x87, 0xf, '\x00', [@jumbo={0xc2, 0x4, 0x800}, @calipso={0x7, 0x40, {0x3, 0xe, 0x5, 0x7, [0x7ca, 0x200, 0x1000, 0x7f, 0x0, 0x1ff, 0x0]}}, @pad1, @enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0xc8}}, {{&(0x7f00000002c0)={0xa, 0x4e22, 0xef, @remote, 0x3ff}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000000a40)="3f4f55f5abf2e137dea8a94b901a00e5674b97b4172658c26c65f410c131f3dad22a7efaf39b39bba53a4527846c1e48418de0f9afe18f90caf9b71a05390ac43a05", 0x42}, {&(0x7f0000000ac0)="2e3327b43484527673bd65631ce8e22e26f2989499eb5af82884c0a9e50427dcd6ced0de0808ac210c6040b01444fcfe13fd86cea65db3acec2a2fdfd92ba69245b19c682ebc12c07696e46b3ff14f4a900cd5f5abcffe5f3d19a82ed26a4531aa8dffb988dcd8f012e64eef4ebd23364484d8c63b6bfac71396f1e5dd622dff", 0x80}], 0x3, &(0x7f0000000b80)=[@rthdrdstopts={{0x48, 0x29, 0x37, {0x32, 0x5, '\x00', [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x18, {0x0, 0x4, 0x1, 0x9, [0xfffffffffffffffa, 0x3]}}, @enc_lim={0x4, 0x1, 0x4}]}}}, @hopopts={{0x58, 0x29, 0x36, {0x6, 0x7, '\x00', [@generic={0x1f, 0x3d, "ba80ab58bce176e0f2105f87ddb35e393d3ba6427a50cedfd9cc010e146e7fb204a50caa9cf3a8320de0f6a675a4d6d63a8accf2586e6782267356d222"}]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x2f, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x8}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xfb}]}}}, @tclass={{0x14, 0x29, 0x43, 0x1}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c80)="462b6f31b5f4d4502d8da35834f4cfc6e44a35fc6ba5f4d13d23d3b24f131a9172317d30fb91169892bc32ca011b97a80d889f9b6a2bce1cba7790ea0197c940ecae70d9c8a1239d45cb75e11b2bb6b507ca915747d42e786ca27127787602af71120f22616b08b68e5dadfbca3be16c0c5b70b40f31651ae5e40dcccc4114d5ec27", 0x82}, {&(0x7f0000000d40)="5c774af5c85e5ec7b4d88450986c573fcd1345ef532ba3b334e7d50c93e3b1985a3982563d3c17d1aac0320b19881bab25581d3ce64b516b6790e817e267141860d6c531880f1f0d73ffc5ab245953df78b0acd8cba396cbe38e8d343bde61b5bb87990c4c57d0fa4e387ae64d4d85c1869af2b21861036c84ed29566f2994ff81f7d025f8ff67b0ff9ebecddddf86570db741b6219e658a27cea2f062442897a461990c834a581f6e5c5c1f532b2d118b21e0924ad637040bdfd1aee6541f", 0xbf}, {&(0x7f0000000e00)="83503eca075dbefc2c5cd5919f00bb3ab83730256d09a0eb609b0bf16d2e16a50c81744f9234d8b6b3c3b60e0d365ff2d75dec1059e7f56ac146370102f9c0cecd48a1f7ce4363257f15dd76f3b1cc316cf5c5", 0x53}], 0x3, &(0x7f0000000ec0)=[@pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r5}}}, @hopopts={{0x30, 0x29, 0x36, {0x52, 0x2, '\x00', [@pad1, @hao={0xc9, 0x10, @mcast2}]}}}], 0x58}}, {{&(0x7f0000001f80)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3e}, 0x1c, &(0x7f00000030c0)=[{&(0x7f0000001fc0)="583ca10714a86fcca4c6637021240c578e8727f89c49d1ebd15b369e6941d76c8811e639dfa311b94885fe00ac03fa1faaea60b4031baf6b0644af6691fec3caad9d4350ff730451e946f2003f18597851319b50afc19e3b8559ddab2fa8975d262ea5ba9293de8c5a5490cd5ead7b06c880c1c185dd6eae02fec629973257a39bddecb09fd7c9e777710cdccc108d6176a57d365294af445494231b2f4841585c313925e3c26b5f9f48499688f3c3e402e314c77960bb4d32f35995c3f4dbd410380771805307f74f99df652c1dd40fe46a3d4b7aa9ca85ba5d", 0xda}, {&(0x7f00000020c0)="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", 0x1000}], 0x2, &(0x7f0000003100)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x2c, 0x6, 0x1, 0x40, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2]}}}], 0x60}}, {{0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000003180)="c5e53838460540620de23b29a493c2d692ffa92d422db3285a08d2eaef96c025", 0x20}, {&(0x7f00000031c0)="7c37929de21083e68ad5d449725d06bbf6b2598b81fef4673e0c9fa6e6840ee94d8664cc5b2f18ce596b26948354f93930b7540d1c75c6a4e7109f8c3bc4c8fdfe146cc7bf5a51290451ea1d69505e030097ba97c47efe5bbd6830001438ac536d73330657b8df8b66ea0edf193b5b729ffa846e5794b5cb1d73a6156ea8ae8152e3b23b484c3eb56cf1a1e43f9f41273dbc7282f3689f62597cd6161fec56cbdf5c15b5586e0f0ecd95fc69c5e36f5a6b3111290b81d354c5bdbe3de662aeee9be28250b173c7e073a00e024907ea77398159810c", 0xd5}, {&(0x7f00000032c0)="4d0bfa00fb7580d0cabcbb2bab0eef2c9db980fa087a8692fd507a93b5fd50b860d15ad106f94e5a6eafe2299053429939c7673b801fb200867634fad57deae2b714307f1e1d20a087ca7c25ff7e11a58b697b43d5e9f8662424c91d9dd0044a30a695e01980003401c8176f58c287946322d2a08a5495aef0ec1f93f2184d64a7e3500c320a1db54dea4d117381638c7d4e3c4fa887832a99eef8c1ee1fff0fa42e7d329242fbcf9e276b9948148b183397ccc1375b1390ee5953585ca26a5cc535b2741021d469449917fa958b69cbb0186d37e6", 0xd5}], 0x3, &(0x7f0000003400)=[@rthdr={{0xa8, 0x29, 0x39, {0x23d7e0ce9401b174, 0x12, 0x1, 0x0, 0x0, [@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @private2, @private0, @remote, @dev={0xfe, 0x80, '\x00', 0x2b}]}}}, @rthdr={{0x48, 0x29, 0x39, {0xbd, 0x6, 0x0, 0xa8, 0x0, [@private0, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x800}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x400}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8001}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}}}}, @flowinfo={{0x14, 0x29, 0xb, 0x18}}], 0x190}}, {{&(0x7f00000035c0)={0xa, 0x4e20, 0xfffff001, @remote, 0x98}, 0x1c, &(0x7f00000036c0)=[{&(0x7f0000003600)="991df523d3b671d1b1fdbb53f007ed587acbc201878c7c2b87f234880f0eb87228d3230886005811a45b2012b3aecb6fadb0531cc46e24d400ff30db7994e62634e119816f935b4fe3e63a25f078a5ac5d8cffc5f7fcbb5ead2bf11a156d09d5430188494c7c7b5bd0a2195b68031e4b1a07a4b5319d9590358c3876002719908077117def13f587b457ec43be3453a00fc86208648d0ef9ba71a3b509124ec021", 0xa1}], 0x1, &(0x7f0000003840)=[@dstopts={{0x60, 0x29, 0x37, {0x2b, 0x8, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0x40, 0xffff, [0x1, 0xffffffffffffff83, 0x6, 0x0, 0x3034c220]}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x35, 0x0, '\x00', [@pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}, r6}}}], 0xa8}}, {{&(0x7f0000003900)={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c, &(0x7f0000003cc0)=[{&(0x7f0000003940)="94fb73ae5d1bae49fdc4ee132a00127252febd8527e22471be4e11", 0x1b}, {&(0x7f0000003980)="2163757131c109f3bdf43edca82844f0874adbdabe9208f3cb5a8619c5392ea1853d6d10c2c0a45f0d6ab423fb76fed25fe481cd7bb5d70606da294c87ce0169f3c9a8eeaef785d184a8bb838f865d04a7d0c0bc8403522340b67c7cf25bf3c2e1a933fb52af234be5b95b55cd70ef4f500d326416b9b2aa4c70ab3767e73b2f2da7ff7c4ba91cea531dc6b4136df4f6f3990b5e9014c8a517ae982baffc1424df2810432bdf484721a2f4b255b9d293597029333b1d43d3e2bb8efe1e069037a2a6a1e3377555a498e169e3fa5515c3849b7116b269872dfdcac05ba7", 0xdd}, {&(0x7f0000003a80)="2341e1677a1ff5aab637ad6fdf2aeedf08281577f470f3872c93cc87c693892ad84def7ec127beecf68d18341e210c", 0x2f}, {&(0x7f0000003ac0)="806a9404787ac56ff1fa30992f324902169edb451e851e534cbba1d448e613ae10911848c0fc70b1c5d536ae24c9420d94d4e93f24fcda07da5a280162e78f28abc1701d8ae020688ff6a97fff03b1045cc0827cff0d81ede16d9608c8fc9724aabc449e2b9ea6b55c74b135740e9a6b14d71a4856483a82fde4ad670f54bfae1e10f93bbd11710775b3f7d2a2479703616d67f4a1d79fd11f3ce0b90e62e400d7f16c6ed711c46454a037c5e17a0548f5867892f09ac8978bed82", 0xbb}, {&(0x7f0000003b80)="3bc1ee8dd77970313363a5b1931ecfe3d59faa6729c8f8d54c80f27e76d1c1119c238c77d5e0e169439490057c7336e9ad411449db0c203838b3ad4be64621e2e0c5b8ebc8a2b29739d472e4a96c441abb8ad0e135a0d09510bbea0c53538e81504812c27a5dcddf0312f2ae48ec6bec02a8a9833f75636f466e76b4e860ae363c940b515a1121496d9955ebff86de834b0599dc837a11", 0x97}, {&(0x7f0000003c40)="45371fee6f864d8cdf1b528a6fcb670707a7a7c4a94e3a05346d7de9fd38085bd957eaaf08d3f21c388f8cf14e5d2364ce85b2afd1021e689dcd077e0c41ba2c8b043954d7491858bfe570b917e18d1b4e1297d37bef0b18fb29a08fb9bc", 0x5e}], 0x6}}, {{&(0x7f0000003d40)={0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, '\x00', 0x37}, 0xa4}, 0x1c, &(0x7f0000003e40)=[{&(0x7f0000003d80)="15c37ce1fe3a7cf16e1083e5aca17a8af6a03aad66b7561e27030c3746e6be4f07905ad67550671edf03f4c6b2cb52767ec48882a9ef601e474b79a3b86d3abf2fc8b52da0834abdcece5fd11692522c83b2c332af8de170088416b082d1d936cb7415171f9ef432fd900313f63c47728a87842b12cc7918fd17d686cd740d0ccd5d3fcc6f2de1fb", 0x88}], 0x1, &(0x7f0000003e80)=[@rthdr={{0xa8, 0x29, 0x39, {0x73, 0x12, 0x0, 0x1, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @private1, @dev={0xfe, 0x80, '\x00', 0xc}, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @rthdrdstopts={{0xf0, 0x29, 0x37, {0x33, 0x1a, '\x00', [@generic={0x1, 0xcf, "6f89e51b5fd01314b6d540c7cb2d607127936b588535af9d9b0fc754967377be08587c5ae411050c5d4b3774f304d5cbc5ad0e8bc0d0adc6dd4e652e1dc90de2a2218c5b88eddba0119ed2252d30eb6761d77eaba0c90cd84f5ceee357b8a89a80b335e1820eba85760f8069d14f7aae1e544c8c09a205676094ca4b43921b4e524f8c63133e20d54faa856dc3d94b18a7b6fe450f2078b62961fbaa156b3544b05edc8368546b4c3c16db6e2cb037ec496a77e0512689e80fada5ceb1900591a2d3acc95fd071009b26a5182f5014"}]}}}, @rthdr={{0x18, 0x29, 0x39, {0x67, 0x0, 0x2, 0x3}}}, @tclass={{0x14, 0x29, 0x43, 0xe57}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x2c, 0x12, 0x2, 0x47, 0x0, [@local, @mcast1, @dev={0xfe, 0x80, '\x00', 0x17}, @private2, @remote, @empty, @mcast1, @local, @private2]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1, r9}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x1d, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @pad1, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x10, {0x1, 0x2, 0x72, 0x8, [0x80000001]}}]}}}], 0x310}}], 0x8, 0x4000100) sendmmsg$inet6(r1, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) pread64(r0, 0x0, 0x0, 0xff) 18:20:32 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/188, 0xbc, 0x800000ff) [ 1668.366392] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1668.366392] program syz-executor.6 not setting count and/or reply_len properly [ 1668.384583] sg_write: data in/out 134233564/251 bytes for SCSI command 0x0-- guessing data in; [ 1668.384583] program syz-executor.2 not setting count and/or reply_len properly 18:20:32 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1, 0x8}], 0x2, 0x0, 0x0, 0x0) 18:20:32 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x0, 0x0) 18:20:32 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0xd04) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0xff) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000280), &(0x7f00000002c0)=0x8) r2 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000340)=""/19, 0x13, 0x80000000) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000240)='TIPCv2\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x8, 0x401}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x23, 0x7, 0x7f, 0x4, 0x0, 0x101, 0x400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x8}, 0x0, 0x1, 0x8, 0x5, 0x3f, 0x8a, 0x3, 0x0, 0xc8, 0x0, 0x3e3acb34}, 0xffffffffffffffff, 0x1, r2, 0x1) r3 = syz_open_dev$mouse(&(0x7f0000000140), 0x6, 0x10000) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x20, 0xb8, 0x90, 0x6, 0x0, 0x8, 0x41201, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x20}, 0x1000, 0x2, 0x16a, 0x4, 0xfffffffffffffbff, 0x6, 0x7, 0x0, 0x7f, 0x0, 0x6}, 0xffffffffffffffff, 0x4, r3, 0x3) 18:20:32 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab0"], 0x125) 18:20:32 executing program 7: r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000300)='pagemap\x00') pread64(r1, 0x0, 0x0, 0xff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) [ 1668.652214] sg_write: data in/out 134233564/251 bytes for SCSI command 0x0-- guessing data in; [ 1668.652214] program syz-executor.2 not setting count and/or reply_len properly 18:20:46 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/188, 0xbc, 0x800000ff) 18:20:46 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600007a00000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:20:46 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0x9, 0x7f, 0x1, 0x0, 0x20000000, 0x30, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000440)}, 0x8002, 0x0, 0x5, 0x2, 0xfffffffffffffe01, 0x9193, 0x7, 0x0, 0xe77, 0x0, 0x3ff}, 0xffffffffffffffff, 0x5, r0, 0x19) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r1, 0x8, 0x6, 0x7}) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000540)) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/190, 0xbe}, {&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000340)=""/98, 0x62}], 0x5, 0x4, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) 18:20:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r0, &(0x7f0000000000)=""/165, 0xa5, 0x402) 18:20:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r1, 0x3, &(0x7f00000017c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x81, r2, &(0x7f0000001440)="11ea0a2b02ab7b150bbe64dca1d9e5fdac5a4503625e367a58d24d6522f36a35bb185afe5832e25f84b9c967fb886668800872887b609261d782cb850c28c6a12c8874381a148b5090c72294f398877fd3e21cc24ce5d5221e82901f91fe82cf61416556526ce86610ff6ac1f0b1a17e6ea07a76fe49980ddea191528c1219305d56ed4efa9158178f19e4a12074f9e5c600c1af0b1dd9be0f9f5343dacb9d42edf1db91dd7bad9889ac5fcb0af0c8ee0e9b81bd84d1014b2fca97d9fc80dd6f73e062bf2dcd0ae12e9c0dab83c7847825c26a2745e21bd05fa9d7a882881eae5d7825ecb4", 0xe5, 0x3ff}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f0000000280)="ebe9143f59e3065f5ca302f5f42a78081c594c05b54737fe6ba3f8f7d595a402d3cfcbc730e29be65fec3b4c5dd01667c26a1ea788424c6cd890295deab1287c435092a495b4ad3b2b31b81a782b1a5570ac6a1114069415d9836194", 0x5c, 0x5}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x3, 0x8, 0xffffffffffffffff, &(0x7f0000001580)="1ae63aa5360812b5cc29c6e840c502a96fbf4991524d7128dcc5c7b6127116ca44105b36c5f8ed501c1e63855a2b953757fbe201c5b9e9a456ee6f407eb0b4a6d879f5701aca45fa84e10800c5c3948cb0132252669344d2567cac9bc4ec464fdd43736a14d9336bf35355ad5c9903e3a995e326f489d6fe677b69d0b8aed8e7cab23ab7de1fc54b9a7c28eb5b70", 0x8e, 0x3, 0x0, 0x2}]) 18:20:46 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)=ANY=[@ANYBLOB="010100000018000000", @ANYRES32=r0, @ANYBLOB="00000100000000002e2f66696c653000"]) r2 = accept$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8430, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r3}}, {@cache_mmap}, {@cache_loose}, {@privport}, {@mmap}, {@loose}, {@privport}], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x65, 0x62, 0x0, 0x0, 0x37, 0x31, 0x61], 0x2d, [0x61, 0x63, 0x31, 0x31], 0x2d, [0x34, 0x63, 0x32, 0x63], 0x2d, [0x61, 0x63, 0x39, 0x38], 0x2d, [0x0, 0x62, 0x7, 0x0, 0x34, 0x65, 0x65, 0x61]}}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@audit}, {@fsmagic={'fsmagic', 0x3d, 0x3ff}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) 18:20:46 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1, 0x300}], 0x2, 0x0, 0x0, 0x0) 18:20:46 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab0"], 0x125) [ 1682.709011] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1682.709011] program syz-executor.6 not setting count and/or reply_len properly [ 1682.800573] sg_write: data in/out 134233564/251 bytes for SCSI command 0x0-- guessing data in; [ 1682.800573] program syz-executor.2 not setting count and/or reply_len properly 18:20:46 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600ffffe0000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:20:46 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(0xffffffffffffffff, &(0x7f0000000000)=""/188, 0xbc, 0x800000ff) 18:20:46 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc"], 0x125) [ 1683.065252] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1683.065252] program syz-executor.6 not setting count and/or reply_len properly [ 1683.110666] sg_write: data in/out 134233564/251 bytes for SCSI command 0x0-- guessing data in; [ 1683.110666] program syz-executor.2 not setting count and/or reply_len properly 18:21:00 executing program 4: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, 0x0) semop(r0, &(0x7f0000000600)=[{0x2, 0x4, 0x1000}], 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0xff) r2 = syz_open_dev$mouse(&(0x7f0000000500), 0x0, 0x400600) sendfile(r2, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022bbd7000fcdbdf256900000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001000000000000000a00060007fc110000010000"], 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x82e8997f88873560) r5 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) sendmsg$NL80211_CMD_ADD_TX_TS(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x82e8997f88873560) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r6, 0x408c5333, &(0x7f0000000540)={0x84d5, 0x0, 0x1, 'queue1\x00', 0xfffffffb}) r8 = syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000340)=[{&(0x7f0000000140)="0cb0adfad5e358f9b36ae848dd64506bf647050d6ff3705a1a947770f1be24c2cdf807fe748cd6aa7a1c4dca439206db18dd091aa072606346b81ff27c303c87d50700b921c3ef4d16de1eebf76d260a88f406f3cb13ffb4a03e59daf5b5e8313e18c7df2e5bd006042585c7dc8d9181391c5acc9f1936ed79b1406afd02afa2caf4a76a6cd9a0f69e42efc0961ca82833f9878bb44245145faee02bd68af8cac285217821e96b1280517b6c11b076d302e5", 0xb2, 0x1f}, {&(0x7f0000000200)="99ba1e90a44094ea217a66072593687f85cafa3006b6cfdeca8dd98652b9a51287005db92dcf46390e7939a5a899a6c58d9e5c3cfbb927563a544929b7ccd4dc8cafce70", 0x44, 0x6}, {&(0x7f0000000280)="e76d8891f30526ed61d5ca7ac6a0ed1d0f", 0x11, 0x3}], 0x0, &(0x7f00000003c0)={[{@noauto_da_alloc}, {@lazytime}, {@init_itable}, {@delalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@nojournal_checksum}, {@sysvgroups}, {@data_journal}, {@commit={'commit', 0x3d, 0x40}}], [{@subj_type={'subj_type', 0x3d, 'cmdline\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x64, 0x66, 0x36, 0x31, 0x34, 0x64, 0x35], 0x2d, [0x35, 0x30, 0x38, 0x34], 0x2d, [0x66, 0x61, 0x66, 0x34], 0x2d, [0x61, 0x33, 0x30, 0x36], 0x2d, [0x31, 0x32, 0x65, 0x33, 0x65, 0x63, 0x30, 0x34]}}}, {@measure}, {@dont_measure}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r8, {0xff}}, './file0\x00'}) 18:21:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc"], 0x125) 18:21:00 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(0xffffffffffffffff, &(0x7f0000000000)=""/188, 0xbc, 0x800000ff) 18:21:00 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1, 0x4000}], 0x2, 0x0, 0x0, 0x0) 18:21:00 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x10b000, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x8, 0xff, 0x7, 0x56, 0x0, 0x400, 0x2c0a0, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000040), 0x7}, 0x2004, 0x4, 0x7ff, 0x0, 0x2, 0x8, 0x8001, 0x0, 0x2, 0x0, 0x1}, r0, 0x7, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000400)) pread64(r2, 0x0, 0xffffffffffffffa8, 0xacfa004800000) r3 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x82e8997f88873560) ioctl$SG_GET_SCSI_ID(r4, 0x2276, &(0x7f00000002c0)) r6 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x0, 0x3, 0x3f, 0x0, 0x1ff, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x12c00, 0x100000000, 0x5, 0x2, 0x5, 0x400, 0x0, 0x0, 0xfff, 0x0, 0xab6}, r7, 0x7, r6, 0x1) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x3, 0x89, 0xeb, 0x7, 0x0, 0x6, 0x800, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000340), 0x4}, 0x12449, 0x9, 0xc00000, 0x9, 0x1, 0x2e3, 0x9ab, 0x0, 0x16a5, 0x0, 0xf3}, r7, 0x2, 0xffffffffffffffff, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000200)={r1, 0xfffffffffffffffa, 0x100000000, 0x8}) r9 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x47, 0xd9, 0x1, 0x80, 0x0, 0x1, 0x100, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x800, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x1, 0x2, 0x7ff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x65}, r8, 0x3, r9, 0x8) r10 = pidfd_getfd(r1, r2, 0x0) openat$cgroup_freezer_state(r10, &(0x7f0000000280), 0x2, 0x0) 18:21:00 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000010000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:21:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0x9, 0x7f, 0x1, 0x0, 0x20000000, 0x30, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000440)}, 0x8002, 0x0, 0x5, 0x2, 0xfffffffffffffe01, 0x9193, 0x7, 0x0, 0xe77, 0x0, 0x3ff}, 0xffffffffffffffff, 0x5, r0, 0x19) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r1, 0x8, 0x6, 0x7}) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000540)) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/190, 0xbe}, {&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000340)=""/98, 0x62}], 0x5, 0x4, 0x5) 18:21:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r1, 0x2, &(0x7f00000017c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x81, r2, &(0x7f0000001440)="11ea0a2b02ab7b150bbe64dca1d9e5fdac5a4503625e367a58d24d6522f36a35bb185afe5832e25f84b9c967fb886668800872887b609261d782cb850c28c6a12c8874381a148b5090c72294f398877fd3e21cc24ce5d5221e82901f91fe82cf61416556526ce86610ff6ac1f0b1a17e6ea07a76fe49980ddea191528c1219305d56ed4efa9158178f19e4a12074f9e5c600c1af0b1dd9be0f9f5343dacb9d42edf1db91dd7bad9889ac5fcb0af0c8ee0e9b81bd84d1014b2fca97d9fc80dd6f73e062bf2dcd0ae12e9c0dab83c7847825c26a2745e21bd05fa9d7a882881eae5d7825ecb4", 0xe5, 0x3ff}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f0000000280)="ebe9143f59e3065f5ca302f5f42a78081c594c05b54737fe6ba3f8f7d595a402d3cfcbc730e29be65fec3b4c5dd01667c26a1ea788424c6cd890295deab1287c435092a495b4ad3b2b31b81a782b1a5570ac6a1114069415d9836194", 0x5c, 0x5}]) 18:21:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0x9, 0x7f, 0x1, 0x0, 0x20000000, 0x30, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000440)}, 0x8002, 0x0, 0x5, 0x2, 0xfffffffffffffe01, 0x9193, 0x7, 0x0, 0xe77, 0x0, 0x3ff}, 0xffffffffffffffff, 0x5, r0, 0x19) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r1, 0x8, 0x6, 0x7}) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/190, 0xbe}, {&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000340)=""/98, 0x62}], 0x5, 0x4, 0x5) [ 1696.289324] sg_write: data in/out 134233564/251 bytes for SCSI command 0x0-- guessing data in; [ 1696.289324] program syz-executor.2 not setting count and/or reply_len properly [ 1696.328193] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1696.328193] program syz-executor.6 not setting count and/or reply_len properly [ 1696.361313] syz-executor.4[13361]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 18:21:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc"], 0x125) 18:21:00 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000020000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:21:00 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(0xffffffffffffffff, &(0x7f0000000000)=""/188, 0xbc, 0x800000ff) [ 1696.421523] syz-executor.4[13372]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 18:21:00 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000017c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x81, r1, &(0x7f0000001440)="11ea0a2b02ab7b150bbe64dca1d9e5fdac5a4503625e367a58d24d6522f36a35bb185afe5832e25f84b9c967fb886668800872887b609261d782cb850c28c6a12c8874381a148b5090c72294f398877fd3e21cc24ce5d5221e82901f91fe82cf61416556526ce86610ff6ac1f0b1a17e6ea07a76fe49980ddea191528c1219305d56ed4efa9158178f19e4a12074f9e5c600c1af0b1dd9be0f9f5343dacb9d42edf1db91dd7bad9889ac5fcb0af0c8ee0e9b81bd84d1014b2fca97d9fc80dd6f73e062bf2dcd0ae12e9c0dab83c7847825c26a2745e21bd05fa9d7a882881eae5d7825ecb4", 0xe5, 0x3ff}]) 18:21:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7f, 0x9, 0x7f, 0x1, 0x0, 0x20000000, 0x30, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000440)}, 0x8002, 0x0, 0x5, 0x2, 0xfffffffffffffe01, 0x9193, 0x7, 0x0, 0xe77, 0x0, 0x3ff}, 0xffffffffffffffff, 0x5, r0, 0x19) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/190, 0xbe}, {&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000340)=""/98, 0x62}], 0x5, 0x4, 0x5) 18:21:00 executing program 7: sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="10002abd7000fbdbdf252729d4e051f5d0a1a410d910e7ea6f1dbadddf04f0a25e1216fbb8be8342d6749e39c867bf3f0d0ee77f497825cb08867057edf1"], 0x18}, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xffff, 0x101000) r2 = syz_open_pts(0xffffffffffffffff, 0x200) sendfile(r1, r2, &(0x7f0000000100)=0x616b, 0xfff) fallocate(r1, 0x0, 0x4, 0x0) [ 1696.488181] sg_write: data in/out 134233564/251 bytes for SCSI command 0x0-- guessing data in; [ 1696.488181] program syz-executor.2 not setting count and/or reply_len properly [ 1696.496033] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1696.496033] program syz-executor.6 not setting count and/or reply_len properly 18:21:00 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:21:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = signalfd(r1, &(0x7f0000000340)={[0x8a6]}, 0x8) ioctl$INCFS_IOC_PERMIT_FILL(r3, 0x40046721, &(0x7f0000000380)={r2}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r1, @ANYRESOCT=r2, @ANYBLOB="a0504880090db18e637a04ad54b08671c3616de7ba48e844b5e3c76eedf1349e6162776c06c1e11b50cde37427bdb7cbdb493572314819b9591f70677e20"]) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x832404, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, 0xee00}}, {@version_L}, {@access_uid={'access', 0x3d, 0xee01}}, {@access_client}], [{@smackfsfloor={'smackfsfloor', 0x3d, '*\':\xd4,+{'}}, {@obj_type={'obj_type', 0x3d, '%:'}}, {@hash}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@fsname={'fsname', 0x3d, '!-:}:'}}, {@obj_type={'obj_type', 0x3d, 'cmdline\x00'}}, {@obj_user={'obj_user', 0x3d, 'cmdline\x00'}}, {@dont_hash}, {@obj_role={'obj_role', 0x3d, 'cmdline\x00'}}]}}) 18:21:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35"], 0x125) 18:21:12 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000017c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x81, r1, &(0x7f0000001440)="11ea0a2b02ab7b150bbe64dca1d9e5fdac5a4503625e367a58d24d6522f36a35bb185afe5832e25f84b9c967fb886668800872887b609261d782cb850c28c6a12c8874381a148b5090c72294f398877fd3e21cc24ce5d5221e82901f91fe82cf61416556526ce86610ff6ac1f0b1a17e6ea07a76fe49980ddea191528c1219305d56ed4efa9158178f19e4a12074f9e5c600c1af0b1dd9be0f9f5343dacb9d42edf1db91dd7bad9889ac5fcb0af0c8ee0e9b81bd84d1014b2fca97d9fc80dd6f73e062bf2dcd0ae12e9c0dab83c7847825c26a2745e21bd05fa9d7a882881eae5d7825ecb4", 0xe5, 0x3ff}]) 18:21:12 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1, 0x0, 0x3}], 0x2, 0x0, 0x0, 0x0) 18:21:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/190, 0xbe}, {&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000340)=""/98, 0x62}], 0x5, 0x4, 0x5) 18:21:13 executing program 7: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='stack\x00') pread64(r1, 0x0, 0x0, 0xff) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000000)) 18:21:13 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r0, 0x0, 0x0, 0x800000ff) 18:21:13 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000030000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 1709.210265] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1709.210265] program syz-executor.6 not setting count and/or reply_len properly [ 1709.218151] sg_write: data in/out 134233564/251 bytes for SCSI command 0x0-- guessing data in; [ 1709.218151] program syz-executor.2 not setting count and/or reply_len properly 18:21:13 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r0, 0x0, 0x0, 0x0) 18:21:13 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000040000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:21:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35"], 0x125) 18:21:13 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1, 0x0, 0x8}], 0x2, 0x0, 0x0, 0x0) [ 1709.360682] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1709.360682] program syz-executor.6 not setting count and/or reply_len properly 18:21:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001140)=""/4094, 0xffe) getdents(r1, 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000000c0)={0x57, 0x8001, 0x157, {0x192, 0x3ff}, {0x36, 0x40}, @cond=[{0x92, 0xa121, 0x2, 0x80, 0x7ff, 0xffff}, {0x5, 0x7, 0x4, 0x9, 0x0, 0x9}]}) [ 1709.387974] sg_write: data in/out 134233564/251 bytes for SCSI command 0x0-- guessing data in; [ 1709.387974] program syz-executor.2 not setting count and/or reply_len properly 18:21:13 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000017c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x81, r1, &(0x7f0000001440)="11ea0a2b02ab7b150bbe64dca1d9e5fdac5a4503625e367a58d24d6522f36a35bb185afe5832e25f84b9c967fb886668800872887b609261d782cb850c28c6a12c8874381a148b5090c72294f398877fd3e21cc24ce5d5221e82901f91fe82cf61416556526ce86610ff6ac1f0b1a17e6ea07a76fe49980ddea191528c1219305d56ed4efa9158178f19e4a12074f9e5c600c1af0b1dd9be0f9f5343dacb9d42edf1db91dd7bad9889ac5fcb0af0c8ee0e9b81bd84d1014b2fca97d9fc80dd6f73e062bf2dcd0ae12e9c0dab83c7847825c26a2745e21bd05fa9d7a882881eae5d7825ecb4", 0xe5, 0x3ff}]) 18:21:26 executing program 0: lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.syz\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x14e2}}, './file0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x9, 0x5}}, './file0\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) faccessat2(r2, &(0x7f0000000400)='./file0/file0\x00', 0x18, 0x3100) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000400)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0/../file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400, 0x20}}, './file0\x00'}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r5, &(0x7f0000000000)=""/172, 0xac, 0xff) r6 = pidfd_getfd(r5, r4, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40091}, 0x40c0) 18:21:26 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000050000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:21:26 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/190, 0xbe}, {&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000340)=""/98, 0x62}], 0x5, 0x4, 0x5) 18:21:26 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/130, 0x82}, {&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f0000000100)=""/248, 0xf8}], 0x3, 0x7, 0x80000001) pread64(r0, 0x0, 0x0, 0xff) 18:21:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35"], 0x125) 18:21:26 executing program 4: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x11f, 0xfffffffffffff3e5, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}]}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r2, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x14}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "cde8fe5630b6d7d99d199b07ae"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c1}, 0x40) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') ioctl$TIOCGPTPEER(r5, 0x5441, 0x2) pread64(r5, &(0x7f0000000000)=""/168, 0xa8, 0x3) r6 = dup(0xffffffffffffffff) ioctl$BLKFRASET(r6, 0x1264, &(0x7f00000000c0)=0x7ff) 18:21:26 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1, 0x0, 0x300}], 0x2, 0x0, 0x0, 0x0) 18:21:26 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x2, &(0x7f00000017c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x81, r1, &(0x7f0000001440)="11ea0a2b02ab7b150bbe64dca1d9e5fdac5a4503625e367a58d24d6522f36a35bb185afe5832e25f84b9c967fb886668800872887b609261d782cb850c28c6a12c8874381a148b5090c72294f398877fd3e21cc24ce5d5221e82901f91fe82cf61416556526ce86610ff6ac1f0b1a17e6ea07a76fe49980ddea191528c1219305d56ed4efa9158178f19e4a12074f9e5c600c1af0b1dd9be0f9f5343dacb9d42edf1db91dd7bad9889ac5fcb0af0c8ee0e9b81bd84d1014b2fca97d9fc80dd6f73e062bf2dcd0ae12e9c0dab83c7847825c26a2745e21bd05fa9d7a882881eae5d7825ecb4", 0xe5, 0x3ff}, 0x0]) 18:21:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') recvmmsg$unix(r0, &(0x7f0000003980)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/116, 0x74}], 0x2, &(0x7f0000000280)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000002340), 0x6e, &(0x7f0000002480)=[{&(0x7f00000023c0)=""/140, 0x8c}], 0x1, &(0x7f0000003ac0)=ANY=[@ANYBLOB="10002bfeb1feb12703cfc18d7703b24f94ef00000000000001000000000000003f61b819d5d2a3f18fe6785453bdf05e57b27ec924bdda9fe2331d04d203bdf013cdfdc66ca3eb9fc1eb3393d58039b0be6388926867ba711844af85f8fd1f7771edd2e854248f1dc21f9d880f19abffa742d7b888ebb7f67de7d5", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xb0}}, {{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000002580)=""/160, 0xa0}, {&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000003640)=""/225, 0xe1}, {&(0x7f0000003740)=""/11, 0xb}, {&(0x7f0000003780)=""/181, 0xb5}], 0x5, &(0x7f00000038c0)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0xb0}}], 0x3, 0x40012162, &(0x7f0000003a40)) syz_open_procfs(r1, &(0x7f0000003a80)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000340)={{r0}, 0x0, 0x4, @inherit={0x70, &(0x7f00000000c0)={0x0, 0x5, 0x7, 0x1, {0x18, 0x7, 0x6, 0x3, 0x6}, [0x5, 0x80, 0x400, 0x3, 0xfffffffffffffff8]}}, @subvolid=0x8}) 18:21:26 executing program 5: preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/190, 0xbe}, {&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000340)=""/98, 0x62}], 0x5, 0x4, 0x5) 18:21:26 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x2, &(0x7f00000017c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x81, r1, &(0x7f0000001440)="11ea0a2b02ab7b150bbe64dca1d9e5fdac5a4503625e367a58d24d6522f36a35bb185afe5832e25f84b9c967fb886668800872887b609261d782cb850c28c6a12c8874381a148b5090c72294f398877fd3e21cc24ce5d5221e82901f91fe82cf61416556526ce86610ff6ac1f0b1a17e6ea07a76fe49980ddea191528c1219305d56ed4efa9158178f19e4a12074f9e5c600c1af0b1dd9be0f9f5343dacb9d42edf1db91dd7bad9889ac5fcb0af0c8ee0e9b81bd84d1014b2fca97d9fc80dd6f73e062bf2dcd0ae12e9c0dab83c7847825c26a2745e21bd05fa9d7a882881eae5d7825ecb4", 0xe5, 0x3ff}, 0x0]) [ 1722.685824] sg_write: data in/out 134233564/251 bytes for SCSI command 0x0-- guessing data in; [ 1722.685824] program syz-executor.2 not setting count and/or reply_len properly [ 1722.696029] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1722.696029] program syz-executor.6 not setting count and/or reply_len properly 18:21:26 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1, 0x0, 0x4000}], 0x2, 0x0, 0x0, 0x0) 18:21:26 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) 18:21:26 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000060000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:21:26 executing program 5: preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/190, 0xbe}, {&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000340)=""/98, 0x62}], 0x5, 0x4, 0x5) 18:21:26 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x2, &(0x7f00000017c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x81, r1, &(0x7f0000001440)="11ea0a2b02ab7b150bbe64dca1d9e5fdac5a4503625e367a58d24d6522f36a35bb185afe5832e25f84b9c967fb886668800872887b609261d782cb850c28c6a12c8874381a148b5090c72294f398877fd3e21cc24ce5d5221e82901f91fe82cf61416556526ce86610ff6ac1f0b1a17e6ea07a76fe49980ddea191528c1219305d56ed4efa9158178f19e4a12074f9e5c600c1af0b1dd9be0f9f5343dacb9d42edf1db91dd7bad9889ac5fcb0af0c8ee0e9b81bd84d1014b2fca97d9fc80dd6f73e062bf2dcd0ae12e9c0dab83c7847825c26a2745e21bd05fa9d7a882881eae5d7825ecb4", 0xe5, 0x3ff}, 0x0]) 18:21:26 executing program 2: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0xf08]}, 0x8) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000140)) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000180)=0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r3, &(0x7f0000000000)=""/188, 0xbc, 0x800000ff) 18:21:26 executing program 0: lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.syz\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x14e2}}, './file0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x9, 0x5}}, './file0\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) faccessat2(r2, &(0x7f0000000400)='./file0/file0\x00', 0x18, 0x3100) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000400)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0/../file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400, 0x20}}, './file0\x00'}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r5, &(0x7f0000000000)=""/172, 0xac, 0xff) r6 = pidfd_getfd(r5, r4, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40091}, 0x40c0) 18:21:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) [ 1722.980446] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1722.980446] program syz-executor.6 not setting count and/or reply_len properly 18:21:26 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x82e8997f88873560) ioctl$CDROM_LAST_WRITTEN(r2, 0x5395, &(0x7f0000000000)) r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000cc0)={0x710, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6}}}}, [@NL80211_ATTR_NAN_FUNC={0x4}, @NL80211_ATTR_NAN_FUNC={0x4b4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TX_MATCH_FILTER={0xf0, 0xe, 0x0, 0x1, [{0xec, 0x0, "f95cd8755bdaaebd5addb37f716f3d7d4ca3abc0b78c44df12bf93c7f0d3db8a76b914891bcf021df9e7ad2cae131e996460835e75fa8863f6243fa402adc0b51fabb137876c98f60dec1f7f4fa9520dc37fcb120c79b25cee8b9f3710a58688ae0e8fa323120f76ac67df9cc8eb19116cc98916152667ef24c19e8edd2e91ad2a63c80b4d3460181235a92f4ca704fe0082e2a747b786048c4968365188903f5c39c294e14a7eb5852ccf32592ec4778b55bae8eb56d517c98392759b105260389f3bbf0b511b2359d9834d7463a72c32215e024f4daba705d26e159d61989a25ac53fa10b3d72c"}]}, @NL80211_NAN_FUNC_SRF={0x8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x99}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x4}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x2dc, 0xd, 0x0, 0x1, [{0x14, 0x0, "6bc0444dbeecadac00b5b36b4b7de90c"}, {0x8d, 0x0, "8c1b86dc92c578ea535a093697c304aae067b24a07e9adbd2110fd039df275e288a84fa6bade0dac78d4027b95da79c36f2b897e41821c300673ae53c41c499f5a07bdb264223021001bcb5e1be71ec847e3375e48bc594c610593b0623da3fe29bf9dc16d224201714c4b0bc9a86297e65fe6fa986415ef0860ffbe0e84b094bfc95fbca8aad9ae2c"}, {0xd6, 0x0, "2b8ecb4169416e4e526f6c28fe2a221697060800dd1faca19c3d8728ba3552c653642f62bf869e86596209e8ab266957d4c609fe21d9a7b23b84eb36a28c080cb20a952b9ff9669ec5c970399f102ba13a775249ca456f8614fd7886ccc1503074da7329d455faf59a76873fb41a6965b0849f89fce6c97528f441dcc3fed3ce384753956c6051188df17a31f410d0ed5ae1f211c7ff344de6e63cc4b91d9d576d35b4dbf9f3c8b60f9c957131daf1f0b42881c9093dfeb2f159ae52175a147ba98d7f6cc7507a55f50bac76d5e0e737b721"}, {0x8f, 0x0, "f6d078e6c566170fd8372b611fe3dc6670cf03b690f8fc435015fa8df34c067ae70e67fdcce0cad01bfe63f0ae54fff3b94f5f36db1d09e6d2e43a0478a849de373a6c80d8f18741383dfff62cc17bae89d02deab18b82419ffbb37d419869b6eb2e5e60096b8eceb10e5aca96488a10f93accc3476f6420ea5630c01b586f2bbfcc8a41fc8f5af816f80f"}, {0xbf, 0x0, "0b96675eb12508815b8290fdcd0358a36e5941a2ba61121cb8b25b2ca45c6afc67d7c18f668917f9e382107382551dd2e87ff9461fa5db5bb5ae45b6724b808b06b859fe3b6939ce7675813fbdafff249784a347a6ddf21f3fafa1d52dcabef169fe6e43ba3d93a7d10436a906485916f33f4866b5ac6ca3ece29888988bd2ce38b4f189e4c8030984babfd3b0c59ebb741d48d7b80c8dd6bc14842517728d88971814dbab1fa4e719ba586bad60b92124da507b023939f1049b2c"}, {0xa, 0x0, "37849b711389"}]}, @NL80211_NAN_FUNC_SERVICE_INFO={0xa1, 0xb, "f08b417935bd552ba337e112643c30cdcbda36be60c779127f45ce242a52f134e9a767db3e8a1f374c7822712a5cc6bd7e2f38b23f27b170901d00106c3b79fd57481d8f18e777ced4c0b2f2bd53a1defcd0622a4ee1ca69f17ebb5a4d7d041d38ebc2f831f29123abee173b137cbbbb98b1ef32e62fd07d962d018f80b7bb06a00431dfcafcb96a4350e9aa1413a9f5be0d0ce3fbc04757cfc44e2bd2"}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x1c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x3}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x7f}]}, @NL80211_ATTR_NAN_FUNC={0xb8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_SERVICE_INFO={0xab, 0xb, "3ac433fedb0e162f86c650e22171a926816de82062e7d7af6a60d82a982dfb109885a170559f6df341d1723200a6419dc5d55e6ab717db33d7029e2a979410e3357c782946aa8449de42f84870f11b877d9b19743bfef8eaaf11a4c668e9ae8f132dd2e8ea03cd8533cf1b9b2917ca873ef48a260a8c0c5a316b96dcaf7c784c4951a3d78efd5704af0a6796137c7adbaf329482a77b8822f3ecc14028e675a6bc1e5ddd72c69d"}]}, @NL80211_ATTR_NAN_FUNC={0x15c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0xb2, 0xb, "6db6184e00b0c6440ddd000a2bf0f3873c10fb0cdbeda5d31eb2f4e4f08cdb20333982f29c2ad91f35213309438447f5d023c7d70e1c2b1f7bd0dcd0f8f92c4accc825d96e575897fbb33d2e2cbac418ee47da3ee83481a486ad0524c650400d8c14ce4e5f953c73bd860e5341ae1af8bbef9b9bc8384f29db341ce7bae3484b3f2bc9bcb5cbfaddff08bcbbc6c3dc47ecf24f2fef0f83224312b14f694ee2dd324b6a85d4c4e17c3139758c48a5"}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_SERVICE_INFO={0x8e, 0xb, "4d20144da61b0186da8e0eff698c70c7cc4eab9aa231bbf3d667431991330fee2ec1467073a4950c77a5bedfed9487cd5ff59c4cd98f5a4025aac1d5321373b1b80476b6285ad6daca0fbb987aca7ca252d59fc60b0a4f4cb3e8b02bfea80f77ce7fc5863e718b5a48e6ced31e9865415de2fc2c9f57dcefd234e1cf1109f0b3b7600ad205feb0d7c4cb"}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x20}]}]}, 0x710}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 18:21:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r1, 0x2, &(0x7f00000017c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x81, r2, &(0x7f0000001440)="11ea0a2b02ab7b150bbe64dca1d9e5fdac5a4503625e367a58d24d6522f36a35bb185afe5832e25f84b9c967fb886668800872887b609261d782cb850c28c6a12c8874381a148b5090c72294f398877fd3e21cc24ce5d5221e82901f91fe82cf61416556526ce86610ff6ac1f0b1a17e6ea07a76fe49980ddea191528c1219305d56ed4efa9158178f19e4a12074f9e5c600c1af0b1dd9be0f9f5343dacb9d42edf1db91dd7bad9889ac5fcb0af0c8ee0e9b81bd84d1014b2fca97d9fc80dd6f73e062bf2dcd0ae12e9c0dab83c7847825c26a2745e21bd05fa9d7a882881eae5d7825ecb4", 0xe5, 0x3ff}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000280)="ebe9143f59e3065f5ca302f5f42a78081c594c05b54737fe6ba3f8f7d595a402d3cfcbc730e29be65fec3b4c5dd01667c26a1ea788424c6cd890295deab1287c435092a495b4ad3b2b31b81a782b1a5570ac6a1114069415d9836194", 0x5c, 0x5}]) 18:21:39 executing program 0: lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.syz\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x14e2}}, './file0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x9, 0x5}}, './file0\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) faccessat2(r2, &(0x7f0000000400)='./file0/file0\x00', 0x18, 0x3100) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000400)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0/../file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400, 0x20}}, './file0\x00'}) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r5, &(0x7f0000000000)=""/172, 0xac, 0xff) r6 = pidfd_getfd(r5, r4, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40091}, 0x40c0) 18:21:39 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x2, &(0x7f00000017c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x81, r1, &(0x7f0000001440)="11ea0a2b02ab7b150bbe64dca1d9e5fdac5a4503625e367a58d24d6522f36a35bb185afe5832e25f84b9c967fb886668800872887b609261d782cb850c28c6a12c8874381a148b5090c72294f398877fd3e21cc24ce5d5221e82901f91fe82cf61416556526ce86610ff6ac1f0b1a17e6ea07a76fe49980ddea191528c1219305d56ed4efa9158178f19e4a12074f9e5c600c1af0b1dd9be0f9f5343dacb9d42edf1db91dd7bad9889ac5fcb0af0c8ee0e9b81bd84d1014b2fca97d9fc80dd6f73e062bf2dcd0ae12e9c0dab83c7847825c26a2745e21bd05fa9d7a882881eae5d7825ecb4", 0xe5, 0x3ff}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280)="ebe9143f59e3065f5ca302f5f42a78081c594c05b54737fe6ba3f8f7d595a402d3cfcbc730e29be65fec3b4c5dd01667c26a1ea788424c6cd890295deab1287c435092a495b4ad3b2b31b81a782b1a5570ac6a1114069415d9836194", 0x5c, 0x5}]) 18:21:39 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x3) 18:21:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) 18:21:39 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000070000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:21:39 executing program 5: preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/190, 0xbe}, {&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000340)=""/98, 0x62}], 0x5, 0x4, 0x5) 18:21:39 executing program 7: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001140)=""/4094, 0xffe) getdents(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0xfffffff8, 0xb}}}}, ["", "", ""]}, 0x20}}, 0x4000) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') lseek(r4, 0x784, 0x2) pread64(r4, 0x0, 0x0, 0xff) write(r4, &(0x7f0000000000)="f6d96f6fd48edb7d94a15114f232b82c6c40f65702895663a3588a2e81e0b84162990c9b15c39ea2e39b0db58dd9d5f05122ecf434ee3226865db89aef1770a0f3ced0e0719b8d16086a1381f90de9d2cf093f46b8bccba4ff11f6c3e99dea4090c08301d7350578e8e67337664dcb59381059d27af87b5d5f4817a3881044daa850428ab315f3936cda1394513114dc590d1a1bc1", 0x95) 18:21:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) pread64(r0, &(0x7f00000000c0)=""/244, 0xf4, 0x5) 18:21:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) (fail_nth: 1) [ 1736.020163] FAULT_INJECTION: forcing a failure. [ 1736.020163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1736.021033] CPU: 0 PID: 13489 Comm: syz-executor.2 Not tainted 6.5.0-rc7-next-20230824 #1 [ 1736.021606] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1736.022170] Call Trace: [ 1736.022360] [ 1736.022529] dump_stack_lvl+0xc1/0xf0 [ 1736.022814] should_fail_ex+0x4b4/0x5b0 [ 1736.023120] _copy_from_user+0x30/0xf0 [ 1736.023420] sg_write.part.0+0x1cf/0xac0 [ 1736.023728] ? __pfx___lock_acquire+0x10/0x10 [ 1736.024072] ? __pfx_lock_release+0x10/0x10 [ 1736.024385] ? __pfx_sg_write.part.0+0x10/0x10 [ 1736.024726] ? __lock_acquire+0xc3f/0x6340 [ 1736.025038] ? __pfx_lock_release+0x10/0x10 [ 1736.025353] ? find_held_lock+0x2c/0x110 [ 1736.025641] ? inode_security+0x105/0x140 [ 1736.025945] ? avc_policy_seqno+0x9/0x20 [ 1736.026246] ? selinux_file_permission+0x9c/0x520 [ 1736.026595] sg_write+0x8d/0xe0 [ 1736.026850] vfs_write+0x2b9/0xda0 [ 1736.027116] ? __pfx_sg_write+0x10/0x10 [ 1736.027419] ? __pfx_vfs_write+0x10/0x10 [ 1736.027722] ? __fget_files+0x267/0x480 [ 1736.028038] ? __fget_light+0xe5/0x270 [ 1736.028330] ksys_write+0x122/0x250 [ 1736.028603] ? __pfx_ksys_write+0x10/0x10 [ 1736.028905] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1736.029284] do_syscall_64+0x3f/0x90 [ 1736.029558] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1736.029933] RIP: 0033:0x7fc111cd7b19 [ 1736.030200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1736.031438] RSP: 002b:00007fc10f24d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1736.031979] RAX: ffffffffffffffda RBX: 00007fc111deaf60 RCX: 00007fc111cd7b19 [ 1736.032478] RDX: 0000000000000125 RSI: 0000000020000400 RDI: 0000000000000003 [ 1736.032971] RBP: 00007fc10f24d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.033460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1736.033949] R13: 00007ffd2364c5bf R14: 00007fc10f24d300 R15: 0000000000022000 [ 1736.034454] [ 1736.034659] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1736.034659] program syz-executor.6 not setting count and/or reply_len properly 18:21:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/nfsfs\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000001140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000140)={{r0}, "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"}) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:21:39 executing program 0: lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.syz\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x14e2}}, './file0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x9, 0x5}}, './file0\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) faccessat2(r2, &(0x7f0000000400)='./file0/file0\x00', 0x18, 0x3100) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000400)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0/../file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400, 0x20}}, './file0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r4, &(0x7f0000000000)=""/172, 0xac, 0xff) pidfd_getfd(r4, r3, 0x0) 18:21:39 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000005300000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:21:40 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x2, &(0x7f00000017c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x81, r1, &(0x7f0000001440)="11ea0a2b02ab7b150bbe64dca1d9e5fdac5a4503625e367a58d24d6522f36a35bb185afe5832e25f84b9c967fb886668800872887b609261d782cb850c28c6a12c8874381a148b5090c72294f398877fd3e21cc24ce5d5221e82901f91fe82cf61416556526ce86610ff6ac1f0b1a17e6ea07a76fe49980ddea191528c1219305d56ed4efa9158178f19e4a12074f9e5c600c1af0b1dd9be0f9f5343dacb9d42edf1db91dd7bad9889ac5fcb0af0c8ee0e9b81bd84d1014b2fca97d9fc80dd6f73e062bf2dcd0ae12e9c0dab83c7847825c26a2745e21bd05fa9d7a882881eae5d7825ecb4", 0xe5, 0x3ff}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280)="ebe9143f59e3065f5ca302f5f42a78081c594c05b54737fe6ba3f8f7d595a402d3cfcbc730e29be65fec3b4c5dd01667c26a1ea788424c6cd890295deab1287c435092a495b4ad3b2b31b81a782b1a5570ac6a1114069415d9836194", 0x5c, 0x5}]) 18:21:40 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x8) 18:21:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) (fail_nth: 2) 18:21:40 executing program 5: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/190, 0xbe}, {&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000340)=""/98, 0x62}], 0x5, 0x4, 0x5) [ 1736.292156] FAULT_INJECTION: forcing a failure. [ 1736.292156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1736.293005] CPU: 0 PID: 13504 Comm: syz-executor.2 Not tainted 6.5.0-rc7-next-20230824 #1 [ 1736.293552] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1736.294102] Call Trace: [ 1736.294291] [ 1736.294458] dump_stack_lvl+0xc1/0xf0 [ 1736.294742] should_fail_ex+0x4b4/0x5b0 [ 1736.295046] _copy_from_user+0x30/0xf0 [ 1736.295343] sg_write.part.0+0x5f7/0xac0 [ 1736.295656] ? __pfx_sg_write.part.0+0x10/0x10 [ 1736.296023] ? __lock_acquire+0xc3f/0x6340 [ 1736.296342] ? __pfx_lock_release+0x10/0x10 [ 1736.296654] ? find_held_lock+0x2c/0x110 [ 1736.296946] ? inode_security+0x105/0x140 [ 1736.297244] ? avc_policy_seqno+0x9/0x20 [ 1736.297545] ? selinux_file_permission+0x9c/0x520 [ 1736.297898] sg_write+0x8d/0xe0 [ 1736.298148] vfs_write+0x2b9/0xda0 [ 1736.298416] ? __pfx_sg_write+0x10/0x10 [ 1736.298703] ? __pfx_vfs_write+0x10/0x10 [ 1736.299007] ? __fget_files+0x267/0x480 [ 1736.299290] ? __fget_light+0xe5/0x270 [ 1736.299572] ksys_write+0x122/0x250 [ 1736.299840] ? __pfx_ksys_write+0x10/0x10 [ 1736.300151] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1736.300517] do_syscall_64+0x3f/0x90 [ 1736.300801] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1736.301157] RIP: 0033:0x7fc111cd7b19 [ 1736.301427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1736.302666] RSP: 002b:00007fc10f24d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1736.303196] RAX: ffffffffffffffda RBX: 00007fc111deaf60 RCX: 00007fc111cd7b19 [ 1736.303696] RDX: 0000000000000125 RSI: 0000000020000400 RDI: 0000000000000003 [ 1736.304205] RBP: 00007fc10f24d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.304684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1736.305156] R13: 00007ffd2364c5bf R14: 00007fc10f24d300 R15: 0000000000022000 [ 1736.305645] [ 1736.370063] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1736.370063] program syz-executor.6 not setting count and/or reply_len properly 18:21:53 executing program 0: lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.syz\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x14e2}}, './file0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x9, 0x5}}, './file0\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) faccessat2(r2, &(0x7f0000000400)='./file0/file0\x00', 0x18, 0x3100) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000400)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0/../file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400, 0x20}}, './file0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r3, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:21:53 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) pread64(r1, 0x0, 0x0, 0xff) recvmsg$unix(r0, &(0x7f0000000400)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000080)=""/214, 0xd6}, {&(0x7f0000000180)=""/152, 0x98}, {&(0x7f0000000240)=""/152, 0x98}, {&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000001540)=""/216, 0xd8}], 0x6, &(0x7f0000001640)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x108}, 0x100) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000001780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 18:21:53 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x2, &(0x7f00000017c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x81, r1, &(0x7f0000001440)="11ea0a2b02ab7b150bbe64dca1d9e5fdac5a4503625e367a58d24d6522f36a35bb185afe5832e25f84b9c967fb886668800872887b609261d782cb850c28c6a12c8874381a148b5090c72294f398877fd3e21cc24ce5d5221e82901f91fe82cf61416556526ce86610ff6ac1f0b1a17e6ea07a76fe49980ddea191528c1219305d56ed4efa9158178f19e4a12074f9e5c600c1af0b1dd9be0f9f5343dacb9d42edf1db91dd7bad9889ac5fcb0af0c8ee0e9b81bd84d1014b2fca97d9fc80dd6f73e062bf2dcd0ae12e9c0dab83c7847825c26a2745e21bd05fa9d7a882881eae5d7825ecb4", 0xe5, 0x3ff}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280)="ebe9143f59e3065f5ca302f5f42a78081c594c05b54737fe6ba3f8f7d595a402d3cfcbc730e29be65fec3b4c5dd01667c26a1ea788424c6cd890295deab1287c435092a495b4ad3b2b31b81a782b1a5570ac6a1114069415d9836194", 0x5c, 0x5}]) 18:21:53 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000480000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:21:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) (fail_nth: 3) 18:21:53 executing program 5: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/190, 0xbe}, {&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000340)=""/98, 0x62}], 0x5, 0x4, 0x5) 18:21:53 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x300) 18:21:53 executing program 4: sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfd4d}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) [ 1749.865839] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1749.865839] program syz-executor.6 not setting count and/or reply_len properly 18:21:53 executing program 4: syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') r0 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x13) sendfile(r0, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x82e8997f88873560) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) [ 1749.921503] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1749.921503] program syz-executor.2 not setting count and/or reply_len properly 18:21:53 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c06000000004c0000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:21:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r1, 0x2, &(0x7f00000017c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x81, r2, &(0x7f0000001440)="11ea0a2b02ab7b150bbe64dca1d9e5fdac5a4503625e367a58d24d6522f36a35bb185afe5832e25f84b9c967fb886668800872887b609261d782cb850c28c6a12c8874381a148b5090c72294f398877fd3e21cc24ce5d5221e82901f91fe82cf61416556526ce86610ff6ac1f0b1a17e6ea07a76fe49980ddea191528c1219305d56ed4efa9158178f19e4a12074f9e5c600c1af0b1dd9be0f9f5343dacb9d42edf1db91dd7bad9889ac5fcb0af0c8ee0e9b81bd84d1014b2fca97d9fc80dd6f73e062bf2dcd0ae12e9c0dab83c7847825c26a2745e21bd05fa9d7a882881eae5d7825ecb4", 0xe5, 0x3ff}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x5}]) [ 1749.932477] FAULT_INJECTION: forcing a failure. [ 1749.932477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1749.934196] CPU: 1 PID: 13529 Comm: syz-executor.2 Not tainted 6.5.0-rc7-next-20230824 #1 [ 1749.935264] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1749.936344] Call Trace: [ 1749.936695] [ 1749.937014] dump_stack_lvl+0xc1/0xf0 [ 1749.937549] should_fail_ex+0x4b4/0x5b0 [ 1749.938125] _copy_to_user+0x30/0xc0 [ 1749.938658] simple_read_from_buffer+0xd0/0x170 [ 1749.939307] proc_fail_nth_read+0x1a6/0x290 [ 1749.939915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1749.940590] ? security_file_permission+0xb5/0xe0 [ 1749.941255] vfs_read+0x1de/0x8f0 [ 1749.941762] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1749.942453] ? __pfx_vfs_read+0x10/0x10 [ 1749.943031] ? __fget_files+0x267/0x480 [ 1749.943590] ksys_read+0x122/0x250 [ 1749.944131] ? __pfx_ksys_read+0x10/0x10 [ 1749.944709] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1749.945453] do_syscall_64+0x3f/0x90 [ 1749.945978] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1749.946696] RIP: 0033:0x7fc111c8a69c [ 1749.947215] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1749.949623] RSP: 002b:00007fc10f24d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1749.950639] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fc111c8a69c [ 1749.951575] RDX: 000000000000000f RSI: 00007fc10f24d1e0 RDI: 0000000000000004 [ 1749.952535] RBP: 00007fc10f24d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1749.953497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1749.954452] R13: 00007ffd2364c5bf R14: 00007fc10f24d300 R15: 0000000000022000 [ 1749.955435] 18:21:53 executing program 5: r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/190, 0xbe}, {&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000340)=""/98, 0x62}], 0x5, 0x4, 0x5) 18:21:53 executing program 0: lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.syz\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x14e2}}, './file0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x9, 0x5}}, './file0\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) faccessat2(r2, &(0x7f0000000400)='./file0/file0\x00', 0x18, 0x3100) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000400)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0/../file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400, 0x20}}, './file0\x00'}) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:21:53 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') write$binfmt_aout(r0, &(0x7f0000000340)={{0xcc, 0x9, 0x80, 0x184, 0x227, 0x5, 0x369, 0x5}, "51527d0b092ed0a39232ada3b1c3c7dd7b0918eba6eb9c3af6a0a53ef6c023df8f003abd96f904cd1012850b6ee5143abe3350b110777164a193ab2db2a2bdad11b9590d8e66bcb725bd81b736", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x96d) pread64(r0, 0x0, 0x0, 0xff) fallocate(0xffffffffffffffff, 0x48, 0x101, 0x9) 18:21:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r1, 0x2, &(0x7f00000017c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x81, r2, &(0x7f0000001440)="11ea0a2b02ab7b150bbe64dca1d9e5fdac5a4503625e367a58d24d6522f36a35bb185afe5832e25f84b9c967fb886668800872887b609261d782cb850c28c6a12c8874381a148b5090c72294f398877fd3e21cc24ce5d5221e82901f91fe82cf61416556526ce86610ff6ac1f0b1a17e6ea07a76fe49980ddea191528c1219305d56ed4efa9158178f19e4a12074f9e5c600c1af0b1dd9be0f9f5343dacb9d42edf1db91dd7bad9889ac5fcb0af0c8ee0e9b81bd84d1014b2fca97d9fc80dd6f73e062bf2dcd0ae12e9c0dab83c7847825c26a2745e21bd05fa9d7a882881eae5d7825ecb4", 0xe5, 0x3ff}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 1750.099857] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1750.099857] program syz-executor.6 not setting count and/or reply_len properly 18:21:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 1750.214309] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1750.214309] program syz-executor.2 not setting count and/or reply_len properly 18:22:05 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x4000) 18:22:05 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') r1 = openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0x4080, 0x42) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x1f}}, './file0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) symlinkat(&(0x7f0000000180)='./file0/file0\x00', r2, &(0x7f0000000200)='./file0\x00') ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x6, 0x8}) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:22:05 executing program 0: lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.syz\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x14e2}}, './file0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x9, 0x5}}, './file0\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) faccessat2(r2, &(0x7f0000000400)='./file0/file0\x00', 0x18, 0x3100) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000400)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0/../file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400, 0x20}}, './file0\x00'}) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:22:05 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000680000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:22:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r1, 0x2, &(0x7f00000017c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x81, r2, &(0x7f0000001440)="11ea0a2b02ab7b150bbe64dca1d9e5fdac5a4503625e367a58d24d6522f36a35bb185afe5832e25f84b9c967fb886668800872887b609261d782cb850c28c6a12c8874381a148b5090c72294f398877fd3e21cc24ce5d5221e82901f91fe82cf61416556526ce86610ff6ac1f0b1a17e6ea07a76fe49980ddea191528c1219305d56ed4efa9158178f19e4a12074f9e5c600c1af0b1dd9be0f9f5343dacb9d42edf1db91dd7bad9889ac5fcb0af0c8ee0e9b81bd84d1014b2fca97d9fc80dd6f73e062bf2dcd0ae12e9c0dab83c7847825c26a2745e21bd05fa9d7a882881eae5d7825ecb4", 0xe5, 0x3ff}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 18:22:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="030000bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:22:05 executing program 5: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/190, 0xbe}, {&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000340)=""/98, 0x62}], 0x5, 0x4, 0x5) 18:22:05 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) [ 1762.071386] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1762.071386] program syz-executor.2 not setting count and/or reply_len properly sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x2124, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x5e}}}}, [@NL80211_PMSR_ATTR_PEERS={0xd0, 0x5, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}]}]}, {0x70, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x205}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x1c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x668, 0x5, 0x0, 0x1, [{0x154, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x64, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xdf}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x8c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x48}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x41}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x84, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3ff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}]}, {0x260, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x224, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9170}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19d}]}]}, {0x1bc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x164, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa402}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1f6b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7a}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9c1f}]}]}, {0x60, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}, @NL80211_PMSR_ATTR_PEERS={0x32c, 0x5, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x308, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x2d0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x130, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x339}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x30, 0x5, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}, @NL80211_PMSR_ATTR_PEERS={0x1104, 0x5, 0x0, 0x1, [{0x110, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x70, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xbaf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x7c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x270, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x234, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x20}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x7b8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x310, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9f}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x440, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x120, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7538}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xaf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x715}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x40, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}]}]}]}, {0xc8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xb8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0xb8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x800}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd6}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x217}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x13f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x114}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x232}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}]}]}, {0xec, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3cd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x337}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}]}, {0x35c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x64, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x38}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x258, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x130, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x716c}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc0}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x84, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x4}, @NL80211_PMSR_ATTR_PEERS={0x560, 0x5, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}]}]}, {0x51c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xd4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x1cc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x124, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xed}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xdd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x250, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x83}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9a}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}]}, 0x2124}, 0x1, 0x0, 0x0, 0x800}, 0x200088c0) pread64(r0, 0x0, 0x0, 0xff) [ 1762.154129] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1762.154129] program syz-executor.6 not setting count and/or reply_len properly 18:22:22 executing program 5: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/190, 0xbe}, {&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000340)=""/98, 0x62}], 0x5, 0x4, 0x5) 18:22:22 executing program 7: getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8100) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) pread64(r2, &(0x7f0000000100)=""/182, 0xb6, 0x4) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) pread64(r1, 0x0, 0x0, 0xff) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000040)) 18:22:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f00000000c0)) 18:22:22 executing program 0: lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.syz\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x14e2}}, './file0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x9, 0x5}}, './file0\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) faccessat2(r2, &(0x7f0000000400)='./file0/file0\x00', 0x18, 0x3100) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000400)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0/../file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400, 0x20}}, './file0\x00'}) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:22:22 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x400000) 18:22:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r1, 0x2, &(0x7f00000017c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x81, r2, &(0x7f0000001440)="11ea0a2b02ab7b150bbe64dca1d9e5fdac5a4503625e367a58d24d6522f36a35bb185afe5832e25f84b9c967fb886668800872887b609261d782cb850c28c6a12c8874381a148b5090c72294f398877fd3e21cc24ce5d5221e82901f91fe82cf61416556526ce86610ff6ac1f0b1a17e6ea07a76fe49980ddea191528c1219305d56ed4efa9158178f19e4a12074f9e5c600c1af0b1dd9be0f9f5343dacb9d42edf1db91dd7bad9889ac5fcb0af0c8ee0e9b81bd84d1014b2fca97d9fc80dd6f73e062bf2dcd0ae12e9c0dab83c7847825c26a2745e21bd05fa9d7a882881eae5d7825ecb4", 0xe5, 0x3ff}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 18:22:22 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c06000000006c0000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:22:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="040000bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 1778.461738] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1778.461738] program syz-executor.6 not setting count and/or reply_len properly [ 1778.491016] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1778.491016] program syz-executor.2 not setting count and/or reply_len properly 18:22:22 executing program 0: lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.syz\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x14e2}}, './file0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x9, 0x5}}, './file0\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) faccessat2(r2, &(0x7f0000000400)='./file0/file0\x00', 0x18, 0x3100) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000400)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0/../file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r3, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:22:22 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x3000000) 18:22:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000000c0)) 18:22:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r1, 0x1, &(0x7f00000017c0)=[&(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x5}]) 18:22:22 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)) 18:22:22 executing program 5: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/190, 0xbe}, {&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000340)=""/98, 0x62}], 0x5, 0x4, 0x5) 18:22:22 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000740000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:22:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="090000bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:22:22 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x8000000) 18:22:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) pread64(r1, &(0x7f00000000c0)=""/239, 0xef, 0x469b) 18:22:22 executing program 0: lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.syz\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x14e2}}, './file0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x9, 0x5}}, './file0\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) faccessat2(r2, &(0x7f0000000400)='./file0/file0\x00', 0x18, 0x3100) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000400)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0/../file0\x00'}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r3, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:22:22 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='statm\x00') pread64(r0, 0x0, 0x0, 0x4000000fe) [ 1778.825932] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1778.825932] program syz-executor.6 not setting count and/or reply_len properly [ 1778.848573] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1778.848573] program syz-executor.2 not setting count and/or reply_len properly 18:22:22 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x40000000000000) 18:22:22 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000017c0)=[0x0]) 18:22:22 executing program 7: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001140)=""/4094, 0xffe) getdents(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4c040}, 0x44010) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r1, 0x0, 0x0, 0xff) 18:22:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') preadv(r0, 0x0, 0x0, 0x4, 0x5) 18:22:22 executing program 0: lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.syz\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x14e2}}, './file0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x9, 0x5}}, './file0\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) faccessat2(r2, &(0x7f0000000400)='./file0/file0\x00', 0x18, 0x3100) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000400)=ANY=[]) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r3, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:22:35 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000017c0)=[0x0]) 18:22:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') preadv(r0, 0x0, 0x0, 0x4, 0x5) 18:22:35 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c06000000007a0000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:22:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="100000bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:22:35 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x141a00, 0x0) r2 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x82302, 0x82) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000080)={0x4}, 0x4) pread64(r1, 0x0, 0x5e, 0x2) 18:22:35 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x300000000000000) 18:22:35 executing program 0: lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.syz\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x14e2}}, './file0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x9, 0x5}}, './file0\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) faccessat2(r2, &(0x7f0000000400)='./file0/file0\x00', 0x18, 0x3100) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000400)=ANY=[]) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r3, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:22:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x80000000, 0x111942) lseek(r1, 0x3a, 0x0) r2 = accept4(r0, &(0x7f0000000100)=@rc, &(0x7f0000000180)=0x80, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc6082, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}]}]}]}, 0x2c}}, 0x0) accept4$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14, 0x80800) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000002d00)={'syztnl2\x00', &(0x7f0000002c80)={'sit0\x00', 0x0, 0x2f, 0x5, 0x8, 0x777f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x35}, 0x7800, 0x40, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000002dc0)={'ip6_vti0\x00', &(0x7f0000002d40)={'syztnl1\x00', 0x0, 0x2b, 0x1f, 0x7, 0xffff8001, 0x2, @private0, @private0, 0x40, 0x20, 0x8, 0xfffffff7}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000003000)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002e00)={0x1a8, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xf0, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x80}, 0x40) r10 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/exec\x00', 0x2, 0x0) r11 = syz_open_dev$vcsn(&(0x7f0000000380), 0x80000000, 0x80) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r1) sendmsg$IPVS_CMD_DEL_DAEMON(r11, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x9c, r12, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x400}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0xe}}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbd0}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r10, 0x8040942d, &(0x7f0000000240)) pread64(r2, &(0x7f0000000000)=""/168, 0xa8, 0xff) [ 1791.658868] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1791.658868] program syz-executor.6 not setting count and/or reply_len properly 18:22:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') preadv(r0, 0x0, 0x0, 0x4, 0x5) 18:22:35 executing program 0: lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.syz\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x14e2}}, './file0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x9, 0x5}}, './file0\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) faccessat2(r2, &(0x7f0000000400)='./file0/file0\x00', 0x18, 0x3100) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r3, &(0x7f0000000000)=""/172, 0xac, 0xff) [ 1791.689477] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1791.689477] program syz-executor.2 not setting count and/or reply_len properly [ 1791.705822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1791.706722] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1791.707896] Buffer I/O error on dev sr0, logical block 0, async page read [ 1791.710968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1791.711749] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 7 prio class 2 [ 1791.712923] Buffer I/O error on dev sr0, logical block 1, async page read [ 1791.713839] Buffer I/O error on dev sr0, logical block 2, async page read [ 1791.714735] Buffer I/O error on dev sr0, logical block 3, async page read [ 1791.715677] Buffer I/O error on dev sr0, logical block 4, async page read [ 1791.716620] Buffer I/O error on dev sr0, logical block 5, async page read [ 1791.717552] Buffer I/O error on dev sr0, logical block 6, async page read [ 1791.718459] Buffer I/O error on dev sr0, logical block 7, async page read [ 1791.761742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1791.762522] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1791.763603] Buffer I/O error on dev sr0, logical block 0, async page read [ 1791.766669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1791.767460] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1791.768562] Buffer I/O error on dev sr0, logical block 1, async page read [ 1791.769994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1791.770728] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 18:22:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="630000bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 1791.772127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1791.773252] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1791.793167] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1791.794435] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1791.795386] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1791.796318] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 01 00 00 01 00 [ 1791.797319] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 1791.914844] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1791.914844] program syz-executor.2 not setting count and/or reply_len properly 18:22:46 executing program 0: lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.syz\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x14e2}}, './file0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x9, 0x5}}, './file0\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) faccessat2(r2, &(0x7f0000000400)='./file0/file0\x00', 0x18, 0x3100) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r3, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:22:46 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x800000000000000) 18:22:46 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020200bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:22:46 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="74723db400000000f5e14f7828f2e43bc100000000000087bd5bb963fbdc34b3501d5a04f7b738624144de9646c8d81553042b2cab55361b921834d67c06533ba243c51255a92f52f9f977b440a7971bebdb3d4e2a115504e8c8bfb6d1a669963ac53d6f79c74e4e9d6e7c89ee673c7e9555f3bcba7a1d0845727eab9109c8ada0a961a9f828df21", @ANYRESHEX=r1, @ANYBLOB="847a5d9ffea49e030f70a7d94eeccbd4cb652aeb522208b37e39e2b0c19740c047d4f3260b9b168e156989df13b091b56b8c4ed90925238527f69296bc979662ff791b0cf98f65aa316197c6014bf31835e702f3df5590f640f29a3e88833460cbff89904892d6506d8d36dc82b86ba8eebdfd860e4028a060", @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x690d}}, './file0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev={0xac, 0x14, 0x14, 0x30}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x5c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bbc, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000180)=0x1) setresuid(0x0, r5, 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000001340)="57032921b27f162f1c42db63c293bfbe30b6afc636c9487fa6c2072abf16c3937aa99ef2c6e5e2d9a9c0cd62cfd1c71028e0549bddfa2a14530aedf17e9af6bd69d6c5351a5be3c6727b5706f363598dd1a056e0fd830797725408c2cadb6515b39618756b24c157a1898e996bd27b58ce7297f9dfb6338f949127df263137a5d66f5a23270d116ea326cdf165ab8583c8eadfd06aba2341a92945", 0x9b, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid}, {@afid={'afid', 0x3d, 0xaf26}}, {@msize={'msize', 0x3d, 0x40}}, {@noextend}, {@privport}], [{@uid_eq={'uid', 0x3d, r5}}, {@subj_role={'subj_role', 0x3d, 'pagemap\x00'}}]}}) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x81) 18:22:46 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c060000e0ffff0000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:22:46 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000017c0)=[0x0]) 18:22:46 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/190, 0xbe}, {&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000200)=""/230, 0xe6}], 0x4, 0x4, 0x5) 18:22:46 executing program 4: ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f00000000c0)) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.io_service_time\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000180)) pread64(r1, &(0x7f0000000100)=""/4, 0x4, 0x101) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) [ 1803.216885] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1803.216885] program syz-executor.2 not setting count and/or reply_len properly [ 1803.220027] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1803.220027] program syz-executor.6 not setting count and/or reply_len properly 18:22:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020300bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:22:47 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000200000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:22:47 executing program 0: lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.syz\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x14e2}}, './file0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x9, 0x5}}, './file0\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r3, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:22:47 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/190, 0xbe}, {&(0x7f00000000c0)=""/158, 0x9e}, {&(0x7f0000000180)=""/88, 0x58}], 0x3, 0x4, 0x5) 18:22:47 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000017c0)=[&(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}]) 18:22:47 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0xffffffff00000000) 18:22:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r0, &(0x7f0000000000)=""/158, 0x9e, 0xff) 18:22:47 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1) pread64(r0, 0x0, 0x0, 0xff) [ 1803.554680] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1803.554680] program syz-executor.2 not setting count and/or reply_len properly [ 1803.578457] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1803.578457] program syz-executor.6 not setting count and/or reply_len properly 18:23:00 executing program 0: lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.syz\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x14e2}}, './file0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x9, 0x5}}, './file0\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r3, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:23:00 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000300000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:23:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020400bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:23:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/190, 0xbe}, {&(0x7f00000000c0)=""/158, 0x9e}], 0x2, 0x4, 0x5) 18:23:00 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000017c0)=[&(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}]) 18:23:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x80000001, 0x9, 0x80000000, 0x0, 0x9}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) fdatasync(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x4}}, 0xe8) getsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000240)=0x1) 18:23:00 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') pread64(r0, 0x0, 0x0, 0xff) 18:23:00 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp6\x00') setsockopt$inet6_tcp_int(r0, 0x6, 0x28, &(0x7f0000000040), 0x4) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) [ 1816.336435] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1816.336435] program syz-executor.6 not setting count and/or reply_len properly 18:23:00 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000400000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:23:00 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000017c0)=[&(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}]) [ 1816.407849] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1816.407849] program syz-executor.2 not setting count and/or reply_len properly [ 1816.469666] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1816.469666] program syz-executor.6 not setting count and/or reply_len properly 18:23:00 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x400}}, './file0\x00'}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) r5 = pidfd_getfd(r4, r3, 0x0) fdatasync(r5) 18:23:00 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/190, 0xbe}], 0x1, 0x4, 0x5) 18:23:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020500bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:23:00 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000500000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:23:00 executing program 0: lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.syz\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x14e2}}, './file0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x9, 0x5}}, './file0\x00'}) syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r2, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:23:00 executing program 4: r0 = fork() ptrace(0x4207, r0) r1 = syz_open_procfs(r0, &(0x7f0000000300)='fd\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0xff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee00}}, './file0\x00'}) setsockopt$inet_tcp_int(r2, 0x6, 0x8, &(0x7f0000000100)=0x2, 0x4) 18:23:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r1, 0x1, &(0x7f00000017c0)=[&(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) [ 1816.749973] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1816.749973] program syz-executor.2 not setting count and/or reply_len properly [ 1816.787729] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1816.787729] program syz-executor.6 not setting count and/or reply_len properly 18:23:13 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000600000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:23:13 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x2, 0x2d) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r1, 0x0, 0x0, 0xff) 18:23:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020600bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:23:13 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') preadv(r0, &(0x7f00000003c0), 0x0, 0x4, 0x5) 18:23:13 executing program 0: lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.syz\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x14e2}}, './file0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x9, 0x5}}, './file0\x00'}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r2, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:23:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r1, 0x1, &(0x7f00000017c0)=[&(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 18:23:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='io\x00') pread64(r0, &(0x7f00000000c0)=""/188, 0xbc, 0x0) 18:23:13 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xb) 18:23:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={0x0, @l2={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0x1}, @l2={0x1f, 0x8020, @any, 0xddc, 0x1}, @l2tp={0x2, 0x0, @remote, 0x4}, 0x6, 0x0, 0x0, 0x0, 0x20, &(0x7f00000002c0)='sit0\x00', 0x1, 0x0, 0x6}) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f00000004c0)) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = epoll_create(0x80000000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x410, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@privport}, {@access_any}, {@cache_mmap}], [{@smackfsfloor={'smackfsfloor', 0x3d, '%\\'}}, {@obj_user={'obj_user', 0x3d, 'cmdline\x00'}}, {@subj_user={'subj_user', 0x3d, '{(\'+'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@audit}, {@fowner_eq={'fowner', 0x3d, r4}}, {@obj_user}, {@uid_gt={'uid>', 0xee00}}]}}) 18:23:13 executing program 0: lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.syz\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x14e2}}, './file0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:23:13 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0), 0xf) clock_gettime(0x0, &(0x7f0000000380)) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x1}, {r2, 0x3a}], 0x2, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x406, r1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4) clock_gettime(0x7, &(0x7f0000000040)) clock_gettime(0x3, &(0x7f0000000080)) [ 1829.992730] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1829.992730] program syz-executor.6 not setting count and/or reply_len properly [ 1830.001906] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1830.001906] program syz-executor.2 not setting count and/or reply_len properly 18:23:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(r1, 0x1, &(0x7f00000017c0)=[&(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 18:23:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:23:27 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000700000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:23:27 executing program 0: lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.syz\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x14e2}}, './file0\x00'}) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:23:27 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x834, 0x35, 0x800, 0x70bd25, 0x25dfdbfd, {0x4}, [@nested={0x18b, 0x54, 0x0, 0x1, [@typed={0x7, 0x80, 0x0, 0x0, @str='\\!\x00'}, @typed={0x2b, 0x64, 0x0, 0x0, @binary="88faf1ec85e68647fe5fe6824a9791582a5e40f2f124a69f7e1da884f02aff68881cef4f45add3"}, @generic="4a9a729822fc1b5993be9f6160a4ac1b7a85b0219f0b1ce4c0d02bbd2d53b8a7c751abf4e58b9b9956b5d7dc354eb389ce077e7ae55cb611793bee", @typed={0x102, 0x6b, 0x0, 0x0, @binary="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"}, @typed={0xc, 0x77, 0x0, 0x0, @u64=0x10001}, @typed={0x8, 0x2a, 0x0, 0x0, @uid=r1}]}, @nested={0x282, 0x7, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64}, @generic="714608f12763e73cbb70c8a979786fa1ce63dded7ceb94351730dab66285a25c6383b65776a9eee73b9c8fa28e42a3d8123274f1e542778ef76c29b9826fb40f53306824348a44f298d243315b9cede5a58f6076f8a16bf532b52b206d7b21d19a0b17949883b7947a9e9a268b1562292249562fae38ace9d0e58ecde6d6c1ea48db29eb82cdca6a55d35d95b647dc68e3e798d3c9b285e1e6ce53251c4ec7318822a645894ea065aac75890725811fb377e20709f4d1782b1ece1bdedf9382e3afb992a9806337fe8d75d03b8b61ede16fafdf5d3e5202327f237da9b4f544f6ff6d14af8243d1d1bf5ca7693", @generic="07c676b90759753bc702434797f1102eb747ddc20628caa12cb5e5ce394e8f884c4d87dd363a3f823a281387d524d68a8818e00b689cfaa6882c77f555672e1c224435b14e0148f003dd6bc2", @typed={0xc, 0x5, 0x0, 0x0, @u64=0xbcd}, @generic="67bef5fa448f3db9628ea3d0873ad19f6985a161a7e7cc680dbd33fc14e3c2390ecb4f476f6d39f28cde537b602d7092d5c27da3ce957c803852138cf55d9d1dfd5795c0b006cb73866da5c00b534a018e40aeeccff913520443d2c2593d43344ede9fed500fbe13c57cbdbc3f4954e2e447f493fb7cba55c4924fa01f0117106609992e9cbbe411b882a861f60d5388ebec58b1f866b8149d705605fb6cb3c2d5d3148925809c3f904035e92dcf32785fac212a93cb95e1480e6342f1b5e48dfef4b2b0eac0c83cd6a1d7cf06d6d18bc23e349ebb30a43cc23428afb7957f986517e4541bff0f68e440a1d934843c7b95e3bf97b1", @typed={0xc, 0x37, 0x0, 0x0, @u64=0x9}, @typed={0x4, 0x3}, @generic="035c06ae74b6bc339e9cd23b5e49510a6921b6b26c596b28f506ebd612fc7c9665f186f05213b30a"]}, @nested={0x35a, 0x94, 0x0, 0x1, [@typed={0xc, 0x30, 0x0, 0x0, @u64=0xfff}, @typed={0x8, 0x20, 0x0, 0x0, @u32=0x4}, @typed={0x4, 0x5b}, @typed={0x8, 0x18, 0x0, 0x0, @uid=0xee01}, @generic="d05e6c8c32722ced21668ffacad6060ecdd227041e8206dbcef979ac41f601623a7ddce1b5f3f5508b77b40a9d6f808fe25e0d0c51b98e1976495fdb1c4eeac07edd890ded787e5ab5b8d1cdfca9b6abe66627d595cbf39112a41e81018ea4d68233da1e9192770630476850ed8c96f0d1aac2daf9b7980c9480c6f4d2d1cdcf777b4a280c0783efd553a1ffd5f3f6755fdea1794ac22d8cb38b74e7b9dd52b7da27c84a31b4b080278b65ec64ba5ab418f9e45799264201833b830aa9011bf01de5c80d8cc131ce673771d7c810f8e757e933f8419bc3f6043c", @generic="21b5700fe51b4ae458744da7d2f2c19b28e4913a29c8abc16927b2c96b00338301cc500c71e66f9e4a9be4293bd0896728813b70910f7358a5f89992e271e244cb6547bcb9a2201871864aae9053b6ef7544df0228ceeba0c9b9710e48b7fd5e7f53c88375598ac7a67d2169176861f22cb4f45aac7945f2fe31010216afde208594a204985f8e8da96964e7179f8a34c46378ea0c585bbad123b73b1a74388266ec4311fc3e8d70daffa770d7727cd95fcfc18228660af048dd25c6a45a77d161b635aafd99d21d878561b562430a6752426a9c2e43c8599998f12201bfea28e04f3d73b0aa03ff958c0b809b4b4daeafd76b", @typed={0x14, 0x96, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="c7520aeb0e25af55540de22179933662de6e5e855e1a0651d99826ffdba83dff8ca3505b5346370c300af63f6e878a7fe28a6c31ea1a908b712bd995f1d4c00664acc704f32e3039eaba1fd09287a8e55c278b6a428cb660263840b04486743fa811155b26f4ec0e20e15d9823ed58bc2bfc95e274e5d7078552c739abb71eec5267911179b5279362752b9c7e109485385e60c4e08136279df6c6ee0e4eaf22af2ef02412a803f5cea11f088f46fff476f0d0b28ecac31f4d9f0c3653836fa392de9772", @generic="0c9c9bd2d32f9e11189705d3e344980b29c49d764dd55bd09fc9398b51ad77bfd121e8358ba4ba97a2208b47901d1e7c7f4ee7cf87309dc7dce48bc3df052289744c7a0237f7e32e837852c7f2a5eb78662f7cd62c532e44b78a6ad34ae91875bb69d27d7d9801eb3f83c8265b055462272916d304cb2fb959e619fc44f9fa1277e25b5fd1d78d", @generic="a14636f714e4a148cfd6"]}, @typed={0x4b, 0x6f, 0x0, 0x0, @binary="9b5001eb71adae2609131149df28c13c1a92c7cc376d883ce666cd1e4a9d67127817623a9151b0b87e34d87455441b6e501b174cb5ef97de33c9b116b355c51529c6c4b28ed807"}, @typed={0x14, 0x43, 0x0, 0x0, @ipv6=@private2}, @generic="2852b470a6a98d7692dbb52a1034fa6060d80776ffafa55e1808fc8313d1f6d107a77e87dbe4aec4d3146302e21d26c3fb7fba3f12f7fdc4697ced3e01774dda78797aeda289e53bb066d8be1f4a14d554"]}, 0x834}, 0x1, 0x0, 0x0, 0x4c801}, 0x4048800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) r3 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) write$vga_arbiter(r3, &(0x7f0000000180)=@target={'target ', {'PCI:', '18', ':', '15', ':', '1', '.', '4'}}, 0x15) ppoll(&(0x7f0000000300)=[{r0}, {r2}], 0x2, 0x0, 0x0, 0x0) 18:23:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='io\x00') pread64(r0, &(0x7f00000000c0)=""/188, 0xbc, 0x0) 18:23:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020700bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:23:27 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000003b00)='./file0\x00', 0x0, 0x1, &(0x7f0000003d00)=[{&(0x7f0000003bc0)="c3", 0x1, 0xffffffff}], 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000003f00), 0xffffffffffffffff) syz_genetlink_get_family_id$smc(&(0x7f0000004480), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000004680), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/202, 0xca}, {&(0x7f0000000180)=""/192, 0xc0}, {&(0x7f0000000000)=""/26, 0x1a}, {&(0x7f0000000240)=""/17, 0x11}, {&(0x7f0000000280)=""/227, 0xe3}, {&(0x7f0000000380)=""/82, 0x52}], 0x6) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') pread64(r1, 0x0, 0x0, 0xff) 18:23:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x2840, 0x4, 0x3}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fcntl$dupfd(r1, 0x0, r2) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:23:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') preadv(r0, &(0x7f00000003c0), 0x0, 0x4, 0x5) 18:23:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') preadv(r0, &(0x7f00000003c0), 0x0, 0x4, 0x5) [ 1843.690835] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1843.690835] program syz-executor.2 not setting count and/or reply_len properly [ 1843.700714] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1843.700714] program syz-executor.6 not setting count and/or reply_len properly 18:23:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="024800bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:23:27 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600004800000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 1843.757648] syz-executor.7[13793]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 18:23:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pidfd_getfd(r0, r0, 0x0) pread64(r0, &(0x7f0000000000)=""/164, 0xa4, 0xc7) 18:23:27 executing program 0: lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.syz\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) [ 1843.857049] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1843.857049] program syz-executor.2 not setting count and/or reply_len properly [ 1843.864827] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1843.864827] program syz-executor.6 not setting count and/or reply_len properly 18:23:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x80000001, 0x9, 0x80000000, 0x0, 0x9}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) fdatasync(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x4}}, 0xe8) getsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000240)=0x1) 18:23:27 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600004c00000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:23:27 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='attr\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:23:27 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) write$vga_arbiter(r2, &(0x7f0000000040)=@unlock_all, 0xb) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:23:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="024c00bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:23:27 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') preadv(r0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x4, 0x5) [ 1844.012545] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1844.012545] program syz-executor.2 not setting count and/or reply_len properly [ 1844.021588] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1844.021588] program syz-executor.6 not setting count and/or reply_len properly 18:23:27 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600006800000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:23:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="026800bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 1844.125629] syz-executor.7[13793]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1844.176055] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1844.176055] program syz-executor.2 not setting count and/or reply_len properly [ 1844.178163] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1844.178163] program syz-executor.6 not setting count and/or reply_len properly 18:23:38 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600006c00000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:23:38 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:23:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') preadv(r0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x4, 0x5) 18:23:38 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='stat\x00') ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xa9596) pread64(r0, 0x0, 0x0, 0xff) 18:23:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="026c00bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:23:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x80000001, 0x9, 0x80000000, 0x0, 0x9}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) fdatasync(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x4}}, 0xe8) getsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000240)=0x1) 18:23:38 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x4040, 0x0) r1 = dup2(r0, r0) write$vga_arbiter(r1, &(0x7f00000000c0)=@unlock_all, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) ppoll(&(0x7f0000000300)=[{r0}, {r2}], 0x2, 0x0, 0x0, 0x0) r4 = openat2(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x400000, 0xe1, 0x1b}, 0x18) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x4c080, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) timer_gettime(0x0, &(0x7f0000000340)) sendmsg$netlink(r4, &(0x7f00000002c0)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)=[{&(0x7f0000003280)={0x17c, 0x28, 0x100, 0x70bd25, 0x25dfdbfb, "", [@generic="1e317ed5dd4432d5014eb8d5a49fb72bc8125bb596d25c4f16af1f049df062a77e96af337b20813ed0fb948716076e1f974d5f16e4f635e667c23b61bd8cb502a066b90ed1f40276c5722bf57799c337788c0a18a8576f125c8e70c3eac5b911e1e07ec21d825dacdc7997603f85442a8afacdf68433629901230fd50f80cff6bb896da5c405b96cddfa2a24530987afd8f7253cd430a6c73c9d6daed7474ccfc49677589f49a69a7ab09bac8cc2c2ab7aaace6d581ba311e237c09ed8d402015f44ca20f625d9b63f3d5c0c254ea1070f3feb391aa9455bccacc3e6743dc2170ae5a623c6ee8b97072a4a0728d2b51146bd81b0", @typed={0x8, 0x2b, 0x0, 0x0, @uid=r5}, @typed={0x8, 0x43, 0x0, 0x0, @uid=r6}, @generic="5971dc8b0713cf0053b903cd36d1491c6f73116caf3c1d9db663b90769239eeb42b8d79854570afcb76553fcdb3f6e1b98b40f2e77447286c4a80aa339", @typed={0xc, 0x2c, 0x0, 0x0, @u64=0x80}, @typed={0xc, 0x36, 0x0, 0x0, @u64=0x40000000004}, @generic="591235e6be8d3cf9a34014fb8156564b3427"]}, 0x17c}, {&(0x7f00000035c0)={0x151c, 0x17, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@generic="1c387717f46db11597d3ba847eeb36e3aa2c0821563b6c147de38212dae980cd208148f85c9ee4dfce352ba5479ae8e8a8f2f49d2d47424712b98716eac7570b12f3bd4859bfd5273169be859f0875e2250cdfbc2a28da6cc4fea970699676ec", @typed={0x4, 0x73}, @generic="47d2791e65d9148f092caaa6f0904c7493dddf7e8c250fb9218f632b5c3a3cf3df9c2811dc30da92", @nested={0x25b, 0x8e, 0x0, 0x1, [@generic="5e29e3849d6b01670530789fefcb80d9ebba8d5a3f9885e46a9b1b88acd853587c61e051b8ba12f6cd73a6536853ff690e4c31670dd85cfff3fe4e2030ae7537704ceeb00073fc149ed9e4c058fdd55c9244203fe81282ee09d3b8e005cb527cc81a58d528a94c3529f2f8bf3469b61befba4567f6f00ab5d8740d3266c64194b7ffddb92ec235bec2bc097520bafd08ebe3a4fcf64854b0a38852e1672950925b5b8bcaed4c6c81e70c3e2fe8cefd298eb19359edde7727548287bbdd60a2b99d", @typed={0x8, 0x91, 0x0, 0x0, @pid}, @generic="4618b3b425a660afc15e270f283248e2454dc0398d6dee6d0f9ad3ceeb6212405a6ceed0bf0b91c5c476a596410d07aa361d512d57a75606e5b5a215d41129435413f8e1bab4147eb9750a2130752e2941e8dd06b1424b36084ffb1045246f45932111d59aedcb162c6573213ebba92a5e32022b82849d03c033f0cfddef964dbd9d10a92328f71d58fa95f9c6ea90a2", @typed={0x8, 0x80, 0x0, 0x0, @fd=r8}, @generic="42c37b89c1f73a84c0c309f5c023e81c34cbe41984e992d158192606e41dba020396507ff54867be4892cc8769b8ac88832fa2b7fdb6bcc0dfc72f6340df59af908e684c65b46ed66ba5ffff3a858b69e1e6439c7b1e4fad1fcbc3fff5eb42be27f3ed12be437a1dfe6ed6ce5cb9129b497d979ab24296cb72565969e8a324b6adbf138009b7c4650363c70d5accbfa2bfe5d5ccfa5e10840d6ae64b7966e852fec1d9b97d773d605e06f7706bedb5d9e7d3229be13f453e7e58e20444b647dd3caf3f26844ddd6cc9ae0afeae8fdc339b0ece1b527ad65e987c457a3b24f8d3a99be7f09d25f876eb74cce1bc95", @typed={0x8, 0x72, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @typed={0x1a, 0xa, 0x0, 0x0, @binary="1c2f40886a67a41a36b083eab7fe244068ed4a0308c1"}, @nested={0x1123, 0x14, 0x0, 0x1, [@typed={0x8, 0x92, 0x0, 0x0, @pid}, @typed={0x14, 0x50, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x29}}, @typed={0xc, 0x2e, 0x0, 0x0, @u64=0x3ff}, @generic="fddcff02690ae256089266f3c6de77eb6afda9c240ca00bc51f62400bc0c44e716902064f662162d8a7a34d92f32c37dfbd10c99ac44ca0bd264bdae9006f9f86604c04f67d9b05071b90856afee7a7009e99273a84adac37820fdf82c6a848d7b3ee721a123173014551dc8", @typed={0x8, 0x5e, 0x0, 0x0, @fd}, @typed={0x8, 0x26, 0x0, 0x0, @fd=r4}, @generic="10b0fe5a5e618bf86650", @generic="914230432223b29dfb04e2a13ab48b27040b19641b74f08b8461c2b52c62d1e79d32594d43e316d7d4f7103e69ea5c32b7d8d448a7879eee7da17860386eed500d227d927f3d25c7acf62200b9542c2c90627bf851e76096bdc5e3a2620f589411b2eae2693b2bdf59", @generic="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", @typed={0x8, 0x8b, 0x0, 0x0, @ipv4=@remote}]}, @generic="f4af78f719af4eb95a28e54c9c3a065412ae743da037d09f2bae5e59bbf0fa8cf5ded4c80a590260554dd1bb4e2908790b07fd9a8ad99d904fa945afcced48df32428a824b2dc6a7c97db7cfe130c85a939aa18e1e4b792bf9301f515d2f7fc553adef2853548f4be355917a5ab7ba5b61d603276fdb60c6546ce41d44f382c3cf741c0c343a30448f254b932ffac4983569d6bbe3949475e32d89bec5af1c00b80dd44fa07c2b00c70a0c0ed6a712e53166043ba043b194f7df5a0beca31695bac0bdcbd1fee4b18ffbe4711b41844c5c1eb80aa9d07f1c024e5dd3", @typed={0x8, 0x5d, 0x0, 0x0, @uid=r7}]}, 0x151c}, {&(0x7f0000000600)={0x14b8, 0x17, 0x800, 0x70bd2a, 0x25dfdbfd, "", [@nested={0x103, 0x19, 0x0, 0x1, [@generic="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"]}, @generic="24f21fa0ec401efdc086e343d644dfae9c8028f2716c1cc80f8b513182f1129b5e71e3d60a58fb30521156bd430a10b4646a9191c023c4abcca9817a58e18652ce63bba1637a73ed19413b28", @nested={0x4, 0x34}, @nested={0xf2, 0x51, 0x0, 0x1, [@generic="08243ad7820d924e4de5f4aea30e0d940a8e16d96f583f5ff9b6de700f6d94b3e356a0d8a07c6d28217e2df8bd04", @typed={0xb, 0x5, 0x0, 0x0, @str='-@\xa1\xcc^-\x00'}, @typed={0x8, 0x64, 0x0, 0x0, @fd}, @typed={0x14, 0x47, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8e, 0x87, 0x0, 0x0, @binary="80b13fc583c92bdc2b57512c180bbabbbe3badc54680061fcc5dedc6c21a33fbae26fa6075a5d519baac3f870ea075c8a116e737cf319fbc2b96f834be12f44d2e4351b671c3980cbf4721657e9eab33d13c6e1fdba5469bcdffbf07294fe02b64515161961992274ccc58c1400867c341dda80cd2f6a88bcd5962e98daee0a7c76a1067fa26164edffa"}, @typed={0x8, 0x41, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @typed={0x4, 0x6f}, @typed={0x4, 0x87}, @nested={0x11c0, 0x2f, 0x0, 0x1, [@generic="f5a44b6367cd27409dc680f7b5c85acfea9ad59abbeb", @generic="729ad3815895c923d345dcae8821b4d79eb7ea09c823d4565a309a0d9316ab026eaee50c669618f02d1f38ff77d5d7551ab633fb8b307dc849272556d2c97f0f593f5713e60d539b9b67185e352bb85c90f11f36ab219dba13820400dfbcf0eead880bcf1d84d823399b4de7c4d4efc90351321ae3083dc4916032caa84fc71626e1455af8b29c", @generic="32d59d7b2b8e90ff27c81eabd0b223e91c2049a103e6b05f3fa51b3645d776b4515db6abd1db73ee50671e7b2588e23cd97940768e11e5b86e3b0b30aeebd2914007cb1db02610cbb88a25dc149980ec31101b7b482536436dab4ef70fc13f5e9de32c5868b16884a52052560c2863062ed613", @generic="54f97a2d9a785ca230cf1683baae07b302fb033a669626734e5964188ab39f89389134aa545f05b5694b4c37a777d307c7fd6151dea27975f57d7322ba1b4b4fda9286e7be671df188b13a8a8d77bb98bdb4fcba8b62819fb13d9262496e2d6f82ec9270f2621820d3124502ad4e7e8ea9e32ec57a13b3f6cada337b0f743a3340da8f92dfc28c771a24132b4651cd135fe252565fc4ce54108b7344dd06d79d1704a55018e9cd217138dabc3d9ff5638f96a258302888ded2fd248b00fe9ef1241d810064404c60cc91baea66983bdb3326ef7bbb47d7abb3bb34e1a8058963ff1e1613a0ff471a2f693ed49ec6787256a7b3d1c71b2504eda45f8ef461c2c828416a24c9157b8ff1e77229c064b8e4f8242a19eac50f55d7eee20bd0e8f1596a74be9c4726dd47d8cdf7104b5cf00da813377a46225fc4bd929a2d630bc924695d17f4792b6fd2373586dae5fbf8f35cad882e738bc180db165f1b3255e2cbffb8da12096b5cff356abe152cfd6ccacd336d10fe750cf64e9ebfc2dbdd9a24274cb439cec898a93d2b7955bf63c083bfc8169dffa62a5378d30b7b959dea1f4d953bee5e7bc5c5f141692a5ad3aa23017fd2cd90b6b04d192600348b273acbfd4a829e32b79a22b25455ba5524d1e3ced3a5a3b43cde044bd559debebcf26c7541ba0526bdb58690bf22cbfa9832a89bfe95eceaf61afd4d2bf56e5266109f98ac7a7c50d775655c008b6ce18ffc29e1877696dd26a56cae279294c77a783be8f804e70ad9739760a70c67e3f4218ca65138928c10292f7af2b0ff4d10ed504073bb86425c484109188b4dc931d495e9b80d72c2c89447a4ea2d487de2bc4decd6db23a7d02ef250f19a1ac93909e5c603f240a92fdeab589a8349c8cb86a45b02dec16f032b75429bd6673aafe56121899e93db483e8d26b04e33710bb39a1546afd5051c97b305b35e99f35135a8d34950c750e01b770384a4b29987422d0f94efc42fa9d683605f28ae830ab6e3ae2c10fdb1e6ae65fce5cf642f905712be5e65846541b3f9295e01a02f8bd0524ec8981acaf412c6110303ffd1d2354aad404eaed5b8188b3627e7320e47ca9f363a05aaa5d8b54862818c8c6b7f8121476287dbd6298771fd6811f82d0356ab62d773bf2ee28426529588b46d6c5720abbd64d892d32b5999b8c74ec6c68344f7f34483a2676136e568a67fae8bf9fdd654ddd7883e58852f1714eead35c6b47117efc6e8b72505e133fc6a03bb93735a85a039668777b77850aacfa5b8d92fb8937c24e3cfc7e807dcc8397204d34ebe397d17be4b1a75c3ac8b332f69fe0f489e742360c69d72ca65ce91eed61c3560ad5c5932acdf50e1c199d0af055210607da4ee3a3ba025222022048b1d2ede306265dec64a8feb91763b8fc8ef1317dad4fb652b8f942ccd35da963d1aab1de78ab6f69590ba03077b2e5ed27cf537c97f0edf65860531b2365c735a4812c8e9b9d9386240fb679cb73be1b03c6350f4ed053b18b52ed2475746d0b5206fcced1cdd9a7de46815e67560834ca015f21f41a94fcfadd179848e271ab5d6651bf07270955a18ccbd3671d5880fabb5da844deabafd2daa06adc1acdb682571aead76fef9a05c4e86aced9ae05e244839c592182c4a8fb6f1aa2850f8df93091aa3741abe812c10d0019229916a4699bd07ccab40e05293bf60f0f50816ecb7ebe624c21cf38eb8ed64647f98caf7bce33953ee0589105738eb640b629c36aaae123f3e14f265b1e2c0f8875cb3717f5067cef6412604d7b69cdfaaac9a7c8a295d8aa90081c2429adf2bcecee773c27e67385107d7b007bd88ab2ec8e515a905cbb9443e883b096691dbe4e07d102bc1f4f9b68b1e11a5f84c6c1c6a71084f21ae5a716b7ccbae583148f7765b8572be958537a88f8faa7918e974325582eac3336ef07f08e73807a06cc135627f759c55f61c156e0f602e3ec3fd400790ccfd3d0b29c1e4849fa86fbfbad9debfd1d48620352ddb2482a11b35a1084db645f4f72a6bab0075e950aa727716be62d7010ee7f7bc26e262f639a812d81d64447011e5a3337e38d8c2d674dea23edca02902d6eaaad31994992061ce82535e6b1669d98c548c01c8cf899634b11b766562418f6322e3b94eb8be8832f96187c03e89e4e6b58c417a9a622713da16998cd2c7d2ae0ac71f350cffadbcbda504a9232cc39283b3b601e97f217cddcd37260a8270a77e7a29602c86b3df70fdacef5c2459d87cd5aefc366f88fbe45a84202af6a9bf9dfa11f77b8d0bdf349007a35a494c7ccc394a93b2f5474847ae4bb9b343414d55050e19eb3efddf1b7e74485f552e2e7f556977fde679a4ae7d6be0c1ea424741761357e7ffb58f70fa4e8cbef164bbb211443968167cb8eda863a86535a07a3a58d2ee6ddfd18c2ced247dc8737e7d52d5f29f99670f302183d33fc8befb9fa061283f8583835047c8af8b4e9f01d08a06219f4086bb412da79c9730a88106d7e443f272f8d98e1345259008d65b4ee54ff48a4f4be81a9c40fb44c80a3524c6081f00da8b582f29c6cd8472f68aeea1997f0c99717f4687b561e8e2761ac91c940aefec4e8b84191478e63849c18499e42b0b21240d1093e17dfc562b1a9bff81ac6498151a349660e4ad7db59faa41603dacd7a75cdac7a853850b929a53537d40071b5e230f2d5d5751856d8880d6900f74aac623dd5d2caa363c590bb94c90fa62c36a02e415b7cd8c8f1b5cadc40d256b8830f62cebf56c0d2144280c4a42bbbe52528bae0d6f9226dcd32520822291da8fdaa006eeac62c0d3be9093eb623621dd5c655038b24fd07cd4e7bc842501d0ae453e5d2f079984116ed52eacaf89c3bb7527c48ee3ed908f5b142c064ccd949ce46fef4d761c269ef0ce1874c7b2eac4f75dc03701856b55adad69a2ffe0e1d74f6afa6d0567f78648e134c1ba2d192dfa400299e5207851bc036e561d5dda7882823d9f8f7ada27c7ade4685332e4caa95607711ba2bb863a11cf2740fb47c7c028f44b2fedb7755063aa72609549ac85641a7fcb5276b2cf251e060a7e2a873dda01dd658361d4f51407fafff13bfa5da693db091b065a9631888ffa8d30d14b65e73e9ad7f78338dbf9a8d505a0f8940f2bbdf299c7566ec1f44694d56eb3999ad35c592946691e217a25903b7c188cb9bc8563f4c21602ec0fe855d93307570113cda39311babe1c2932977ce9d064d4ae577d935875752a8740f0e9f1d9372d156cf28c52c630d54e84d83b3b736d719bdd72f4e59a1c6d20ed67674b52d3287f430a404d29514d4ecbcb3e66655aa0b2c21d90b59688196b3be35a6ea0e93c6daa367d5121d2c2da53990fcfd352119682c41f83b1831592335dde8130b2c4f3486c5f6ac5bb5fd8d74741d6d21ff051bb18b45fadff3e0443f26d2ebb2bcbeccfe1b434eccd9841b311fa6b7813c2f315554cbcab957aaeeb250a1260086d3975580672317431310a3c5f2545ec80fc48224855ac22e31c59e581dc48546ed6d31078a45af1c11571869cf1ccd6a8c830b3aaafb3f19ef70b3504e5423b6a16e92f99301c22bc399fe2b79c9d093c17ca9b30222c176ce03657020519c690c0a4c48ab59d9d8274cafcae3c4465e63b85fe186826eb50577015b2cb15147460483f33c7a42aaf5883238945a8b723613193dbbc22110dd174cc9becaba4b7cfba5ca2a2246bb6c51bc5a715e3c8adcb5197c70cad35ffc827202eacb442425f0c9febbe73809b8a5ae548a3798e72fbf4cdd8b517732402d7b82819263d1a5e5723103ba88f3400bf710b9b29fb2e65d1f05a05f1f03cee5e10ec73edfa5062838f3073835879e3021d09d5bcb60fdf5417138cad43445971058326e66ee1cb2b35dabea510cd557dee2f2e61ac6eeea225872b737f0fc820f0b0242fa6d7862eb4157ea5c8f898f7fd71ff43e9cf45200535f3c74dab4b342c1389e803f07bb1a192b35b081015b53bf8fa9928f14db23e8be1245f92c809a06a62d5de384295af458287476676e7ab92cb57cfd0fac33c0249c9913998ad5c57909da9caf105c4a4967b3e3a4068f1b66b5080530f4c4db417184ef3f6b505b6814d11dd1abdddea8d3d828484a1635ca11a25de1fd2008485dbe1a189f2c2319a77a20db606351b020664c1efcd161e8e74c6efdd7be8d9a6c3c1fb70e41adfab856568d89b4f427bd8b3ca8f886ee0bfc5ff90d226a212e1f699ebad40e19f398780aa584cb482d9470c1b1ca0b3dc5645d6c09de4e09487bee3151147eb1dea5a2d983ecf575a74f80cc0c3da1a5b2937f19aeddb7a70c1141f77e3be0210d107b122459e26776668f87fb5879352587569ff389df9f63fd63e246afa3717414f08ffc55d2be3e5d2e674044fa69236387ea769f63f5ef873253f71abec91d507c2e6ba295d6d1e6b85cad87a65f9f59ad9c0958c35e6d1ade81e70986bf6cf32e140f8d3d70351b59bc3bef26441fae6334d6219d54611788dd9f49a542e72b58f85265f05c828af8a3a24ad7b08da529a033e49e2f13d13133536bc6903ca332c95a9391d8bfe12798616358b2fc3733330ba70625cefb1d87cf2b0b61a9402075f9d721261866292244693898418c7f97c9f262469994c6c0ef3d4c9cc02945f3417c0f41b3d17f3e4d482538746e588926a2f295d4c6434fa1fd3c78e492487531d7c0beef41a8e037901c7d7cd881790775db1b224a9ad51f1ba0bb938c757342b6e77b89c4fa494a2582a6579edbef6a2ebe5565664e1ae95f400cac1dc1004d51e0cbe03c16cbe376f1cebd5bed60706bf5e51356c16d1fe058eefe2f88b5472371fe941d9befdd4ac91668ff8242ef3365eb928b04764cd5e5dc617d91f76e2125e57cd58de03c1a02c1f864186894963614f91bae923e880040ba5841d8c0802ee786d7c4d549e2772d5544a863be2f7ed35a34d05703c1bec0c7dd4514ded975bf09971355c1d550c5835bae026319df6983c67031b1608c523fbbbd4af83d441266ffd0e5cdc09f35740c9843db0009a9bdeff1263c8ee62fe0cac4e612eba71a535ff2fc3838db4865348b55a7ac08fede48e063b435ba0015e4d3270dc2cdf8bfa30c5c9f1a49762ff0f87f4190b03ff767f64b5dc8e7614c0a786fdc6fa46594e6225a589b04f2902b277fde0508ecdd22338507c397feef386e11ca62c36c5b92debcc599157e7654bf8c4f26c2e5ec080fe28f80cc4d2b597f8e98c1e19448b0e254cb473f093ff9680886c227057cbf39850afae320126482740b2a6d180bb1784c29e4d79f9a67f45b2193ee9bf26559abeec091d4207358a7e0ebafb3fea3e11c463a15de6f2b021b467c3de6c68274b2af672837f0dc440078537651f47c7a127c891119f7696be13f965c67f3a83334419450dbd8a6d5f2d76ce8b98ad58862999541e267240dd08d1911660560e7c217339a849895ba852cc8c21164f76b24cceccdfb8c858cad296009579d7663fb89dbb7199f65f439fb40e274016696439382f15bdfa483af02cef5792be835d4478503e994e8906957aeb3e83e86026b25144114c760b17597958de5a6f667fdc86644b90aebc8024326a24caae6415a18022723ebf748e9bd5717570a86dbdba40b43eb1700f9a56a679e0731837b2cfbfcc9a07c0fd502dff11f806ecd2e983c72c3d5bf231d4b7ea38282a99e4536f6a7d6fad3a2b647eb56d7323f032a3de22c06774c0122604c6c51aacc5472a0dcb239109c0944e8a6be786f7d931", @generic="cd9db6249323c715e8dd34fb88d8d26c8c1b610811a8412564042fe5b3c9c24485609bfac38ecba02d81b0d28c6a99768091dd036a82d9f0c3245e7d5392c95594f0db739d084da7d7270577e6c31bc29112b2637a9cf4a04fa9053f29cd2d279b2e226949aa69aa9d958d92ed46e0d22dd792e203e3805509d92212ee9c690df1456f9aa97bf38559e3d88b343071811ec64a9f36b09930356a9a4a121af12ff73732e546725495", @typed={0x4, 0xf}]}, @generic="51882e093ebb8d8ea119f65935d6b134d89e42151f13a2a7eaf6c7241897e9ab980c4b7b2f4f25453215f09ccfb1fe31157e57521354670a409b9326361de69f5d98dabbfe24b851e8d400313c67410f5ef388d722c7433669463c05fea704899646c4db89ce23979290b7fc21a3ee6ef7772c63a26c534c1c78f58e7e99ead71eb7610cfa009fa24471081055e36c251f7b5b5a6633"]}, 0x14b8}], 0x3, 0x0, 0x0, 0x40000}, 0x4000840) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 18:23:38 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r2, &(0x7f0000000000)=""/172, 0xac, 0xff) [ 1855.094837] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1855.094837] program syz-executor.6 not setting count and/or reply_len properly [ 1855.106536] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1855.106536] program syz-executor.2 not setting count and/or reply_len properly 18:23:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') preadv(r0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x4, 0x5) 18:23:38 executing program 0: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:23:39 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="027400bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:23:39 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') pread64(r0, 0x0, 0x0, 0xff) 18:23:39 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600007400000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 1855.301720] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1855.301720] program syz-executor.2 not setting count and/or reply_len properly [ 1855.434094] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1855.434094] program syz-executor.6 not setting count and/or reply_len properly [ 1855.445268] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1855.445268] program syz-executor.6 not setting count and/or reply_len properly 18:23:52 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600007a00000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:23:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xfffffffffffffef3, 0xff) 18:23:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/190, 0xbe}], 0x1, 0x0, 0x5) 18:23:52 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x5, 0x8, 0x9, 0x101, 0x3, "fac04480b5742192a8202d51f812da78c5e42a"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0x5, 0x3, 0x6, 0x2, 0x13, "7d3b6090ea0c7b9dacfbf9df75d2b220072c1a"}) pread64(r0, 0x0, 0x0, 0xff) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCXONC(r2, 0x540a, 0x3) 18:23:52 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4) r2 = signalfd4(r0, &(0x7f0000000040)={[0x6]}, 0x8, 0x80800) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:23:52 executing program 0: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:23:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x80000001, 0x9, 0x80000000, 0x0, 0x9}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) fdatasync(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x4}}, 0xe8) getsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000240)=0x1) 18:23:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="027a00bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 1868.956884] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1868.956884] program syz-executor.2 not setting count and/or reply_len properly [ 1868.960974] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1868.960974] program syz-executor.6 not setting count and/or reply_len properly 18:23:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/190, 0xbe}], 0x1, 0x0, 0x0) 18:23:52 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020003bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:23:52 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000003000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:23:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in6=@dev}, {}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) dup3(r0, 0xffffffffffffffff, 0x80000) 18:23:52 executing program 0: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:23:52 executing program 3: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000e4600000046268da2d0566545272f50b262d080d214a376f02c1dfe0f8653e19a46a6ea0f30f5f041ca99010b699b79a47d5a4bcb4c2fba5fdc0717ed15d007adade8f5016caee9767b56"], &(0x7f0000000140)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "d98ccd729676f3da88b396ab331d0f77127e5626e655a8de7eea24187c7cf5810b8d1045484d6a0f27fb206a836fb53e159dfa3d65a0b6e09863a952428cc8d69088a851f26c05653d85b8d7109772e4729818d6415eb4acbb7f79761efa02adf66cfe1d785bb0839dba9435524c21dba8a62228de26c53c340b6cb819cbef3f79be582e6ad6da2feb4185716c1be116632fd04e689f98cecbc1480cad2f9f9bf809d4a42f179613df9986824d21713837d3cdc67b1b61145af98dc2741e95497231e4494ec9310e2e5da122049407"}}, &(0x7f0000000bc0)=ANY=[@ANYBLOB="000f1d000000050f1d0090b6d875880118100a00e3030800000100000000000000ecff1a4116e5bd0844bd4b9c83b5a2b7ac8511c18ceb2471f335a269e0bf2558ec768104a2e180af65ef1876e8d0bc59454a157a1106530ca6ff4e99da6c28220c979168eb4dfc429842a77d6f00e65f664dab3609bb996da30db04bb742c1c6e0b2e6907822bc2c64d66d203074c94a37b17826dddc2fa5f2f4c81cf321510bd67fb8c14d7bb2a9967c5d30050ce3447f0621b01b44ad1b2fa56e13710fd5bf32e7b5be2521af9ac80702aa5ffb5f842ebbd3b45cb97a9c6ceb776692dbe1fd"], &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x10, 0x6, 0xff, "e1e972ec", "95a66f69"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x1, 0x10, 0x0, 0x2, 0x858, 0xffff}}}, &(0x7f0000000800)={0x84, &(0x7f00000003c0)={0x40, 0x6, 0xf0, "869723a8527b155d9251c1bb0d37f484b745b49f96cdcc749a0a3c336bec28d11eaaa9340970f6efe8c7eddb271a4dc8c4cb7c98258f48739be0f20f2b905bc4491ba6bbeba7a19da089f13dbbcbc7999067bcd192651c7ca99d494392ca1402dd60c15ecbd58b49d7e2ee8705045175a6ec4cb1ea406c4fdda524234c0cb1441c57303215a075dbff667f7cd5755c5b124c197c9c77e84394211ad9a2f8b4108e784bd3d57aa19dfc0b1af855758c7b6fc7830f597681e595d5bcd8b8a14ffc1250b6b6c340c67a034c96004490e5e4bb8c986eb0f18a624523e98337a8db641b2b311dddd7bdded70aa275b86fd008"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xee}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x2e0, 0x40, [0xff0]}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0xffff}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x3}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "e63d"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x3f}, &(0x7f0000000640)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "6cf7"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x800}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x4}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xa3}}) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}]}]}]}, 0x2c}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000b40)={0x64, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x401}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000980)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000008c0)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000380)) clock_gettime(0x6, &(0x7f0000000900)) ppoll(&(0x7f0000000300)=[{r0}, {r5}], 0x2, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000540)) 18:23:52 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x880088, &(0x7f00000001c0)=ANY=[@ANYBLOB='t,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1b08000, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c776600001b3d", @ANYRESHEX=r0, @ANYBLOB=',access=client,subj_user=pagemap\x00,measure,\x00']) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0xffffffe1}}, './file0\x00'}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@afid={'afid', 0x3d, 0x520}}, {@debug={'debug', 0x3d, 0x7}}, {@fscache}, {@debug}, {@version_9p2000}, {@msize={'msize', 0x3d, 0x8001}}, {@version_L}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@access_uid}], [{@appraise}, {@fowner_eq={'fowner', 0x3d, r4}}, {@smackfsdef={'smackfsdef', 0x3d, '9p\x00'}}, {@measure}]}}) 18:23:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x80000001, 0x9, 0x80000000, 0x0, 0x9}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) fdatasync(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x4}}, 0xe8) getsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000280), &(0x7f00000002c0)=0x4) [ 1869.199828] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1869.199828] program syz-executor.6 not setting count and/or reply_len properly [ 1869.203237] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1869.203237] program syz-executor.2 not setting count and/or reply_len properly [ 1869.265826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1869.268410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1869.801341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1869.804248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 18:24:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x80000001, 0x9, 0x80000000, 0x0, 0x9}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) fdatasync(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x4}}, 0xe8) getsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000240)=0x1) 18:24:08 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) write$vga_arbiter(r2, &(0x7f0000000140), 0xf) clock_gettime(0x0, &(0x7f0000000380)) rt_sigtimedwait(&(0x7f0000000180)={[0x5]}, &(0x7f0000000040), &(0x7f00000000c0), 0x8) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:24:08 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x2, 0x70bd2a, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xe458a770ac77506f}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5c}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24044080}, 0x9f90b298a03385f3) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r3, 0x0, 0x0, 0xff) 18:24:08 executing program 0: syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(0xffffffffffffffff, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:24:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x80000001, 0x9, 0x80000000, 0x0, 0x9}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) fdatasync(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 18:24:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0x103) 18:24:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020005bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:24:08 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000005000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 1884.342491] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1884.342491] program syz-executor.6 not setting count and/or reply_len properly 18:24:08 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='net/rfcomm\x00') [ 1884.371192] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1884.371192] program syz-executor.2 not setting count and/or reply_len properly 18:24:08 executing program 0: syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(0xffffffffffffffff, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:24:08 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020006bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:24:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x80000001, 0x9, 0x80000000, 0x0, 0x9}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) fdatasync(r1) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 18:24:08 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600003005000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:24:08 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x4002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:24:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x80000001, 0x9, 0x80000000, 0x0, 0x9}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) fdatasync(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x4}}, 0xe8) getsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000240)=0x1) 18:24:08 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000080)={0x1, 0x30, [0xffff, 0x646, 0x0, 0xfffffffffffffffc], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) clock_gettime(0x0, &(0x7f0000001840)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="86541a384075ab7a4b7cec80d91700000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x140}}, {{&(0x7f00000004c0), 0x6e, &(0x7f0000001740)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/135, 0x87}, {&(0x7f0000001600)=""/99, 0x63}, {&(0x7f0000001680)=""/137, 0x89}], 0x4, &(0x7f0000001780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x40}}], 0x2, 0x40002026, &(0x7f0000001880)={r5, r6+10000000}) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x200, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="3f17fc21345da7a440daf9a1bdac276b85c2d6463351eae513dd8b81a5f083cf9b028536b70bba19dc612008c58658b6db3a4a24a081cafa33f1d574be9eab68bb853b79a36c7f63d49e71bcbded12c7d7a5f5c07d1a5feb63fc6380aa15231fa67208bf8291ba24d643de38104a4cd524598a700928de4290b1617d1a14b4ca03c32a40bde8202e112d5b6fe3bd12fef3e6c71bb19cf80b386e986d2e8ade2495c8c508e31575", 0xa7, 0x9}], 0x10000, &(0x7f00000018c0)={[{@resgid={'resgid', 0x3d, r7}}, {@orlov}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}) getgroups(0x7, &(0x7f0000000380)=[0xee00, 0xffffffffffffffff, 0x0, 0xee01, 0xee01, 0xee01, 0xffffffffffffffff]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x1}, [{0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x2, r2}, {0x2, 0x5, 0xee00}, {0x2, 0x3, r4}], {0x4, 0x2}, [{0x8, 0x1, 0xee01}, {0x8, 0x4, r7}, {0x8, 0x0, r8}, {0x8, 0x4, 0xee01}, {0x8, 0x6}, {0x8, 0x4, r9}], {0x10, 0x6}, {0x20, 0x5}}, 0x74, 0x2) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @empty, 0x2}, 0x1c) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x5, 0x5}) 18:24:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) r1 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022bbd7000fcdbdf256900000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006020800110400010000"], 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x82e8997f88873560) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r4, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x200, {0x8, 0x7ff, 0x2, 0x9}}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000040) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) [ 1884.735850] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1884.735850] program syz-executor.6 not setting count and/or reply_len properly [ 1884.737736] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1884.737736] program syz-executor.2 not setting count and/or reply_len properly [ 1884.747849] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1884.747849] program syz-executor.6 not setting count and/or reply_len properly 18:24:08 executing program 0: syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(0xffffffffffffffff, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:24:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x80000001, 0x9, 0x80000000, 0x0, 0x9}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) fdatasync(r1) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 18:24:08 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000006000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 1884.866310] syz-executor.7[13937]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1884.909951] syz-executor.7[13941]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1885.106218] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1885.106218] program syz-executor.6 not setting count and/or reply_len properly 18:24:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x80000001, 0x9, 0x80000000, 0x0, 0x9}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) fdatasync(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x4}}, 0xe8) getsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000240)=0x1) 18:24:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020007bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:24:22 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000007000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:24:22 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='cmdline\x00') pread64(r0, &(0x7f0000000000)=""/159, 0x9f, 0xff) 18:24:22 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x100, 0x800) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) pread64(r0, 0x0, 0x0, 0xff) 18:24:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x80000001, 0x9, 0x80000000, 0x0, 0x9}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) fdatasync(r1) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 18:24:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, 0x0, 0x0, 0xff) 18:24:22 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000140)=@unlock_all, 0xb) clock_gettime(0x0, &(0x7f0000000380)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0x2}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @multicast2}}}], 0x20}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@empty, @in=@multicast2, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, r5}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8001}}, 0xe8) pipe(&(0x7f0000000180)={0xffffffffffffffff}) sendmmsg(r6, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="ba61591c5876eaa2ba795e0f44fb980b4db1fe6682d2b9b5d488ebc2270cb9eabf16c86a50b61b46c6793ff5ff8ad7f37a25f35df03d4a29", 0x38}], 0x1, &(0x7f00000002c0)=[{0x18, 0x103, 0x4f, "bddf6273"}], 0x18}}, {{&(0x7f0000000540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x4}, 0x4}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000005c0)="146c0e2533f3c5a21c51e97d18969198bb2777bf38bee2cff9d4a1b216c0807e19d0fc0e6167486240f4caac11e942ac3cc1f431accdbc2231a5e1ed7dd627a753b2e1e2b286153d8f29fb6446260d7901e9102b61fb60935dee82d3f29624dd7dc6", 0x62}, {&(0x7f0000000400)="1b34ed569a8becc8c7c08d8766b0e128f125502d34850e44dce2f8fbc291adf8562b7c63e4", 0x25}], 0x2, &(0x7f00000007c0)=[{0x18, 0x1, 0x81, "4e2dc492eb0720"}, {0xc8, 0x102, 0xfffffffe, "3a45c0adce5128792ff2ed877087ddb4250f50b01bda05f8839382a53ceff4b9126de6f2674213c8605ff3655239d3049d713b03569125213042d2a441472756c73b24c2a840aa8bfea6f92fe0ffbc5eaa27e46223a1bb66af079178da8e6e7458f4264d767a5c248ae54d7af22e8ab0bdd607daa4d0433f3a14f0486ba11647025386e5219ca351cc681c382980cf334375c03fd535b74dabeb8730e12eb845d53a069a1da84aaa19177e35710536eb7e07e4f1387c"}, {0x80, 0xff, 0x1, "0142fe1309102bfe938b5353bcf7f0392dd5c9ed0a936af35bd8816ca11d70a1ac78a7656f9fad1daa5323ca83720d1fa701a7bb724013f243e2af014857dca80d7d651cc1509f79f7a2166f58a14382b57305510167679dc99ef9230df09fb7e23bc23470a16fbdf66d4958a22cfe"}, {0x90, 0x108, 0x3, "edd9a650ec6b986c78e532bc31bc670c68fc33fd5e9f9e4169f59d21b785a52409f4aa2d46828e175ffc6c4ee6c9c8209ac6a74145de258f9fbba08c6b7ae6fb7e60736d501fc8fbe6a80c8e4ef07f1228beacb3b31dcd4bbf33e958c2ca9c93f022d14f914a851645f8679968e71c69c06d8a9b8a303d17ba7f68af"}, {0x1010, 0x119, 0x1, "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"}, {0x50, 0x88, 0x1, "032eb8120c4c30aee547813ae5d4b2adc1f4037b0a1fcec392ea0f51baa284a105e6a34a60592d7f8dfba8ece07baa031580cb6c9c49d8af27"}], 0x1250}}], 0x2, 0x4) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x5) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001a40)=ANY=[@ANYBLOB="01005bc40000f4ffffff18000000f8a7f846cbd95354ef7348c1b563c0bc322d4c0a41c32a45a77c1f64ca8be359d5b7862fced718c9ae757076a797616a005b818e728f7d3a5bdd795736ae2b84f65e073b10fcb3501547347d5994bc81e6063dd2ec4a2c70ce8d574ed9ae9dac6c14f1", @ANYRES32=r2, @ANYBLOB="730e0000000000002e2f66696c653000"]) r7 = syz_open_dev$mouse(&(0x7f00000001c0), 0x7, 0x400) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e21, 0x80000000, @mcast1, 0x8}}, 0x0, 0x0, 0x7, 0x0, "aab439d8fd800e604b9080ab03cf1765f82e9baa7d19054bfa9a00244867c39a55e4692bffc37bf394e828b1d581cb84491aa9188844fb43746aafbc1df550af96ea4c17ef64be8bf3f1bde69b1bdda8"}, 0xd8) [ 1899.056749] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1899.056749] program syz-executor.6 not setting count and/or reply_len properly [ 1899.059926] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1899.059926] program syz-executor.2 not setting count and/or reply_len properly 18:24:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x80000001, 0x9, 0x80000000, 0x0, 0x9}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 18:24:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, 0x0, 0x0, 0xff) 18:24:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="022707bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:24:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x80000001, 0x9, 0x80000000, 0x0, 0x9}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 18:24:35 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x80000001, 0x9, 0x80000000, 0x0, 0x9}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) fdatasync(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x4}}, 0xe8) getsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 18:24:35 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000530000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:24:35 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in=@loopback}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0xd8, 0x3018c0) socket$packet(0x11, 0x2, 0x300) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000080), &(0x7f00000000c0)=0x21) pread64(r0, 0x0, 0x0, 0xff) 18:24:35 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:24:35 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000080)={0x1, 0x30, [0xffff, 0x646, 0x0, 0xfffffffffffffffc], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000240)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@empty}}, &(0x7f0000000340)=0xe8) clock_gettime(0x0, &(0x7f0000001840)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="86541a384075ab7a4b7cec80d91700000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x140}}, {{&(0x7f00000004c0), 0x6e, &(0x7f0000001740)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/135, 0x87}, {&(0x7f0000001600)=""/99, 0x63}, {&(0x7f0000001680)=""/137, 0x89}], 0x4, &(0x7f0000001780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x40}}], 0x2, 0x40002026, &(0x7f0000001880)={r5, r6+10000000}) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x200, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="3f17fc21345da7a440daf9a1bdac276b85c2d6463351eae513dd8b81a5f083cf9b028536b70bba19dc612008c58658b6db3a4a24a081cafa33f1d574be9eab68bb853b79a36c7f63d49e71bcbded12c7d7a5f5c07d1a5feb63fc6380aa15231fa67208bf8291ba24d643de38104a4cd524598a700928de4290b1617d1a14b4ca03c32a40bde8202e112d5b6fe3bd12fef3e6c71bb19cf80b386e986d2e8ade2495c8c508e31575", 0xa7, 0x9}], 0x10000, &(0x7f00000018c0)={[{@resgid={'resgid', 0x3d, r7}}, {@orlov}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}) getgroups(0x7, &(0x7f0000000380)=[0xee00, 0xffffffffffffffff, 0x0, 0xee01, 0xee01, 0xee01, 0xffffffffffffffff]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x1}, [{0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x2, r2}, {0x2, 0x5, 0xee00}, {0x2, 0x3, r4}], {0x4, 0x2}, [{0x8, 0x1, 0xee01}, {0x8, 0x4, r7}, {0x8, 0x0, r8}, {0x8, 0x4, 0xee01}, {0x8, 0x6}, {0x8, 0x4, r9}], {0x10, 0x6}, {0x20, 0x5}}, 0x74, 0x2) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @empty, 0x2}, 0x1c) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x5, 0x5}) [ 1912.134113] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1912.134113] program syz-executor.6 not setting count and/or reply_len properly [ 1912.166143] syz-executor.4[13982]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 18:24:36 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000048000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 1912.198731] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1912.198731] program syz-executor.2 not setting count and/or reply_len properly 18:24:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="74723db400000000f5e14f7828f2e43bc100000000000087bd5bb963fbdc34b3501d5a04f7b738624144de9646c8d81553042b2cab55361b921834d67c06533ba243c51255a92f52f9f977b440a7971bebdb3d4e2a115504e8c8bfb6d1a669963ac53d6f79c74e4e9d6e7c89ee673c7e9555f3bcba7a1d0845727eab9109c8ada0a961a9f828df21", @ANYRESHEX=r1, @ANYBLOB="847a5d9ffea49e030f70a7d94eeccbd4cb652aeb522208b37e39e2b0c19740c047d4f3260b9b168e156989df13b091b56b8c4ed90925238527f69296bc979662ff791b0cf98f65aa316197c6014bf31835e702f3df5590f640f29a3e88833460cbff89904892d6506d8d36dc82b86ba8eebdfd860e4028a060", @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x690d}}, './file0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev={0xac, 0x14, 0x14, 0x30}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x5c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bbc, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000180)=0x1) setresuid(0x0, r5, 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000001340)="57032921b27f162f1c42db63c293bfbe30b6afc636c9487fa6c2072abf16c3937aa99ef2c6e5e2d9a9c0cd62cfd1c71028e0549bddfa2a14530aedf17e9af6bd69d6c5351a5be3c6727b5706f363598dd1a056e0fd830797725408c2cadb6515b39618756b24c157a1898e996bd27b58ce7297f9dfb6338f949127df263137a5d66f5a23270d116ea326cdf165ab8583c8eadfd06aba2341a92945", 0x9b, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid}, {@afid={'afid', 0x3d, 0xaf26}}, {@msize={'msize', 0x3d, 0x40}}, {@noextend}, {@privport}], [{@uid_eq={'uid', 0x3d, r5}}, {@subj_role={'subj_role', 0x3d, 'pagemap\x00'}}]}}) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x81) [ 1912.246739] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1912.246739] program syz-executor.6 not setting count and/or reply_len properly 18:24:36 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) pread64(r0, &(0x7f0000000000)=""/222, 0xde, 0xd4a7) 18:24:36 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c060000004c000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:24:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, 0x0, 0x0, 0xff) 18:24:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 18:24:36 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x3e, &(0x7f0000000000)=0x5, 0x4) 18:24:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020727bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:24:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x80000001, 0x9, 0x80000000, 0x0, 0x9}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) fdatasync(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x4}}, 0xe8) 18:24:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="74723db400000000f5e14f7828f2e43bc100000000000087bd5bb963fbdc34b3501d5a04f7b738624144de9646c8d81553042b2cab55361b921834d67c06533ba243c51255a92f52f9f977b440a7971bebdb3d4e2a115504e8c8bfb6d1a669963ac53d6f79c74e4e9d6e7c89ee673c7e9555f3bcba7a1d0845727eab9109c8ada0a961a9f828df21", @ANYRESHEX=r1, @ANYBLOB="847a5d9ffea49e030f70a7d94eeccbd4cb652aeb522208b37e39e2b0c19740c047d4f3260b9b168e156989df13b091b56b8c4ed90925238527f69296bc979662ff791b0cf98f65aa316197c6014bf31835e702f3df5590f640f29a3e88833460cbff89904892d6506d8d36dc82b86ba8eebdfd860e4028a060", @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x690d}}, './file0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev={0xac, 0x14, 0x14, 0x30}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x5c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bbc, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000180)=0x1) setresuid(0x0, r5, 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000001340)="57032921b27f162f1c42db63c293bfbe30b6afc636c9487fa6c2072abf16c3937aa99ef2c6e5e2d9a9c0cd62cfd1c71028e0549bddfa2a14530aedf17e9af6bd69d6c5351a5be3c6727b5706f363598dd1a056e0fd830797725408c2cadb6515b39618756b24c157a1898e996bd27b58ce7297f9dfb6338f949127df263137a5d66f5a23270d116ea326cdf165ab8583c8eadfd06aba2341a92945", 0x9b, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid}, {@afid={'afid', 0x3d, 0xaf26}}, {@msize={'msize', 0x3d, 0x40}}, {@noextend}, {@privport}], [{@uid_eq={'uid', 0x3d, r5}}, {@subj_role={'subj_role', 0x3d, 'pagemap\x00'}}]}}) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x81) [ 1912.417470] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1912.417470] program syz-executor.6 not setting count and/or reply_len properly 18:24:36 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000068000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 1912.586531] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1912.586531] program syz-executor.2 not setting count and/or reply_len properly [ 1912.606244] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1912.606244] program syz-executor.6 not setting count and/or reply_len properly [ 1912.608179] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1912.608179] program syz-executor.6 not setting count and/or reply_len properly 18:24:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="74723db400000000f5e14f7828f2e43bc100000000000087bd5bb963fbdc34b3501d5a04f7b738624144de9646c8d81553042b2cab55361b921834d67c06533ba243c51255a92f52f9f977b440a7971bebdb3d4e2a115504e8c8bfb6d1a669963ac53d6f79c74e4e9d6e7c89ee673c7e9555f3bcba7a1d0845727eab9109c8ada0a961a9f828df21", @ANYRESHEX=r1, @ANYBLOB="847a5d9ffea49e030f70a7d94eeccbd4cb652aeb522208b37e39e2b0c19740c047d4f3260b9b168e156989df13b091b56b8c4ed90925238527f69296bc979662ff791b0cf98f65aa316197c6014bf31835e702f3df5590f640f29a3e88833460cbff89904892d6506d8d36dc82b86ba8eebdfd860e4028a060", @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x690d}}, './file0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev={0xac, 0x14, 0x14, 0x30}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x5c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bbc, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000180)=0x1) setresuid(0x0, r5, 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000001340)="57032921b27f162f1c42db63c293bfbe30b6afc636c9487fa6c2072abf16c3937aa99ef2c6e5e2d9a9c0cd62cfd1c71028e0549bddfa2a14530aedf17e9af6bd69d6c5351a5be3c6727b5706f363598dd1a056e0fd830797725408c2cadb6515b39618756b24c157a1898e996bd27b58ce7297f9dfb6338f949127df263137a5d66f5a23270d116ea326cdf165ab8583c8eadfd06aba2341a92945", 0x9b, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid}, {@afid={'afid', 0x3d, 0xaf26}}, {@msize={'msize', 0x3d, 0x40}}, {@noextend}, {@privport}], [{@uid_eq={'uid', 0x3d, r5}}, {@subj_role={'subj_role', 0x3d, 'pagemap\x00'}}]}}) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x81) 18:24:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 18:24:48 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022bbd7000fcdbdf256900000008000300", @ANYRES32=0x0, @ANYBLOB="0c000211000001000000000000000000000000000000000041dbee9762c8f92f89f695d1baaa4168aac347f0dd8f98af65b46d34b0ea958d657e0abd63338d9d4cd0e3ab720000000093"], 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x82e8997f88873560) write$vga_arbiter(r2, &(0x7f0000000000), 0xf) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r4}], 0x2, 0x0, 0x0, 0x0) 18:24:48 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c060000006c000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:24:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0x0) 18:24:48 executing program 7: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x2, 0x8000}) 18:24:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020048bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:24:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x80000001, 0x9, 0x80000000, 0x0, 0x9}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) fdatasync(r1) socket$inet6_tcp(0xa, 0x1, 0x0) [ 1924.979106] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1924.979106] program syz-executor.6 not setting count and/or reply_len properly [ 1925.007480] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1925.007480] program syz-executor.2 not setting count and/or reply_len properly 18:24:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0x0) 18:24:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 18:24:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x80000001, 0x9, 0x80000000, 0x0, 0x9}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) fdatasync(r1) 18:24:48 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000074000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:24:48 executing program 7: sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) 18:24:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="02004cbf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:24:48 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(0xfffffffffffffffd, 0x7) ftruncate(r2, 0x2000000) finit_module(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) clock_gettime(0x0, &(0x7f0000000380)) preadv2(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/255, 0xff}, {&(0x7f0000000140)=""/139, 0x8b}, {&(0x7f0000000200)=""/13, 0xd}, {&(0x7f0000000240)=""/132, 0x84}, {&(0x7f00000003c0)=""/69, 0x45}, {&(0x7f0000000440)=""/132, 0x84}, {&(0x7f0000000500)=""/214, 0xd6}, {&(0x7f0000000600)=""/205, 0xcd}, {&(0x7f0000000700)=""/199, 0xc7}], 0x9, 0x789d, 0x5, 0xa) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:24:49 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="74723db400000000f5e14f7828f2e43bc100000000000087bd5bb963fbdc34b3501d5a04f7b738624144de9646c8d81553042b2cab55361b921834d67c06533ba243c51255a92f52f9f977b440a7971bebdb3d4e2a115504e8c8bfb6d1a669963ac53d6f79c74e4e9d6e7c89ee673c7e9555f3bcba7a1d0845727eab9109c8ada0a961a9f828df21", @ANYRESHEX=r1, @ANYBLOB="847a5d9ffea49e030f70a7d94eeccbd4cb652aeb522208b37e39e2b0c19740c047d4f3260b9b168e156989df13b091b56b8c4ed90925238527f69296bc979662ff791b0cf98f65aa316197c6014bf31835e702f3df5590f640f29a3e88833460cbff89904892d6506d8d36dc82b86ba8eebdfd860e4028a060", @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x690d}}, './file0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev={0xac, 0x14, 0x14, 0x30}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x5c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bbc, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000180)=0x1) setresuid(0x0, r5, 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000001340)="57032921b27f162f1c42db63c293bfbe30b6afc636c9487fa6c2072abf16c3937aa99ef2c6e5e2d9a9c0cd62cfd1c71028e0549bddfa2a14530aedf17e9af6bd69d6c5351a5be3c6727b5706f363598dd1a056e0fd830797725408c2cadb6515b39618756b24c157a1898e996bd27b58ce7297f9dfb6338f949127df263137a5d66f5a23270d116ea326cdf165ab8583c8eadfd06aba2341a92945", 0x9b, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid}, {@afid={'afid', 0x3d, 0xaf26}}, {@msize={'msize', 0x3d, 0x40}}, {@noextend}, {@privport}], [{@uid_eq={'uid', 0x3d, r5}}, {@subj_role={'subj_role', 0x3d, 'pagemap\x00'}}]}}) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x81) [ 1925.264184] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1925.264184] program syz-executor.6 not setting count and/or reply_len properly [ 1925.277485] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1925.277485] program syz-executor.6 not setting count and/or reply_len properly 18:24:49 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0x0) [ 1925.359880] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1925.359880] program syz-executor.2 not setting count and/or reply_len properly 18:24:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000280), &(0x7f00000002c0)=0x4) [ 1926.958869] syz-executor.3[14049]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 1927.038132] syz-executor.3[14049]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 18:25:02 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') pread64(r0, 0x0, 0x0, 0xff) 18:25:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x80000001, 0x9, 0x80000000, 0x0, 0x9}) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) 18:25:02 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0xc}, r1, 0x1, 0x0, 0x1, {0x0, r2}}, 0x4) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:25:02 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 18:25:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="74723db400000000f5e14f7828f2e43bc100000000000087bd5bb963fbdc34b3501d5a04f7b738624144de9646c8d81553042b2cab55361b921834d67c06533ba243c51255a92f52f9f977b440a7971bebdb3d4e2a115504e8c8bfb6d1a669963ac53d6f79c74e4e9d6e7c89ee673c7e9555f3bcba7a1d0845727eab9109c8ada0a961a9f828df21", @ANYRESHEX=r1, @ANYBLOB="847a5d9ffea49e030f70a7d94eeccbd4cb652aeb522208b37e39e2b0c19740c047d4f3260b9b168e156989df13b091b56b8c4ed90925238527f69296bc979662ff791b0cf98f65aa316197c6014bf31835e702f3df5590f640f29a3e88833460cbff89904892d6506d8d36dc82b86ba8eebdfd860e4028a060", @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x690d}}, './file0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev={0xac, 0x14, 0x14, 0x30}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x5c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bbc, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000180)=0x1) setresuid(0x0, r5, 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000001340)="57032921b27f162f1c42db63c293bfbe30b6afc636c9487fa6c2072abf16c3937aa99ef2c6e5e2d9a9c0cd62cfd1c71028e0549bddfa2a14530aedf17e9af6bd69d6c5351a5be3c6727b5706f363598dd1a056e0fd830797725408c2cadb6515b39618756b24c157a1898e996bd27b58ce7297f9dfb6338f949127df263137a5d66f5a23270d116ea326cdf165ab8583c8eadfd06aba2341a92945", 0x9b, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid}, {@afid={'afid', 0x3d, 0xaf26}}, {@msize={'msize', 0x3d, 0x40}}, {@noextend}, {@privport}], [{@uid_eq={'uid', 0x3d, r5}}, {@subj_role={'subj_role', 0x3d, 'pagemap\x00'}}]}}) 18:25:02 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) (fail_nth: 1) 18:25:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020068bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:25:02 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c060000007a000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:25:02 executing program 7: chroot(&(0x7f0000000040)='./file0\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, &(0x7f00000000c0)=""/35, 0x23, 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xa) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) preadv(r2, &(0x7f0000001640)=[{&(0x7f0000000180)=""/28, 0x1c}, {&(0x7f00000001c0)=""/46, 0x2e}, {&(0x7f0000000200)=""/154, 0x9a}, {&(0x7f0000002740)=""/88, 0x58}, {&(0x7f00000003c0)=""/201, 0xc9}, {&(0x7f00000002c0)=""/29, 0x1d}, {&(0x7f00000004c0)=""/58, 0x3a}, {&(0x7f0000000500)=""/67, 0x43}, {&(0x7f0000000580)=""/180, 0xb4}, {&(0x7f0000000640)=""/4096, 0x1000}], 0xa, 0x200002, 0x612) pread64(r0, 0x0, 0x0, 0xff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0x401, 0x10000}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r1, 0x8010671f, &(0x7f0000002700)={&(0x7f0000001700)=""/4096, 0x1000}) 18:25:02 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="74723db400000000f5e14f7828f2e43bc100000000000087bd5bb963fbdc34b3501d5a04f7b738624144de9646c8d81553042b2cab55361b921834d67c06533ba243c51255a92f52f9f977b440a7971bebdb3d4e2a115504e8c8bfb6d1a669963ac53d6f79c74e4e9d6e7c89ee673c7e9555f3bcba7a1d0845727eab9109c8ada0a961a9f828df21", @ANYRESHEX=r1, @ANYBLOB="847a5d9ffea49e030f70a7d94eeccbd4cb652aeb522208b37e39e2b0c19740c047d4f3260b9b168e156989df13b091b56b8c4ed90925238527f69296bc979662ff791b0cf98f65aa316197c6014bf31835e702f3df5590f640f29a3e88833460cbff89904892d6506d8d36dc82b86ba8eebdfd860e4028a060", @ANYRESHEX=r2]) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x690d}}, './file0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev={0xac, 0x14, 0x14, 0x30}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x5c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bbc, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000180)=0x1) setresuid(0x0, r4, 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000001340)="57032921b27f162f1c42db63c293bfbe30b6afc636c9487fa6c2072abf16c3937aa99ef2c6e5e2d9a9c0cd62cfd1c71028e0549bddfa2a14530aedf17e9af6bd69d6c5351a5be3c6727b5706f363598dd1a056e0fd830797725408c2cadb6515b39618756b24c157a1898e996bd27b58ce7297f9dfb6338f949127df263137a5d66f5a23270d116ea326cdf165ab8583c8eadfd06aba2341a92945", 0x9b, 0x1) [ 1939.048868] FAULT_INJECTION: forcing a failure. [ 1939.048868] name failslab, interval 1, probability 0, space 0, times 1 [ 1939.049950] CPU: 0 PID: 14072 Comm: syz-executor.0 Not tainted 6.5.0-rc7-next-20230824 #1 [ 1939.050457] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1939.050457] program syz-executor.2 not setting count and/or reply_len properly [ 1939.050538] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1939.053007] Call Trace: [ 1939.053190] [ 1939.053352] dump_stack_lvl+0xc1/0xf0 [ 1939.053626] should_fail_ex+0x4b4/0x5b0 [ 1939.053927] ? kvmalloc_node+0xaa/0x200 [ 1939.054204] should_failslab+0x9/0x20 [ 1939.054492] __kmem_cache_alloc_node+0x66/0x310 [ 1939.054822] ? kvmalloc_node+0xaa/0x200 [ 1939.055106] ? kvmalloc_node+0xaa/0x200 [ 1939.055386] __kmalloc_node+0x50/0x160 [ 1939.055666] kvmalloc_node+0xaa/0x200 [ 1939.055933] seq_read_iter+0x9da/0x1300 [ 1939.056240] seq_read+0x171/0x210 [ 1939.056495] ? __pfx_seq_read+0x10/0x10 [ 1939.056793] ? fsnotify_perm.part.0+0x248/0x680 [ 1939.057147] ? __pfx_seq_read+0x10/0x10 [ 1939.057430] proc_reg_read+0x234/0x310 [ 1939.057731] vfs_read+0x1de/0x8f0 [ 1939.057984] ? __pfx_proc_reg_read+0x10/0x10 [ 1939.058330] ? __pfx_vfs_read+0x10/0x10 [ 1939.058606] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 1939.058985] ? __fget_files+0x267/0x480 [ 1939.059275] __x64_sys_pread64+0x1f6/0x250 [ 1939.059596] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1939.059932] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1939.060325] do_syscall_64+0x3f/0x90 [ 1939.060590] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1939.060976] RIP: 0033:0x7f0c40d0ab19 [ 1939.061252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1939.062562] RSP: 002b:00007f0c3e280188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1939.063108] RAX: ffffffffffffffda RBX: 00007f0c40e1df60 RCX: 00007f0c40d0ab19 [ 1939.063615] RDX: 00000000000000ac RSI: 0000000020000000 RDI: 0000000000000003 [ 1939.064126] RBP: 00007f0c3e2801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1939.064631] R10: 00000000000000ff R11: 0000000000000246 R12: 0000000000000001 [ 1939.065144] R13: 00007fffc1846f4f R14: 00007f0c3e280300 R15: 0000000000022000 [ 1939.065663] [ 1939.073324] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1939.073324] program syz-executor.6 not setting count and/or reply_len properly 18:25:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000000c0)={0x80000001, 0x9, 0x80000000, 0x0, 0x9}) 18:25:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="02006cbf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:25:03 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c060000ffffe00000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:25:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) (fail_nth: 2) [ 1939.319519] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1939.319519] program syz-executor.6 not setting count and/or reply_len properly [ 1939.332312] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1939.332312] program syz-executor.2 not setting count and/or reply_len properly 18:25:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="74723db400000000f5e14f7828f2e43bc100000000000087bd5bb963fbdc34b3501d5a04f7b738624144de9646c8d81553042b2cab55361b921834d67c06533ba243c51255a92f52f9f977b440a7971bebdb3d4e2a115504e8c8bfb6d1a669963ac53d6f79c74e4e9d6e7c89ee673c7e9555f3bcba7a1d0845727eab9109c8ada0a961a9f828df21", @ANYRESHEX=r1, @ANYBLOB="847a5d9ffea49e030f70a7d94eeccbd4cb652aeb522208b37e39e2b0c19740c047d4f3260b9b168e156989df13b091b56b8c4ed90925238527f69296bc979662ff791b0cf98f65aa316197c6014bf31835e702f3df5590f640f29a3e88833460cbff89904892d6506d8d36dc82b86ba8eebdfd860e4028a060", @ANYRESHEX=r2]) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x690d}}, './file0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev={0xac, 0x14, 0x14, 0x30}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x5c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bbc, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000180)=0x1) setresuid(0x0, r4, 0x0) 18:25:15 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x7, 0x7, 0x1000}) 18:25:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020074bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:25:15 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000000100664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:25:15 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) io_setup(0x3ff, &(0x7f0000000140)=0x0) io_destroy(r2) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) io_getevents(r2, 0x1, 0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f0000000140)={r3, r4+10000000}) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:25:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) (fail_nth: 3) 18:25:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0x1) 18:25:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000280), &(0x7f00000002c0)=0x4) [ 1951.671619] FAULT_INJECTION: forcing a failure. [ 1951.671619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1951.672450] CPU: 0 PID: 14099 Comm: syz-executor.0 Not tainted 6.5.0-rc7-next-20230824 #1 [ 1951.672985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1951.673526] Call Trace: [ 1951.673705] [ 1951.673865] dump_stack_lvl+0xc1/0xf0 [ 1951.674131] should_fail_ex+0x4b4/0x5b0 [ 1951.674424] _copy_to_iter+0x463/0x1260 [ 1951.674717] ? __pfx__copy_to_iter+0x10/0x10 [ 1951.675020] ? if6_seq_next+0xc1/0x290 [ 1951.675295] ? __virt_addr_valid+0x102/0x340 [ 1951.675605] ? __check_object_size+0x3d4/0x8b0 [ 1951.675925] seq_read_iter+0x71e/0x1300 [ 1951.676218] seq_read+0x171/0x210 [ 1951.676465] ? __pfx_seq_read+0x10/0x10 [ 1951.676757] ? fsnotify_perm.part.0+0x248/0x680 [ 1951.677096] ? __pfx_seq_read+0x10/0x10 [ 1951.677373] proc_reg_read+0x234/0x310 [ 1951.677646] vfs_read+0x1de/0x8f0 [ 1951.677900] ? __pfx_proc_reg_read+0x10/0x10 [ 1951.678205] ? __pfx_vfs_read+0x10/0x10 [ 1951.678491] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 1951.678847] ? __fget_files+0x267/0x480 [ 1951.679132] __x64_sys_pread64+0x1f6/0x250 [ 1951.679424] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1951.679754] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1951.680113] do_syscall_64+0x3f/0x90 [ 1951.680375] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1951.680723] RIP: 0033:0x7f0c40d0ab19 [ 1951.680976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1951.682138] RSP: 002b:00007f0c3e280188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1951.682636] RAX: ffffffffffffffda RBX: 00007f0c40e1df60 RCX: 00007f0c40d0ab19 [ 1951.683105] RDX: 00000000000000ac RSI: 0000000020000000 RDI: 0000000000000003 [ 1951.683578] RBP: 00007f0c3e2801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1951.684041] R10: 00000000000000ff R11: 0000000000000246 R12: 0000000000000001 [ 1951.684504] R13: 00007fffc1846f4f R14: 00007f0c3e280300 R15: 0000000000022000 [ 1951.684984] [ 1951.710507] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1951.710507] program syz-executor.2 not setting count and/or reply_len properly 18:25:15 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0xb, 0x0, 0x9}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44805}, 0x4000080) 18:25:15 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000280), &(0x7f00000002c0)=0x4) [ 1951.757505] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1951.757505] program syz-executor.6 not setting count and/or reply_len properly 18:25:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="74723db400000000f5e14f7828f2e43bc100000000000087bd5bb963fbdc34b3501d5a04f7b738624144de9646c8d81553042b2cab55361b921834d67c06533ba243c51255a92f52f9f977b440a7971bebdb3d4e2a115504e8c8bfb6d1a669963ac53d6f79c74e4e9d6e7c89ee673c7e9555f3bcba7a1d0845727eab9109c8ada0a961a9f828df21", @ANYRESHEX=r1, @ANYBLOB="847a5d9ffea49e030f70a7d94eeccbd4cb652aeb522208b37e39e2b0c19740c047d4f3260b9b168e156989df13b091b56b8c4ed90925238527f69296bc979662ff791b0cf98f65aa316197c6014bf31835e702f3df5590f640f29a3e88833460cbff89904892d6506d8d36dc82b86ba8eebdfd860e4028a060", @ANYRESHEX=r2]) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x690d}}, './file0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev={0xac, 0x14, 0x14, 0x30}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x5c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bbc, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000180)=0x1) 18:25:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) (fail_nth: 4) 18:25:15 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000000200664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:25:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="02007abf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:25:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/172, 0xac, 0x1) 18:25:15 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)=""/244, 0xf4}, {&(0x7f0000000080)=""/106, 0x6a}], 0x2, 0x101, 0x8) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000280), 0x10000, 0x80200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{@in, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) sendfile(r2, r3, &(0x7f00000002c0)=0x3, 0xaf) clock_gettime(0x3, &(0x7f0000000380)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, {}, 0x9, 0x7, 0x2, 0x1, 0x2, 0x8b3be82e006c101c}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, @in6=@local, 0x3502, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r5 = signalfd(r2, &(0x7f0000000340)={[0x3]}, 0x8) ppoll(&(0x7f00000003c0)=[{r5, 0x4002}, {r1, 0x6000}, {r0, 0x440}], 0x3, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000540)={[0xfffffffffffffffb]}, 0x8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x80, 0x5) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$sock_SIOCBRADDBR(r6, 0x89a0, &(0x7f0000000580)='wlan0\x00') getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000000)={@empty}, &(0x7f0000000040)=0x14) ppoll(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0x6) 18:25:15 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 18:25:15 executing program 7: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/vlan/vlan0\x00') accept(r1, &(0x7f0000000080)=@ieee802154={0x24, @long}, &(0x7f0000000100)=0x80) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001140)=""/4094, 0xffe) getdents(r2, 0x0, 0x0) pread64(r1, &(0x7f00000001c0)=""/167, 0xa7, 0x0) socketpair(0x26, 0x3, 0x3, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="010000001800000000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) [ 1952.072450] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1952.072450] program syz-executor.6 not setting count and/or reply_len properly [ 1952.105426] FAULT_INJECTION: forcing a failure. [ 1952.105426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1952.106939] CPU: 0 PID: 14121 Comm: syz-executor.0 Not tainted 6.5.0-rc7-next-20230824 #1 [ 1952.107941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1952.108933] Call Trace: [ 1952.109270] [ 1952.109574] dump_stack_lvl+0xc1/0xf0 [ 1952.110089] should_fail_ex+0x4b4/0x5b0 [ 1952.110671] _copy_to_iter+0x463/0x1260 [ 1952.111213] ? if6_seq_stop+0x1e/0xc0 [ 1952.111731] ? __pfx__copy_to_iter+0x10/0x10 [ 1952.112313] ? __pfx_lock_release+0x10/0x10 [ 1952.112881] ? __virt_addr_valid+0x102/0x340 [ 1952.113476] ? __check_object_size+0x3d4/0x8b0 [ 1952.114092] seq_read_iter+0xdb2/0x1300 [ 1952.114670] seq_read+0x171/0x210 [ 1952.115155] ? __pfx_seq_read+0x10/0x10 [ 1952.115726] ? fsnotify_perm.part.0+0x248/0x680 [ 1952.116366] ? __pfx_seq_read+0x10/0x10 [ 1952.116904] proc_reg_read+0x234/0x310 [ 1952.117429] vfs_read+0x1de/0x8f0 [ 1952.117903] ? __pfx_proc_reg_read+0x10/0x10 [ 1952.118490] ? __pfx_vfs_read+0x10/0x10 [ 1952.119002] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 1952.119661] ? __fget_files+0x267/0x480 [ 1952.120207] __x64_sys_pread64+0x1f6/0x250 [ 1952.120768] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1952.121396] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1952.122067] do_syscall_64+0x3f/0x90 18:25:15 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000000300664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 1952.122561] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1952.123301] RIP: 0033:0x7f0c40d0ab19 [ 1952.123761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1952.125909] RSP: 002b:00007f0c3e280188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1952.126837] RAX: ffffffffffffffda RBX: 00007f0c40e1df60 RCX: 00007f0c40d0ab19 [ 1952.127685] RDX: 00000000000000ac RSI: 0000000020000000 RDI: 0000000000000003 [ 1952.128537] RBP: 00007f0c3e2801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1952.129388] R10: 00000000000000ff R11: 0000000000000246 R12: 0000000000000001 [ 1952.130232] R13: 00007fffc1846f4f R14: 00007f0c3e280300 R15: 0000000000022000 [ 1952.131122] [ 1952.153647] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1952.153647] program syz-executor.2 not setting count and/or reply_len properly 18:25:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/172, 0xac, 0x1) [ 1952.255860] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1952.255860] program syz-executor.6 not setting count and/or reply_len properly 18:25:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020002bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 1952.404493] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1952.404493] program syz-executor.2 not setting count and/or reply_len properly 18:25:28 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000000400664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:25:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="74723db400000000f5e14f7828f2e43bc100000000000087bd5bb963fbdc34b3501d5a04f7b738624144de9646c8d81553042b2cab55361b921834d67c06533ba243c51255a92f52f9f977b440a7971bebdb3d4e2a115504e8c8bfb6d1a669963ac53d6f79c74e4e9d6e7c89ee673c7e9555f3bcba7a1d0845727eab9109c8ada0a961a9f828df21", @ANYRESHEX=r1, @ANYBLOB="847a5d9ffea49e030f70a7d94eeccbd4cb652aeb522208b37e39e2b0c19740c047d4f3260b9b168e156989df13b091b56b8c4ed90925238527f69296bc979662ff791b0cf98f65aa316197c6014bf31835e702f3df5590f640f29a3e88833460cbff89904892d6506d8d36dc82b86ba8eebdfd860e4028a060", @ANYRESHEX=r2]) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x690d}}, './file0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev={0xac, 0x14, 0x14, 0x30}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x5c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bbc, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)) 18:25:28 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) write$vga_arbiter(r1, &(0x7f0000000040)=@unlock_all, 0xb) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x3, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r2}], 0x2, 0x0, 0x0, 0x0) 18:25:28 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "6f2acf6f73a8ded0fd040e081a29c069855eaea9451eb1b9fd5811ad770f8a02", "ed4db4ad7eb752658fed714912e377bc938e98912443bff9a51941900720693b", "1093f4afff3a79dfa3db323d90a90ab0cd1181eca54410435eb1a6217e5dbd70", "f08c1ae2d1c1fe503f64e86ffc07582ad1dc5550ed0bff47c7ad262fd552ff4d", "cf8ea4c65421ca0a343c29f2e19e94fe30f6a09e21028453ede71b7125c2549b", "7b614ea53349e4ab1ef9e360", 0x3, 0x0, 0x7, 0xffffff01}}) 18:25:28 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 18:25:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.redirect\x00', &(0x7f0000000180)=""/169, 0xa9) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/172, 0xac, 0x1) 18:25:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020003bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:25:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) (fail_nth: 5) [ 1964.885803] FAULT_INJECTION: forcing a failure. [ 1964.885803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1964.886642] CPU: 0 PID: 14150 Comm: syz-executor.0 Not tainted 6.5.0-rc7-next-20230824 #1 [ 1964.887206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1964.887764] Call Trace: [ 1964.887951] [ 1964.888113] dump_stack_lvl+0xc1/0xf0 [ 1964.888394] should_fail_ex+0x4b4/0x5b0 [ 1964.888690] _copy_to_user+0x30/0xc0 [ 1964.888970] simple_read_from_buffer+0xd0/0x170 [ 1964.889309] proc_fail_nth_read+0x1a6/0x290 [ 1964.889625] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1964.889973] ? security_file_permission+0xb5/0xe0 [ 1964.890328] vfs_read+0x1de/0x8f0 [ 1964.890585] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1964.890953] ? __pfx_vfs_read+0x10/0x10 [ 1964.891242] ? __fget_files+0x267/0x480 [ 1964.891536] ksys_read+0x122/0x250 [ 1964.891797] ? __pfx_ksys_read+0x10/0x10 [ 1964.892087] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 1964.892458] do_syscall_64+0x3f/0x90 [ 1964.892725] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 1964.893086] RIP: 0033:0x7f0c40cbd69c [ 1964.893346] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1964.894546] RSP: 002b:00007f0c3e280170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1964.895066] RAX: ffffffffffffffda RBX: 00000000000000ac RCX: 00007f0c40cbd69c [ 1964.895550] RDX: 000000000000000f RSI: 00007f0c3e2801e0 RDI: 0000000000000004 [ 1964.896034] RBP: 00007f0c3e2801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1964.896516] R10: 00000000000000ff R11: 0000000000000246 R12: 0000000000000001 [ 1964.896992] R13: 00007fffc1846f4f R14: 00007f0c3e280300 R15: 0000000000022000 [ 1964.897487] [ 1964.965666] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1964.965666] program syz-executor.2 not setting count and/or reply_len properly [ 1964.979338] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1964.979338] program syz-executor.6 not setting count and/or reply_len properly 18:25:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@local, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0x1) 18:25:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:25:46 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x2, &(0x7f0000000140)) write$vga_arbiter(r0, &(0x7f00000001c0)=@other={'decodes', ' ', 'io'}, 0xb) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) futex(&(0x7f0000000000)=0x1, 0x0, 0x2, &(0x7f0000000080)={r1, r2+10000000}, &(0x7f00000000c0)=0x2, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) 18:25:46 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="74723db400000000f5e14f7828f2e43bc100000000000087bd5bb963fbdc34b3501d5a04f7b738624144de9646c8d81553042b2cab55361b921834d67c06533ba243c51255a92f52f9f977b440a7971bebdb3d4e2a115504e8c8bfb6d1a669963ac53d6f79c74e4e9d6e7c89ee673c7e9555f3bcba7a1d0845727eab9109c8ada0a961a9f828df21", @ANYRESHEX=r1, @ANYBLOB="847a5d9ffea49e030f70a7d94eeccbd4cb652aeb522208b37e39e2b0c19740c047d4f3260b9b168e156989df13b091b56b8c4ed90925238527f69296bc979662ff791b0cf98f65aa316197c6014bf31835e702f3df5590f640f29a3e88833460cbff89904892d6506d8d36dc82b86ba8eebdfd860e4028a060", @ANYRESHEX=r2]) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x690d}}, './file0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev={0xac, 0x14, 0x14, 0x30}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x5c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bbc, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe8) 18:25:46 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.swap.events\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x200000) sendfile(r2, 0xffffffffffffffff, &(0x7f00000001c0), 0x7000000000001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) r3 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x82980, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x82e8997f88873560) socketpair(0x23, 0x6, 0x562, &(0x7f00000000c0)) r6 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r8, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x82e8997f88873560) r9 = accept$unix(r0, 0x0, &(0x7f0000000100)) ioctl$BTRFS_IOC_WAIT_SYNC(r9, 0x40089416, &(0x7f0000000040)) 18:25:46 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020004bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:25:46 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000000500664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:25:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 18:25:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x4) [ 1983.253727] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1983.253727] program syz-executor.6 not setting count and/or reply_len properly 18:25:47 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x1, &(0x7f0000000380)) futex(&(0x7f0000000040)=0x1, 0x7, 0x1, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0)=0x2, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000000)=0xffff, 0x4) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = inotify_init() ppoll(&(0x7f0000000140)=[{r0, 0x100}, {r1}, {r0, 0x4200}, {r1, 0x400}, {r0, 0x6000}, {r2, 0x389a315e1fee8f87}, {r2, 0x8380}, {r3, 0x60}], 0x8, 0x0, 0x0, 0x0) [ 1983.264411] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1983.264411] program syz-executor.2 not setting count and/or reply_len properly 18:25:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xf, 0xff) 18:25:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0x36) 18:25:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020005bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:25:47 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000000)={[0x200]}, 0x8) 18:25:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="74723db400000000f5e14f7828f2e43bc100000000000087bd5bb963fbdc34b3501d5a04f7b738624144de9646c8d81553042b2cab55361b921834d67c06533ba243c51255a92f52f9f977b440a7971bebdb3d4e2a115504e8c8bfb6d1a669963ac53d6f79c74e4e9d6e7c89ee673c7e9555f3bcba7a1d0845727eab9109c8ada0a961a9f828df21", @ANYRESHEX=r1, @ANYBLOB="847a5d9ffea49e030f70a7d94eeccbd4cb652aeb522208b37e39e2b0c19740c047d4f3260b9b168e156989df13b091b56b8c4ed90925238527f69296bc979662ff791b0cf98f65aa316197c6014bf31835e702f3df5590f640f29a3e88833460cbff89904892d6506d8d36dc82b86ba8eebdfd860e4028a060", @ANYRESHEX=r2]) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x690d}}, './file0\x00'}) 18:25:47 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0x1) 18:25:47 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000000600664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:25:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 18:25:47 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r2 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x403, 0x140) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e23, @private=0xa010100}}, 0x0, 0x0, 0x9, 0x0, "ce0129e82d05e07c9af8a243f5bacda4c98dad4744a4907aa96f4b3a0ce83db10ea70b2d9b2ac57d2c1a135fa150015ec5de9d741c03e0f345859aa28949152a3283ed6ecf7931cc689763a0fa4ec50c"}, 0xd8) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/65, 0x41, 0x80000001) fcntl$setown(r1, 0x8, 0x0) [ 1983.534341] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1983.534341] program syz-executor.2 not setting count and/or reply_len properly 18:25:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0x6c) 18:25:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020006bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 1983.660367] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1983.660367] program syz-executor.6 not setting count and/or reply_len properly 18:25:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="74723db400000000f5e14f7828f2e43bc100000000000087bd5bb963fbdc34b3501d5a04f7b738624144de9646c8d81553042b2cab55361b921834d67c06533ba243c51255a92f52f9f977b440a7971bebdb3d4e2a115504e8c8bfb6d1a669963ac53d6f79c74e4e9d6e7c89ee673c7e9555f3bcba7a1d0845727eab9109c8ada0a961a9f828df21", @ANYRESHEX=r1, @ANYBLOB="847a5d9ffea49e030f70a7d94eeccbd4cb652aeb522208b37e39e2b0c19740c047d4f3260b9b168e156989df13b091b56b8c4ed90925238527f69296bc979662ff791b0cf98f65aa316197c6014bf31835e702f3df5590f640f29a3e88833460cbff89904892d6506d8d36dc82b86ba8eebdfd860e4028a060", @ANYRESHEX=r2]) socket$inet6_tcp(0xa, 0x1, 0x0) 18:25:47 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000000700664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:25:47 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0x1) [ 1983.827255] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1983.827255] program syz-executor.2 not setting count and/or reply_len properly 18:25:47 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') fallocate(r0, 0x8, 0xfffffffffffffff9, 0x3) pread64(r0, 0x0, 0x0, 0xff) 18:25:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, &(0x7f00000002c0)) [ 1983.916599] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1983.916599] program syz-executor.6 not setting count and/or reply_len properly [ 1983.921014] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1983.921014] program syz-executor.6 not setting count and/or reply_len properly 18:25:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xa2) 18:25:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020007bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:25:47 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000053000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 1984.043465] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1984.043465] program syz-executor.2 not setting count and/or reply_len properly [ 1984.145483] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1984.145483] program syz-executor.6 not setting count and/or reply_len properly 18:25:59 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:25:59 executing program 5: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0x1) 18:25:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xd8) 18:25:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="74723db400000000f5e14f7828f2e43bc100000000000087bd5bb963fbdc34b3501d5a04f7b738624144de9646c8d81553042b2cab55361b921834d67c06533ba243c51255a92f52f9f977b440a7971bebdb3d4e2a115504e8c8bfb6d1a669963ac53d6f79c74e4e9d6e7c89ee673c7e9555f3bcba7a1d0845727eab9109c8ada0a961a9f828df21", @ANYRESHEX=r1, @ANYBLOB="847a5d9ffea49e030f70a7d94eeccbd4cb652aeb522208b37e39e2b0c19740c047d4f3260b9b168e156989df13b091b56b8c4ed90925238527f69296bc979662ff791b0cf98f65aa316197c6014bf31835e702f3df5590f640f29a3e88833460cbff89904892d6506d8d36dc82b86ba8eebdfd860e4028a060", @ANYRESHEX=r2]) 18:25:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020048bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:25:59 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x9, 0xffffffff) 18:25:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0) 18:25:59 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000004800664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 1995.989422] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 1995.989422] program syz-executor.2 not setting count and/or reply_len properly [ 1996.000858] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 1996.000858] program syz-executor.6 not setting count and/or reply_len properly 18:26:10 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000004c00664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:26:10 executing program 5: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0x1) 18:26:10 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r1 = getpgrp(r0) r2 = getpgrp(r1) r3 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x0, 0x3, 0x3f, 0x0, 0x1ff, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x12c00, 0x100000000, 0x5, 0x2, 0x5, 0x400, 0x0, 0x0, 0xfff, 0x0, 0xab6}, r4, 0x7, r3, 0x1) syz_open_procfs(r4, &(0x7f00000000c0)='net/ip_vs_stats\x00') r5 = syz_open_procfs(r2, &(0x7f0000000000)='net/bnep\x00') pread64(r5, 0x0, 0x0, 0x5b1e22ae) 18:26:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) pipe2$9p(&(0x7f0000000140), 0x0) 18:26:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0) 18:26:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="02004cbf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:26:10 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0x10e) 18:26:10 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:26:10 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) [ 2007.164930] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2007.164930] program syz-executor.6 not setting count and/or reply_len properly [ 2007.183081] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2007.183081] program syz-executor.2 not setting count and/or reply_len properly 18:26:11 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pwritev(r0, &(0x7f0000000880)=[{&(0x7f0000000580)="62a5f4c47515cf189610dcc23a05c2eab03bb205f3514a5fcd83947ef2e59f01876d2fb1b1692b056ecd945dcae6b400e0cbedd122f737143f1d2a62fbdb384762380058a1b03b65100bd7e57ab51e742c3221f0df326e472064527dd55e160bd35d9b40e185de238c75caf30935319c6995a7b91f49439b3ffe19469a90dc4af73ef0358689a99a3970b439f233df67d59a64195184b141cb7ec433efa74cd6a04961066b38755a2aca47f933a3938365af7bd55f3d5917ac1ebb261ff7b9f37d28c47cc4eb9f94b57441a729e69b45c13d4866cde9310b5b07", 0xda}, {&(0x7f0000000400)}, {&(0x7f0000000680)="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", 0xfe}, {&(0x7f0000000440)="0f6429223ae4fc83c814a65df7a05fdc9b331f80c84e095e2c0bd328bf6d74dc83831d9b6d50b492a3ba18bff07e49a7c24ecdde0501168ff0f4c76ede6f1ecaf30ad1d564da95fc599af2932f175ebf2bab80a9da7fecf430a05024658df2fcefc783", 0x63}, {&(0x7f0000000780)="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", 0xfc}], 0x5, 0x1, 0x2) pread64(r0, 0x0, 0x0, 0xff) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) r2 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@private1, @in=@broadcast}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000280)=0xe8) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x400, 0x70bd23, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="d3333815733d66642c7266646e6ff7", @ANYRESHEX=r3, @ANYBLOB="2c7704646e093d", @ANYRESHEX=r4]) r5 = accept$inet6(r2, &(0x7f0000000980)={0xa, 0x0, 0x0, @local}, &(0x7f00000009c0)=0x1c) finit_module(r5, &(0x7f0000000a00)='{^\\.#\x00', 0x1) write(r4, &(0x7f0000000400)="e3", 0x1) write$P9_RFLUSH(r4, &(0x7f00000003c0)={0x7, 0x6d, 0x2}, 0x7) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000f80)={{}, 0x0, 0x14, @inherit={0x50, &(0x7f0000000b00)={0x0, 0x1, 0x7fff, 0x10001, {0x2, 0x6, 0x4, 0x3, 0xffffffffffffff80}, [0x2]}}, @devid}) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000940)={0x0, 0x38, [0xffffffff7fffffff, 0x80000000, 0x20, 0xfff], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/lockd', 0x100, 0x40) sendfile(r6, r2, &(0x7f0000000340)=0x7f, 0x8) ioctl$KDGETKEYCODE(r6, 0x4b4c, &(0x7f0000000380)={0xffffffff, 0xbf4}) 18:26:11 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000006800664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:26:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0) 18:26:11 executing program 5: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0x1) [ 2007.418959] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2007.418959] program syz-executor.6 not setting count and/or reply_len properly 18:26:24 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) 18:26:24 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x80, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x9}, {0x6, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$FICLONE(r2, 0x40049409, r0) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000140)={{0x0, 0x401, 0x7fffffff, 0x3, 0x7fff, 0x92e, 0x100000000, 0x0, 0x80000001, 0x8001, 0x9, 0x11a, 0x0, 0x579, 0x4}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) clock_gettime(0x6, &(0x7f0000000080)) write$vga_arbiter(r3, &(0x7f0000000040)=@unlock_all, 0xb) 18:26:24 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000006c00664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:26:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) pipe2$9p(&(0x7f0000000140), 0x0) 18:26:24 executing program 0: pread64(0xffffffffffffffff, &(0x7f0000000140)=""/151, 0x97, 0xfffffffffffffffd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10040, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@msize={'msize', 0x3d, 0xc88b}}, {@access_any}, {@access_user}, {@version_L}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@smackfstransmute}, {@dont_measure}, {@obj_role={'obj_role', 0x3d, '$$\\&O'}}, {@smackfshat={'smackfshat', 0x3d, '\xea[-/'}}, {@euid_lt}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x34, 0x38, 0x30, 0x0, 0x30, 0x33, 0x31], 0x2d, [0x61, 0x33, 0x32, 0x64], 0x2d, [0x65, 0x62, 0x34, 0x37], 0x2d, [0x31, 0x30, 0x32, 0x63], 0x2d, [0x64, 0x65, 0x35, 0x30, 0x61, 0x61, 0x36, 0x36]}}}]}}) 18:26:24 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, &(0x7f0000000000)=""/226, 0xe2, 0x4) fallocate(r0, 0x0, 0x4008, 0x30) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001140)=""/4094, 0xffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000240), &(0x7f0000000280), 0x2, 0x0) getdents(r2, 0x0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000200)) pread64(r0, 0x0, 0x0, 0xff) pwrite64(r0, &(0x7f00000001c0)="dfa607b608627861ab40a254", 0xc, 0x2) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000140)=@filter={'filter\x00', 0xe, 0x2, 0x37c, [0x0, 0x20000340, 0x20000370, 0x2000068c], 0x0, &(0x7f0000000100), &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"]}, 0x416) 18:26:24 executing program 5: syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(0xffffffffffffffff, &(0x7f0000000000)=""/172, 0xac, 0x1) 18:26:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020068bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2020.302484] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2020.302484] program syz-executor.6 not setting count and/or reply_len properly 18:26:24 executing program 4: pread64(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000, 0x100) [ 2020.349447] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2020.349447] program syz-executor.2 not setting count and/or reply_len properly 18:26:24 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000007400664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:26:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) pipe2$9p(&(0x7f0000000140), 0x0) 18:26:24 executing program 5: syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(0xffffffffffffffff, &(0x7f0000000000)=""/172, 0xac, 0x1) 18:26:24 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r1, 0x402, 0x2) fcntl$notify(r1, 0x402, 0x1) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001140)=""/4094, 0xffe) getdents(r2, 0x0, 0x0) write$vga_arbiter(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="756e6c6f636bd919f0731dd169ec82f2ac4c06f59a2dac8836a12b3287065d1082b2978a6c0c7cf76342ab860bfe6424ec1be82292a3e0494fc8b4ffc1ca79589a05a2e1cf0eedf7ce4c91bfa110a01496f8db172eba00"/96], 0xa) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x6, &(0x7f0000000040)) fchmodat(r2, &(0x7f0000000180)='./file0\x00', 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, &(0x7f00000001c0)={0x4, 0x4}) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) openat(r2, &(0x7f0000000140)='./file0\x00', 0x40000, 0x50) ppoll(&(0x7f0000000300)=[{r0}, {r3}], 0x2, 0x0, 0x0, 0x0) 18:26:24 executing program 4: pread64(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000, 0x100) 18:26:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') recvmsg$unix(r0, &(0x7f00000005c0)={&(0x7f00000000c0), 0x6e, &(0x7f0000000500)=[{&(0x7f0000000180)=""/169, 0xa9}, {&(0x7f0000000240)=""/254, 0xfe}, {&(0x7f0000000340)=""/194, 0xc2}, {&(0x7f0000000440)=""/171, 0xab}], 0x4, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}, 0x2003) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:26:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="02006cbf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:26:24 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='memory.oom.group\x00', 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) dup2(r1, r2) [ 2020.510954] audit: type=1400 audit(1692901584.351:20): avc: denied { watch_reads } for pid=14306 comm="syz-executor.3" path="/dev/bsg" dev="devtmpfs" ino=113 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 [ 2020.517662] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2020.517662] program syz-executor.2 not setting count and/or reply_len properly [ 2020.524149] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2020.524149] program syz-executor.6 not setting count and/or reply_len properly 18:26:24 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000007a00664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:26:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020074bf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:26:24 executing program 4: pread64(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000, 0x100) 18:26:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) pipe2$9p(&(0x7f0000000140), 0x0) [ 2020.679547] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2020.679547] program syz-executor.6 not setting count and/or reply_len properly [ 2020.686585] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2020.686585] program syz-executor.2 not setting count and/or reply_len properly 18:26:35 executing program 4: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) 18:26:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="02007abf003e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:26:35 executing program 0: keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x2}) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/184, 0xb8, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}]}]}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}]}]}]}, 0x2c}}, 0x0) r9 = fork() syz_open_procfs(r9, &(0x7f0000000240)='net/xfrm_stat\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r6, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2}, @val={0x8}, @val={0xc, 0x99, {0x3, 0x57}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4008004}, 0x8050) r10 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x82000, 0x0) connect$inet(r10, &(0x7f0000000300)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) 18:26:35 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x1ffffed0, 0x0, 0x0, 0x0) 18:26:35 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000340)={{r0}, "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"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) close(r1) 18:26:35 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c06000000e0ffff00664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:26:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) 18:26:35 executing program 5: syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(0xffffffffffffffff, &(0x7f0000000000)=""/172, 0xac, 0x1) [ 2032.003570] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2032.003570] program syz-executor.6 not setting count and/or reply_len properly 18:26:35 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000002000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2032.059151] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2032.059151] program syz-executor.2 not setting count and/or reply_len properly 18:26:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r0, 0x0, 0x0, 0x1) [ 2032.130631] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2032.130631] program syz-executor.6 not setting count and/or reply_len properly 18:26:35 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x82e8997f88873560) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000000), 0x31) r3 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = getpid() ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x80049367, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x0, 0x3, 0x3f, 0x0, 0x1ff, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x12c00, 0x100000000, 0x5, 0x2, 0x5, 0x400, 0x0, 0x0, 0xfff, 0x0, 0xab6}, r4, 0x7, r3, 0x1) r5 = syz_open_procfs(r4, &(0x7f0000000080)='net/softnet_stat\x00') pread64(r5, 0x0, 0x0, 0xff) 18:26:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:26:48 executing program 0: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x0, 0x3, 0x3f, 0x0, 0x1ff, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x12c00, 0x100000000, 0x5, 0x2, 0x5, 0x400, 0x0, 0x0, 0xfff, 0x0, 0xab6}, r1, 0x7, r0, 0x1) r2 = syz_open_procfs(r1, &(0x7f0000000140)='gid_map\x00') pread64(r2, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:26:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) 18:26:48 executing program 7: setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@remote, @in6=@mcast2, 0x4e23, 0x8000, 0x4e20, 0x1, 0x2, 0xe0, 0x100, 0x1, 0x0, 0xee01}, {0x100000000000, 0x100, 0x7, 0x8, 0x3, 0x40000036c, 0x3}, {0x3f, 0x6, 0x87, 0xffffffffffffff7f}, 0x5, 0x6e6bb5, 0x0, 0x0, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x4d6}, 0xa, @in=@local, 0x3507, 0x2, 0x0, 0x6, 0x5, 0xff, 0x4}}, 0xe8) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0x81, 0xffff, 0x9, 0x2, 0x2]}, &(0x7f0000000180)=0x54) pread64(0xffffffffffffffff, 0x0, 0x0, 0xff) r0 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x82e8997f88873560) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000001c0)) 18:26:48 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000000), 0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:26:48 executing program 4: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) 18:26:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') pread64(r0, 0x0, 0x0, 0x0) 18:26:48 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000003000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:26:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf023e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2044.742986] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2044.742986] program syz-executor.6 not setting count and/or reply_len properly 18:26:48 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000004000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2044.823672] sg_write: data in/out 134233566/245 bytes for SCSI command 0xf8-- guessing data in; [ 2044.823672] program syz-executor.2 not setting count and/or reply_len properly 18:26:48 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000000), 0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:26:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/snmp6\x00') r1 = pidfd_getfd(r0, r0, 0x0) pread64(r1, &(0x7f0000000140)=""/174, 0xae, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = syz_open_dev$hidraw(&(0x7f0000000080), 0x400, 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0xac0040, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}, {@msize={'msize', 0x3d, 0x8}}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_lt={'euid<', 0xee01}}, {@obj_user}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}}) 18:26:48 executing program 1: pread64(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000, 0x100) 18:26:48 executing program 7: pread64(0xffffffffffffffff, 0x0, 0x0, 0xff) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e23, 0x800, @local, 0x6}}, 0x0, 0x0, 0x4d, 0x0, "57b1e6a0f2fd42eff03cfcaf01b8709d945972cea1adf1970318d50b2b0d108e89ec6096d8196321741498fe626dcf3ad2ad172cecb58719cecaf37a3a656b10d494a50af0b49f65172006963ba84afc"}, 0xd8) [ 2044.948877] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2044.948877] program syz-executor.6 not setting count and/or reply_len properly 18:26:48 executing program 4: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) 18:26:48 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf033e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:26:48 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000380)) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x280300, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r9 = accept4(r6, &(0x7f0000000200)=@ieee802154={0x24, @long}, &(0x7f0000000280)=0x80, 0x800) pidfd_getfd(r8, r9, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}]}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08002bbd7000ffdbdf25310000000c0099000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040004}, 0x20004400) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) [ 2045.108499] sg_write: data in/out 134233567/245 bytes for SCSI command 0xf8-- guessing data in; [ 2045.108499] program syz-executor.2 not setting count and/or reply_len properly 18:26:59 executing program 1: pread64(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000, 0x100) 18:26:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf043e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:26:59 executing program 4: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000, 0x100) 18:26:59 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:26:59 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000005000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:26:59 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) 18:26:59 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x82e8997f88873560) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000040)) 18:26:59 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x759780, 0x8) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x0, 0x3, 0x3f, 0x0, 0x1ff, 0xda615e4d15c6544d, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x12c00, 0x100000000, 0x5, 0x2, 0x5, 0x400, 0x0, 0x0, 0xfff, 0x0, 0xab6}, r2, 0x7, r1, 0x1) r3 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x0, 0x3, 0x3f, 0x0, 0x1ff, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x12c00, 0x100000000, 0x5, 0x2, 0x5, 0x400, 0x0, 0x0, 0xfff, 0x0, 0xab6}, r4, 0x7, r3, 0x1) r5 = fcntl$getown(r0, 0x9) r6 = syz_open_procfs(r5, &(0x7f00000001c0)='net/ip6_tables_targets\x00') pread64(r6, &(0x7f0000000000)=""/172, 0xac, 0xff) [ 2056.031618] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2056.031618] program syz-executor.6 not setting count and/or reply_len properly [ 2056.045709] sg_write: data in/out 134233568/245 bytes for SCSI command 0xf8-- guessing data in; [ 2056.045709] program syz-executor.2 not setting count and/or reply_len properly 18:26:59 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000006000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:26:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf053e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:26:59 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:26:59 executing program 4: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000, 0x100) 18:27:00 executing program 1: pread64(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000, 0x100) 18:27:00 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) [ 2056.224087] sg_write: data in/out 134233569/245 bytes for SCSI command 0xf8-- guessing data in; [ 2056.224087] program syz-executor.2 not setting count and/or reply_len properly 18:27:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf063e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2056.327991] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2056.327991] program syz-executor.6 not setting count and/or reply_len properly [ 2056.376257] sg_write: data in/out 134233570/245 bytes for SCSI command 0xf8-- guessing data in; [ 2056.376257] program syz-executor.2 not setting count and/or reply_len properly 18:27:11 executing program 1: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) 18:27:11 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r1, 0x0, 0x0, 0xff) 18:27:11 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:27:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf073e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:27:11 executing program 4: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000, 0x100) 18:27:11 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$vga_arbiter(r0, &(0x7f00000000c0), 0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev={0xac, 0x14, 0x14, 0xfd}, @in=@rand_addr=0x64010102, 0x4e24}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x40000}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ppoll(&(0x7f0000000080)=[{r0}, {r1}, {r2, 0x2a0}, {r3, 0x1088}, {r1, 0x4122}, {}], 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$vga_arbiter(r4, &(0x7f0000000040)=@other={'unlock', ' ', 'io'}, 0xa) 18:27:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) sendfile(r0, r1, &(0x7f0000000240)=0x5, 0x1) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000440)={{'\x00', 0x2}, {0x9}, 0x80, 0x0, 0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)="c9693646ff457171782f4d80ba3ca96b2299650a179f5ea848fd", 0x1a, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1cf}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000000c0)={'icmp\x00'}, &(0x7f0000000100)=0x1e) 18:27:11 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000007000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:27:11 executing program 1: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) [ 2067.428871] sg_write: data in/out 134233571/245 bytes for SCSI command 0xf8-- guessing data in; [ 2067.428871] program syz-executor.2 not setting count and/or reply_len properly [ 2067.429565] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2067.429565] program syz-executor.6 not setting count and/or reply_len properly 18:27:11 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x0, 0x3, 0x3f, 0x0, 0x1ff, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x12c00, 0x100000000, 0x5, 0x2, 0x5, 0x400, 0x0, 0x0, 0xfff, 0x0, 0xab6}, r2, 0x7, r1, 0x1) r3 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000240)='TIPCv2\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x6, 0xe1, 0x0, 0x3, 0x0, 0xa7, 0x400, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaa, 0x0, @perf_config_ext={0xc000000000000000, 0x800}, 0x802, 0x1000, 0x7fff, 0x4, 0x10001, 0x5, 0x25c4, 0x0, 0xd769, 0x0, 0x7045}, r2, 0xffffffffffffffff, r3, 0x0) 18:27:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf483e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:27:11 executing program 1: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) 18:27:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0x100) 18:27:11 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x4, &(0x7f0000000040)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x1, 0x7, 0x3f}) 18:27:11 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000048000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2067.690228] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2067.690228] program syz-executor.6 not setting count and/or reply_len properly [ 2067.691658] sg_write: data in/out 134233636/245 bytes for SCSI command 0xf8-- guessing data in; [ 2067.691658] program syz-executor.2 not setting count and/or reply_len properly 18:27:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000000c0)) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001140)=""/4094, 0xffe) getdents(r1, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r2) ioctl$CDROM_CLEAR_OPTIONS(r1, 0x5321, 0x1a) 18:27:27 executing program 1: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000, 0x100) 18:27:27 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000000)=0x1) 18:27:27 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10b000, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}]}]}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r8, @ANYBLOB="10001d800cfbe5a80d00000000000000"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0xb8, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfffffffc, 0x6f}}}}, [@NL80211_ATTR_IE={0x7d, 0x2a, [@mic={0x8c, 0x18, {0x8ad, "b3cfd402d153", @long="6f75435fe5bfc4643c4bd9d6b89934cc"}}, @preq={0x82, 0x57, @ext={{0x1, 0x1, 0x1}, 0x9, 0x0, 0x9, @broadcast, 0x40, @device_a, 0x9, 0x80, 0x5, [{{0x0, 0x0, 0x1}, @broadcast, 0x8}, {{}, @device_a, 0x1}, {{0x0, 0x0, 0x1}, @device_b, 0xc85}, {{}, @device_b, 0x4}, {{0x0, 0x0, 0x1}, @device_a, 0xfed}]}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xb7, 0x64, 0x3f}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40001}, 0x4040800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}]}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x9}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x6}]}, 0x2c}}, 0x0) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r11}, {r12}], 0x2, 0x0, 0x0, 0x0) 18:27:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf4c3e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:27:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0x100) 18:27:27 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c060000004c000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:27:27 executing program 5: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2084.195846] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2084.195846] program syz-executor.6 not setting count and/or reply_len properly [ 2084.202500] sg_write: data in/out 134233640/245 bytes for SCSI command 0xf8-- guessing data in; [ 2084.202500] program syz-executor.2 not setting count and/or reply_len properly [ 2084.260926] netlink: 'syz-executor.3': attribute type 29 has an invalid length. 18:27:28 executing program 1: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000, 0x100) 18:27:28 executing program 5: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:27:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf683e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:27:28 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000068000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:27:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0x100) [ 2084.358414] netlink: 'syz-executor.3': attribute type 29 has an invalid length. 18:27:28 executing program 7: syz_usb_connect$cdc_ecm(0x4, 0x168, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x1, 0x0, 0xa1, 0x8, 0x7}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xf6a115ccd2888e8c}}, {0xca, &(0x7f0000000340)=@string={0xca, 0x3, "9eb1183b691213153af93f027de7a4e32e27283f3193f28770cf192108aa503eecf8cd9159753206311ef1643e71d9e71135a71f7f3cecf5d4204a3059e13f8c4b5ecde56f8d6fa761c6ff6738967dacb2c89d15184d78effb24e8db80942ca83f1a5fe74f835e6a693ec44e53a6094381a89e17d68c4d3dc073d10b73005f4104081543ae153b920b05a61dc4b9a9b2f5307a4315260a3e83712f4c7478ceb6db064031f42be89cb07f78f6fc56ae1b91fd30b4b7eb9ab9d7c1d219d20bc92f7221f6de145c7a36"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1004}}, {0xcf, &(0x7f0000000540)=@string={0xcf, 0x3, "c1d7faf388d9598ed934a422180c1e2ea61b6487041c941bb73e070d37cf83d62438a1723bcc4279f6e099a7f95d85c6cdd0d5a5f27bfcb6c016f8a9fb8ba196d53cca06fa71e3cbaaedd6088092d8c41de411dbdad043692011ec44890931877d7442a561233dcfc3cf3e0c069708e3cffad82ca905aa5a83fb9da6280dac3a4be69295c0481dd91104a82177374df372559855e9fb74b5e47bae9ce8e7cfdc57f569d085c103f36607be00c1bb257bd2e0086c05b2a1858e8d0326512d85ad0536fa3badcae34d1df998a43e"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x457}}, {0x1e, &(0x7f0000000680)=@string={0x1e, 0x3, "0afdd3e26b5ede99391319afab4e4c655ef2ab8587e3c62760bb347d"}}, {0x6, &(0x7f00000006c0)=@string={0x6, 0x3, "f7347d57"}}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') fsync(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev={0xac, 0x14, 0x14, 0x17}, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r0, 0x8001, 0x80000000}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) pread64(r1, 0x0, 0xffffffffffffff57, 0x100) 18:27:28 executing program 0: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = getpid() perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1, 0x0, 0x3, 0x3f, 0x0, 0x1ff, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x2}, 0x12c00, 0x100000000, 0x5, 0x7, 0x5, 0x403, 0x0, 0x0, 0xfff, 0x0, 0xab6}, r1, 0x8000000000007, r0, 0x1) r2 = syz_open_procfs(r1, &(0x7f0000000140)='net/if_inet6\x00') pread64(r2, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:27:28 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000140)=""/229, 0xe5}, {&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000340)=""/237, 0xed}, {&(0x7f0000000240)=""/138, 0x8a}, {&(0x7f0000000440)=""/255, 0xff}], 0x5, 0x100, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x6, &(0x7f0000000040)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) [ 2084.564414] sg_write: data in/out 134233668/245 bytes for SCSI command 0xf8-- guessing data in; [ 2084.564414] program syz-executor.2 not setting count and/or reply_len properly [ 2084.581215] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2084.581215] program syz-executor.6 not setting count and/or reply_len properly 18:27:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf6c3e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:27:28 executing program 5: write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:27:28 executing program 1: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000, 0x100) [ 2084.894901] sg_write: data in/out 134233672/245 bytes for SCSI command 0xf8-- guessing data in; [ 2084.894901] program syz-executor.2 not setting count and/or reply_len properly 18:27:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0x100) 18:27:43 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c060000006c000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:27:43 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:27:43 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x400042, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000240), 0x8, 0x20800) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x100010, r3, 0xbac72000) pselect6(0x40, &(0x7f0000000000)={0x2, 0x100000001, 0x4, 0x2c37, 0x10000, 0x2, 0x0, 0x38d}, &(0x7f0000000040)={0xff, 0x4, 0x9, 0x3, 0x614e06a0, 0x4, 0x6, 0x8}, &(0x7f0000000080)={0xfffffffeffffffff, 0x3, 0x1, 0x5, 0x1000, 0x8, 0x400, 0x20}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0x108e]}, 0x8}) 18:27:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf743e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:27:43 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) 18:27:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) sendfile(r1, r2, &(0x7f00000000c0)=0x7, 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r8, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote, @in6=@private2, 0x4e20, 0x7, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x89, r7, r8}, {0x7fff, 0x6, 0x6, 0x9, 0x7, 0x1, 0x1c1b45f5, 0x93}, {0x4, 0x7f, 0x80000001, 0x1000}, 0xfa, 0x6e6bbf, 0x1, 0x0, 0x2, 0x2}, {{@in6=@remote, 0x4d3, 0x33}, 0x2, @in6=@private2, 0x3504, 0x3, 0x0, 0xff, 0x0, 0x7, 0x20}}, 0xe8) 18:27:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x0) [ 2099.359897] sg_write: data in/out 134233680/245 bytes for SCSI command 0xf8-- guessing data in; [ 2099.359897] program syz-executor.2 not setting count and/or reply_len properly 18:27:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) pread64(r1, &(0x7f0000000000)=""/167, 0xa7, 0x400103) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000000c0)) 18:27:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf7a3e0008026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:27:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0x100) [ 2099.460469] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2099.460469] program syz-executor.6 not setting count and/or reply_len properly [ 2099.509393] sg_write: data in/out 134233686/245 bytes for SCSI command 0xf8-- guessing data in; [ 2099.509393] program syz-executor.2 not setting count and/or reply_len properly 18:27:43 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000074000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:27:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0x100) [ 2099.652833] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2099.652833] program syz-executor.6 not setting count and/or reply_len properly [ 2112.228835] sg_write: data in/out 11156956/245 bytes for SCSI command 0xf8-- guessing data in; [ 2112.228835] program syz-executor.2 not setting count and/or reply_len properly 18:27:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x0) 18:27:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003eaa00026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:27:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x0) 18:27:56 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, @out_args}, './file0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$BTRFS_IOC_SYNC(r3, 0x9408, 0x0) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:27:56 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:27:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/170, 0xaa, 0x7) r1 = signalfd(r0, &(0x7f00000000c0)={[0x1000]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x30, r1, 0x0) 18:27:56 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@private}}, &(0x7f0000000180)=0xe8) clock_gettime(0x0, &(0x7f0000001840)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="86541a384075ab7a4b7cec80d91700000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x140}}, {{&(0x7f00000004c0), 0x6e, &(0x7f0000001740)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/135, 0x87}, {&(0x7f0000001600)=""/99, 0x63}, {&(0x7f0000001680)=""/137, 0x89}], 0x4, &(0x7f0000001780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x40}}], 0x2, 0x40002026, &(0x7f0000001880)={r2, r3+10000000}) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x200, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="3f17fc21345da7a440daf9a1bdac276b85c2d6463351eae513dd8b81a5f083cf9b028536b70bba19dc612008c58658b6db3a4a24a081cafa33f1d574be9eab68bb853b79a36c7f63d49e71bcbded12c7d7a5f5c07d1a5feb63fc6380aa15231fa67208bf8291ba24d643de38104a4cd524598a700928de4290b1617d1a14b4ca03c32a40bde8202e112d5b6fe3bd12fef3e6c71bb19cf80b386e986d2e8ade2495c8c508e31575", 0xa7, 0x9}], 0x10000, &(0x7f00000018c0)={[{@resgid={'resgid', 0x3d, r4}}, {@orlov}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x30018, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r1}}, {@noextend}, {@cache_loose}, {@cache_none}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@version_u}], [{@appraise}, {@hash}, {@obj_user={'obj_user', 0x3d, 'pagemap\x00'}}]}}) 18:27:56 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c060000007a000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:27:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x0) 18:27:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003eb900026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:27:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/167, 0xa7, 0xff) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x100, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 2112.321734] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2112.321734] program syz-executor.6 not setting count and/or reply_len properly 18:27:56 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FITHAW(r0, 0xc0045878) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x4}}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ppoll(&(0x7f0000000300)=[{r2}, {r1}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x8, 0x4) r3 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x700, 0x8b7eb9711999de04, 0x3, 0xfffffffa, {{0x17, 0x4, 0x1, 0x9, 0x5c, 0x64, 0x0, 0x8, 0x4, 0x0, @private=0xa010100, @multicast2, {[@timestamp_prespec={0x44, 0x24, 0x29, 0x3, 0x9, [{@multicast2, 0xe2}, {@loopback, 0x7fffffff}, {@multicast1, 0x8}, {@broadcast, 0x6}]}, @ssrr={0x89, 0x17, 0x7b, [@private=0xa010100, @multicast2, @rand_addr=0x64010100, @broadcast, @private=0xa010102]}, @timestamp={0x44, 0xc, 0x4a, 0x0, 0x2, [0x1, 0x0]}]}}}}}) [ 2112.375185] syz-executor.7[14588]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2112.415388] sg_write: data in/out 12139996/245 bytes for SCSI command 0xf8-- guessing data in; [ 2112.415388] program syz-executor.2 not setting count and/or reply_len properly [ 2112.422745] sg_write: data in/out 12139996/245 bytes for SCSI command 0xf8-- guessing data in; [ 2112.422745] program syz-executor.2 not setting count and/or reply_len properly [ 2112.432864] syz-executor.7[14588]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 18:27:56 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000030000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:27:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x0) 18:27:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x0) 18:27:56 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:27:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0208026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:27:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000240)=0x1, &(0x7f0000000280)=0x4) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00002abd7000ffdbdf25730000000c00990001000000ef000b0000000500ee003f0000000800ef00010008000800fb000c00"/66], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x400c001) 18:27:56 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x200, 0x70bd28, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x804c000) pread64(r0, 0x0, 0x0, 0xff) [ 2112.583912] sg_write: data in/out 134364636/245 bytes for SCSI command 0xf8-- guessing data in; [ 2112.583912] program syz-executor.2 not setting count and/or reply_len properly 18:27:56 executing program 3: ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x6) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x7, &(0x7f0000000380)) write$vga_arbiter(r0, &(0x7f00000001c0)=@other={'unlock', ' ', 'mem'}, 0xb) rt_sigtimedwait(&(0x7f0000000080)={[0x1]}, &(0x7f0000000140), &(0x7f00000000c0)={0x77359400}, 0x8) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000000)="cc1ff5b4a0c42315ac1c03e3ea0e1aacb03939df7da35008efd6fff83d2189be3a003a71aaec38858974232a929333bbb6128155b9090b74aef0abfbf4f2c7ad6ff1b4b29e0668981373c09fda3bc3f70947a37c097a6a695601689725bee5358bad56e438f96ebe", 0x68, 0x3a70, 0x0) 18:27:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0308026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:27:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x0, 0x3, 0x3f, 0x0, 0x1ff, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x12c00, 0x100000000, 0x5, 0x2, 0x5, 0x400, 0x0, 0x0, 0xfff, 0x0, 0xab6}, r2, 0x7, r1, 0x1) r3 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000240)='TIPCv2\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x6, 0xe1, 0x0, 0x3, 0x0, 0xa7, 0x400, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaa, 0x0, @perf_config_ext={0xc000000000000000, 0x800}, 0x802, 0x1000, 0x7fff, 0x4, 0x10001, 0x5, 0x25c4, 0x0, 0xd769, 0x0, 0x7045}, r2, 0xffffffffffffffff, r3, 0x0) [ 2112.706796] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2112.706796] program syz-executor.6 not setting count and/or reply_len properly 18:27:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/160, 0xa0, 0xff) [ 2112.790817] sg_write: data in/out 134430172/245 bytes for SCSI command 0xf8-- guessing data in; [ 2112.790817] program syz-executor.2 not setting count and/or reply_len properly 18:27:56 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:28:13 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000000)={[0x200]}, 0x8) 18:28:13 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) clock_gettime(0x3, &(0x7f0000000140)) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x4ab6, 0x3, 0xb, 0x12, "8834e1090d2662b59aee1de8ac4c7e49f5dadb57cefcb1828a17c999cdaedc638f92196c0de4d450b4b9c245ec611568edac1387b5cb0a41181ad83367c840bd", "63ae179bdf30110275490600da3674528f46fd6702c63fb21a4ef46cb2b82c92", [0x0, 0x3]}) 18:28:13 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000050000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:28:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0408026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:28:13 executing program 0: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x0, 0x3, 0x3f, 0x0, 0x1ff, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x12c00, 0x100000000, 0x5, 0x2, 0x5, 0x400, 0x0, 0x0, 0xfff, 0x0, 0xab6}, r1, 0x7, r0, 0x1) r2 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x0, 0x3, 0x3f, 0x0, 0x1ff, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100)}, 0x12c00, 0x100000000, 0x5, 0x2, 0x5, 0x400, 0x0, 0x0, 0xfff, 0x0, 0xab6}, r3, 0x7, r2, 0x1) r4 = syz_open_procfs(r3, &(0x7f0000000140)='net/sco\x00') pread64(r4, &(0x7f0000000000)=""/172, 0xac, 0xff) r5 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x0, 0x3, 0x3f, 0x0, 0x1ff, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x12c00, 0x100000000, 0x5, 0x2, 0x5, 0x400, 0x0, 0x0, 0xfff, 0x0, 0xab6}, r6, 0x7, r5, 0x1) syz_open_procfs(r6, &(0x7f0000000240)='net/vlan/vlan0\x00') sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x48, 0x1, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9cfb}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x75d}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040010}, 0x2008105) 18:28:13 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x82e8997f88873560) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000040)) 18:28:13 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x5, 0x4, &(0x7f0000000240)=[{&(0x7f0000000080)="051d09", 0x3, 0xb52}, {&(0x7f00000000c0)="cceb345761f6cfb25febd975f59dd7838e07039cb01826b4baf719f076f4dd5d4e84eef010439eb776ab5111866d8f7fcf10fedfc3a51d90fad17e3bc330bfa71038ef7dd81532114547f58efad7272014e5bd468a4e8510011666406218d36489", 0xffffff10, 0x80000000}, {&(0x7f0000000140)="33ba4ae32124f9999a16acd50811606e80de182690d994a8a15cf98f27fe1e19bb28bae07e66e31068ef106b8d609760d9fe400a276afe4528fda156ac541458ede5bd5d04b6befc2964bf6b07f3fc3f0e9e38b71243c48a06315306e634b24808953cc23f74b83ca73a8e1131106c36ab7584a49e9a273ffab2e85f72ef713880213e61e604f169f6af19d9718218fe6da281e5c9c536fa1399e8ae432d1163794b83c66edf89a770f328c536989d7e47751c7389f9", 0xb6, 0xe0f4}, {&(0x7f0000000200)="10f0c5e02ba126b4ca87c4515c328ced32a3ea40986f6a098dae6173bd", 0x1d, 0xa55}], 0x29080, &(0x7f0000000340)={[{@map_normal}, {@nojoliet}, {@sbsector={'sbsector', 0x3d, 0xfff}}, {@nojoliet}, {@session={'session', 0x3d, 0x40}}, {@dmode={'dmode', 0x3d, 0x7}}, {@session={'session', 0x3d, 0x24}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@cruft}, {@nojoliet}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'pagemap\x00'}}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, 'pagemap\x00'}}, {@subj_user={'subj_user', 0x3d, 'pagemap\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@uid_gt}]}) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/1300], 0x514) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f00000000c0)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000001500)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000015c0)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000180)={0x7f7, 0x10000, 0xfffffffb, 0x3, 0x1, 0x200}) r3 = mq_open(&(0x7f0000000000)='@\x00', 0xc1, 0xb2, &(0x7f0000000040)={0xa554, 0x7, 0x8001, 0x8}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000500)={{}, r4, 0x12, @unused=[0x1, 0x1, 0x7ff, 0x6], @subvolid=0x80000000}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000200)={{r2}, r4, 0x18, @unused=[0x3ff, 0xcd0, 0x0, 0x4], @name="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"}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000002c0)=r4) 18:28:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2129.691005] sg_write: data in/out 134495708/245 bytes for SCSI command 0xf8-- guessing data in; [ 2129.691005] program syz-executor.2 not setting count and/or reply_len properly [ 2129.698169] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2129.698169] program syz-executor.6 not setting count and/or reply_len properly [ 2129.729846] syz-executor.7[14643]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 2130.181668] syz-executor.7[14643]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 18:28:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0508026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:28:27 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:28:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='attr\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001140)=""/4094, 0xffe) getdents(r1, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000100)=0x8000, 0x4) openat(r1, &(0x7f00000001c0)='./file1\x00', 0x401001, 0x2) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000180)) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r2, 0x80000) 18:28:27 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000000)={[0x200]}, 0x8) 18:28:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x82e8997f88873560) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000040)) 18:28:27 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x40189206, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000200000000fcdbdf25510000000c00990005000000640000000a000600080211000000000005008a00040000000a000600080211000000000005008a00020000000a000600ffffffffff000005008a000400"/98], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4008800) clock_gettime(0x7, &(0x7f0000000280)) ppoll(&(0x7f0000000300)=[{r1}, {r2}], 0x2, 0x0, 0x0, 0x0) r6 = openat2(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x40081, 0x0, 0x1}, 0x18) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6f}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x801) 18:28:27 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0x2000000ff) 18:28:27 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000030050000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2143.516481] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2143.516481] program syz-executor.6 not setting count and/or reply_len properly [ 2143.523017] sg_write: data in/out 134561244/245 bytes for SCSI command 0xf8-- guessing data in; [ 2143.523017] program syz-executor.2 not setting count and/or reply_len properly [ 2143.529386] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2143.529386] program syz-executor.6 not setting count and/or reply_len properly 18:28:27 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000060000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:28:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x82e8997f88873560) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000040)) 18:28:27 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x100015, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}, {@access_any}, {@cache_mmap}], [{@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x38, 0x21eedbd57505348d, 0x6c5afb480447ac08, 0x32, 0x34, 0x36, 0x38], 0x2d, [0x64, 0x60, 0x39, 0x31], 0x2d, [0x36, 0x30, 0x35, 0x33], 0x2d, [0x34, 0x39, 0x63, 0x66], 0x2d, [0x31, 0x61, 0x31, 0x33, 0x31, 0x63, 0x61, 0x32]}}}, {@subj_type={'subj_type', 0x3d, 'pagemap\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@measure}, {@uid_eq={'uid', 0x3d, r1}}]}}) 18:28:27 executing program 5: syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:28:27 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x40001, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001140)=""/4094, 0xffe) getdents(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x6db}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xfffffffffffffffe, 0x4) sendfile(r1, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) openat(r1, &(0x7f0000000100)='./file0\x00', 0x18840, 0x140) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:28:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0608026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2143.699733] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2143.699733] program syz-executor.6 not setting count and/or reply_len properly 18:28:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x82e8997f88873560) 18:28:27 executing program 7: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl(r0, 0x7, &(0x7f0000000040)="8decaf5319e10f95ffaf199d055d00bc1af25b7c04f7345a1c64cc85e96e5886e0b6c19c4359feb29c63276eb44e8b1eb64c95f503ec0c495b71dd62fd5ea8088a25f4c38d005cb671") r1 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x0, 0x3, 0x3f, 0x0, 0x1ff, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x12c00, 0x100000000, 0x5, 0x2, 0x5, 0x400, 0x0, 0x0, 0xfff, 0x0, 0xab6}, r1, 0x7, r0, 0x1) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/ip_mr_cache\x00') pread64(r2, 0x0, 0x0, 0xff) 18:28:27 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) clock_gettime(0x0, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ppoll(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) 18:28:27 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000070000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2143.821817] sg_write: data in/out 134626780/245 bytes for SCSI command 0xf8-- guessing data in; [ 2143.821817] program syz-executor.2 not setting count and/or reply_len properly 18:28:27 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) [ 2143.945039] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2143.945039] program syz-executor.6 not setting count and/or reply_len properly 18:28:42 executing program 7: pread64(0xffffffffffffffff, 0x0, 0x0, 0xff) 18:28:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0708026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:28:42 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0x200) 18:28:42 executing program 5: syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:28:42 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:28:42 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000000)={[0x200]}, 0x8) 18:28:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) 18:28:42 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000005300000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2158.562357] sg_write: data in/out 134692316/245 bytes for SCSI command 0xf8-- guessing data in; [ 2158.562357] program syz-executor.2 not setting count and/or reply_len properly [ 2158.572106] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2158.572106] program syz-executor.6 not setting count and/or reply_len properly 18:28:42 executing program 5: syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:28:42 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000480000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:28:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e4808026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:28:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) 18:28:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') r1 = open(&(0x7f00000000c0)='./file0\x00', 0x400000, 0x8) pread64(r1, &(0x7f0000000100)=""/54, 0x36, 0x3) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x0) 18:28:42 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x10001, 0x18100) close_range(r1, r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto(r1, &(0x7f0000000040)="fc011b6722a3e7f2faf4bf0f045f62a59535360e8eb0b4ea15008a17b4a07df9a90313883c17de24f9437a2238c74e5c5f0bbc838d9d8c57ebba4b300381a802691ffee493d2764aa5c1c99c0efb2c7dc1ba6ac317d2e6cca0828ff9ed1830974f8c4cbc1105b938ab00558cbb0c397a5171e05774455d55018e5a64331a872223096f9c4f05bd95c64f6c41452843bd34c1583977af32bc5a92f29b4fbacd175d9a03a2b20baf0936a6af671085700b123049f66c71573e2b517e246691bdce341679f0e401817b81dcc03794de041b2bd7149a07257fe787a2941063efff0866c0d5", 0xe3, 0x4000000, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x4, 0x3, 0x3, {0xa, 0x4e23, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x80) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) readahead(r2, 0x2625e525, 0x5) pread64(r0, 0x0, 0x0, 0xff) [ 2158.731235] sg_write: data in/out 138952156/245 bytes for SCSI command 0xf8-- guessing data in; [ 2158.731235] program syz-executor.2 not setting count and/or reply_len properly [ 2158.742431] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2158.742431] program syz-executor.6 not setting count and/or reply_len properly 18:28:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') pread64(r0, 0x0, 0x0, 0xff) syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) 18:28:56 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) rt_sigsuspend(&(0x7f0000000000)={[0x200]}, 0x8) 18:28:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e4c08026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:28:56 executing program 7: timer_create(0x2, 0x0, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000140)) timer_create(0x2, 0x0, &(0x7f0000000080)=0x0) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f00000001c0)={{}, {0x0, r2+60000000}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000000c0), 0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') pread64(r3, 0x0, 0x0, 0xff) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000280)) 18:28:56 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c06000000004c0000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:28:56 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, 0x0, 0x125) 18:28:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) 18:28:56 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) clock_gettime(0x0, &(0x7f0000000380)) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001140)=""/4094, 0xffe) getdents(r2, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0x2}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @multicast2}}}], 0x20}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@loopback, r5}, 0x14) write$vga_arbiter(r2, &(0x7f0000000000), 0xf) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) [ 2173.055919] sg_write: data in/out 139214300/245 bytes for SCSI command 0xf8-- guessing data in; [ 2173.055919] program syz-executor.2 not setting count and/or reply_len properly [ 2173.076025] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2173.076025] program syz-executor.6 not setting count and/or reply_len properly 18:28:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e6808026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:28:57 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x2c00) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) fcntl$getownex(r1, 0x10, &(0x7f0000000180)) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r3 = fcntl$dupfd(r0, 0x406, r0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x7fffffff}}, './file0\x00'}) pread64(r3, 0x0, 0x0, 0xff) 18:28:57 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000680000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:28:57 executing program 0: sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x18, 0x1}, {0x30}, {0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40084) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{&(0x7f0000001700)={0xa, 0x4e24, 0x9, @empty, 0x1}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f0000001740)="5bff74fecc32920c6d1b3c929a3bfc28030c6d93d3e5932bb6a857881a22348bc0f6ae13b973f0c0d9faba601da931472abed609b34267f6f3296a8741cb3db38950230f2517ce62e4a13daa069497bd8d9fb785bdf349918a2426505009277ec4493e0101f1259627d6716322aa7bf1ab0d0173dc52e656a64315221596a0bb2d02", 0x82}, {&(0x7f0000001800)="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", 0xfa}, {&(0x7f0000001900)="bc976243a9aaa9debc0056b4eafc4856b186db71a0557b9507ac51ced75763ac74c7ee3b6b09f7ba5fb696b85071f3f385faf9df821b19611afc3211e79730ea46aba5f700fdf0d16358a9", 0x4b}, {&(0x7f0000001980)="0d8619f2edb49ee40c49a5070aca904295c6756868dbe9fb5a31115ed36a17a54ff8e67b3276ae27421742011b0e8a32faa9744b0e5deac46ce46677b58682777f3637397e5d56aa7a3f91d0714e6b5dbae1c854566dcc27ff5fd55dcaa104b3575dd64f51a3a666d4b38c0c2780b84177632c1f7aa71ad9600365422c7acdb2736b9688235188d14575be2c976ff419027c1dfc8b21a5b1a8e90b383448e795c172fb1db9a21bcdb57eb4ac46c1842b4dd5b83e5a", 0xb5}, {&(0x7f0000001a40)="c3411bd914b693cc193e5470daca399cd41366fdcb9467734c6b65d79da9d385f7b8400e40e88c64f71a3131ba38ccf52e1d0bafc0be3714ba32f486ec1f76aaf18ac53ca7ae0292a5315d22fd8c4da640", 0x51}], 0x5, &(0x7f0000001b40)}}], 0x1, 0x4048015) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) sendmmsg$inet6(r2, &(0x7f0000001680)=[{{&(0x7f0000001240)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000001280)="7d6863c12cd6c20d7fc92b6b", 0xc}, {&(0x7f00000012c0)="bb4bddfbac28cbb5367e1e47f2c2e08e3b74306c3e475168392068edfd12993f5bf2fd9d7e5b7106ee24b82ac809f893e5c1e6ac25f8e35fc606317fcb20445357c9ce38ae101d32de5f6904ab77", 0x4e}, {&(0x7f0000001340)="174ec7e1091436f396e676b2f8eb38db7abdfcc194dc7efd756ce70498330cfb89f13daddfbff822ef30524a2f2114be59f02b5329df1ea6659b4b2e383e1b3464ba15c9f18564b0df8df3b97b8557a911549e95e7ec6ba80a49f80efa79b8265aecf0b1ee0a", 0x66}], 0x3}}, {{&(0x7f0000001400)={0xa, 0x4e24, 0xfffffff9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001440)="3241be80b870d8f9c15f49170245f6e684fb66934b48edd3c9ebf70bdd5830badf287dd5e16f7e396a1632725a58925d5c768530634eb9d88dc985a454cd15bd35d99844d5ece72baf9c216af5900f97802d22854422bc0af5946378b13a3847c09a85b67f0766e3ae1aac517eb042be0bdafb5726e2f8f2a905d226c1adc2fa005085cd4bf75031f2c55495df3580732dbf4a94fdbca1b7fd1d48daa91c8a3323c295a1", 0xa4}, {&(0x7f0000001500)="a8602fa8e13aa8cf7b86a3f092e5fa2129f7e0769faf96ef6657c3533879ea339e535c8c28ae64d676abc6c2ec0ad202e00fa24118d6eeb15d7d28", 0x3b}, {&(0x7f0000001540)="5c47becb264fd1aea7f67513171772f75751", 0x12}, {&(0x7f0000001580)="9bd79124ae178a0eb168ffcdae36c9524278063b14335152c8f94f32cd3428f5cef4e4dfe5e1a225ff6209d35b9a467112a058d808ec629e420fad78a9706cfe51bc91c989b1e34ba4bddc7f1f97875a94f333a85f0290d51ccdbd6e8b688878863d0360515f", 0x66}], 0x4, &(0x7f0000001640)=[@hoplimit={{0x14}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0x30}}], 0x2, 0x8000) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000001200)={0x5717049b, 0xff, 0xd, 0x800}) write$binfmt_aout(r1, &(0x7f0000001180)={{0xcc, 0x8, 0x3, 0x28e, 0xc8, 0xfff, 0xc5, 0x4}, "e0a78abfbbddbc81c336c57dbf980f49eac40c6ef26269caf3d544b11d0ccc675ad4dfca2d59de428a4aa3474b9492ff896a01ebb41ff4db7be52ba277b3b456"}, 0x60) 18:28:57 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1, 0x20}], 0x2, 0x0, 0x0, 0xffb9) 18:28:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') pread64(r0, 0x0, 0x0, 0xff) 18:28:57 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, 0x0, 0x125) [ 2173.310841] sg_write: data in/out 141049308/245 bytes for SCSI command 0xf8-- guessing data in; [ 2173.310841] program syz-executor.2 not setting count and/or reply_len properly [ 2173.373100] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2173.373100] program syz-executor.6 not setting count and/or reply_len properly 18:28:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e6c08026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2173.513477] sg_write: data in/out 141311452/245 bytes for SCSI command 0xf8-- guessing data in; [ 2173.513477] program syz-executor.2 not setting count and/or reply_len properly 18:29:09 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c06000000006c0000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:29:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e24, 0x0, 0x4e24, 0x7, 0x2, 0x0, 0x0, 0x2e}, {0x20, 0x40, 0x56, 0x8000, 0x200, 0x32, 0x7, 0x7}, {0x3, 0xea00000, 0x7}, 0xfffffe01, 0x6e6bba, 0x2, 0x1, 0x1, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x2b}, 0xa, @in=@local, 0x3507, 0x0, 0x0, 0x9, 0x3, 0x6, 0x1}}, 0xe8) fcntl$notify(r0, 0x402, 0x25) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r2, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:29:09 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigsuspend(&(0x7f0000000000)={[0x200]}, 0x8) 18:29:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e7408026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:29:09 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x1, 0x40c0050, r1, 0x39306000) pread64(r0, 0x0, 0x0, 0xff) 18:29:09 executing program 4: pread64(0xffffffffffffffff, 0x0, 0x0, 0xff) 18:29:09 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, 0x0, 0x125) 18:29:09 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) [ 2185.574586] sg_write: data in/out 141835740/245 bytes for SCSI command 0xf8-- guessing data in; [ 2185.574586] program syz-executor.2 not setting count and/or reply_len properly 18:29:09 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) [ 2185.591880] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2185.591880] program syz-executor.6 not setting count and/or reply_len properly 18:29:09 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)={r2, r3+10000000}, 0x8) syz_io_uring_setup(0x3878, &(0x7f0000000180)={0x0, 0xe1bf, 0x1, 0x0, 0x7}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x4, 0x0, 0x0, 0x8, 0x1, 0x0, {0x0, 0x0, r1}}, 0x7ff) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:29:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e7a08026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:29:09 executing program 4: pread64(0xffffffffffffffff, 0x0, 0x0, 0xff) 18:29:09 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) 18:29:09 executing program 7: r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x268, r0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x44, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xccef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe113}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb405}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5941bd60}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7e9e5393}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6f05}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2dd1781a}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xb4, 0xc, 0x0, 0x1, [{0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x72b3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x187fa25d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdaed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ac9aa9b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb174}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4344e89a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x58eb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc08549c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xabc9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41121d26}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x673a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb665}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x44dd9956}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xce58}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4f491912}]}, {0x4}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf904}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xccf5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x119}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x120, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2fe}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xccf6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5f6a501d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8d0b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6de0f0e8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6567db1e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f40d762}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57d20501}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x46b7}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd0e0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xffffff00}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51f3409b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1094}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1682}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4fd0bb48}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcd13}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x24c5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x16c5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x141ca92b}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x991e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d7f1602}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x636f85ce}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x736}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbcc7399}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d4a4318}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc3fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ac60950}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56cdf48a}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff3a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6cc424b7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb38f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c1ddd4d}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x80d4}, 0x20008811) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r1, 0x0, 0x0, 0xff) [ 2185.743603] sg_write: data in/out 142228956/245 bytes for SCSI command 0xf8-- guessing data in; [ 2185.743603] program syz-executor.2 not setting count and/or reply_len properly 18:29:09 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000740000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:29:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) pread64(r0, &(0x7f0000001500)=""/43, 0x2b, 0x7) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) readahead(r1, 0x80000000, 0x1ae8) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/172, 0xac, 0xff) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000075c0)=[{{&(0x7f0000001700)=@abs, 0x6e, &(0x7f0000000140), 0x0, &(0x7f0000001780)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000017c0), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001840)=""/192, 0xc0}, {&(0x7f0000001900)=""/254, 0xfe}, {&(0x7f0000001a00)=""/80, 0x50}, {&(0x7f0000001a80)=""/29, 0x1d}, {&(0x7f0000001ac0)=""/83, 0x53}, {&(0x7f0000001b40)=""/28, 0x1c}, {&(0x7f0000001b80)=""/213, 0xd5}, {&(0x7f0000001c80)=""/239, 0xef}, {&(0x7f0000001d80)=""/89, 0x59}], 0x9}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000001ec0)=""/156, 0x9c}, {&(0x7f0000001f80)=""/218, 0xda}, {&(0x7f0000002080)=""/2, 0x2}, {&(0x7f00000020c0)=""/22, 0x16}, {&(0x7f0000002100)=""/32, 0x20}, {&(0x7f0000002140)=""/204, 0xcc}, {&(0x7f0000002240)=""/3, 0x3}], 0x7, &(0x7f0000002300)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f00000023c0)=""/40, 0x28}], 0x1, &(0x7f0000002440)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000002480)=@abs, 0x6e, &(0x7f0000003700)=[{&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/240, 0xf0}, {&(0x7f0000003600)=""/12, 0xc}, {&(0x7f0000003640)=""/93, 0x5d}, {&(0x7f00000036c0)=""/14, 0xe}], 0x5, &(0x7f0000003780)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000004900)=[{&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f00000048c0)=""/61, 0x3d}], 0x2, &(0x7f0000004940)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}}, {{0x0, 0x0, &(0x7f0000005d00)=[{&(0x7f0000004a80)=""/95, 0x5f}, {&(0x7f0000004b00)=""/4096, 0x1000}, {&(0x7f0000005b00)=""/23, 0x17}, {&(0x7f0000005b40)=""/218, 0xda}, {&(0x7f0000005c40)=""/103, 0x67}, {&(0x7f0000005cc0)=""/36, 0x24}], 0x6, &(0x7f0000005d80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{&(0x7f0000005e80)=@abs, 0x6e, &(0x7f0000005f80)=[{&(0x7f0000005f00)=""/113, 0x71}], 0x1, &(0x7f0000005fc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000006000)=@abs, 0x6e, &(0x7f0000007540)=[{&(0x7f0000006080)=""/205, 0xcd}, {&(0x7f0000006180)=""/88, 0x58}, {&(0x7f0000006200)=""/4096, 0x1000}, {&(0x7f0000007200)=""/165, 0xa5}, {&(0x7f00000072c0)=""/56, 0x38}, {&(0x7f0000007300)=""/72, 0x48}, {&(0x7f0000007380)=""/231, 0xe7}, {&(0x7f0000007480)=""/161, 0xa1}], 0x8}}], 0x9, 0x0, &(0x7f0000007800)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000007840)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/consoles\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000001580)={{0x0, 0xffffffffffffffff, 0xabf, 0xdf2, 0x0, 0x7, 0x2, 0x0, 0x8, 0x4, 0x81, 0x9, 0x10001, 0xbf53, 0x7}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$sock(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000180)=@in6={0xa, 0x4e24, 0x71, @mcast2, 0x5}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="6ae94f98b22f781de789f060e4054e4f48f19ce184a022b6848c949b71a116db70b64c96b3b31f27e01135dc87dc74009c5992e505d184996b1af9e48f75475de5ebb00d4b15330cc4bb8ecb6f85788b5485cc25bfe5ba09475146efc8c056100058d2187e49578d9e43fce688cf5bbda881709c4e195e9b820b2c3a87308787388cd03c35576a8011cf0b15b0b75e5ebec9", 0x92}, {&(0x7f00000012c0)="5da1e03edd4838060d9167b7d518ea96bab92cbb67aac7d2fa400707715f8dc5a8ce3756951796bebb6980383a80a8ad15ad6c0c3c4e0ff1c1b2f0e733dff53869103dee9cfa8d66e49989f9dac811f76b6bca50acfbd998167bff72c55d6a4012b25dd7fa2f60678f08c88a15b984b3d064aab5b100950419e859ef0eeb80c0921883168891799a9ff0ab371814874add44615804ffd47d400261e22afad2fec85829dfd4b6afe0ad4cd6285ad3c3223968648ff8de14b9676ed53cc6447f6e3a9f2abbf0b6e4e9430f8f5c7ddcf21ab37d0eb4003133", 0xd7}], 0x3, &(0x7f00000013c0)=[@timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x2405}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0xd8}, 0x4004000) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000001640)) 18:29:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0009026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:29:09 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x125) [ 2185.839539] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2185.839539] program syz-executor.6 not setting count and/or reply_len properly [ 2185.889006] sg_write: data in/out 151010780/245 bytes for SCSI command 0xf8-- guessing data in; [ 2185.889006] program syz-executor.2 not setting count and/or reply_len properly 18:29:22 executing program 4: pread64(0xffffffffffffffff, 0x0, 0x0, 0xff) 18:29:22 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x125) 18:29:22 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c06000000007a0000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:29:22 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) rt_sigsuspend(&(0x7f0000000000)={[0x200]}, 0x8) 18:29:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0018026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:29:22 executing program 7: r0 = mq_open(&(0x7f0000000000)='\x00', 0x0, 0x40, &(0x7f0000000040)={0x8, 0x1, 0x5, 0xa078}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x110, r0, 0xa7601000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x1, 0x7fffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') write$binfmt_misc(r2, &(0x7f00000000c0)={'syz1', "847a2d6300496ad4f97875236dd83c8c1dc187fa44b2cadcd3f47ffcc6da9d4bd6f2f92444df983d19976b8667cd8cdc01b473c784d09fc3e90f8fedb5eeefced1cedec482e42af482cd5f02e0ec0a84a5c28fd0614286a35091cea94757131c9a794ab152374816ace10024aa49b2f24e7a5f7f17d75e91b4205eca6b211c5538"}, 0x85) pread64(r2, 0x0, 0x0, 0xff) 18:29:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') close(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000000180)={0x703, 0x88c, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f00000000c0)={0x2, 0x3f}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:29:22 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x82e8997f88873560) r6 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r8, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x82e8997f88873560) getdents(r7, &(0x7f0000002140)=""/4100, 0x1004) getdents(r2, 0x0, 0x0) epoll_pwait2(r2, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000040), &(0x7f0000000080)={[0x6]}, 0x8) [ 2198.354339] sg_write: data in/out 402669020/245 bytes for SCSI command 0xf8-- guessing data in; [ 2198.354339] program syz-executor.2 not setting count and/or reply_len properly 18:29:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e002f026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2198.406707] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2198.406707] program syz-executor.6 not setting count and/or reply_len properly 18:29:22 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xd98b}}, './file0\x00'}) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0', [{0x20, 'pagemap\x00'}, {0x20, 'pagemap\x00'}, {0x20, 'pagemap\x00'}, {0x20, 'pagemap\x00'}, {0x20, 'pagemap\x00'}, {0x20, 'pagemap\x00'}, {0x20, 'pagemap\x00'}, {0x20, '[)!$'}, {}, {0x20, 'pagemap\x00'}], 0xa, "6f00ed006fd52571c613287359a60e34179a017dea5de1f607a29bee16238d3f8a6f8271d9403798e493b5d44d73966fd4717a7eba8e03103df601cd98a77a3bceb7cd008971cb59274f3b9291ebf50ab64221a34fb64cc12a948f1ead67d87b8a1ae12009489043da99e3586ff82ea68f60320535889c57bab355ff2a61f8edd1a973693e8ed0dc1f0d15e0929ec1c2ec15fd0bab222d2979a19cc4476f1c3091f408421e4697ed4a8b1c18a1835c5c0769032a1736110461b337940f4dd8769130af1d8b40aeddfb5cd85353afe8f9af6cd397aa31c0575b07df"}, 0x134) 18:29:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) r1 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001140)=""/4094, 0xffe) getdents(r2, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000180)=0x1e) sendfile(r1, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r3 = fsmount(0xffffffffffffffff, 0x0, 0x3) getdents64(r3, &(0x7f0000000300)=""/123, 0x7b) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x82e8997f88873560) ioctl$CDROMREADTOCHDR(r4, 0x5305, &(0x7f00000000c0)={0xff, 0x37}) 18:29:22 executing program 4: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, 0x0, 0x0, 0xff) [ 2198.507747] sg_write: data in/out 788544988/245 bytes for SCSI command 0xf8-- guessing data in; [ 2198.507747] program syz-executor.2 not setting count and/or reply_len properly 18:29:22 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x125) 18:29:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0009026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:29:22 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="e071a4d4a0ab8e22914f98676c", 0xd}, {&(0x7f0000000040)="05c0820ad3f0cb7875f855eed0397fb78eb3fc132d632d2bf3d0bce45ae8fb0acdf0d7d9853bf12a0f998ba6c6da312c9ac1407ff041dc6f3efd9c0c336ceed7f7f4155191e668d585c186007c876c5051d98a03", 0x54}, {&(0x7f0000000140)="64e633e42d0bfd842855121777d79b3360f82e48fa4a73662dad3573c699d63acf2cf549caf89fcb4befc6f5f68f2845ac8b92733ca275e7615f03d5c18148983cb4bc7d4af83ce68246f612da04bdb6bbc11dbd4fe2f0664088cbe243a82682ac2ad5c299b7d2f91ca00298abbc2a087700", 0x72}, {&(0x7f00000001c0)="d8ae48398f65f5d90f9f50d4c43b64a160e677bb20de9fef9febe201172914c9fe69cc7e63a924a496e26300e94a6988f1754c4852bb5558f4cc06e792546f6c6c659725b536018d", 0x48}, {&(0x7f00000003c0)="923d2ef3d261c4fad1928d6235972abebe445c89242a45cfe66db7046f792bedb628a1d70d4043b3026d1c8d6cc33831255f6380bde74d8d56538512ae7c4db059bf42ff3e95b8f30bd19ccafd2202c49a3aa91fe0ac5480fba49411c3a8ea22d7d2903e01374cc16157ca91ec45fc18fdf28a5c3776863c9fa518729b992229a54caf9ad0dcd5c08412248e335a8e78eecae240253d1e52e5a08cbf625f8acc10a90952b220424b2dcd4c5e17140ea8bb3b1bd1e75378e85ea871b4153a6c49dddf324eb42096c6988947b50023a8854b756eec3981ff4e18f61a4baa873dcf011cf38e8d697528a4665dae1b2f210f46380be6b20bd3bf856b1a72938865e445d71b013ea40299daa4c1f56c8222ea28c5f740f76a7e49338d3221eeedd5b310d7845da464b11921fa571f1996282b9d8564ebbd0c6351937411f12e17515ac374f7caed66cca19317d58fe69f47c525511431d077157082bfcdaff861502eb86af68e79c9a75e4eeb7b6e97fe9a1531705d3605dc69785c22974a822d216c57fa8f968fa4645d3494ba6a038201f7ae67d3b017584826115e9c27fabacdf25f22af0f4b22c146a8f8b80496fd93ebc53ff2039c26876ff9624012f8ed4fddd5b084e5ca871fc4d7249e67443d7f19d56f526ff02908f8269c5e093649bce53a08f2b8e4756881940f09f550683ef8911ed943707ed0b5b17048a15742b1cd391bfaa49e8505ef5f8704c52ebd90dde577c464d9ecec3b28409a9b040bd2f6af642998a0dee13969112d22c1d9d0d6cb3aeb4d5c0e302f7dca1efbb6fbf92815e7eeecdd3359aca34ec969e5fb1e39ed17e4633652fef157c91862876010d9035444e7939572e6020f220346231f0f7214f41bb8be988ecb05efebe8c2ec503ed3486b76488f6be579b0030dba5f47cbba7b4c7ddc32bbb0baa669e650325bb7f1671145cf4c54f8ad299a4afd7f682d09418fbba0a3bdeb3c097bac811f6bbd557df33be9e7e9c7c3f42d58f5064cd05f0cbc5c50c4be69f097390167672465840a234bc6e98d0a4a2b9264c4c1aab01c4818f602c84e2221ce6b54da344fa29a718c64b3c9fd83fecf5fb566eb6d0955ede2f8166d6398d13c1aff9b076dbd18c678856fb385c470f59bbead911d6c1d50631a9f2dfa30845cd7a9fea9d1f3bec878b7d136d595da793a2ad70b406120cda1f8b1f3de18bec15df14be063100818220738ebd89619bf84e4aa4b399ffa943c5111dea574353110f01cd630e6f772997f6ad8b9892325088110ed89d6a3bf0678da9a22dff66adf1b5f1422bbc28569b34a7ec5d2864a8c082d1658accc2237895a3fce13c65c22fb9a2b38d22497ba5863fef1a866aba07a469651db1b8c83d0a461430b5e0d765a7a615d475ff59c61c1adf953245a9abb035f168c3934217b93edfaeba772264c31b721cd5f2b943ab8497046da266568e8c5f98e949e0eb2eb22c360c311c74d0443c01d8e3bb76a17db4588363881577eb4dcdd0f87b6a18d67d922237a2ce47a92cb255fd634d88221c10a3979ac40e8f63bf0cd0239f68887e845de7cd07ddca5445c5bc56c26fda052661c83f01b8229c5dbd56df10ff474141831b4c390b7a1fb9ec892341b334b48b7a157f2eac1f2a26ad144cfa7b0995583a81fdb047b390271c4909c39d1873e71a96050da3999013aa025bbbbb13cd58febe9d2ed190719acf1b3b5ccfb4142de35c9a3451aa99e4dc73f5079f1f2caf7985293626797d524248703cb5f1046bcbc621b30bac12c18c3ab7378937c5eb3f98e41ebee5e1608f34a7af1c8e7e5a81541bc23cc99e52a0eefe734dd7534ad4f56d2e68753834f0c88d9f799d4e98655f069bc5351131f2a4a97072ed644361f703ae8bfa31a60e833d37c8b1b72234db5def1a62542e76e77cc36a1d043e3d9a4ce87753798d5615966ecc0850ae6143e31376849ae99493ebd8393613924a236838b22efe6dda24df360c27938850ecd727021d40d19ee2cacd4482e7bcc137801f09493e560324afca0de852f30fde24ab20fbb9a233f65884d2caf9ffc3207529cbb9da90a52c22df4a78ad3ee4e6fce7c3953a613402e04c7aba1b5780f45babf1c4a8f95bf60bfba51ab7bee1ca0d4a450f16d78e32affdd6681f03d279b7e7b45dd7dee9d2c5ebef6594fe4fe86966e02460be22a2ad4d53196fbab04373d564f046c09c1c8484b33cf1d9a58efd0197dd82f9fdb8f587d58dde04894cb4be31db1997315c6ac58b427296990ba2c3d47d62f539509af666a86061a95730210a9c7f2a21302b2847f11161e093e0cb64d6ec62d74700b510f84e6cef8dc8b367a29673cd400a8d45ed9e9705d238e0240ffcdf66558ef81c89b9c5cff3bb1ed03edfa6cef22042ff50a38b546c0b9e9e6cf83b2636c418428c6cb0eacce6026575317f6e8ab8c86ee7f15bb802223d4c581797e7843d22168bba205a312ff851e34f16fa675493712f35857cf01307bb2beb561da8e087053a72f230df8a54fdd536232087f63d064a4f39a9d7776b71447171d1459e810facce93aced173b0761bf3fc95e0f7d01673743075a87c5700ed52334811423a3dfdc6b6edec5237b052fd5327df5bb78d9f999cabb0fc05a449ca5d1e883e3fd512db22f7d1a61b9b5ede229e10fa774e4f2e1c5b5197ceaa8ef10092fa368ff9b4be6674dc259409d0bed2b54d67a526f90b3bbf6198df888e4892876c07d7aaa20f09e1970c4ea65a60b52938d57a9c3bbfe911de2d581245d569e4bb59a60039ed125914472e217fa5e50cc958010a33ade04cde05c87006ed6034a52e20e727a3b8f203ae46c4ac5e1bcc6ba4949ba141b1d21583215a2b4de09b534a91658ec06cd0d0f1c40e981fe8abd62fe6f683d82c0657aab40b7876a29891cd908004a026a1f0143155be516adf414d8f9acebb38a99c4ead041c2f332a9aa8a371cceb84762f6899a29083119408cb93e5b9ece356c190a3281ecbe07d26bdc1397ddcc138292b42e32138688a7d47359924f7daa98e40a861a641094d72e52b0d4afb325398a8e6d31698b3c9db45695f174f165645f5a36d38709a620ecbbf8207419f070a44b69121025e5833c4bcffd30ca0c30dd45324d5aef5bfd89f3f00a355555d14efd62005e7e86b9640d9b71657f75066ca959ce7ac1955181b6786f101a5bcd8157ff1d842c261dd7a8df9d09800db8106ee4591a2c473bcec6d3037fd40ec8402860f55983d02a0823f9b9e44062d89bad894924a8254ec5b57adc29285fa667e0208226e5f4e2417bb0f95bf2049c5c4dab2ce3dc9aeb163b64b3dd35e4aa9216ce1f58cd5a974d2bb97ca24bb85a7ab1a5757f15ea09d781f3b14ddf9dbfb106ef68b51d460e1f722652d177a39aee14089fb3f4dc2728d4202825fc5ab1c3fb7c354a3d7e94542fc9f827a71dbd0f0a8d4254ae0c50c15836726cd3c02a87da6f66a8c9779bdc6595e1ca3ed500410e9005c7e20e797739acedaf60472692870b202f84c06ba4fee8f2fbfb1a7f5e3996512067ae3a2263a8d757dccd376fbd4665bba6267bdbd4160912cc00755b89d0e3a6aca2e68b5243009d97998e7cfad49a547ccfc493788a9ef210f1f19dc15cce4be7cf95c46837888b09d1a75b7db573978574cacee658a5ba2de64ff2fef08f583a3057d45fee3b34db224f70b888611ea09355346fe578ceea574cecb7c982fd52829f30537495737f48c776bbab2773f9d35cf836fa31440e45186b01be66d2ee9652d7177260553b96a4ddf36fedb651f8e10012810bdba0962f9ca43d4f388ce7192e8b4c98b06f1a1436992395837dfe990a0fb3c530924fd934ca5c5c14b09be367f00d63bdddb167c47f30b38c4089e2ecc0cbfc6b59f93b2128a16f30b45beebe65d388a62124a4fdcb7affdc5cf55280b8552dc8cd311c819680dd6f51c71327d4048a23034cb4c0b4abe1098c2fdf324b4f83ca99d876d3bf382f79b06a59b88382bff457e230ef0fc1ab4cd2a133936fe9ad0800104e50a54c30453ce6f671474578c005fb7797f21c84bb7e4817f0a3ecf7bb429332be6501a29d55dc521c0763554ccdb2a7655dad1306cd8c9ac33a0d68d5d647d464f004cfdfa94899027313135993a4ad089b83e55cc7c0e7de9810de6269c7e2f2791043ba513d1f1c64c65e41b05b38365ab3960c93242434d7f7eed468b984c5ec1ea2ab6d77c62b0db0f1a4de5200e0142311695aceab559e42deeb51689f7bcd0ef4a86867b2c70ce8e1e8c60bcd26ad6debacaf58b00e785dfb2fb3de23bf8b1ddfade8adb6aab73ab20188f7c8e6f0fd3996d6fda378bdb5dec908139db360ba63d31805a708df38fee401b07afddedf57b43a1c0f58a1767eab0ec7406a7550f202eb0cc3974c374179c5377ffb970af7d67ba8b2da87505834c08b470168e5c3215e64d36a43a47a8f44c1102d82ff662f6d2a7fcaa6a665663ecf5068b21bf8fad6535102fac29872b77d93422a739c454464177f6b28cd314fe3a7ac092aec2f8d1f9537bcc345b984a948ab7aea3ee45da6617f01dd8548a8fd37e00fedb0f89f226477b97d7b6e1d202040611392ac7eba700d153f050fe9f6cd029e8b05f00fbda5c2d7fea81a82064692ebbac546914977c54818c4827ee5a86153ec967883b8773b4b011e5a49c814bce310914dac71b7c65e8c7b5441623c83434d01fa32ba6593762173bc8a6fd80cf41446b46d0ae267c4cba448ed3ce193af4e000c1018ca652c2a2c9fdfb3c50bd5753d4f083d8d8bec6a001eaae1c9068c746a599d8ec086df11836b81854c0bad59ff4f513d971ea9c76f1467bba4df65a2692689b6e2f35d669abd587fae503a6d58cb9c09f6b0ec97da988305de388e5ac8c92c4ad56ec4d3e8d32cc77b99c88de66a7795103924a47e984cc757adbd2d7784c0bfc278e2572a530b4062859d12e48e8529e5ae85125341a5e195204530e33bf517cce3203898a8b4970f589683d7cdb0f78c3de3b65101d274f8bfb32f751683a065dc9ba65a84dda72c0324f9e9299ca7fd4f3339d57713ce9df0db85cc0ec572acb577502149b6524240b654b66cb8ee1ff3d6450cd52529eb951be8ccaf2c1fc1ef50b6b46a54aa638f018aeabf54c02742c32759e06df3635029a52315fcced844b6ae7b990663c8ba03c61b414740f77e4cadda8b7f1f38acc6112d0744f836765798bb70c4d2b973aebd669332990f8479cc11a984a8da23b12c6033c86fa132e82e11afdff2f1754386313461ef156cbf2d18b95e73c8d47f8bbf34cf4b0f53ddaf33c3696ce4daad134cd4af308a791f57cd69125ba92491861dcad1d62ce0612d850acf4923cf93d17637a00c97280bed69d88c5c33088372b354ed562f48f1296fe5bb2b1073a9e213c2bce52f67ba20eef38215872be0d5e2885c012fa6bcaea7e2a7340f0f046e324ac9357fc1f47c600b408364e0cbbc54c61a6ea0f7e28e5f9edb6bbcc74fd13f6df893e509f82539234ffd1bc76b98037e67cc0b7243d17193b882b04660bae2cf97b48536d12202bcfb32f70bf715c04e0bbcd47d9fb06a64fb572c3cc11cc59a1237600b31fbe1a8bda67658c1bec976bc0d0e3baea65bf15d49a4afa8ee7b786155eb8dacf83cbc8199098de9bddfdeb33265e48e32889a3eaa7f763e6edb10625669a92b4cb39b8f0e3c4a8d0639d69b9233d7efba1525d8c0bbe381ea51b9d4d88719883bc618009d81b22a5caaa282856b5c0be4b0969ff7f5fb9669dd2af", 0x1000}, {&(0x7f00000013c0)="3fd7fc1bcad02d8cda11176e4828f6e11cee483ea43f49b244ed55477a241afa4c90ff04dd44c54543ff79a27528618affa8d1514924febfb74938a15bda69c84ae43803203c42b7ff6c4e7b31e6e7080b052aa16ca6c0030b154c1a016551b4ebc2958855256738bdc3cc9b832347a0c96f27bc91f4d83ad60bd72892c2ba0aab2ac858f8ee6ec38259dcbf1b9d426c0b1e6663653113577e3bc7e2e36e34fc152f896c9e4c099ce44cc047837499aa23c188143204a431d43f4ff271fbaa0a29268ce07b9775745876b762018a8ccc141e6bd787e4871eb07e3a97c6f9b16bd93f15399cea2f47d1ff22e1a19761b7f3799db961", 0xf5}], 0x6}, 0x10001) 18:29:22 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c06000000ffffe000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2198.761897] sg_write: data in/out 151010780/245 bytes for SCSI command 0xf8-- guessing data in; [ 2198.761897] program syz-executor.2 not setting count and/or reply_len properly [ 2198.782045] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2198.782045] program syz-executor.6 not setting count and/or reply_len properly 18:29:36 executing program 1: rt_sigsuspend(&(0x7f0000000000)={[0x200]}, 0x8) 18:29:36 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000000001664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:29:36 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000000)="df626151cf88d698c4d9645fd193", 0xe, 0xf3, &(0x7f0000000080)={r2, r3+10000000}) 18:29:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:29:36 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x125) 18:29:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0010026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:29:36 executing program 4: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, 0x0, 0x0, 0xff) 18:29:36 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x40022, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}, {@access_user}, {@cache_loose}, {@msize={'msize', 0x3d, 0xffffffff80000001}}, {@cache_none}, {@mmap}], [{@subj_role={'subj_role', 0x3d, 'pagemap\x00'}}, {@uid_eq={'uid', 0x3d, r2}}]}}) [ 2212.213342] sg_write: data in/out 268451292/245 bytes for SCSI command 0xf8-- guessing data in; [ 2212.213342] program syz-executor.2 not setting count and/or reply_len properly 18:29:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0018026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2212.268285] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2212.268285] program syz-executor.6 not setting count and/or reply_len properly 18:29:36 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000"], 0x125) 18:29:36 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x3, &(0x7f0000000000)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:29:36 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000000002664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:29:36 executing program 4: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, 0x0, 0x0, 0xff) 18:29:36 executing program 7: statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/205) quotactl(0x40, &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240)="d3e65c9dc7c9e32a0176c3724f0bb3f2843718f3111802b1dbbfc73a54119835247c8ee3118ba2153bb965") r0 = socket$netlink(0x10, 0x3, 0x12) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x81}}, './file0\x00'}) syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0xc040, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x105000, 0x0) write$rfkill(r2, &(0x7f00000001c0)={0xffffffff, 0x0, 0x0, 0x0, 0x1}, 0x8) r3 = open(&(0x7f0000000280)='./file0\x00', 0x40142, 0x0) write$rfkill(r3, &(0x7f00000002c0)={0x4, 0x1, 0x3, 0x1}, 0x8) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000180)={0x0, 0x1, 0x200}) [ 2212.371064] sg_write: data in/out 402669020/245 bytes for SCSI command 0xf8-- guessing data in; [ 2212.371064] program syz-executor.2 not setting count and/or reply_len properly 18:29:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') fcntl$addseals(r0, 0x409, 0x0) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) pread64(r0, &(0x7f0000000180)=""/196, 0xc4, 0x1) 18:29:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e002f026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2212.500561] sg_write: data in/out 788544988/245 bytes for SCSI command 0xf8-- guessing data in; [ 2212.500561] program syz-executor.2 not setting count and/or reply_len properly [ 2212.548595] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2212.548595] program syz-executor.6 not setting count and/or reply_len properly 18:29:47 executing program 0: syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') 18:29:47 executing program 1: rt_sigsuspend(0x0, 0x0) 18:29:47 executing program 7: getpgrp(0x0) r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x0, 0x3, 0x3f, 0x0, 0x1ff, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0x12c00, 0x100000000, 0x5, 0x2, 0x5, 0x400, 0x0, 0x0, 0xfff, 0x0, 0xab6}, r1, 0x7, r0, 0x1) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/rt6_stats\x00') pread64(r2, 0x0, 0x0, 0xff) 18:29:47 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x1, &(0x7f0000000380)) 18:29:47 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000000003664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:29:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000"], 0x125) 18:29:47 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') pread64(0xffffffffffffffff, 0x0, 0x0, 0xff) 18:29:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008036d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2224.057649] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2224.057649] program syz-executor.2 not setting count and/or reply_len properly 18:29:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000"], 0x125) 18:29:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008046d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:29:47 executing program 7: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x210882, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedsend(r0, &(0x7f00000000c0)="fe89f5bd237a913cc639fe738e78905ff3c01951d77858e749cea750e73f1efb437501c6ec042170dfa93515fb4fd692df1a570dfd467ea6bddd38032b1bc16e617f844014cdaa74b0a5ad71ebe221c7fb", 0x51, 0x7, &(0x7f0000000180)={r1, r2+10000000}) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080), 0x2, 0x2) io_setup(0x3ff, &(0x7f0000000140)=0x0) io_destroy(r3) io_getevents(r3, 0x20, 0x8, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000002c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r4, 0x0, 0x0, 0x7f) [ 2224.147515] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2224.147515] program syz-executor.6 not setting count and/or reply_len properly [ 2224.198175] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2224.198175] program syz-executor.2 not setting count and/or reply_len properly 18:29:48 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') pread64(0xffffffffffffffff, 0x0, 0x0, 0xff) 18:29:48 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000000004664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:29:48 executing program 1: rt_sigsuspend(0x0, 0x0) [ 2224.326907] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2224.326907] program syz-executor.6 not setting count and/or reply_len properly 18:30:00 executing program 1: rt_sigsuspend(0x0, 0x0) 18:30:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008096d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:30:00 executing program 4: syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') pread64(0xffffffffffffffff, 0x0, 0x0, 0xff) 18:30:00 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ppoll(&(0x7f0000000040)=[{r0, 0x4041}, {r1, 0x4010}, {r2, 0xd5}], 0x3, 0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@random={'os2.', '[\\\x00'}) 18:30:00 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633d"], 0x125) 18:30:00 executing program 7: gettid() r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='cgroup\x00') pread64(r1, 0x0, 0x0, 0xff) 18:30:00 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000000005664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:30:00 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2401, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {r2}}, './file0\x00'}) r4 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r6, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x82e8997f88873560) openat(r5, &(0x7f0000000180)='./file0\x00', 0x4001, 0x108) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f00000001c0)) [ 2236.601079] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2236.601079] program syz-executor.6 not setting count and/or reply_len properly [ 2236.617874] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2236.617874] program syz-executor.6 not setting count and/or reply_len properly [ 2236.629934] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2236.629934] program syz-executor.2 not setting count and/or reply_len properly 18:30:00 executing program 1: rt_sigsuspend(&(0x7f0000000000), 0x8) 18:30:00 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/sockcreate\x00') pread64(r0, 0x0, 0x0, 0x0) 18:30:00 executing program 7: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') 18:30:00 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000000006664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:30:00 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1, 0x30c}], 0x2, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001140)=""/4094, 0xffe) getdents(r2, 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) write$vga_arbiter(r3, &(0x7f0000000040)=@target={'target ', {'PCI:', 'f', ':', '13', ':', '4', '.', '2'}}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 18:30:00 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008106d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:30:00 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633d"], 0x125) [ 2236.920168] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2236.920168] program syz-executor.6 not setting count and/or reply_len properly 18:30:00 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)) [ 2236.980032] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2236.980032] program syz-executor.2 not setting count and/or reply_len properly 18:30:14 executing program 1: rt_sigsuspend(&(0x7f0000000000), 0x8) 18:30:14 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40) 18:30:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633d"], 0x125) 18:30:14 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000140)=0x0) io_destroy(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r3 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) r4 = eventfd(0xc0000000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) io_submit(r1, 0x6, &(0x7f0000001600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x1, r2, &(0x7f0000000000)="b94787ce4d5ddb632ce86fe99b8adcfa48ec78bdd0b7ac8dff2fc16f045dc07b59c1a003f7b548e25d4a8d8d2d408be7c33df8e196b7e368722b65e8becd7097ad318166c2b46faa9f4cf117457a9efcdd1cc2c3d500e0a5808f09f7010382bfd4050951be50999feb5fa6e563049fd37a138b9d6ddab4d310ac8c979187df641fda04c78167f7bb830fd95961e412210ab237fef2c23ffba38c8349397e5e06dc8744d5e43fff4b960246320705159cfb152bc1f932e35d3d24eaeda2ebe309a9591d9753f60ed863ac007cd2ec3a476325473ce4de3c2046d9c75c586d358f0fd725c66f618d6fd4037322b900b3f821fdd2a3e27cd07674", 0xf9, 0x28000, 0x0, 0x1, r3}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0xfff, r0, &(0x7f0000000180)="d5412dc60a11ceea28fd9e0671f6dadc59b4876d5eeb4681ab8cd2651c83e7c7ea1b0d40705a63", 0x27, 0x1, 0x0, 0x1, r4}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x7, r5, &(0x7f00000003c0)="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", 0x1000, 0x3, 0x0, 0x3}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0xffff, r0, &(0x7f0000000240)="6e7613af9760777048f28a65f3e4aba41e72070c2c21a675227decfa7a5055761fcaa2a89377dbdf680e629d60b45a3428a65a9fdc5a6c7d888fd47dcd0718a7a968b1c01bfa0f8ad8c9bdb01c8bf552b1a640dcb78bad7372a1afcfffa663e020a8", 0x62, 0x3}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x2, r0, &(0x7f00000013c0)="810391012e1aff97bec931e95d31f33d4be151e8891d08c166e162c60439e88a20659951f14f91992db66b7f9be7aaefa1eb02fabb279eebd114297bf54ebf74f8aaae3947c676b5e33c90e1c286a861487a46c9e8707b93caf659e02a973f54a4dfa4df32f4d154127facf9002993f5d80a19a2b52c5edddd245c68682def932a7da1adb74873d0e42dc537e486b418c223bd03205c17d3bba028380765e4e47cc0a14a8008b17d4a7c25530aa19c9aa2382829b8fc04c1a6c53a6479e73035821a4c6bf06c465a97c4d05e70ea32081d0b74cb9f3be7bdf600738b0f5b36614460e9279026520b069bb959f9a4a33f33fd4d", 0xf3, 0x8001}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x1, 0x81, r0, &(0x7f00000014c0)="82ff55357116c521195a34b1d92f8252d86b6476a19cfc3fdf3dc9b35fd17998e3cd29313947ffbaaa30b92e525dd4f3dac7b30568ac2bb09c7ec4945075c931e22c421ab0fa7826d2f55bfbf43da44d04c39b296b222daca203790d74ceb736cfcb85a0c13aaab75ca90fd00809e7cf7cf22946d0ff72e6bf9384e3c5ba5de290f5897b3bba7d9687fd9704edd033c312fe6878c3f54eee79f0854756e8977bba60b35e63cd1adb46a25228489a9c28a246bb0c7739938a39d4263bc9fbec446ffe986907a32cd68ebda89cd678c59576941e236200b25805e88bd97ff407da80b768f653b1cdc82d", 0xe9, 0x4, 0x0, 0x2}]) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r6}], 0x2, 0x0, 0x0, 0x0) 18:30:14 executing program 4: rt_sigsuspend(0x0, 0x0) 18:30:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008636d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:30:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r4, 0x400, 0xfffffffc, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x100}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2c9b5609}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc010}, 0x4000040) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}]}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x54, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2}}}}, [@NL80211_ATTR_BSS_SELECT={0x34, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x81}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x1, 0x8}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x10, 0x80}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x2000804) 18:30:14 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000000007664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2251.081844] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2251.081844] program syz-executor.2 not setting count and/or reply_len properly [ 2251.095095] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2251.095095] program syz-executor.6 not setting count and/or reply_len properly 18:30:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008020a1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:30:14 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000000530664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:30:15 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab0"], 0x125) 18:30:15 executing program 4: sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x18, 0x1}, {0x30}, {0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40084) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{&(0x7f0000001700)={0xa, 0x4e24, 0x9, @empty, 0x1}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f0000001740)="5bff74fecc32920c6d1b3c929a3bfc28030c6d93d3e5932bb6a857881a22348bc0f6ae13b973f0c0d9faba601da931472abed609b34267f6f3296a8741cb3db38950230f2517ce62e4a13daa069497bd8d9fb785bdf349918a2426505009277ec4493e0101f1259627d6716322aa7bf1ab0d0173dc52e656a64315221596a0bb2d02", 0x82}, {&(0x7f0000001800)="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", 0xfa}, {&(0x7f0000001900)="bc976243a9aaa9debc0056b4eafc4856b186db71a0557b9507ac51ced75763ac74c7ee3b6b09f7ba5fb696b85071f3f385faf9df821b19611afc3211e79730ea46aba5f700fdf0d16358a9", 0x4b}, {&(0x7f0000001980)="0d8619f2edb49ee40c49a5070aca904295c6756868dbe9fb5a31115ed36a17a54ff8e67b3276ae27421742011b0e8a32faa9744b0e5deac46ce46677b58682777f3637397e5d56aa7a3f91d0714e6b5dbae1c854566dcc27ff5fd55dcaa104b3575dd64f51a3a666d4b38c0c2780b84177632c1f7aa71ad9600365422c7acdb2736b9688235188d14575be2c976ff419027c1dfc8b21a5b1a8e90b383448e795c172fb1db9a21bcdb57eb4ac46c1842b4dd5b83e5a", 0xb5}, {&(0x7f0000001a40)="c3411bd914b693cc193e5470daca399cd41366fdcb9467734c6b65d79da9d385f7b8400e40e88c64f71a3131ba38ccf52e1d0bafc0be3714ba32f486ec1f76aaf18ac53ca7ae0292a5315d22fd8c4da640", 0x51}], 0x5, &(0x7f0000001b40)}}], 0x1, 0x4048015) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) sendmmsg$inet6(r2, &(0x7f0000001680)=[{{&(0x7f0000001240)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000001280)="7d6863c12cd6c20d7fc92b6b", 0xc}, {&(0x7f00000012c0)="bb4bddfbac28cbb5367e1e47f2c2e08e3b74306c3e475168392068edfd12993f5bf2fd9d7e5b7106ee24b82ac809f893e5c1e6ac25f8e35fc606317fcb20445357c9ce38ae101d32de5f6904ab77", 0x4e}, {&(0x7f0000001340)="174ec7e1091436f396e676b2f8eb38db7abdfcc194dc7efd756ce70498330cfb89f13daddfbff822ef30524a2f2114be59f02b5329df1ea6659b4b2e383e1b3464ba15c9f18564b0df8df3b97b8557a911549e95e7ec6ba80a49f80efa79b8265aecf0b1ee0a", 0x66}], 0x3}}, {{&(0x7f0000001400)={0xa, 0x4e24, 0xfffffff9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001440)="3241be80b870d8f9c15f49170245f6e684fb66934b48edd3c9ebf70bdd5830badf287dd5e16f7e396a1632725a58925d5c768530634eb9d88dc985a454cd15bd35d99844d5ece72baf9c216af5900f97802d22854422bc0af5946378b13a3847c09a85b67f0766e3ae1aac517eb042be0bdafb5726e2f8f2a905d226c1adc2fa005085cd4bf75031f2c55495df3580732dbf4a94fdbca1b7fd1d48daa91c8a3323c295a1", 0xa4}, {&(0x7f0000001500)="a8602fa8e13aa8cf7b86a3f092e5fa2129f7e0769faf96ef6657c3533879ea339e535c8c28ae64d676abc6c2ec0ad202e00fa24118d6eeb15d7d28", 0x3b}, {&(0x7f0000001540)="5c47becb264fd1aea7f67513171772f75751", 0x12}, {&(0x7f0000001580)="9bd79124ae178a0eb168ffcdae36c9524278063b14335152c8f94f32cd3428f5cef4e4dfe5e1a225ff6209d35b9a467112a058d808ec629e420fad78a9706cfe51bc91c989b1e34ba4bddc7f1f97875a94f333a85f0290d51ccdbd6e8b688878863d0360515f", 0x66}], 0x4, &(0x7f0000001640)=[@hoplimit={{0x14}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0x30}}], 0x2, 0x8000) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000001200)={0x5717049b, 0xff, 0xd, 0x800}) write$binfmt_aout(r1, &(0x7f0000001180)={{0xcc, 0x8, 0x3, 0x28e, 0xc8, 0xfff, 0xc5, 0x4}, "e0a78abfbbddbc81c336c57dbf980f49eac40c6ef26269caf3d544b11d0ccc675ad4dfca2d59de428a4aa3474b9492ff896a01ebb41ff4db7be52ba277b3b456"}, 0x60) [ 2251.263259] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2251.263259] program syz-executor.6 not setting count and/or reply_len properly [ 2251.267481] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2251.267481] program syz-executor.2 not setting count and/or reply_len properly 18:30:15 executing program 7: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x80002) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "d0d64d242185abe9469b007953e2d374dbf30bb106e68e50fc87572803cbd65b82cc2025425d7277a8a3b6729ec65bb3699fa5bd7b6cd9747989d5961fc364bd", 0x3b}, 0x48, 0xfffffffffffffffa) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0xfffffffffffffffc, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r2, 0x0, 0x0, 0xff) 18:30:15 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x80000000, 0x2c02) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000, &(0x7f00000007c0)=ANY=[@ANYBLOB="f4723d5d3389fdb8302c8d3f2fd041b119227a6d2fc8d0174c1c3ceb3eea9a362aa96b7ed0e608cce5f83a850ae7a139d037555af64f5658fac74144fa7a233635e90bc68ddfe078caf7f6ba171c664f71f19e908033312147ca8a456bdc6f6c3b2604eb1c779e06f01def88a4b4eabf155e4ca50a4030981cff96", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=user,afid=0x0000000000000008,debug=0x8G00000000000800,noextend,nodevmap,nodevmap,msize=0x0000000000008001,dont_measure,context=unconfined_u,measure,subj_type=/dev/vga_arbiter\x00,subj_user=/$ev/vga_arbiter\x00,appraise_type=imasig,obj_role=/dev/vga_arbiter\x00,obj_role=/dev/vga_arbiter\x00ute=]$,obj_user=)/\',\x00'/321]) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000340)="32a41edea55c0e6c1077cc6df0b5d42f33ca1391f3452c147fcef4495ce2e8bc45", 0x21}, {&(0x7f00000003c0)="feac2eed2fcf2498db190cef7138bfe75774126dc5ea183a48481d3d4b79fdb42a921ac78fc94b1023f9668edea8340881517da2f02370133de188ab9ea4b788dcc5f9aa122a4171a01df3cfc983d76c6217f7543603542fbd2792", 0x5b}, {&(0x7f0000000540)="4c3b58dbb2337607262b09394a29c40a7501b345b9ca5ad68ea00ffb3ec0711a2a7f6f812cb0bcecc73775e9a24f82cf49b54f0f333f90f3d7caca44a28499b8c47d470f2d45612911300b48ba1a0691751a48f98bbf9a465336b261063bd4747bb6327638015bf7e234ebecf0a1244c03ca8c7aab41fe9225be717039937ac9e42857f76a6c47d3477433d25d5fe9f4776be67ac16e2179f30ba0cfaa10114ca4ba38308384c986eeca9afaf3719527ae514b64f24cfdd91fef8c0b509db0940bdc241b7ad6e7ea27ec5200ccff684ecdd5fb87f775a8aa4a96", 0xda}, {&(0x7f0000000640)="30396cffbd5633c2a13ee97d006b86404fe8059a2bc330d511e786a3a6276ec2b4a4dd70c4bdc8a3bdbe331b41e045e6815eef6c6bb793b5eb9eb6ce1fbbeb8f8694c895fa9f9afa1a7986f94921c0df2b2e80ef20fe9072dfa63099b24385917278e9f6e3cfec0df725f3780d575135b393a420ee44c2430ff53b4637a774cc76bd2f6e0210bf", 0x87}], 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x8, 0x5, 0x5, &(0x7f0000000740)={0xffffffffffffffff}) connect$inet6(r4, &(0x7f0000000780)={0xa, 0x4e21, 0x400, @mcast1, 0xffffffff}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r5 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x80c00, 0x200) dup2(r3, r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0, 0x50a}, {r6, 0x1150}], 0x2, 0x0, 0x0, 0x0) 18:30:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e000802251d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:30:15 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000000048664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2251.441485] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2251.441485] program syz-executor.6 not setting count and/or reply_len properly [ 2251.448526] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2251.448526] program syz-executor.2 not setting count and/or reply_len properly 18:30:28 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000200)={0x5c, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f00000001c0), 0x4) clock_gettime(0x0, &(0x7f0000000380)) pselect6(0x40, &(0x7f0000000000)={0x3, 0x1000, 0x3, 0x7, 0x1ff, 0x2, 0x3f, 0x8000}, &(0x7f0000000040)={0x1000, 0x3, 0xf0, 0x3a4c, 0x1, 0x8000, 0xaf98, 0xc2}, &(0x7f0000000080)={0x7ff, 0x401, 0x0, 0x101, 0x0, 0x0, 0x8, 0x69}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0x4]}, 0x8}) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:30:28 executing program 1: rt_sigsuspend(&(0x7f0000000000), 0x8) 18:30:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') fork() pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:30:28 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab0"], 0x125) 18:30:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b1090600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:30:28 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c060000000000004c664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:30:28 executing program 7: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x2}}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x1c, 0x80000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000300)="6fb9", 0x2}], 0x1, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @multicast2}}}], 0x20}, 0x0) [ 2264.889083] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2264.889083] program syz-executor.2 not setting count and/or reply_len properly sendmmsg$inet6(r2, &(0x7f0000006140)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x7, @empty, 0x1}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="ba44aaf76d2d9eec7072216d4320f089cda9", 0x12}, {&(0x7f0000000140)="73011aef7c219568436d37be61d71c6806cd1c7c8a6c96ca3d9091355be0352267240053efb18f0f021a4b37b3afe91c0498c0a7cf47e94901a46025cd", 0x3d}], 0x2, &(0x7f0000000540)=[@hopopts={{0x138, 0x29, 0x36, {0x3a, 0x23, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x2, 0xd29, [0x400000000]}}, @calipso={0x7, 0x38, {0x3, 0xc, 0x1f, 0x7fff, [0x3f, 0x8, 0x400, 0x80000000, 0x81, 0x9]}}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x4, 0xb5, "d06346433d321c3ff297f0b3540edf2ea6364d9b609ad2fe5d48da93524a6b512a7263c508a18a9c40b6f31f29c6aeaab5f3edd40a3bc0c7044f9b64e701ccf807dc52e20a2b271ac5ddeab4150d8c9f1fba7fcf2b57535c106815330bf2fc65c397b66994f8a3bc56e94fe9d4e85d2492ff27cb2bfa1c2272ed12e8c96fde3134b70c1877649e2ac3b9cddbb583edb4c3cf4f4cfb4e18178c34f0964d05aebc189ed7cbfb323cc265daed253703045c8fbf2328de"}, @hao={0xc9, 0x10, @mcast1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x2c, 0xb, '\x00', [@hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0xb1b}, @calipso={0x7, 0x20, {0x1, 0x6, 0xff, 0x0, [0x3, 0x8, 0x4]}}, @jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x8, {0x0, 0x0, 0x9, 0x4e}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @dstopts_2292={{0xc0, 0x29, 0x4, {0x3b, 0x14, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x0, 0x20b, [0x2, 0x5, 0x562e]}}, @calipso={0x7, 0x10, {0x2, 0x2, 0x91, 0x101, [0x4]}}, @hao={0xc9, 0x10, @local}, @generic={0x1, 0x41, "2699c5a6220c6129e16b73d11c876e49cf6ad6ee4008b6126ec19f4a5cd617c2fa9da356165a94717a7e88022611f0b3fe3c8004a9ef15b354a24daa90395526bf"}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x1}]}}}], 0x288}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x36}, 0x24a6dff7}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000200)="4317b5e53e97", 0x6}, {&(0x7f0000000340)="3b6c95878f1b5f08204faf4247fa88e58a8d37eb1919361c876921101eba26f0a188a5b2aefe664605962732eab28f280f68942bf86d9f1ff6fe0378d0bc7a9491a52f3ec0e6e3f38f30a76c4266814d2feb608707130da4e878147ef51a55217f5be6387501af0234e55d5a3f688ca9227e56a72175b0515ef71a33f61aea8dde0a5149c0331b94f00ae5657ebb650c46deaba0d7f75c4ce45aa46fcdcf124283a634283eb44d656ed2da9bf9dd3ab448aa41aeaf789369869dc66caf90912a219554387ecd23660e13bdab0518d3", 0xcf}, {&(0x7f0000000240)="3dcd1980385ea546e1c5df21741ebf6810cf0572c62b453376d4ef", 0x1b}, {&(0x7f0000000800)="ddc6dce5271282c2d043c77c868e5004881a8274a24f97ee0c869316734ebd78469f0abf4a48e83bbda43d6405174ad4e0d8a54f774d0acd698d17dd29bd91f1ebd4c5671888eb8c7d099b84c2aad5b7063db029b51aefecc1c75ef578c8db7e224c17cd125c70686641e76c9a46bbed1ef60426ce720b67c3df4b98f136d2c1c199483dcf741dfd28c16fea1c28b4f8a289b8d65cd956711d28c6371429c2f41ef1f34461c7159c8bf7e48913accd7d041012ec5e39419a6b66c74bb53f1d5ab67ce17fd3e176", 0xc7}, {&(0x7f0000000280)="562ddd61707cb518ba964ca619636e3bbc6767fa89fde2d8c388d2cc30bbbebec115c9ce227e7515009d39b2108524e66d7a8a8643817fe9497b42d78f4e9a8f02e1abde99367df0359e84716e59d9", 0x4f}, {&(0x7f0000000900)="1fdca5aa99f99501fda576a9dfbf85cf9677f8ac8efaf3ad0df4d92290e364a35954ab5b9154ceb00070884b47d9b8d85586055f2a14a5ed9af18446f6d5fd2aadfb07f51d576d12afbb5d07a1a606f5a5d89716eab7d3a7e8726490b816832f67222b457b", 0x65}, {&(0x7f0000000980)="3f058e93d0e4f0695217267349664cf63b36ba239350f45a9cab51c360", 0x1d}, {&(0x7f00000009c0)="44fbf84d7020a097f38ebd53994e2fb32a45bba4cd336426f094fafd68649719006cde2a1380e4bd650b609db59db4568182e4aa0493a99695690b92fa0bbfdb0bfdf7785b896eb38151886807332184bbed6120c5a32340d02fda685d20b6d79596fff4e0c9553a499dc8c627b411882f903cfd20742bfcbee592e2e1be9ee51717dbf5f69fffedf5b107c640ee3214cf200c85bd9c6a8ae8695eacc7ccc80d2e46537f6971a843c4cd726bc4a224d322", 0xb1}], 0x8, &(0x7f0000000b00)=[@hoplimit={{0x14, 0x29, 0x34, 0x6}}, @hopopts_2292={{0x148, 0x29, 0x36, {0x3b, 0x26, '\x00', [@generic={0x0, 0x52, "83b8fe009010a0cc106246a9698e35bc79446351deb6f4771defd1ae2135f57a8947b1f70c1e21a5596b4ad3f820e8c21926e40911480fce647e26c3382c2fd4b6057263570111606acb34e7ba15cf15185f"}, @hao={0xc9, 0x10, @local}, @generic={0xb6, 0xb5, "9ffe6cac8118f36d8a668c0cd4a10a5e18d5f338cc2137feda84ca9e7f0c6c737dc6bf4961ad1cb2e21bb4626e15a021c083dc4346a759fb77834bd08aec18a92d36ec9dadde786f0d1411d7306a5aa8140b7a67f87f420934e46aa6af724d77a1085e2f6147fa9b55eb8b307a4a30b30666e87faee99e037605e1ffdcca437eb134580ae8d3c2c76901c03ecb7765d6ec33c9074ef2540e1d67aab115365d829f5985cabacbd45ca57d3d6f758ce7c72272605ea9"}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @rthdr={{0xa8, 0x29, 0x39, {0x3c, 0x12, 0x2, 0x3f, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @remote, @loopback, @dev={0xfe, 0x80, '\x00', 0x11}, @private1, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x1d, 0x10, 0x1, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @remote, @loopback, @remote, @mcast1, @empty, @local]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}], 0x2d0}}, {{&(0x7f0000000e00)={0xa, 0x4e20, 0x1af, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x3}, 0x1c, &(0x7f0000002300)=[{&(0x7f0000000e40)="b9b4129a97dff589aea2c80775571f7dcf1ecbe69a154310890d81ef0243ea3e657a16da05ae1df75fb5674e50b306f70d367169c25c53b97660e883a8d5d39e", 0x40}, {&(0x7f0000000e80)="70e8b61dc08731f34220a16e67be8164327345f3789eff97c032ab40bb1136d092cd76a665964df7e7af36aa897e5e3f18ac9c8a7242bc9519646c2ce6b518236724e987bcba71eac35ead25939dedbd4fe9d7aca0b8d0ca65485db0addc5da1505ed12b85c0f36d65c214d97f80f29bee106b3b1fb9fd840957f77760ae1380b19d79227b808656cf91cabf1e95091e43d49bec0f9148d76395605bb2f22cb918a5101d142ef7143f12bf8c4714ef4ff72bf42556e8733d", 0xb8}, {&(0x7f0000000f40)="433116d38dd5670fd3433c2f5bfe67c4ae4b5918821f7a379112cbbe3c76295b0dbf7b3bca4dff8e83ce76151955900ca2021458b2e3fc3cacf87c2a54e75bbc2783bdcc80d316de0f35d52ac3579848f7942244ccfe1842b19544d3027d2e384a9c9eab1f1111ebb5008db0d6c82a8d5355c78b9dc8121080da4a01f3a75afcae4c91dc8da160a637df5ecdec1063941f334d9e98d151c3edfdc19b70c68da12cd6c7f6f7a623ac9f16a2790e96ddae339ce0a664f042b2df49ec6ba5839b209678d806bc56bae4c7e19df76cfa963ebe9ad20e71294b281fc444375f4658baddc47187462e24ad458e94a311cba1", 0xef}, {&(0x7f0000001040)="85d01fc6a106fcefbaf8ebaa5ae4984d5fb51c932b51e122be3e76aa38cb199eb3c7e1f656167ff85362579788c8e073074b0e671612abe917803367dc61c4f2c69dd4bc4a6e630e99e230b9fa15066b6d01725efa85bfa10e37b016fbb91cf59e2edc8e95fab0735decd87337ce89b04834de64de0dcb60370dda77d54eb519ba6992ba2755fc3e0e0f9fd80b15ccb9d0de66a3772f08e090b250445a60f4bb83034550fdb460ae40475095e6363386bb060e80876f83742fb5de9067fb09eb582b296aec16253e15393941421d6a45d2b1393267e9187696e45254b946a915d7171f69f24557099d3310d166c22574b3f57695", 0xf4}, {&(0x7f0000001140)="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", 0x1000}, {&(0x7f0000002140)="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", 0xfc}, {&(0x7f0000002240)="240f899d9da9a136e29eecff40b43b8f1761ca2512e2", 0x16}, {&(0x7f0000002280)="c241065d3fa31d5c765666d0e10c6824e67337eb37f5e639b465e5795775b33582172d12f2b5d6ee75c40398430f16d7175b5913671f35dab859eb2138de62a0c278b5ee82aaf4e71bf8593b6eb4b6a319910d49028b4fb67a481cc1efae8e4a600f91d2a16964115d2cb6127558523664340f098b", 0x75}], 0x8, &(0x7f0000002380)=[@dstopts={{0x38, 0x29, 0x37, {0x3b, 0x4, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0xff, 0x5, [0x6, 0x6]}}, @enc_lim={0x4, 0x1, 0xa3}, @enc_lim={0x4, 0x1, 0x3f}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @tclass={{0x14, 0x29, 0x43, 0x8000}}], 0x90}}, {{&(0x7f0000002440)={0xa, 0x4e24, 0x7f, @private2, 0x4}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000002480)="c6a4b89cc95b9203fad5aef31e7efb59710893df", 0x14}, {&(0x7f00000024c0)="ac488cafcc2fbc2ddf3ec550b4eead9c6316df5d2d564781a7978e5c0be9c67053339d8b141add13bdd144d94d59249dfbbfdce57a0100554b9234aa0fb3715d7ba88fa3af54c3cb68def5fc1a54035135395c1c32a31cfcb020695901bc6fc09350191631996c3ab8b857a0a9c8d716bd1438498775e8f47c44849f8ff9e6e05d415696d84e66cd0c0386f34d93d307bd11c9b3592226ef60bd5de7fc119f7e5520cd5417309fb02ac869f8c425832f26c655d51aaf571a2dc588f5410e63f0d2d73a97ff4330b961859001be", 0xcd}, {&(0x7f00000025c0)="af62a42a66953b555aa2749d96e74f7831d927faded74ab957bbb6c5032993a6da14f235c21c04e5bf670eda429a412b74bacac4280e074b4281df209c49bbd23c9db254092540af984c07f2e52a620349ebc8680a1d6959121213fa57dca6f69d251f7c404dbad3f467cfec4fd06c5421d6d889", 0x74}, {&(0x7f0000002640)="a9916b391a186872d71fdfbeb4b238f260750a15d79b0753430571c8737dfdc92edee8b0de1b43c2cc00366e758d88ff3c1cc4217c861c00c24db3fb71fdec5b614cf1f8b922a626f8d31317440b9c52ff111c195d0ba9ede76fdd47a46cb20e48273f1ffda974c68e010015b56f0f8ada1edf7e0c125533cc32b2150b4f63cc180adc54d255509f36913b3b4cf42bf9422fb9d8c765f3", 0x97}, {&(0x7f0000002700)="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", 0xff}, {&(0x7f0000002800)="149b5bf90646b5ad265b39fa7234c819421f1835407b0da48e120958edf8003dac88341ab9e2edc1d027e1f3ee31bea1fa91bf9a771e819d255c599f380321e534a95013636b7e03b9fde675e527e35c8a9293cb6c9d2176329a97231b72a3d0ed633f16ec26d268557c90cd1ef7a615e8c6809bde36a8746106f6d5d72a19bbaddaaf04f171fbba9a62aeb671bcd20099b0251efe1da62d40f4284ceda2224ed913331d9183d9679c986fd9503c1f1902d04a3e9024dd4ded3f42ffdbd15bb3d42909a7d3112c9ab470df6b2381601669ff", 0xd2}, {&(0x7f0000002900)="c5f3deb43c05510094e93f777711b68da71870b4647ce535904d8fa3cf4e196608b4f20644d5acb9a5dcdbf989dc99a43b56489e8af23403108f2ddeb1ed5a0b225f12b8d04820694f7b6d86f42d615d7f9b0a4d02d99859ed0eb5adbc130e389961fad4265bae26a147caf15d5dd8a5537254f275fb9031743f6dd960a393421d434669acb208744c0fe04ed073507c2a2f22e00c326f570507fb6557f25a9bb432d4c61a44fc35ead6887d6810d995861bf66a106c22bd255f80db07dd94f2f36b53879c9873f5a3e0d0570fc220cbd8b95875ebdec1c8c3b1ae4336", 0xdd}], 0x7, &(0x7f0000002a80)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x0, 0x2, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x5}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}]}}}, @rthdrdstopts={{0xa8, 0x29, 0x37, {0x6, 0x11, '\x00', [@generic={0x7, 0x8b, "cf10ebfad9665dce1821bda4fde0bcabe662df0a3cf6837dfaebd439971893e5d252cf1f0e6b0b27c7a623c8b1fed02ee33e524df7cc838c24d75eb6328e93d566c756c7ad19a838113b94c4c7cb6b403549f5b40ea3ecc9ee18bcc46637327674045504890656a2ae1988cfbd914c90909de44b28b5a73634d0561f2ea5f8071a4653083559aad9f7cb6a"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r5}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x16, 0x0, '\x00', [@pad1, @ra={0x5, 0x2, 0x2}]}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x87, 0x1, '\x00', [@jumbo, @enc_lim={0x4, 0x1, 0x80}, @enc_lim={0x4, 0x1, 0x20}]}}}], 0x158}}, {{0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000002c00)="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", 0x1000}, {&(0x7f0000003c00)="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", 0x1000}, {&(0x7f0000004c00)="3a861cbd623086af160c773aa5ab45e11e5ecdf19e62ae5da22ee33f3290e9677927bb8a38701950da1b53151d2762a25782c6157e5b9c78b24298224b32d6b5c5824fce416b068c89245fd0a83d7c71ab103c34e2d72aa8e3", 0x59}], 0x3, &(0x7f0000004cc0)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x2f, 0x0, '\x00', [@pad1]}}}, @rthdrdstopts={{0xd8, 0x29, 0x37, {0x2b, 0x18, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @ra, @generic={0x7, 0xb4, "157cfe7d87e3be2e3a35b270c144116805db927155620cae1a809a5912bc6a41ff9bf644a40f1cdb6fc54e8bd89527a6048b6458a95b3d75bb65a43adb4263cd0e7fd3ecb397ad6f2c5db3f3d53f11f835a06c426117c0a08e76e5d501c3fbc4525d2ec0f4006a9468994b5a1ba3e7a85b12408b4cb6a8031a35fa80fc643de84f54fd791f91999540f00d43d34508d9914a36d074c910bed8576bc91b32a894ed302c70a853992f7691f9557b9cc3393ed67637"}]}}}], 0x128}}, {{&(0x7f0000004e00)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x2f}}, 0x1c, &(0x7f0000006040)=[{&(0x7f0000004e40)="fdfa91b4d3ad830f3f7a6652eb82eb6879be48d4e8cb54d0298da93b87620660c441365e154f41a994686a0b41e1604246378aa58fc243f98ec26efd71213a791191fa037af8fecf3e089d628e40138987b6a775806812d977067b96", 0x5c}, {&(0x7f0000004ec0)="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", 0x1000}, {&(0x7f0000005ec0)="6e08f67657156f9d1b69c83bfaa9", 0xe}, {&(0x7f0000005f00)="882ba302a5c8999e6bfd09", 0xb}, {&(0x7f0000005f40)="b74ccce04ab14cc331aa355974c11118a3571677b5695256540109216d4832abcbf2573d7a2997ea54f91ccae76a83dba321e1be2d0b45fa08bfedaaca7bf08de5470fc9c16fc57101b71371c40c04a70976e3639c4e82", 0x57}, {&(0x7f0000005fc0)="cb6f27621acfd659c1cbb2891648b83c76e6459f929405fbf6c46a1d9c81c71ca46ddfc026f0ed5f30f30b3901e005582664", 0x32}, {&(0x7f0000006000)="bd586941acb296bc9aa2a7da24fc0237495555c3276c9b31a3aaca51460819374452d22be581a36a77eb823a8c812fd5d01b6ef4b5", 0x35}], 0x7, &(0x7f00000060c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @flowinfo={{0x14, 0x29, 0xb, 0xffff}}, @hoplimit_2292={{0x14}}], 0x48}}], 0x6, 0x4000) pidfd_open(0x0, 0x0) pread64(r0, 0x0, 0x0, 0x804000000000dc6) 18:30:28 executing program 4: sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x18, 0x1}, {0x30}, {0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40084) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{&(0x7f0000001700)={0xa, 0x4e24, 0x9, @empty, 0x1}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f0000001740)="5bff74fecc32920c6d1b3c929a3bfc28030c6d93d3e5932bb6a857881a22348bc0f6ae13b973f0c0d9faba601da931472abed609b34267f6f3296a8741cb3db38950230f2517ce62e4a13daa069497bd8d9fb785bdf349918a2426505009277ec4493e0101f1259627d6716322aa7bf1ab0d0173dc52e656a64315221596a0bb2d02", 0x82}, {&(0x7f0000001800)="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", 0xfa}, {&(0x7f0000001900)="bc976243a9aaa9debc0056b4eafc4856b186db71a0557b9507ac51ced75763ac74c7ee3b6b09f7ba5fb696b85071f3f385faf9df821b19611afc3211e79730ea46aba5f700fdf0d16358a9", 0x4b}, {&(0x7f0000001980)="0d8619f2edb49ee40c49a5070aca904295c6756868dbe9fb5a31115ed36a17a54ff8e67b3276ae27421742011b0e8a32faa9744b0e5deac46ce46677b58682777f3637397e5d56aa7a3f91d0714e6b5dbae1c854566dcc27ff5fd55dcaa104b3575dd64f51a3a666d4b38c0c2780b84177632c1f7aa71ad9600365422c7acdb2736b9688235188d14575be2c976ff419027c1dfc8b21a5b1a8e90b383448e795c172fb1db9a21bcdb57eb4ac46c1842b4dd5b83e5a", 0xb5}, {&(0x7f0000001a40)="c3411bd914b693cc193e5470daca399cd41366fdcb9467734c6b65d79da9d385f7b8400e40e88c64f71a3131ba38ccf52e1d0bafc0be3714ba32f486ec1f76aaf18ac53ca7ae0292a5315d22fd8c4da640", 0x51}], 0x5, &(0x7f0000001b40)}}], 0x1, 0x4048015) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) sendmmsg$inet6(r2, &(0x7f0000001680)=[{{&(0x7f0000001240)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000001280)="7d6863c12cd6c20d7fc92b6b", 0xc}, {&(0x7f00000012c0)="bb4bddfbac28cbb5367e1e47f2c2e08e3b74306c3e475168392068edfd12993f5bf2fd9d7e5b7106ee24b82ac809f893e5c1e6ac25f8e35fc606317fcb20445357c9ce38ae101d32de5f6904ab77", 0x4e}, {&(0x7f0000001340)="174ec7e1091436f396e676b2f8eb38db7abdfcc194dc7efd756ce70498330cfb89f13daddfbff822ef30524a2f2114be59f02b5329df1ea6659b4b2e383e1b3464ba15c9f18564b0df8df3b97b8557a911549e95e7ec6ba80a49f80efa79b8265aecf0b1ee0a", 0x66}], 0x3}}, {{&(0x7f0000001400)={0xa, 0x4e24, 0xfffffff9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001440)="3241be80b870d8f9c15f49170245f6e684fb66934b48edd3c9ebf70bdd5830badf287dd5e16f7e396a1632725a58925d5c768530634eb9d88dc985a454cd15bd35d99844d5ece72baf9c216af5900f97802d22854422bc0af5946378b13a3847c09a85b67f0766e3ae1aac517eb042be0bdafb5726e2f8f2a905d226c1adc2fa005085cd4bf75031f2c55495df3580732dbf4a94fdbca1b7fd1d48daa91c8a3323c295a1", 0xa4}, {&(0x7f0000001500)="a8602fa8e13aa8cf7b86a3f092e5fa2129f7e0769faf96ef6657c3533879ea339e535c8c28ae64d676abc6c2ec0ad202e00fa24118d6eeb15d7d28", 0x3b}, {&(0x7f0000001540)="5c47becb264fd1aea7f67513171772f75751", 0x12}, {&(0x7f0000001580)="9bd79124ae178a0eb168ffcdae36c9524278063b14335152c8f94f32cd3428f5cef4e4dfe5e1a225ff6209d35b9a467112a058d808ec629e420fad78a9706cfe51bc91c989b1e34ba4bddc7f1f97875a94f333a85f0290d51ccdbd6e8b688878863d0360515f", 0x66}], 0x4, &(0x7f0000001640)=[@hoplimit={{0x14}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0x30}}], 0x2, 0x8000) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000001200)={0x5717049b, 0xff, 0xd, 0x800}) write$binfmt_aout(r1, &(0x7f0000001180)={{0xcc, 0x8, 0x3, 0x28e, 0xc8, 0xfff, 0xc5, 0x4}, "e0a78abfbbddbc81c336c57dbf980f49eac40c6ef26269caf3d544b11d0ccc675ad4dfca2d59de428a4aa3474b9492ff896a01ebb41ff4db7be52ba277b3b456"}, 0x60) [ 2264.944572] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2264.944572] program syz-executor.6 not setting count and/or reply_len properly 18:30:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0500030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:30:28 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab0"], 0x125) 18:30:28 executing program 4: sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x18, 0x1}, {0x30}, {0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40084) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{&(0x7f0000001700)={0xa, 0x4e24, 0x9, @empty, 0x1}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f0000001740)="5bff74fecc32920c6d1b3c929a3bfc28030c6d93d3e5932bb6a857881a22348bc0f6ae13b973f0c0d9faba601da931472abed609b34267f6f3296a8741cb3db38950230f2517ce62e4a13daa069497bd8d9fb785bdf349918a2426505009277ec4493e0101f1259627d6716322aa7bf1ab0d0173dc52e656a64315221596a0bb2d02", 0x82}, {&(0x7f0000001800)="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", 0xfa}, {&(0x7f0000001900)="bc976243a9aaa9debc0056b4eafc4856b186db71a0557b9507ac51ced75763ac74c7ee3b6b09f7ba5fb696b85071f3f385faf9df821b19611afc3211e79730ea46aba5f700fdf0d16358a9", 0x4b}, {&(0x7f0000001980)="0d8619f2edb49ee40c49a5070aca904295c6756868dbe9fb5a31115ed36a17a54ff8e67b3276ae27421742011b0e8a32faa9744b0e5deac46ce46677b58682777f3637397e5d56aa7a3f91d0714e6b5dbae1c854566dcc27ff5fd55dcaa104b3575dd64f51a3a666d4b38c0c2780b84177632c1f7aa71ad9600365422c7acdb2736b9688235188d14575be2c976ff419027c1dfc8b21a5b1a8e90b383448e795c172fb1db9a21bcdb57eb4ac46c1842b4dd5b83e5a", 0xb5}, {&(0x7f0000001a40)="c3411bd914b693cc193e5470daca399cd41366fdcb9467734c6b65d79da9d385f7b8400e40e88c64f71a3131ba38ccf52e1d0bafc0be3714ba32f486ec1f76aaf18ac53ca7ae0292a5315d22fd8c4da640", 0x51}], 0x5, &(0x7f0000001b40)}}], 0x1, 0x4048015) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) sendmmsg$inet6(r2, &(0x7f0000001680)=[{{&(0x7f0000001240)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000001280)="7d6863c12cd6c20d7fc92b6b", 0xc}, {&(0x7f00000012c0)="bb4bddfbac28cbb5367e1e47f2c2e08e3b74306c3e475168392068edfd12993f5bf2fd9d7e5b7106ee24b82ac809f893e5c1e6ac25f8e35fc606317fcb20445357c9ce38ae101d32de5f6904ab77", 0x4e}, {&(0x7f0000001340)="174ec7e1091436f396e676b2f8eb38db7abdfcc194dc7efd756ce70498330cfb89f13daddfbff822ef30524a2f2114be59f02b5329df1ea6659b4b2e383e1b3464ba15c9f18564b0df8df3b97b8557a911549e95e7ec6ba80a49f80efa79b8265aecf0b1ee0a", 0x66}], 0x3}}, {{&(0x7f0000001400)={0xa, 0x4e24, 0xfffffff9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001440)="3241be80b870d8f9c15f49170245f6e684fb66934b48edd3c9ebf70bdd5830badf287dd5e16f7e396a1632725a58925d5c768530634eb9d88dc985a454cd15bd35d99844d5ece72baf9c216af5900f97802d22854422bc0af5946378b13a3847c09a85b67f0766e3ae1aac517eb042be0bdafb5726e2f8f2a905d226c1adc2fa005085cd4bf75031f2c55495df3580732dbf4a94fdbca1b7fd1d48daa91c8a3323c295a1", 0xa4}, {&(0x7f0000001500)="a8602fa8e13aa8cf7b86a3f092e5fa2129f7e0769faf96ef6657c3533879ea339e535c8c28ae64d676abc6c2ec0ad202e00fa24118d6eeb15d7d28", 0x3b}, {&(0x7f0000001540)="5c47becb264fd1aea7f67513171772f75751", 0x12}, {&(0x7f0000001580)="9bd79124ae178a0eb168ffcdae36c9524278063b14335152c8f94f32cd3428f5cef4e4dfe5e1a225ff6209d35b9a467112a058d808ec629e420fad78a9706cfe51bc91c989b1e34ba4bddc7f1f97875a94f333a85f0290d51ccdbd6e8b688878863d0360515f", 0x66}], 0x4, &(0x7f0000001640)=[@hoplimit={{0x14}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0x30}}], 0x2, 0x8000) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000001200)={0x5717049b, 0xff, 0xd, 0x800}) write$binfmt_aout(r1, &(0x7f0000001180)={{0xcc, 0x8, 0x3, 0x28e, 0xc8, 0xfff, 0xc5, 0x4}, "e0a78abfbbddbc81c336c57dbf980f49eac40c6ef26269caf3d544b11d0ccc675ad4dfca2d59de428a4aa3474b9492ff896a01ebb41ff4db7be52ba277b3b456"}, 0x60) [ 2265.039892] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2265.039892] program syz-executor.2 not setting count and/or reply_len properly 18:30:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0900030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:30:28 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000000068664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:30:28 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) getsockopt$inet6_tcp_buf(r2, 0x6, 0x21, &(0x7f00000003c0)=""/4096, &(0x7f0000000000)=0x1000) 18:30:28 executing program 4: sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x18, 0x1}, {0x30}, {0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40084) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{&(0x7f0000001700)={0xa, 0x4e24, 0x9, @empty, 0x1}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f0000001740)="5bff74fecc32920c6d1b3c929a3bfc28030c6d93d3e5932bb6a857881a22348bc0f6ae13b973f0c0d9faba601da931472abed609b34267f6f3296a8741cb3db38950230f2517ce62e4a13daa069497bd8d9fb785bdf349918a2426505009277ec4493e0101f1259627d6716322aa7bf1ab0d0173dc52e656a64315221596a0bb2d02", 0x82}, {&(0x7f0000001800)="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", 0xfa}, {&(0x7f0000001900)="bc976243a9aaa9debc0056b4eafc4856b186db71a0557b9507ac51ced75763ac74c7ee3b6b09f7ba5fb696b85071f3f385faf9df821b19611afc3211e79730ea46aba5f700fdf0d16358a9", 0x4b}, {&(0x7f0000001980)="0d8619f2edb49ee40c49a5070aca904295c6756868dbe9fb5a31115ed36a17a54ff8e67b3276ae27421742011b0e8a32faa9744b0e5deac46ce46677b58682777f3637397e5d56aa7a3f91d0714e6b5dbae1c854566dcc27ff5fd55dcaa104b3575dd64f51a3a666d4b38c0c2780b84177632c1f7aa71ad9600365422c7acdb2736b9688235188d14575be2c976ff419027c1dfc8b21a5b1a8e90b383448e795c172fb1db9a21bcdb57eb4ac46c1842b4dd5b83e5a", 0xb5}, {&(0x7f0000001a40)="c3411bd914b693cc193e5470daca399cd41366fdcb9467734c6b65d79da9d385f7b8400e40e88c64f71a3131ba38ccf52e1d0bafc0be3714ba32f486ec1f76aaf18ac53ca7ae0292a5315d22fd8c4da640", 0x51}], 0x5, &(0x7f0000001b40)}}], 0x1, 0x4048015) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) sendmmsg$inet6(r2, &(0x7f0000001680)=[{{&(0x7f0000001240)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000001280)="7d6863c12cd6c20d7fc92b6b", 0xc}, {&(0x7f00000012c0)="bb4bddfbac28cbb5367e1e47f2c2e08e3b74306c3e475168392068edfd12993f5bf2fd9d7e5b7106ee24b82ac809f893e5c1e6ac25f8e35fc606317fcb20445357c9ce38ae101d32de5f6904ab77", 0x4e}, {&(0x7f0000001340)="174ec7e1091436f396e676b2f8eb38db7abdfcc194dc7efd756ce70498330cfb89f13daddfbff822ef30524a2f2114be59f02b5329df1ea6659b4b2e383e1b3464ba15c9f18564b0df8df3b97b8557a911549e95e7ec6ba80a49f80efa79b8265aecf0b1ee0a", 0x66}], 0x3}}, {{&(0x7f0000001400)={0xa, 0x4e24, 0xfffffff9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001440)="3241be80b870d8f9c15f49170245f6e684fb66934b48edd3c9ebf70bdd5830badf287dd5e16f7e396a1632725a58925d5c768530634eb9d88dc985a454cd15bd35d99844d5ece72baf9c216af5900f97802d22854422bc0af5946378b13a3847c09a85b67f0766e3ae1aac517eb042be0bdafb5726e2f8f2a905d226c1adc2fa005085cd4bf75031f2c55495df3580732dbf4a94fdbca1b7fd1d48daa91c8a3323c295a1", 0xa4}, {&(0x7f0000001500)="a8602fa8e13aa8cf7b86a3f092e5fa2129f7e0769faf96ef6657c3533879ea339e535c8c28ae64d676abc6c2ec0ad202e00fa24118d6eeb15d7d28", 0x3b}, {&(0x7f0000001540)="5c47becb264fd1aea7f67513171772f75751", 0x12}, {&(0x7f0000001580)="9bd79124ae178a0eb168ffcdae36c9524278063b14335152c8f94f32cd3428f5cef4e4dfe5e1a225ff6209d35b9a467112a058d808ec629e420fad78a9706cfe51bc91c989b1e34ba4bddc7f1f97875a94f333a85f0290d51ccdbd6e8b688878863d0360515f", 0x66}], 0x4, &(0x7f0000001640)=[@hoplimit={{0x14}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0x30}}], 0x2, 0x8000) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000001200)={0x5717049b, 0xff, 0xd, 0x800}) [ 2265.168333] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2265.168333] program syz-executor.2 not setting count and/or reply_len properly 18:30:29 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc"], 0x125) [ 2265.196626] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2265.196626] program syz-executor.6 not setting count and/or reply_len properly 18:30:29 executing program 7: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000740)=ANY=[@ANYBLOB="010000010000005f000000106696e8862e9a9dc319b5b8728e85d652ae64c5c680f081f964f096c50c4474f9afa70fea8bbde2356852e51c5f1b9fd9b8062ad75f0a27648c63911d919a3f7665fcc182ed29759304e4df7165609d2f85477d52810d762daa058137e7e85611fd563a29b1ad0170dc1f919d188f83866d54a758c409d084977fb7b4ed992a76707f2625b0db7bceb5859db77bda0bcb4f9f43b32e358c02d61efab56ccb77a517ca67ffe6dc8db0612b56cd89392a780d03143ed3d8f153f96ee557666c80e9531dc38fcac4da69d9538890471339b60000000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0700bb9a3fc7d800060000c500"]) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) tkill(0xffffffffffffffff, 0x36) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r2, 0x0, 0x0, 0xff) r3 = socket(0x23, 0x3, 0x43) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x388, r1, 0x8, 0x70bd27, 0x88d, {{}, {@void, @val={0xc, 0x99, {0x10001, 0x4e}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2e4}, @NL80211_ATTR_FRAME={0x34c, 0x33, @auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_a, @initial, {0xb, 0x2}}, @ver_80211n={0x0, 0x7, 0x1, 0x3, 0x0, 0x2, 0x0, 0x0, 0x1}}, 0x1, 0x3, 0xe, @void, [{0xdd, 0x29, "1f0c5de6ad42866e44ac5e420689b8140a86768410da52bffbac2ed78f675d8b128b4f289ea1e0b689"}, {0xdd, 0x6a, "fb7c150f427ab8244c0d70c42add6cf75820b7746125e140a346604d82eac63f728dc143db3e7cad49334112deffe150d897f648dbc6e7fc414f0b15a0404683cef1a2d66868eff15442a352a41a43fa9997381d1b1f59a8b6c96ae97c31c23e302132d116e7cfeef358"}, {0xdd, 0xbc, "f0d892c8860c8285394aba808af180b9735a0288ba05dd573e2c3016415e8a21dfe67d932c7aa4654fb765bf85594a5dc936b2061f6ea6900b36f727558232aea6db88769015812f1cae4933a49213c6e2629334d10414df79ce727f9899c4b0532a609dc8944624f1d9b8cb0221c7dd9cb37be6f202aa7f71f17946c9e25f274ad635a110b11ca16d179415ab1ac824f86db0c4b8dcf090f66b472b782d2b81d0b9614809f342ba48fbef0b346382c1801795a80521275180b67f59"}, {0xdd, 0xac, "bbd6921e047b5d46d95af6309be35eb7825e250701b213c5fe61bdadb8fcd70fdb11e7ff707198ebebe2eaaa1b1053497a49a038cd8c55f3887140647d831c7fdea0355c4ab22880bd72693450193ce0300aa5dfd2b4633d53d78ce5d84d14faf1973423bf64780063562446bf215e7640aeadb5a9ed1830a1d091f9e502b8cb677ff4f963eeb113a8fdc18ff8f10f652dceea3996e1faf62756d2ddc85a73b435451ca230db210b2a4f8288"}, {0xdd, 0x33, "b94a0982e27d5b3340d77337689aa12d004468e7e44731ddf125e2cc968450b0fd296d35481bc9dc48469fd260c5180a664331"}, {0xdd, 0xec, "157ea00690e77d099d7a1c901cee907495c8f485ac06b99cd962592652db4cb61e1c4034ae6764c1dfa10e92191898a8bc9068cc50de060beda35963b135b56e5e3d25504d895c4f98b3604aead8e27c8581da65a30636b88cd57e27e740f8588401b6186ab2e3abddd19e6aa5e0a7e90cf604bf391fb367912b1be0115b7e76c9fc3f043bd4ce35e463b53b381a0215613be168524779896273029184a8464ce10a334ffa7948c34feb34fd2abe251b95bfc7fa78ebb4e76ef910560561b2bfa364802f71115367badb2c278f48a55d36b8784a567f98c94db9ac983087150ff800998f8ed8f6eef4ec8bca"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xa8a}]}, 0x388}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000081) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}]}]}]}, 0x2c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}]}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f0000000700)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) 18:30:42 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c1000030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:30:42 executing program 4: sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x18, 0x1}, {0x30}, {0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40084) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{&(0x7f0000001700)={0xa, 0x4e24, 0x9, @empty, 0x1}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f0000001740)="5bff74fecc32920c6d1b3c929a3bfc28030c6d93d3e5932bb6a857881a22348bc0f6ae13b973f0c0d9faba601da931472abed609b34267f6f3296a8741cb3db38950230f2517ce62e4a13daa069497bd8d9fb785bdf349918a2426505009277ec4493e0101f1259627d6716322aa7bf1ab0d0173dc52e656a64315221596a0bb2d02", 0x82}, {&(0x7f0000001800)="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", 0xfa}, {&(0x7f0000001900)="bc976243a9aaa9debc0056b4eafc4856b186db71a0557b9507ac51ced75763ac74c7ee3b6b09f7ba5fb696b85071f3f385faf9df821b19611afc3211e79730ea46aba5f700fdf0d16358a9", 0x4b}, {&(0x7f0000001980)="0d8619f2edb49ee40c49a5070aca904295c6756868dbe9fb5a31115ed36a17a54ff8e67b3276ae27421742011b0e8a32faa9744b0e5deac46ce46677b58682777f3637397e5d56aa7a3f91d0714e6b5dbae1c854566dcc27ff5fd55dcaa104b3575dd64f51a3a666d4b38c0c2780b84177632c1f7aa71ad9600365422c7acdb2736b9688235188d14575be2c976ff419027c1dfc8b21a5b1a8e90b383448e795c172fb1db9a21bcdb57eb4ac46c1842b4dd5b83e5a", 0xb5}, {&(0x7f0000001a40)="c3411bd914b693cc193e5470daca399cd41366fdcb9467734c6b65d79da9d385f7b8400e40e88c64f71a3131ba38ccf52e1d0bafc0be3714ba32f486ec1f76aaf18ac53ca7ae0292a5315d22fd8c4da640", 0x51}], 0x5, &(0x7f0000001b40)}}], 0x1, 0x4048015) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) sendmmsg$inet6(r2, &(0x7f0000001680)=[{{&(0x7f0000001240)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000001280)="7d6863c12cd6c20d7fc92b6b", 0xc}, {&(0x7f00000012c0)="bb4bddfbac28cbb5367e1e47f2c2e08e3b74306c3e475168392068edfd12993f5bf2fd9d7e5b7106ee24b82ac809f893e5c1e6ac25f8e35fc606317fcb20445357c9ce38ae101d32de5f6904ab77", 0x4e}, {&(0x7f0000001340)="174ec7e1091436f396e676b2f8eb38db7abdfcc194dc7efd756ce70498330cfb89f13daddfbff822ef30524a2f2114be59f02b5329df1ea6659b4b2e383e1b3464ba15c9f18564b0df8df3b97b8557a911549e95e7ec6ba80a49f80efa79b8265aecf0b1ee0a", 0x66}], 0x3}}, {{&(0x7f0000001400)={0xa, 0x4e24, 0xfffffff9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001440)="3241be80b870d8f9c15f49170245f6e684fb66934b48edd3c9ebf70bdd5830badf287dd5e16f7e396a1632725a58925d5c768530634eb9d88dc985a454cd15bd35d99844d5ece72baf9c216af5900f97802d22854422bc0af5946378b13a3847c09a85b67f0766e3ae1aac517eb042be0bdafb5726e2f8f2a905d226c1adc2fa005085cd4bf75031f2c55495df3580732dbf4a94fdbca1b7fd1d48daa91c8a3323c295a1", 0xa4}, {&(0x7f0000001500)="a8602fa8e13aa8cf7b86a3f092e5fa2129f7e0769faf96ef6657c3533879ea339e535c8c28ae64d676abc6c2ec0ad202e00fa24118d6eeb15d7d28", 0x3b}, {&(0x7f0000001540)="5c47becb264fd1aea7f67513171772f75751", 0x12}, {&(0x7f0000001580)="9bd79124ae178a0eb168ffcdae36c9524278063b14335152c8f94f32cd3428f5cef4e4dfe5e1a225ff6209d35b9a467112a058d808ec629e420fad78a9706cfe51bc91c989b1e34ba4bddc7f1f97875a94f333a85f0290d51ccdbd6e8b688878863d0360515f", 0x66}], 0x4, &(0x7f0000001640)=[@hoplimit={{0x14}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0x30}}], 0x2, 0x8000) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) 18:30:42 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) syz_io_uring_setup(0x5e03, &(0x7f0000000040)={0x0, 0xe38c, 0x8, 0x1, 0x3e0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x2010, r0, 0x0) r2 = syz_io_uring_complete(r1) write$P9_RRENAME(r2, &(0x7f0000000000)={0x7, 0x15, 0x1}, 0x7) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000440)=""/80) r3 = accept4(r2, &(0x7f0000000140)=@ll, &(0x7f00000001c0)=0x80, 0x0) syz_io_uring_setup(0x1382, &(0x7f0000000280)={0x0, 0x7934, 0x20, 0x2, 0x26a, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000001, 0xffffffffffffffff) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x8, 0x1) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000580)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x2010, r2, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x989680}, 0x1, 0x1, 0x1}, 0x7) 18:30:42 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c060000000000006c664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:30:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x100}}, './file0\x00'}) epoll_pwait2(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0xfc61]}, 0x8) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x208}, {r0}], 0x2, 0x0, 0x0, 0x0) 18:30:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc"], 0x125) 18:30:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/234, 0xea, 0x0) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:30:42 executing program 1: timer_create(0x2, 0x0, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000140)) timer_create(0x2, 0x0, &(0x7f0000000080)=0x0) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f00000001c0)={{}, {0x0, r2+60000000}}, 0x0) timer_settime(r1, 0x0, &(0x7f00000000c0), 0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') pread64(r3, 0x0, 0x0, 0xff) timer_settime(r1, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000280)) [ 2279.054641] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2279.054641] program syz-executor.6 not setting count and/or reply_len properly [ 2279.122896] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2279.122896] program syz-executor.2 not setting count and/or reply_len properly 18:30:42 executing program 3: ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)={0x400, 0x2, 0x58f16b6e}) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7472796c6f636b206d367c585c32ceb15ddb73656d00"], 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'io'}, 0x8) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:30:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:30:43 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc"], 0x125) 18:30:43 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000000074664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:30:43 executing program 4: sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x18, 0x1}, {0x30}, {0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40084) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{&(0x7f0000001700)={0xa, 0x4e24, 0x9, @empty, 0x1}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f0000001740)="5bff74fecc32920c6d1b3c929a3bfc28030c6d93d3e5932bb6a857881a22348bc0f6ae13b973f0c0d9faba601da931472abed609b34267f6f3296a8741cb3db38950230f2517ce62e4a13daa069497bd8d9fb785bdf349918a2426505009277ec4493e0101f1259627d6716322aa7bf1ab0d0173dc52e656a64315221596a0bb2d02", 0x82}, {&(0x7f0000001800)="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", 0xfa}, {&(0x7f0000001900)="bc976243a9aaa9debc0056b4eafc4856b186db71a0557b9507ac51ced75763ac74c7ee3b6b09f7ba5fb696b85071f3f385faf9df821b19611afc3211e79730ea46aba5f700fdf0d16358a9", 0x4b}, {&(0x7f0000001980)="0d8619f2edb49ee40c49a5070aca904295c6756868dbe9fb5a31115ed36a17a54ff8e67b3276ae27421742011b0e8a32faa9744b0e5deac46ce46677b58682777f3637397e5d56aa7a3f91d0714e6b5dbae1c854566dcc27ff5fd55dcaa104b3575dd64f51a3a666d4b38c0c2780b84177632c1f7aa71ad9600365422c7acdb2736b9688235188d14575be2c976ff419027c1dfc8b21a5b1a8e90b383448e795c172fb1db9a21bcdb57eb4ac46c1842b4dd5b83e5a", 0xb5}, {&(0x7f0000001a40)="c3411bd914b693cc193e5470daca399cd41366fdcb9467734c6b65d79da9d385f7b8400e40e88c64f71a3131ba38ccf52e1d0bafc0be3714ba32f486ec1f76aaf18ac53ca7ae0292a5315d22fd8c4da640", 0x51}], 0x5, &(0x7f0000001b40)}}], 0x1, 0x4048015) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) sendmmsg$inet6(r2, &(0x7f0000001680)=[{{&(0x7f0000001240)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}}, 0x1c, &(0x7f00000013c0)=[{&(0x7f0000001280)="7d6863c12cd6c20d7fc92b6b", 0xc}, {&(0x7f00000012c0)="bb4bddfbac28cbb5367e1e47f2c2e08e3b74306c3e475168392068edfd12993f5bf2fd9d7e5b7106ee24b82ac809f893e5c1e6ac25f8e35fc606317fcb20445357c9ce38ae101d32de5f6904ab77", 0x4e}, {&(0x7f0000001340)="174ec7e1091436f396e676b2f8eb38db7abdfcc194dc7efd756ce70498330cfb89f13daddfbff822ef30524a2f2114be59f02b5329df1ea6659b4b2e383e1b3464ba15c9f18564b0df8df3b97b8557a911549e95e7ec6ba80a49f80efa79b8265aecf0b1ee0a", 0x66}], 0x3}}, {{&(0x7f0000001400)={0xa, 0x4e24, 0xfffffff9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001440)="3241be80b870d8f9c15f49170245f6e684fb66934b48edd3c9ebf70bdd5830badf287dd5e16f7e396a1632725a58925d5c768530634eb9d88dc985a454cd15bd35d99844d5ece72baf9c216af5900f97802d22854422bc0af5946378b13a3847c09a85b67f0766e3ae1aac517eb042be0bdafb5726e2f8f2a905d226c1adc2fa005085cd4bf75031f2c55495df3580732dbf4a94fdbca1b7fd1d48daa91c8a3323c295a1", 0xa4}, {&(0x7f0000001500)="a8602fa8e13aa8cf7b86a3f092e5fa2129f7e0769faf96ef6657c3533879ea339e535c8c28ae64d676abc6c2ec0ad202e00fa24118d6eeb15d7d28", 0x3b}, {&(0x7f0000001540)="5c47becb264fd1aea7f67513171772f75751", 0x12}, {&(0x7f0000001580)="9bd79124ae178a0eb168ffcdae36c9524278063b14335152c8f94f32cd3428f5cef4e4dfe5e1a225ff6209d35b9a467112a058d808ec629e420fad78a9706cfe51bc91c989b1e34ba4bddc7f1f97875a94f333a85f0290d51ccdbd6e8b688878863d0360515f", 0x66}], 0x4, &(0x7f0000001640)=[@hoplimit={{0x14}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0x30}}], 0x2, 0x8000) 18:30:43 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) pread64(r0, 0x0, 0x0, 0x100000000000ff) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 18:30:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0602030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:30:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) pread64(r0, &(0x7f0000000340)=""/4096, 0x1000, 0x100) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="74723db400000000f5e14f7828f2e43bc100000000000087bd5bb963fbdc34b3501d5a04f7b738624144de9646c8d81553042b2cab55361b921834d67c06533ba243c51255a92f52f9f977b440a7971bebdb3d4e2a115504e8c8bfb6d1a669963ac53d6f79c74e4e9d6e7c89ee673c7e9555f3bcba7a1d0845727eab9109c8ada0a961a9f828df21", @ANYRESHEX=r1, @ANYBLOB="847a5d9ffea49e030f70a7d94eeccbd4cb652aeb522208b37e39e2b0c19740c047d4f3260b9b168e156989df13b091b56b8c4ed90925238527f69296bc979662ff791b0cf98f65aa316197c6014bf31835e702f3df5590f640f29a3e88833460cbff89904892d6506d8d36dc82b86ba8eebdfd860e4028a060", @ANYRESHEX=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x690d}}, './file0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev={0xac, 0x14, 0x14, 0x30}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x5c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x6e6bbc, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000180)=0x1) setresuid(0x0, r5, 0x0) setxattr$incfs_metadata(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000001340)="57032921b27f162f1c42db63c293bfbe30b6afc636c9487fa6c2072abf16c3937aa99ef2c6e5e2d9a9c0cd62cfd1c71028e0549bddfa2a14530aedf17e9af6bd69d6c5351a5be3c6727b5706f363598dd1a056e0fd830797725408c2cadb6515b39618756b24c157a1898e996bd27b58ce7297f9dfb6338f949127df263137a5d66f5a23270d116ea326cdf165ab8583c8eadfd06aba2341a92945", 0x9b, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltuid}, {@afid={'afid', 0x3d, 0xaf26}}, {@msize={'msize', 0x3d, 0x40}}, {@noextend}, {@privport}], [{@uid_eq={'uid', 0x3d, r5}}, {@subj_role={'subj_role', 0x3d, 'pagemap\x00'}}]}}) [ 2279.392848] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2279.392848] program syz-executor.6 not setting count and/or reply_len properly [ 2279.498219] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2279.498219] program syz-executor.2 not setting count and/or reply_len properly 18:30:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x10}) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) accept(r3, &(0x7f0000000280)=@isdn, &(0x7f0000000100)=0x80) setresuid(0x0, r2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x0, 0x4e20, 0x0, 0xa, 0x20, 0xa0, 0x2, 0x0, r2}, {0x415c70ab, 0x20, 0x6, 0x401, 0x7, 0x0, 0xd083, 0x9}, {0x8, 0x3, 0x5, 0x4}, 0x2, 0x6e6bb3, 0x1, 0x1, 0x0, 0x3}, {{@in6=@mcast1, 0x4d3, 0x6c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3e}, 0x0, 0x1, 0x1, 0x2, 0x2, 0x101, 0x5}}, 0xe8) r4 = syz_open_pts(r0, 0xd81040) fcntl$dupfd(r4, 0x406, r0) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:30:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35"], 0x125) 18:30:58 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0x40000102) 18:30:58 executing program 1: rt_sigsuspend(&(0x7f0000000000)={[0x200]}, 0x8) (fail_nth: 1) 18:30:58 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c060000000000007a664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:30:58 executing program 4: sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x18, 0x1}, {0x30}, {0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40084) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{&(0x7f0000001700)={0xa, 0x4e24, 0x9, @empty, 0x1}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f0000001740)="5bff74fecc32920c6d1b3c929a3bfc28030c6d93d3e5932bb6a857881a22348bc0f6ae13b973f0c0d9faba601da931472abed609b34267f6f3296a8741cb3db38950230f2517ce62e4a13daa069497bd8d9fb785bdf349918a2426505009277ec4493e0101f1259627d6716322aa7bf1ab0d0173dc52e656a64315221596a0bb2d02", 0x82}, {&(0x7f0000001800)="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", 0xfa}, {&(0x7f0000001900)="bc976243a9aaa9debc0056b4eafc4856b186db71a0557b9507ac51ced75763ac74c7ee3b6b09f7ba5fb696b85071f3f385faf9df821b19611afc3211e79730ea46aba5f700fdf0d16358a9", 0x4b}, {&(0x7f0000001980)="0d8619f2edb49ee40c49a5070aca904295c6756868dbe9fb5a31115ed36a17a54ff8e67b3276ae27421742011b0e8a32faa9744b0e5deac46ce46677b58682777f3637397e5d56aa7a3f91d0714e6b5dbae1c854566dcc27ff5fd55dcaa104b3575dd64f51a3a666d4b38c0c2780b84177632c1f7aa71ad9600365422c7acdb2736b9688235188d14575be2c976ff419027c1dfc8b21a5b1a8e90b383448e795c172fb1db9a21bcdb57eb4ac46c1842b4dd5b83e5a", 0xb5}, {&(0x7f0000001a40)="c3411bd914b693cc193e5470daca399cd41366fdcb9467734c6b65d79da9d385f7b8400e40e88c64f71a3131ba38ccf52e1d0bafc0be3714ba32f486ec1f76aaf18ac53ca7ae0292a5315d22fd8c4da640", 0x51}], 0x5, &(0x7f0000001b40)}}], 0x1, 0x4048015) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) 18:30:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0603030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:30:58 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) [ 2294.529991] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2294.529991] program syz-executor.2 not setting count and/or reply_len properly 18:30:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35"], 0x125) 18:30:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0604030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2294.644243] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2294.644243] program syz-executor.2 not setting count and/or reply_len properly [ 2294.644510] FAULT_INJECTION: forcing a failure. [ 2294.644510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2294.646956] CPU: 1 PID: 15125 Comm: syz-executor.1 Not tainted 6.5.0-rc7-next-20230824 #1 [ 2294.648009] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2294.649066] Call Trace: [ 2294.649425] [ 2294.649740] dump_stack_lvl+0xc1/0xf0 [ 2294.650273] should_fail_ex+0x4b4/0x5b0 [ 2294.650857] _copy_from_user+0x30/0xf0 [ 2294.651421] __x64_sys_rt_sigsuspend+0xcd/0x160 [ 2294.652069] ? __pfx___x64_sys_rt_sigsuspend+0x10/0x10 [ 2294.652794] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2294.653496] ? syscall_enter_from_user_mode+0x21/0x50 [ 2294.654202] do_syscall_64+0x3f/0x90 [ 2294.654725] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2294.655440] RIP: 0033:0x7fe56d236b19 [ 2294.655954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2294.658352] RSP: 002b:00007fe56a7ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000082 [ 2294.659365] RAX: ffffffffffffffda RBX: 00007fe56d349f60 RCX: 00007fe56d236b19 [ 2294.660313] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000020000000 18:30:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35"], 0x125) [ 2294.661257] RBP: 00007fe56a7ac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2294.662427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2294.663386] R13: 00007fffcb96c97f R14: 00007fe56a7ac300 R15: 0000000000022000 [ 2294.664359] 18:30:58 executing program 4: sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x18, 0x1}, {0x30}, {0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40084) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{&(0x7f0000001700)={0xa, 0x4e24, 0x9, @empty, 0x1}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f0000001740)="5bff74fecc32920c6d1b3c929a3bfc28030c6d93d3e5932bb6a857881a22348bc0f6ae13b973f0c0d9faba601da931472abed609b34267f6f3296a8741cb3db38950230f2517ce62e4a13daa069497bd8d9fb785bdf349918a2426505009277ec4493e0101f1259627d6716322aa7bf1ab0d0173dc52e656a64315221596a0bb2d02", 0x82}, {&(0x7f0000001800)="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", 0xfa}, {&(0x7f0000001900)="bc976243a9aaa9debc0056b4eafc4856b186db71a0557b9507ac51ced75763ac74c7ee3b6b09f7ba5fb696b85071f3f385faf9df821b19611afc3211e79730ea46aba5f700fdf0d16358a9", 0x4b}, {&(0x7f0000001980)="0d8619f2edb49ee40c49a5070aca904295c6756868dbe9fb5a31115ed36a17a54ff8e67b3276ae27421742011b0e8a32faa9744b0e5deac46ce46677b58682777f3637397e5d56aa7a3f91d0714e6b5dbae1c854566dcc27ff5fd55dcaa104b3575dd64f51a3a666d4b38c0c2780b84177632c1f7aa71ad9600365422c7acdb2736b9688235188d14575be2c976ff419027c1dfc8b21a5b1a8e90b383448e795c172fb1db9a21bcdb57eb4ac46c1842b4dd5b83e5a", 0xb5}, {&(0x7f0000001a40)="c3411bd914b693cc193e5470daca399cd41366fdcb9467734c6b65d79da9d385f7b8400e40e88c64f71a3131ba38ccf52e1d0bafc0be3714ba32f486ec1f76aaf18ac53ca7ae0292a5315d22fd8c4da640", 0x51}], 0x5, &(0x7f0000001b40)}}], 0x1, 0x4048015) [ 2294.693547] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2294.693547] program syz-executor.6 not setting count and/or reply_len properly 18:30:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0605030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:30:58 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') pread64(r0, 0x0, 0x0, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27e5}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x636}}, './file0\x00'}) 18:30:58 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001140)=""/4094, 0xffe) getdents(r2, 0x0, 0x0) [ 2294.821831] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2294.821831] program syz-executor.2 not setting count and/or reply_len properly 18:31:09 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) r3 = dup(r2) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x40, 0x0, 0x0, 0xe5, 0x0, 0x7, 0x88000, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x0, 0x3}, 0x800, 0x0, 0x6, 0x0, 0x4, 0x40, 0x4801, 0x0, 0x1}, 0x0, 0x800f, r3, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000380)={0x5, 0x80, 0x81, 0x91, 0x3, 0x21, 0x0, 0x8, 0x0, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffff, 0x5}, 0x20020, 0x10001, 0x6, 0x2, 0x2, 0x400, 0x0, 0x0, 0x6, 0x0, 0x6}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4004000) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000080)=0xffffffffffffffe7) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105443, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2811, 0xffffffffffffffff, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000600)=""/4096, 0x1000) ioctl$FITRIM(r7, 0x4004662b, &(0x7f0000000180)) pread64(r0, 0x0, 0x0, 0xff) 18:31:09 executing program 1: rt_sigsuspend(&(0x7f0000000000)={[0x200]}, 0x8) (fail_nth: 2) 18:31:09 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000e0ffff664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:31:09 executing program 4: sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x18, 0x1}, {0x30}, {0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40084) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) socket$inet6_tcp(0xa, 0x1, 0x0) 18:31:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0606030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:31:09 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$vga_arbiter(r2, &(0x7f0000000080)=@unlock_all, 0xb) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e20, 0x4, @local, 0xfffffff8}}, 0x0, 0x0, 0x2c, 0x0, "ccdc0075a6051e6f9ff43dbd45fc69529037811173b0517f6587c86bd6a511736577c2b47fa31a0559291030beb5bdc189a0214569db6243224523269f95d88ece2b63d2a15f172f55edc4473dceca60"}, 0xd8) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xb) r3 = syz_open_dev$mouse(&(0x7f0000000780), 0x1, 0x424481) sendfile(r3, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x82e8997f88873560) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) write$binfmt_elf32(r1, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x1, 0x20, 0x2, 0x2, 0x2, 0x3e, 0x9a0, 0x81, 0x38, 0x3e, 0x2, 0x3, 0x20, 0x1, 0x0, 0x1, 0x80}, [{0x1, 0xffff, 0x101, 0x5, 0x1, 0xffffffff, 0x2, 0xffff}], "c2acd60357ea628cdd846bf0ee7095d1e5e1eebe59b56654a999c6baaf8d6ac2ee0b46d1a356ca35f8ed05ea6e18cae0076356aad6229ac18ba153923d3af79d49460709d767ae5d1b16ed77d4", ['\x00', '\x00']}, 0x2a5) r6 = syz_open_dev$vcsn(&(0x7f0000000340), 0x1, 0x2200) sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="100008000300"/18, @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 18:31:09 executing program 0: setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0x0, 0xbe, 0x5, 0x3f, 0x0, 0x7f, 0x10, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000000c0), 0x2}, 0x80021, 0x7bc, 0x1, 0x2, 0x8, 0x1, 0x8, 0x0, 0x7, 0x0, 0x7f}, r0, 0xffffffffffffffff, r0, 0x1) ioctl$FICLONE(r1, 0x40049409, r2) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) [ 2306.180965] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2306.180965] program syz-executor.2 not setting count and/or reply_len properly [ 2306.253673] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2306.253673] program syz-executor.6 not setting count and/or reply_len properly 18:31:10 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) (fail_nth: 1) 18:31:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0607030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:31:10 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x1, &(0x7f0000000000)) preadv2(r1, &(0x7f0000000340)=[{&(0x7f0000000040)=""/91, 0x5b}, {&(0x7f00000000c0)=""/25, 0x19}, {&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000180)=""/149, 0x95}, {&(0x7f0000000240)=""/134, 0x86}], 0x5, 0x811, 0xdf, 0x1) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:31:10 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c06000000000000000a4c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:31:10 executing program 4: sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x18, 0x1}, {0x30}, {0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40084) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) [ 2306.453603] FAULT_INJECTION: forcing a failure. [ 2306.453603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2306.455192] CPU: 1 PID: 15163 Comm: syz-executor.5 Not tainted 6.5.0-rc7-next-20230824 #1 [ 2306.456257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2306.457303] Call Trace: [ 2306.457652] [ 2306.457962] dump_stack_lvl+0xc1/0xf0 [ 2306.458489] should_fail_ex+0x4b4/0x5b0 [ 2306.459081] _copy_from_user+0x30/0xf0 [ 2306.459636] sg_write.part.0+0x1cf/0xac0 [ 2306.460206] ? __pfx___lock_acquire+0x10/0x10 [ 2306.460829] ? __pfx_lock_release+0x10/0x10 [ 2306.461413] ? __pfx_sg_write.part.0+0x10/0x10 [ 2306.462065] ? __lock_acquire+0xc3f/0x6340 [ 2306.462660] ? __pfx_lock_release+0x10/0x10 [ 2306.463265] ? find_held_lock+0x2c/0x110 [ 2306.463812] ? inode_security+0x105/0x140 [ 2306.464371] ? avc_policy_seqno+0x9/0x20 [ 2306.464932] ? selinux_file_permission+0x9c/0x520 [ 2306.465595] sg_write+0x8d/0xe0 [ 2306.466072] vfs_write+0x2b9/0xda0 [ 2306.466565] ? __pfx_sg_write+0x10/0x10 [ 2306.467129] ? __pfx_vfs_write+0x10/0x10 [ 2306.467695] ? __fget_files+0x267/0x480 [ 2306.468235] ? __fget_light+0xe5/0x270 [ 2306.468775] ksys_write+0x122/0x250 [ 2306.469285] ? __pfx_ksys_write+0x10/0x10 [ 2306.469870] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2306.470579] do_syscall_64+0x3f/0x90 [ 2306.471113] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2306.471810] RIP: 0033:0x7fcec3919b19 [ 2306.472308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2306.474605] RSP: 002b:00007fcec0e8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2306.475588] RAX: ffffffffffffffda RBX: 00007fcec3a2cf60 RCX: 00007fcec3919b19 [ 2306.476511] RDX: 0000000000000125 RSI: 0000000020000400 RDI: 0000000000000003 [ 2306.477420] RBP: 00007fcec0e8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2306.478332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2306.479246] R13: 00007ffcb1fd025f R14: 00007fcec0e8f300 R15: 0000000000022000 [ 2306.480180] [ 2306.577857] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2306.577857] program syz-executor.6 not setting count and/or reply_len properly 18:31:10 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) r3 = dup(r2) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x40, 0x0, 0x0, 0xe5, 0x0, 0x7, 0x88000, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x0, 0x3}, 0x800, 0x0, 0x6, 0x0, 0x4, 0x40, 0x4801, 0x0, 0x1}, 0x0, 0x800f, r3, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000380)={0x5, 0x80, 0x81, 0x91, 0x3, 0x21, 0x0, 0x8, 0x0, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffff, 0x5}, 0x20020, 0x10001, 0x6, 0x2, 0x2, 0x400, 0x0, 0x0, 0x6, 0x0, 0x6}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4004000) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000080)=0xffffffffffffffe7) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105443, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2811, 0xffffffffffffffff, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000600)=""/4096, 0x1000) ioctl$FITRIM(r7, 0x4004662b, &(0x7f0000000180)) pread64(r0, 0x0, 0x0, 0xff) [ 2306.622609] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2306.622609] program syz-executor.2 not setting count and/or reply_len properly 18:31:10 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) (fail_nth: 2) 18:31:10 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000000000254c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:31:10 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0648030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2306.894127] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2306.894127] program syz-executor.2 not setting count and/or reply_len properly [ 2306.901419] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2306.901419] program syz-executor.6 not setting count and/or reply_len properly [ 2306.909092] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2306.909092] program syz-executor.6 not setting count and/or reply_len properly [ 2306.913375] FAULT_INJECTION: forcing a failure. [ 2306.913375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2306.915014] CPU: 1 PID: 15181 Comm: syz-executor.5 Not tainted 6.5.0-rc7-next-20230824 #1 [ 2306.916150] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2306.917270] Call Trace: [ 2306.917649] [ 2306.917988] dump_stack_lvl+0xc1/0xf0 [ 2306.918558] should_fail_ex+0x4b4/0x5b0 [ 2306.919197] _copy_from_user+0x30/0xf0 [ 2306.919771] sg_write.part.0+0x5f7/0xac0 [ 2306.920384] ? __pfx_sg_write.part.0+0x10/0x10 [ 2306.921069] ? __lock_acquire+0xc3f/0x6340 [ 2306.921711] ? __pfx_lock_release+0x10/0x10 [ 2306.922350] ? find_held_lock+0x2c/0x110 [ 2306.922953] ? inode_security+0x105/0x140 [ 2306.923563] ? avc_policy_seqno+0x9/0x20 [ 2306.924164] ? selinux_file_permission+0x9c/0x520 [ 2306.924891] sg_write+0x8d/0xe0 [ 2306.925410] vfs_write+0x2b9/0xda0 [ 2306.925962] ? __pfx_sg_write+0x10/0x10 [ 2306.926564] ? __pfx_vfs_write+0x10/0x10 [ 2306.927199] ? __fget_files+0x267/0x480 [ 2306.927782] ? __fget_light+0xe5/0x270 [ 2306.928366] ksys_write+0x122/0x250 [ 2306.928922] ? __pfx_ksys_write+0x10/0x10 [ 2306.929527] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2306.930304] do_syscall_64+0x3f/0x90 [ 2306.930850] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2306.931632] RIP: 0033:0x7fcec3919b19 [ 2306.932171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2306.934668] RSP: 002b:00007fcec0e8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2306.935735] RAX: ffffffffffffffda RBX: 00007fcec3a2cf60 RCX: 00007fcec3919b19 [ 2306.936735] RDX: 0000000000000125 RSI: 0000000020000400 RDI: 0000000000000003 [ 2306.937765] RBP: 00007fcec0e8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2306.938789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2306.939836] R13: 00007ffcb1fd025f R14: 00007fcec0e8f300 R15: 0000000000022000 [ 2306.940877] 18:31:22 executing program 1: rt_sigsuspend(&(0x7f0000000000)={[0x200]}, 0x8) 18:31:22 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) r3 = dup(r2) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x40, 0x0, 0x0, 0xe5, 0x0, 0x7, 0x88000, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x0, 0x3}, 0x800, 0x0, 0x6, 0x0, 0x4, 0x40, 0x4801, 0x0, 0x1}, 0x0, 0x800f, r3, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000380)={0x5, 0x80, 0x81, 0x91, 0x3, 0x21, 0x0, 0x8, 0x0, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffff, 0x5}, 0x20020, 0x10001, 0x6, 0x2, 0x2, 0x400, 0x0, 0x0, 0x6, 0x0, 0x6}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4004000) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000080)=0xffffffffffffffe7) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105443, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2811, 0xffffffffffffffff, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000600)=""/4096, 0x1000) ioctl$FITRIM(r7, 0x4004662b, &(0x7f0000000180)) pread64(r0, 0x0, 0x0, 0xff) 18:31:22 executing program 4: sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x18, 0x1}, {0x30}, {0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40084) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) 18:31:22 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c064c030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:31:22 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000020000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:31:22 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) (fail_nth: 3) 18:31:22 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) io_getevents(0x0, 0x5, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000040)={0x0, 0x3938700}) ppoll(&(0x7f0000000080)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) io_getevents(0x0, 0x40e, 0xa, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000180)={0x77359400}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001380), 0x16000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001840)={{{@in=@initdev, @in=@remote}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) syz_io_uring_setup(0x101, &(0x7f0000000080), &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000040)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001580), &(0x7f0000000140)='./file1\x00', 0x8, 0x2000, 0x1, {0x0, r5}}, 0x4ab1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x217, 0x1, 0x1, {0x0, r5}}, 0x20) 18:31:22 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000180)={0x0, 0x0, "5d598467b580486c39adbb4747113482fb8a89bc014a456e5f4e2bcb2efe96909a1b1d84f9c96f3892626eb735c815b3aa15076ce15103d485c9545551255b49f23684d24e876104914a392d0cc1df16ba9396d63471b2194409fa3c850dec0915073eecbea3f5b6890b54e88437cb52aedec6b1b8c4db9888340ce048f615a2b17e42c45fea902c91f8b66fe517173d6c8fe358b32573a7bdc547f5304b7e2e00388529b35d2ef73db41409c338f7751f2778388f4ffa665a6791ffa05df6181ab91d5285227147db0dbedf87689f922d8d863bd031b2d94daaf7bcaab6d574cbb3d7e250f2827539a13c52e0c3f32d7d3b2354a69617ba14fb5eea10576258", "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"}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {0x0, r6}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}], 0xff, "3e3b3204ece552"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001040)={r7, r8, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001280)={r11, 0x0, "45200a3016ffc548abfab97a1c9d46863a0ddea860e18af030ee70665daeb486a2a02ac5c3c6bb0f991e6b1627a30c80184d28060f63fc57875baf87556a7fae518dfa96782d24a9ecbc7ff3398710ef479d64ac11af58da53b3372f5de7c44ef4f55c2ec5ed4ce53d3b19ec000ad45d04f6513f2a6891127226f4082b0e5817551d9ae1d91ca33024ba414a535a58caefaa06f7251506c8411cd430d52506d1c486daeab8793170679025ff8c83f7f2a492d0cd3510567fc94690ffdb56377535d41e5625d084983f0b5d39040349ee438ebc0e704e0058ee7c05d4e3484ff82cb04f2344d0b78ca5a033d81319620d995413c1bbd6fbf71b7a0e59bf92472e", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004f540)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000597c0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {0x0}], 0xff, "3e3b3204ece552"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004f740)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x1, "63ceced1c7757e"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001180)={r2, r5, "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", "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"}) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) [ 2319.200594] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2319.200594] program syz-executor.2 not setting count and/or reply_len properly 18:31:23 executing program 4: sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x18, 0x1}, {0x30}, {0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40084) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x6) 18:31:23 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000380)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) sendmmsg$inet6(r2, &(0x7f0000002f00)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x2, @mcast2, 0x6}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000540)="6a3f0fc9bd00055fb103038e51388db748ca296b895851990fa74847a01df461ce42a533113afb2a7fa4ea27377761cecf2c9e13034eaf590d05dea40dd0468c1cbea8920b4666d906b716b8aba47270c7910e3da188ea25b4be6eff741c533ddd2a6837322c10d4ade991e05c88cc89566588d5ca26acfba7289b214e8071c519aae30a923721f6622655bf7de25d3eec8c32755267afc6c19baa5911911c1413b75995f10c9eec9c4387678aa3ca98c8d298162266e2543ec0360353bdead154ecf4675a9723961cdec923a0e0ae332a04e977ca22ad103b7648bac3b100db45e79b5f2e690cba30a5ffa36c052bd1631cd02e78d84e757b29d0e3db0a787a289a6eb7b2722701b9cb25fd7232940ea88ccb6b9811f02dd02711571cddfe43b065a77dd933eacf5b3a3bb8d537fe9b5c5a894f88ce349d300473ee80f6a75ade658715d670337f5c1d7c46ad601102a62cbd4afb0249b8a89e1f3f42073510fee37057745cf0b398d52a13a1c41249b6491a13f2dfb3a7c91032bee9ac2a278421532140d96cd25d404ba1678c69444a5680a209614a74d80559ac077afa7ac82441f605e1586c2e10236475f96ba1753659ab7e32feb18e5c00537de46a6b62f985ef1dc66363916f1c42c0f57f9ef76325f91ff91b5bead4bd809100fc9b7fb328938c888c987bb1a028bae5ce0000fa3088c712ff2343563883d4844dcd06e373952aa0ac9d1e2fc1deea785466d602bb2b0feb2f8bc20f79f4ca73fce4eab7167c63165187e34afbf016c7d330ca09c7a03e866b61047173bd464a354f64851e12a7ede73234697ef64af60b96842dfb413463710bc296e02fcc38d77c41b6f67a4b0161fabcab2d7077cfbe7dda284ff9b0c6f5005be01cca309525e18c5c7c2b4eee0a334cb3386a364a7af9542335576fef337ad73be55871ad198602f3e88ce96f3b512cefbd05517aeac10bd762e37ef0070c2a9d109880c83749ccdd6e8cd78f07ac9a1f3c5cdb496ec0d1eacf5015cac20b8b2d906ac332ba9949db6eb73140ef7e813f933b63ef3fe928b2297bfa3b4e4d33250bb1bad6fae2b85990219565ff9b66cbbdc3269e1c169f9efa96fc0df4ea5e5533149bd549a953cb6a16c333824b6a8b3219d579a727e8d32ee09f11268cfe2c04bea117a318186569f5094a409b060415dfc2711c996b35b497ebf563625c044c5a00c2713330f2e5adb45b652bd7e8945362604780090d228f8c3b2e3221ce03494e76136fe381a5282d9a95503a9699f2012f30813b15ab04fa828b3a37c0a1b961dea5595fdb380bc7a36f9097548192b983b0c0b3bf3ee38e3228e3ef4c2eff0c878ae9a47c2ed63f6ea39fe254b0b15c9312ee92e6f0616b8b37d1bdccde25090671f2e2250c0f29829c204bd6cef7f72c7604f0c97d77187bb5c883dbec9bb55d69080d6aa82f5c52a87d5e578a80ab26786f1912050f5494168df7671e3ba7910a7e10258e185d5f7086597a97f3091b74410c78c4890fdf8e6c20280cc419d11426da1166ba692ba9a13e9e55bfa47018a31249ee3007096e84f13f87e964103f227ddfcade37979381911de237d254294736ec1df599e4e7273a50dc5ec75e4531371f8986a5ddc3127c1cbe1a1121a6de78aa21e3af98fc99c2ad53df3c377e95075a2852f2e1b5bfa3b5b6ecaf6d7429865a1d6c6f39af312678834dcb9000f277a93a89e4f02ce58e1cbca5cfcb046411f375de9c356fff80fe1fe14781749e4a0e113f4f76be8384f53715708300c515187c7cff5dfc745b302f40a510b279f8d85567e753cce2b741e13e15a01f75df704d261f635fd31b6fef0b49e26f444c879edc9e5c40b1ad34c4fa841552dc69df75a3e21f6bfbb3eae55a26c3b5bd1c7b2ff6caff5d10acb46370b358ba3dd8048d60f5b779ddc74a5010969e52d0fda36a849507a4d44faf02ae888027dfc17775c6ec2c82f1d6c5327e0d1bfe7c13a003e1281b3052b36d69b1d76e852e0465002997cb6ac13f81db5f31b439bf44e1a02b2ef033039ed78d165159d0eacbbbf11348554311c3f010b6af21a1a51b6c07d2c7d5648619bacbe5ae121109ff9938c6c513224eb391660b1be33ae8e6b61ca3793286a9951af120107803b0b4f5130cc1dbb0f64326ae98f315dc5fa14d23431f6eed93c8ddc3e9c356d1663936bce4991036bc2ee541edc59f89c4f10d478c94c3034228cc214c9e5bd1012b3de80a67d62dfd7d8c5acd00f507350176ef9f267f3fb6d282e2dc879cc8a5869af247717fc8e0eb994f19ce1c60c8a88133eab39e35d83451cafb360f0e6ce202b3bf18ac949c3b6eeaaa4093ff38054f90d2265cb2dc6b6db83b9a815c0bf5d82913c0b687507abf318283ec95603f6a1f6954416da95f94417fd04a584c083311a8349c74254225c1f127917b4dca959a28abdbd6d52fa627e20bd868d7923862a0b6aefc9ed7f6199344f44348298920dda488269f6b71ab782cc2c2b393089acc3b75cc4856e9f92e578f0e0a0adc4806ed769a53abf9125e05683e63b9bfba937ccfa0130b4c2b8e7ac448480f73bfa1d4c6f5c5d9eb8b10b9ca049bb867ece4c203c2834147ad68ce13f91b103d7c38802659b2f3b4a1ca5101bb1d4d7df2effd22f49be702c287ed3a15c07edc01da9b3e627f21ccd765baed913f39f5a7534e13715147245c13dea5545af381df511c595d42d000686fbf926f69187bf372f2915765c651c8deff4f3e798624cef3121dc73404de2fe5db3e2a6e64cdca1521ce1e34f3b0a5d71e231b55f073b7a7afd971c4d445d34a724f713cc53f5b86552dccac9a612535fd09557c77951a8bbce600b00c41a8f002c92248ad2ab2b7a90e49662046d1dd2c668106943434c9bc6f786a20e4004b87287ad9c6fcef905b30885e44bcb0c17fa60d59d0c1918168e056baced731daa08bcd47e2473985b5f614a85740f6a7f4f4b2eb51d40a651648ad589e3268bee1d1c3ad1123493e13311c9dd9a14d94df2d605d6b71c1125eeab5bc79aaeb86ddbea04ef63bc19bead2fa916562ba9c0444b1834d81823b165155991d6871fb6fafa67f98dc8c47284956dbce2bcd6965c7c870df081b19f231482ae8a82e4f7bc8f5c513796c4073dafeb2cd54f8fd023b07d2ef98b77eb457a75386beabdbe72c8ffe58a332cf534476ad32bfef14dd7187768b551282e2070a381a539cc0b65a144a54a1a8da4144377b6f3ec42bdd982a62b2cd9407f916b8a9fb62c6a22785b38939a6dc69653094bb8fe2d528dc0276446e61259b6c3205b7056b9ebb9ae87ea09232624830657f2db0e86b75cee4d3f6d10225de0ddc95801a03b82369b6a746f4eca045dbe29004419760c04defdcce8a592936b5ae85c897eb0053fd1d911a1c25043ee1fefdc109a439664a2606afc2b6dc9561df98d37cf173736609df69ea3965443fd9d597e1cbd13f0e68cbb7bc14140d6d81fc4a906ff51e6a21e415eed1f7183be6cd302caa301b89918873a21453087ed55a1f7fa4b9b2eb937a41c797eb059225a8ee77e3d18a803b87837f37f54e28b08647ad9b2fafa64cdaa0f17fc804133a6dd08ae2319c0ff5d39a6f2395bbf809783b5a9f239f6a07078e2f7de3b5d5174bab59a039e5c542daa3fcf14d8c43d7f56900632c47774d3f3b83cae77ac838de9f192ba19cc5ef64f635acbd1e2e31158c6f58d86d3ff02c812183bacfed5742b6c7ece0e589ebbd3b7a28b55db4534cb1e842e3e8e8c7c9a3ca7aea85663d0dc98447ad7ff90a7662dcaea76c1f37b8cc993a7fdaf2176ee9f7fb3b928c7688ef137398686719f4313ef49e7b8ced3173c94989b211d216dcdb0552273e891fd5ebdd04d44ccb7e5086afe35602f1a346db18310eda29df7fae63af3eda7866c0823940bdf79d17c7c24ad30256e7bfc557e9de403927ba1f5f0b7e1d987f8b54727a0494766ebdbaa80d98bb365c655579b831ad6404bbe613db630996f6bb458f529d25da72d9f627e6fc970d7c6ad269057b2011554033472fc1a0d0b9842729f07709b9ffc4cb91954dca82d271f9f2b6eb58f6d93ab997de86ff6366ad85ca3384b6056953df4eb58ab3e5a5013d188d8e086a3c75f7e156921b8e490edc93be6ac0ea5e0b3704ef1556b76cf512352303486777ab08953ef6d8d19f6569b404b04dbec60e3feb1dda496e21f6a3f2cb96021f0e5fe91edf39795e1df1730b2a09d7a2eea0a035053c08d5c352b7c1eb3001f1dee59a768beec55500b3adeb147f7b35e1d9a1368bf9111e724be3b1f6ada7c7d6070101278f12db2c7fa0902928eda905de77337319eb9f95c91bc467996eb55b84ab8ba025d4a1038c9100aad4ba3eed785efb67e4e1def0153aea490588b955b3a18d12eb8ebdb56be2b53b90fc5c98d8c06a3c7ee951560031c258a01e56939fb64a599a6105efa3fbdb2452fb4eca74a9dd2d997f08dba10724eed2eebd0cf8825c316b60cb31505add5272544b45e071e82ee2d5f283b20f3fc005e20e2a9a8f02ec6ade8f960c0e3ed6bfc837cc6de0b5535d2509e72bd5c18d71ef3eeb4730c2a6ecc7a0b0d8bd8fd3b020eddc4ad912d33ceecdaacfd9b5ee12f29e6b916a1b1f8aa246e28cd6ff6f6b2a0c6740c1491df70dfd0dcd4ce76aee7193a3cad09d721d8587a6625f564a5e14c0bc0846f59fa31b000ca048ea1adc39bfc0e1ba7c869a5775be6ab5f9c93be63a34ac0b5b6ff628c5454a67aa31b8aee41e6d26c2aba5bf5a45b098742b07fc25d01d75ec601542767c7bc2cb947cc92416b837cce85a1669ddaa73acc6ec168d134e48c3e214d0bd6a451db40dd2b70009b0888540362f75c4213159c114ad6197031f6858c978dc3503ba60597384a98c7827a1a9cfb28f76aadb00b7cabee2d2f52b254fb6ecb1008ffec4292eb6a2728605bf3c53c18bb66cf6084543775991ca96e54c59d26ca1edf04b1edc1a5c62d32c30a4eeca37dc86639720aefd50aaa3955a3076420f3bf5c2f902b7d3a1b770d5003ff5c9ac6276815198b8ad37a2e2b6ee77bb8ba77e4a542aed4c7d231fa526252f190139f17fab73f3f17e275f6117bfb88e701ac7762ca129ca2dc41fcf229649344b2879f2367c29aced90bdbfa3b2bbbcc332a629628e21d2ced32dd21e9d7b73f06ff51d0cecf48125ce028decabe5d4f9ab33f86fda4635a27212bfd9e8e9b6b6d449fc45c788c810a57868acf06a2215208bff0b7a5f49ce021439913254e6862e4818b9f5f056cf1d824de2641f93200990a86d33a0d5205281883f85bfb0bcdb54fc6b2317257d80171c633259bb5c9c2dbd90e5db340184511427c851ac2504bdfccb42be72275f3dd4bc5a127ae04de9ecc6239d03bd27eb3aa681c40e05d81b4a3498b9cbeea00f9825295e64ffb1d737380fc388f7987fd2a45cda3f5c3b7f3cd928db0d3a5a6ef9b7fa621ee6ac09cb359a86e590eab9ca7c37495bd553a79e759b0c54d79505e1183f8e563159f5c6daa16a9b40915a8e5d16cf41446a94057faced36938adc73c7bd419773fc0f3e0726c82d40e6b0bd0a72453d4ab816e8f238162c70d61e1d1b49de117cfc1eb1a7778037ac2e129f2a5795297c5ad1237336825b6f9e208a26f247975c02aa0be44d71ba7ae5d5b919cbbe36fdfdb403553420b76334a0ca4c229a8f6e272171b079f5ce258731a0a1a469893020bd5e1752f988959987707d7f91ca895b07775d25b5431cb4d86476652ac50957f8c5ec7dee5ce58f1d165f", 0x1000}], 0x1, &(0x7f00000001c0)=[@rthdr={{0x88, 0x29, 0x39, {0x33, 0xe, 0x1, 0x3, 0x0, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @local, @private0, @mcast2]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x62, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x96}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0xc8}}, {{&(0x7f00000002c0)={0xa, 0x4e21, 0x80000001, @rand_addr=' \x01\x00', 0xfffffff9}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001540)="43d1657cbab1fa184755a047c77cc301b657122e428a1c0343f18fa540b4647d2a3af5ef552dd1246dc769eeb651e614595b238333b29409502f9c713e28a1663706511fb6f7d8cf97897d73c164ffa0b8e230f623de9c6ac22a75f47ab235d95064b7246639394105739eefdd900bc77ea9bb1fc9d9779cc78baad318a2d26617f8d173c06c4d7b85609e01bac896f94bcf9a0065f88d530eaf67185c9c1ea6f58c1502d43d268345ef867d8a47b01cd8bc1d73aeb31bb255bf329d8add099edbb169faf5b2476b2b56a772eaf53cd7c97a3faff99000", 0xd7}, {&(0x7f0000001640)="227434d0e9bbb265865b7d035143418005272b0440bc3409dbcc0987dbfb50b151b5186d57142e9667008e110c7a34c4c8ace8fdfa15beefda30b25538e0a8310e6ac3fec61fd609ffb0a3dd9770dad9f671bd8043bbaf8430bbcaf6986c64fe22f74bcc202759c3ef2803e09fca9cdb0b0f38fc6938d934159027ddbf06107d393a7e34aa3cea70f919e95bf4c8da9848930fc39146554d8369cbddb971ed34863d1a35263544d97ade93", 0xab}, {&(0x7f0000001700)="0c66ab35f90be969c31aa2dd570ede07f56b36581a8687ccf648839d55991944b7435031647f36ae151cad87b34d33f5a8cc21261f2fb03a4cf9797b8b00aca448ef46a31a0a6ed42836b9e0571a688a88df2e0ce84f1f02e12172059c777e5d3e96c838d42a089a7bb8cea06adacbc0b2a2a7197f8c8060acea27a90d87da16dcd914676d092404c02cc0d788871502e4d1f262d645e6276b81234693089ebc17e3bf5d8f70ac528ae75269481b2f776669ded15315b59cbe4454a7d23d50b03f47723474209e7b0f1c78d95970d909244f", 0xd2}, {&(0x7f0000001800)="30d3ad093fb1d04122f5065cb0c401b641366194fd9f3ba3055f38ba693e89487341bc814a3cd8969c01273957223c8f00497f90675cae902709ac02a8d7e95d9b71216f153a59d430dd759172def8bc1a263faf263fa67bf103db6e2d37cae399588613cd4014c0ec8f396946bbfeb72bf72fe307194255029c7430f3c35f45ed7186ccfaaa7a4ca596edeb26e0e9d57e486ad17b21d8fe29cb8d0ca5ae25d5f3d1fd2791baa2de", 0xa8}, {&(0x7f0000000340)="b0381f326130a9591cc95dd55d293a2f", 0x10}, {&(0x7f00000003c0)="9f4477a7ffb62927b58acff241598c43dc57121cb0a1aa311dd79462a5683958f32d792b5eb71043cf6d9a5e71f76b910ad593d1eaa69a115d2ead38a06191fc8aa1cb35cc12771c06ea65eb0dceecfcf50ba345929de46f63257a029e386a1b88007c610d6b94ad43193a753911b0dafc0a8c2ff040b1", 0x77}, {&(0x7f00000018c0)="2e0966265b4f6e08b027a2428090608e2ff2a5880eb810e6c7d44b5585a561379436eef3cbac5d2d675611afa840290270badd74b7c0468d75e0add496360cf2795d7c6def84d534dd603b085ee6ac42b1d5a8dadb28bc6b2f5635a16fd702882bad8b58227ffb6f5c4b3fb354187771176d83d05cd712a50ba2e61ad5186df0128606dcd15f3e61126af6529645e9d50acd821f1cb292aab34bd0366f097ed0f25a7a2087982c2c7614fdd113afcd9555f1a13b30722c1d3614a71785b1aeaa385b10139f84109756f47ed4cd43", 0xce}, {&(0x7f00000019c0)="c4157a76f86a93c6d0", 0x9}, {&(0x7f0000001a00)="4ea58dff68d0dfc04fd23af2cab114c02a036cc4361a82f7c8abf8acceebf5bdfef65e49b2dba3f0822e11c028ee359459d8431edf48ad9890c38fa62b37bfba59e9d1683917f5951c6140b975dd8a0655e7832d9a929eb8cc639f64c8ea0e4fe4e32e61a97447b34108bace3162f8106ecda9f4a096d4902c13d67e5cf1a3640c77d44b5ed751b2c58658dc50c54adbc9ab3266a13efe371a3c15959bfb66f3fb946975f2dcb00726baacfd92b5b35be9d85a7f4bf04d97d0166959414efe6bd89beb727efd76e27bf87f1c3a18cae1e956", 0xd2}], 0x9}}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000001bc0)="6dab75e1e678f3ecaef660e2fe47e9564720ee343b38d128903f09480b4933d1e64040af104732a2a0471e399924f2163de13bc6861f1f88d9758040c15c239da6e457a26b5b45dd0297cf6a9e53daeaf525240a86fc398d6b91bdbaaa4635fb58c2e3aacf8846f288867cbf41d9aa22", 0x70}, {&(0x7f0000001c40)="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", 0x1000}], 0x2, &(0x7f0000002c80)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0x3a, 0x1, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0xf8, 0x29, 0x4, {0x4, 0x1b, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0xfe, 0x0, [0x6000000000, 0x3, 0x2, 0x8, 0x8000, 0x3, 0x3ff]}}, @calipso={0x7, 0x18, {0x3, 0x4, 0x4, 0x240, [0xfff, 0x0]}}, @hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0xfb}, @calipso={0x7, 0x48, {0x2, 0x10, 0x3, 0x8, [0xff, 0x80, 0x8, 0x80000001, 0x100000001, 0x7, 0x3, 0xfffffffffffffffd]}}, @pad1, @jumbo={0xc2, 0x4, 0x8}, @enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x28}, @hao={0xc9, 0x10, @mcast2}]}}}], 0x120}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002dc0)="7cff08f9af88e244313cc8fda1f080dd41b9da7aba30b96f340609dcea4b7d9280147174c21e", 0x26}], 0x1, &(0x7f0000002e40)=[@hopopts_2292={{0xa0, 0x29, 0x36, {0x0, 0x11, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x6, 0x3ff, [0xfff, 0x8, 0x26e8, 0x1, 0x159, 0xff]}}, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x4}, @enc_lim, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x62}, @jumbo={0xc2, 0x4, 0x8}, @ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x18, {0x2, 0x4, 0x3f, 0x8000, [0x2, 0x6]}}]}}}], 0xa0}}], 0x4, 0x1) getsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000000), &(0x7f0000000040)=0x4) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'trylock', ' ', 'io'}, 0xb) [ 2319.269612] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2319.269612] program syz-executor.6 not setting count and/or reply_len properly [ 2319.283272] FAULT_INJECTION: forcing a failure. [ 2319.283272] name failslab, interval 1, probability 0, space 0, times 0 [ 2319.285670] CPU: 1 PID: 15198 Comm: syz-executor.5 Not tainted 6.5.0-rc7-next-20230824 #1 [ 2319.286993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2319.288367] Call Trace: [ 2319.288803] [ 2319.289191] dump_stack_lvl+0xc1/0xf0 [ 2319.289849] should_fail_ex+0x4b4/0x5b0 [ 2319.290531] ? blk_rq_map_user_iov+0x242/0x1740 [ 2319.291311] should_failslab+0x9/0x20 [ 2319.291960] __kmem_cache_alloc_node+0x66/0x310 [ 2319.292749] ? blk_rq_map_user_iov+0x242/0x1740 [ 2319.293544] ? blk_rq_map_user_iov+0x242/0x1740 [ 2319.294323] __kmalloc+0x4d/0x160 [ 2319.294919] blk_rq_map_user_iov+0x242/0x1740 [ 2319.295707] ? __blk_mq_alloc_requests+0xe61/0x13b0 [ 2319.296394] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2319.297226] ? __mutex_lock+0x12a1/0x1a30 [ 2319.297830] blk_rq_map_user_io+0x1d1/0x200 [ 2319.298558] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2319.299391] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2319.300132] ? lock_acquire+0x19a/0x4c0 [ 2319.300808] sg_common_write.constprop.0+0xd8d/0x15f0 [ 2319.301687] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2319.302620] sg_write.part.0+0x69e/0xac0 [ 2319.303344] ? __pfx_sg_write.part.0+0x10/0x10 [ 2319.303994] ? __lock_acquire+0xc3f/0x6340 [ 2319.304718] ? __pfx_lock_release+0x10/0x10 [ 2319.305333] ? find_held_lock+0x2c/0x110 [ 2319.305899] ? inode_security+0x105/0x140 [ 2319.306473] ? avc_policy_seqno+0x9/0x20 [ 2319.307055] ? selinux_file_permission+0x9c/0x520 [ 2319.307721] sg_write+0x8d/0xe0 [ 2319.308206] vfs_write+0x2b9/0xda0 [ 2319.308708] ? __pfx_sg_write+0x10/0x10 [ 2319.309269] ? __pfx_vfs_write+0x10/0x10 [ 2319.309851] ? __fget_files+0x267/0x480 [ 2319.310430] ? __fget_light+0xe5/0x270 [ 2319.310993] ksys_write+0x122/0x250 [ 2319.311536] ? __pfx_ksys_write+0x10/0x10 [ 2319.312199] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2319.313030] do_syscall_64+0x3f/0x90 [ 2319.313574] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2319.314269] RIP: 0033:0x7fcec3919b19 [ 2319.314792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2319.317218] RSP: 002b:00007fcec0e8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2319.318239] RAX: ffffffffffffffda RBX: 00007fcec3a2cf60 RCX: 00007fcec3919b19 [ 2319.319221] RDX: 0000000000000125 RSI: 0000000020000400 RDI: 0000000000000003 [ 2319.320173] RBP: 00007fcec0e8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2319.321130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2319.322074] R13: 00007ffcb1fd025f R14: 00007fcec0e8f300 R15: 0000000000022000 [ 2319.323062] 18:31:23 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) r3 = dup(r2) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x40, 0x0, 0x0, 0xe5, 0x0, 0x7, 0x88000, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x0, 0x3}, 0x800, 0x0, 0x6, 0x0, 0x4, 0x40, 0x4801, 0x0, 0x1}, 0x0, 0x800f, r3, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000380)={0x5, 0x80, 0x81, 0x91, 0x3, 0x21, 0x0, 0x8, 0x0, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffff, 0x5}, 0x20020, 0x10001, 0x6, 0x2, 0x2, 0x400, 0x0, 0x0, 0x6, 0x0, 0x6}) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = dup(r5) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4004000) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000080)=0xffffffffffffffe7) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105443, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2811, 0xffffffffffffffff, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000600)=""/4096, 0x1000) ioctl$FITRIM(r7, 0x4004662b, &(0x7f0000000180)) pread64(r0, 0x0, 0x0, 0xff) 18:31:23 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0668030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:31:23 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000030000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:31:23 executing program 7: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) r2 = dup(r1) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x40, 0x0, 0x0, 0xe5, 0x0, 0x7, 0x88000, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x0, 0x3}, 0x800, 0x0, 0x6, 0x0, 0x4, 0x40, 0x4801, 0x0, 0x1}, 0x0, 0x800f, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000380)={0x5, 0x80, 0x81, 0x91, 0x3, 0x21, 0x0, 0x8, 0x0, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffff, 0x5}, 0x20020, 0x10001, 0x6, 0x2, 0x2, 0x400, 0x0, 0x0, 0x6, 0x0, 0x6}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4004000) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000080)=0xffffffffffffffe7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105443, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2811, 0xffffffffffffffff, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000600)=""/4096, 0x1000) ioctl$FITRIM(r6, 0x4004662b, &(0x7f0000000180)) [ 2319.523313] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2319.523313] program syz-executor.6 not setting count and/or reply_len properly 18:31:23 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) (fail_nth: 4) [ 2319.638538] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2319.638538] program syz-executor.2 not setting count and/or reply_len properly 18:31:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') r1 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) process_mrelease(r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r3, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xa2e9, 0x2f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x2c, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 18:31:35 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000040000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:31:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c066c030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:31:35 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001140)=""/4094, 0xffe) getdents(r0, 0x0, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x9, 0x0, 0x1, 0x7, 0x6, @remote}, 0x14) rt_sigsuspend(&(0x7f0000000000)={[0x200]}, 0x8) rt_sigaction(0x34, &(0x7f0000000100)={&(0x7f0000000040)="64480fc72066f20f2a25ddd000008fc9788318c463ed7cab00000100040fc33a0f0fe5b0c423a5786a4734c4425198add60000006764660f3a40074cc4427d31fa", 0x0, &(0x7f00000000c0)="c4a195eccfc4839dcf03ba660f5e7b0ddfa1ca000000c40249a73fc4627503b02db3ed75a00d00000000000000c4e16f5a5805400f0f609baa2ef2ae", {[0xff0000000000000]}}, 0x0, 0x8, &(0x7f0000000140)) 18:31:35 executing program 0: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r1, &(0x7f0000000000)=""/172, 0xac, 0xff) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f00000001c0)) 18:31:35 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) (fail_nth: 5) 18:31:35 executing program 4: sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x18, 0x1}, {0x30}, {0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40084) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/4096, 0x1000, 0x6) 18:31:35 executing program 7: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) r2 = dup(r1) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x40, 0x0, 0x0, 0xe5, 0x0, 0x7, 0x88000, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x0, 0x3}, 0x800, 0x0, 0x6, 0x0, 0x4, 0x40, 0x4801, 0x0, 0x1}, 0x0, 0x800f, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000380)={0x5, 0x80, 0x81, 0x91, 0x3, 0x21, 0x0, 0x8, 0x0, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffff, 0x5}, 0x20020, 0x10001, 0x6, 0x2, 0x2, 0x400, 0x0, 0x0, 0x6, 0x0, 0x6}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4004000) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000080)=0xffffffffffffffe7) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105443, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2811, 0xffffffffffffffff, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000600)=""/4096, 0x1000) 18:31:35 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) mq_timedsend(r2, &(0x7f0000000040)="5af305e7910929193363f0651930f9e75bd56579ece53a2985e384fc1c44e0", 0x1f, 0x9, &(0x7f00000000c0)={r3, r4+60000000}) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) [ 2331.872102] FAULT_INJECTION: forcing a failure. [ 2331.872102] name failslab, interval 1, probability 0, space 0, times 0 [ 2331.873063] CPU: 0 PID: 15228 Comm: syz-executor.5 Not tainted 6.5.0-rc7-next-20230824 #1 [ 2331.873556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2331.874047] Call Trace: [ 2331.874214] [ 2331.874377] dump_stack_lvl+0xc1/0xf0 [ 2331.874631] should_fail_ex+0x4b4/0x5b0 [ 2331.874898] ? bio_kmalloc+0x3e/0x70 [ 2331.875137] should_failslab+0x9/0x20 [ 2331.875400] __kmem_cache_alloc_node+0x66/0x310 [ 2331.875701] ? bio_kmalloc+0x3e/0x70 [ 2331.875939] ? __kmem_cache_alloc_node+0x1cd/0x310 [ 2331.876253] ? bio_kmalloc+0x3e/0x70 [ 2331.876532] __kmalloc+0x4d/0x160 [ 2331.876764] bio_kmalloc+0x3e/0x70 [ 2331.876993] blk_rq_map_user_iov+0x422/0x1740 [ 2331.877284] ? __blk_mq_alloc_requests+0xe61/0x13b0 [ 2331.877600] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2331.877916] ? __mutex_lock+0x12a1/0x1a30 [ 2331.878190] blk_rq_map_user_io+0x1d1/0x200 [ 2331.878466] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2331.878771] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2331.879111] ? lock_acquire+0x19a/0x4c0 [ 2331.879422] sg_common_write.constprop.0+0xd8d/0x15f0 [ 2331.879768] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2331.880128] sg_write.part.0+0x69e/0xac0 [ 2331.880397] ? __pfx_sg_write.part.0+0x10/0x10 [ 2331.880696] ? __lock_acquire+0xc3f/0x6340 [ 2331.880979] ? __pfx_lock_release+0x10/0x10 [ 2331.881257] ? find_held_lock+0x2c/0x110 [ 2331.881517] ? inode_security+0x105/0x140 [ 2331.881780] ? avc_policy_seqno+0x9/0x20 [ 2331.882041] ? selinux_file_permission+0x9c/0x520 [ 2331.882406] sg_write+0x8d/0xe0 [ 2331.882633] vfs_write+0x2b9/0xda0 [ 2331.882903] ? __pfx_sg_write+0x10/0x10 [ 2331.883169] ? __pfx_vfs_write+0x10/0x10 [ 2331.883493] ? __fget_files+0x267/0x480 [ 2331.883799] ? __fget_light+0xe5/0x270 [ 2331.884093] ksys_write+0x122/0x250 [ 2331.884366] ? __pfx_ksys_write+0x10/0x10 [ 2331.884671] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2331.885055] do_syscall_64+0x3f/0x90 [ 2331.885332] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2331.885703] RIP: 0033:0x7fcec3919b19 [ 2331.885972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2331.887227] RSP: 002b:00007fcec0e8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2331.887755] RAX: ffffffffffffffda RBX: 00007fcec3a2cf60 RCX: 00007fcec3919b19 [ 2331.887797] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2331.887797] program syz-executor.2 not setting count and/or reply_len properly [ 2331.888241] RDX: 0000000000000125 RSI: 0000000020000400 RDI: 0000000000000003 [ 2331.888252] RBP: 00007fcec0e8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2331.891215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2331.891710] R13: 00007ffcb1fd025f R14: 00007fcec0e8f300 R15: 0000000000022000 [ 2331.892229] [ 2331.922218] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2331.922218] program syz-executor.6 not setting count and/or reply_len properly 18:31:35 executing program 7: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) r2 = dup(r1) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x40, 0x0, 0x0, 0xe5, 0x0, 0x7, 0x88000, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x0, 0x3}, 0x800, 0x0, 0x6, 0x0, 0x4, 0x40, 0x4801, 0x0, 0x1}, 0x0, 0x800f, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000380)={0x5, 0x80, 0x81, 0x91, 0x3, 0x21, 0x0, 0x8, 0x0, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffff, 0x5}, 0x20020, 0x10001, 0x6, 0x2, 0x2, 0x400, 0x0, 0x0, 0x6, 0x0, 0x6}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4004000) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000080)=0xffffffffffffffe7) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105443, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2811, 0xffffffffffffffff, 0x0) 18:31:35 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) (fail_nth: 6) 18:31:35 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000050000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:31:35 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/30, 0x1e}], 0x1, &(0x7f0000000440)=""/11, 0xb}, 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) sendmsg$netlink(r0, &(0x7f0000000580)={&(0x7f00000000c0), 0xc, &(0x7f0000000300)=[{&(0x7f0000000100)={0x10, 0x31, 0x10, 0x70bd29, 0x25dfdbfc}, 0x10}, {&(0x7f0000000180)={0x178, 0x39, 0x1, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x4, 0xf}, @generic="e213ad732e3856689e77f25792d0d0e22bd3ebf2131c1985be72985dac513866e3475a220a0f18807fc262a2e127c2ae73bdaba764d8602a4a72e1274975fbcd19a661b0cb911c796ea15a87f53796a4ac48c0015abbc4d7fe4687424c5dcaf7b3b5a267ab917aa513df3401c2faba46cea357ede94ce1b84e7bea97c9a8c6653b4bb8eab5403508db54235aa4c12c2d6d03f5a3eb43447d3965927a08839b52a1e5c33fa7e9b24ccce0f3b4ef2c7cd0aa4e1f74bd2a7c93a9a1", @generic="d3fa3c99330e731c1ad050ded8ab22959a35fd2bbe2b48cc77eb8bddb95a294e139d6180793c9e402e912822788d534028ac7b13d04f0b11c10450f033ca27ebae848c08ab4d8740545cd18f136560687c3992badb9e01ca", @generic="4ce3f9545282bc2be3d187aead945b74efcfd9cf24ad289f4b40db7567460b57f7e5c975c964b3d945571427c76445879c7980f3ee00d633a5d502f3933aa33d3d5d9bca8e1d70238351c802c17a9ac8d7"]}, 0x178}], 0x2, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r1, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r0, r3, r0]}}, @rights={{0x38, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, r4, r5, r6, 0xffffffffffffffff, r7, r0]}}], 0x98, 0x1}, 0x0) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:31:35 executing program 4: sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x18, 0x1}, {0x30}, {0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40084) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/4096, 0x1000, 0x6) 18:31:35 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:31:35 executing program 7: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) r2 = dup(r1) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x40, 0x0, 0x0, 0xe5, 0x0, 0x7, 0x88000, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x0, 0x3}, 0x800, 0x0, 0x6, 0x0, 0x4, 0x40, 0x4801, 0x0, 0x1}, 0x0, 0x800f, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000380)={0x5, 0x80, 0x81, 0x91, 0x3, 0x21, 0x0, 0x8, 0x0, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffff, 0x5}, 0x20020, 0x10001, 0x6, 0x2, 0x2, 0x400, 0x0, 0x0, 0x6, 0x0, 0x6}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4004000) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000080)=0xffffffffffffffe7) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105443, 0x0) 18:31:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0674030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:31:36 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) (fail_nth: 7) [ 2332.207981] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2332.207981] program syz-executor.6 not setting count and/or reply_len properly 18:31:36 executing program 4: sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xa, 0x13, [{0x18, 0x1}, {0x30}, {0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40084) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/4096, 0x1000, 0x6) [ 2332.289152] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2332.289152] program syz-executor.2 not setting count and/or reply_len properly [ 2332.291526] FAULT_INJECTION: forcing a failure. [ 2332.291526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2332.292498] CPU: 0 PID: 15259 Comm: syz-executor.5 Not tainted 6.5.0-rc7-next-20230824 #1 [ 2332.293059] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2332.293598] Call Trace: [ 2332.293778] [ 2332.293945] dump_stack_lvl+0xc1/0xf0 [ 2332.294217] should_fail_ex+0x4b4/0x5b0 [ 2332.294505] _copy_from_iter+0x1d3/0x13b0 [ 2332.294814] ? __pfx__copy_from_iter+0x10/0x10 [ 2332.295141] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2332.295522] ? bio_add_hw_page+0x1bf/0x450 [ 2332.295830] ? bio_add_pc_page+0xbc/0x100 [ 2332.296128] copy_page_from_iter+0xe3/0x180 [ 2332.296433] blk_rq_map_user_iov+0xb39/0x1740 [ 2332.296767] ? __blk_mq_alloc_requests+0xe61/0x13b0 [ 2332.297130] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2332.297483] ? __mutex_lock+0x12a1/0x1a30 [ 2332.297790] blk_rq_map_user_io+0x1d1/0x200 [ 2332.298100] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2332.298447] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2332.298795] ? lock_acquire+0x19a/0x4c0 [ 2332.299103] sg_common_write.constprop.0+0xd8d/0x15f0 [ 2332.299533] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2332.299958] sg_write.part.0+0x69e/0xac0 [ 2332.300274] ? __pfx_sg_write.part.0+0x10/0x10 [ 2332.300622] ? __lock_acquire+0xc3f/0x6340 [ 2332.300952] ? __pfx_lock_release+0x10/0x10 [ 2332.301279] ? find_held_lock+0x2c/0x110 [ 2332.301588] ? inode_security+0x105/0x140 [ 2332.301896] ? avc_policy_seqno+0x9/0x20 [ 2332.302207] ? selinux_file_permission+0x9c/0x520 [ 2332.302579] sg_write+0x8d/0xe0 [ 2332.302840] vfs_write+0x2b9/0xda0 [ 2332.303113] ? __pfx_sg_write+0x10/0x10 [ 2332.303432] ? __pfx_vfs_write+0x10/0x10 [ 2332.303747] ? __fget_files+0x267/0x480 [ 2332.304050] ? __fget_light+0xe5/0x270 [ 2332.304336] ksys_write+0x122/0x250 [ 2332.304611] ? __pfx_ksys_write+0x10/0x10 [ 2332.304927] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2332.305313] do_syscall_64+0x3f/0x90 [ 2332.305594] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2332.305988] RIP: 0033:0x7fcec3919b19 [ 2332.306268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2332.307539] RSP: 002b:00007fcec0e8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2332.308075] RAX: ffffffffffffffda RBX: 00007fcec3a2cf60 RCX: 00007fcec3919b19 [ 2332.308576] RDX: 0000000000000125 RSI: 0000000020000400 RDI: 0000000000000003 [ 2332.309071] RBP: 00007fcec0e8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2332.309576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2332.310076] R13: 00007ffcb1fd025f R14: 00007fcec0e8f300 R15: 0000000000022000 [ 2332.310591] 18:31:47 executing program 1: getpeername$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @remote}, &(0x7f0000000240)=0x10) rt_sigsuspend(&(0x7f0000000000)={[0x200]}, 0x8) rt_sigaction(0x40001d, &(0x7f00000000c0)={&(0x7f0000000040)="c4234d5d653476c4a1d5effaf3450f1ecd660ff9e7260f8800000000c481dc54e06767400f102826f00fbab3f6aa000003c463e1783cefc4c4a13171f2ac", 0x8000000, &(0x7f0000000080)="0f01fcc42285bad80f381cd8f2430fe61b8f8ab0124cd50c00000100440f1503c462f9321866460f3a418298c87e9400c4a2fd9dbe00100002664e0f3a162100", {[0x7]}}, &(0x7f0000000180)={&(0x7f0000000100)="432563000000c4c16572f212c4823dbeb20e000000c48131d140eca4c4017a7e4b006536f2cfe7c3c4025d469c8a03000000f3aa", 0x0, &(0x7f0000000140)="c402eaf7be7cf20000c401451528c4c2e9ac7b96c4e2bd0aa8469584c736420ffa68450f1c24a236c0da052e430fde0cd043f622659b"}, 0x8, &(0x7f00000001c0)) 18:31:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c067a030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:31:47 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) (fail_nth: 8) 18:31:47 executing program 7: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) r2 = dup(r1) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x40, 0x0, 0x0, 0xe5, 0x0, 0x7, 0x88000, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x0, 0x3}, 0x800, 0x0, 0x6, 0x0, 0x4, 0x40, 0x4801, 0x0, 0x1}, 0x0, 0x800f, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000380)={0x5, 0x80, 0x81, 0x91, 0x3, 0x21, 0x0, 0x8, 0x0, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffff, 0x5}, 0x20020, 0x10001, 0x6, 0x2, 0x2, 0x400, 0x0, 0x0, 0x6, 0x0, 0x6}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4004000) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000080)=0xffffffffffffffe7) 18:31:47 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000060000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:31:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x6) 18:31:47 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x11, 0x0, "a36d18e18d4b7a88983b677e63fb9b6c6ef1d7d1d2dc488560905a6b9463fcf8e4be5a8dda24a5013e22478a9b61177cd9d254b69bcecb6e8b491e1096d6f25db14dbf76df7011ec151a0969122fe287"}, 0xd8) 18:31:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) signalfd(r1, &(0x7f0000000100)={[0x8]}, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) sendfile(r0, r2, &(0x7f00000000c0)=0x4, 0x736bec6d) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) [ 2343.896832] FAULT_INJECTION: forcing a failure. [ 2343.896832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2343.898442] CPU: 1 PID: 15276 Comm: syz-executor.5 Not tainted 6.5.0-rc7-next-20230824 #1 [ 2343.899503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2343.900592] Call Trace: [ 2343.900958] [ 2343.901285] dump_stack_lvl+0xc1/0xf0 [ 2343.901826] should_fail_ex+0x4b4/0x5b0 [ 2343.902410] _copy_to_user+0x30/0xc0 [ 2343.902960] simple_read_from_buffer+0xd0/0x170 [ 2343.903638] proc_fail_nth_read+0x1a6/0x290 [ 2343.904258] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2343.904941] ? security_file_permission+0xb5/0xe0 [ 2343.905626] vfs_read+0x1de/0x8f0 [ 2343.906127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2343.906815] ? __pfx_vfs_read+0x10/0x10 [ 2343.907404] ? __fget_files+0x267/0x480 [ 2343.907979] ksys_read+0x122/0x250 [ 2343.908489] ? __pfx_ksys_read+0x10/0x10 [ 2343.909066] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2343.909798] do_syscall_64+0x3f/0x90 [ 2343.910322] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2343.911037] RIP: 0033:0x7fcec38cc69c [ 2343.911568] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2343.913935] RSP: 002b:00007fcec0e8f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2343.914947] RAX: ffffffffffffffda RBX: 0000000000000125 RCX: 00007fcec38cc69c [ 2343.915849] RDX: 000000000000000f RSI: 00007fcec0e8f1e0 RDI: 0000000000000004 [ 2343.916704] RBP: 00007fcec0e8f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2343.917557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2343.918415] R13: 00007ffcb1fd025f R14: 00007fcec0e8f300 R15: 0000000000022000 [ 2343.919298] 18:31:47 executing program 7: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) r2 = dup(r1) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x40, 0x0, 0x0, 0xe5, 0x0, 0x7, 0x88000, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x0, 0x3}, 0x800, 0x0, 0x6, 0x0, 0x4, 0x40, 0x4801, 0x0, 0x1}, 0x0, 0x800f, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000380)={0x5, 0x80, 0x81, 0x91, 0x3, 0x21, 0x0, 0x8, 0x0, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffff, 0x5}, 0x20020, 0x10001, 0x6, 0x2, 0x2, 0x400, 0x0, 0x0, 0x6, 0x0, 0x6}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4004000) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) [ 2343.941637] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2343.941637] program syz-executor.2 not setting count and/or reply_len properly 18:31:47 executing program 4: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x6) [ 2343.951945] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2343.951945] program syz-executor.6 not setting count and/or reply_len properly 18:31:47 executing program 0: syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) pread64(r0, &(0x7f0000000180)=""/172, 0xac, 0xff) 18:31:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c06000a0000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:31:47 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000070000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2344.206312] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2344.206312] program syz-executor.2 not setting count and/or reply_len properly [ 2344.210745] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2344.210745] program syz-executor.6 not setting count and/or reply_len properly 18:32:01 executing program 1: rt_sigsuspend(&(0x7f0000000000)={[0x200]}, 0x8) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x98d3]}, 0x8, 0x800) 18:32:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}]}]}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}]}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000c80)={0x828, r9, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x4, 0x79}}}}, [@NL80211_ATTR_TID_CONFIG={0x800, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x200}]}, {0x524, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2fc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x3, 0x1, 0x0, 0x6f, 0x1, 0x36, 0x18, 0x1b, 0x60, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x110, 0x101, 0x8, 0x400, 0x401, 0x100, 0x5, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x9, 0x200, 0x8f6, 0x8001, 0x4, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xffff, 0x6, 0x4, 0x7ff, 0x6, 0x0, 0x8]}}]}, @NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x4}, {0x5, 0x5}, {0x6, 0x6}, {0x2, 0x5}, {0x6, 0x6}, {0x3}, {0x0, 0x8}, {0x4, 0x9}, {0x0, 0x4}, {0x7, 0x4}, {0x3, 0x4}, {0x0, 0x9}, {0x6, 0x3}, {0x0, 0x3}, {0x6, 0x5}, {}, {0x1, 0x2}, {0x0, 0x1}, {0x1, 0x6}, {0x6, 0x6}, {0x6, 0x5}, {0x0, 0x6}, {0x0, 0x8}, {0x5, 0x5}, {0x2, 0xa}, {0x5, 0x3}, {0x6, 0x8}, {0x2, 0x3}, {0x2, 0x5}, {0x7, 0xa}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0x2, 0x6c, 0xb, 0x4, 0x36, 0xb, 0x48, 0x36, 0x0, 0x36, 0x60, 0x30, 0x0, 0xc, 0x60, 0x12, 0x6c, 0x60, 0x3, 0x1b, 0x2, 0x2, 0x2, 0xc, 0x6, 0x6, 0xc, 0x60, 0x25, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8, 0x3ff, 0x3f, 0x3, 0x100, 0x0, 0xf550]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x36, 0x12, 0x24, 0x0, 0x30, 0x6, 0x1b, 0x5, 0x1b, 0x1b, 0x1, 0x1, 0x36, 0x16, 0x6c, 0x36, 0x24, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x4, 0xa}, {0x1, 0x2}, {0x1, 0x1}, {0x7}, {0x2, 0x3}, {0x1, 0xa}, {0x7, 0x9}, {0x3, 0x6}, {0x1, 0x1}, {0x7, 0xa}, {0x7, 0x1}, {0x0, 0x1}, {0x2, 0x4}, {0x4, 0xa}, {0x7, 0x8}, {}, {0x1, 0x7}, {0x7, 0x8}, {0x6, 0x9}, {0x2, 0x4}, {0x7, 0x8}, {0x7, 0x6}, {0x4, 0x5}, {0x3, 0x1}, {0x6, 0x8}, {0x7, 0x4}, {0x5, 0x2}, {0x0, 0x4}, {0x4, 0x9}, {0x2, 0xa}, {0x6, 0x6}, {0x6, 0x7}, {0x5, 0x7}, {0x1, 0x9}, {0x0, 0x4}, {0x1, 0x5}, {0x2, 0x7}, {0x2, 0x1}, {0x7, 0x9}, {0x4, 0x2}, {0x6, 0x7}, {0x4, 0x8}, {0x7, 0x2}, {0x1, 0xa}, {0x4, 0x7}, {0x1, 0x9}, {0x1, 0x3}, {0x5, 0x4}, {0x5, 0x5}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x2}, {0x6, 0x7}, {0x7, 0x2}, {0x2, 0xa}, {0x6, 0x2}, {0x4, 0x6}, {0x1, 0x7}, {0x4, 0xa}, {0x0, 0x4}, {0x1, 0x8}, {0x4, 0x9}, {0x6, 0xa}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x48, 0x48, 0x9, 0x36, 0x60, 0x6, 0xb, 0x2, 0x0, 0x6c, 0x48, 0x3, 0x48, 0x0, 0x1b, 0x48, 0x16, 0x1, 0x24]}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x1, 0x4}, {0x0, 0x3}, {0x3, 0x2}, {0x1, 0x7}, {0x1, 0x8}, {0x0, 0x2}, {0x7, 0x4}, {0x4, 0x5}, {0x6, 0xa}, {0x0, 0x9}, {0x1, 0x7}, {0x6, 0x2}, {0x0, 0x3}, {0x1, 0x9}, {0x2}, {0x4, 0x6}, {0x1, 0x2}, {0x4, 0x9}, {0x5, 0x7}, {0x3, 0x5}, {0x0, 0x1}, {0x2, 0x5}, {0x1, 0x2}, {0x3, 0x3}, {0x3, 0x8}, {0x2, 0x8}, {0x7, 0x8}, {0x4, 0x1}, {0x4, 0x6}, {0x4, 0x2}, {0x4}, {0x5, 0x5}, {0x6, 0x6}, {0x1, 0x2}, {0x2, 0x8}, {0x6, 0x3}, {0x1, 0x3}, {0x0, 0x4}, {0x3, 0x2}, {0x4, 0x2}, {0x6, 0x1}, {0x3, 0x7}, {0x6, 0x8}, {0x7, 0x9}, {}, {0x4}, {0x1}, {0x1, 0x3}, {0x5}, {0x7, 0x5}, {0x7, 0x5}, {0x0, 0x3}, {0x2, 0x2}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x2, 0x9}, {0x4, 0x5}, {0x4, 0x9}, {0x2, 0x2}, {0x0, 0x6}, {0x3, 0x1}, {0x3, 0x3}, {0x7, 0x7}, {0x5, 0x9}, {0x3, 0x3}, {0x0, 0xa}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x9}, {0x4, 0x3}, {0x0, 0x5}, {0x4, 0x5}, {0x5, 0x1}, {0x6, 0x2}, {0x3, 0x5}, {0x0, 0x5}, {0x4, 0x5}, {0x2, 0x9}, {0x1, 0x5}, {0x6, 0x1a}, {0x1, 0x2}, {0x3, 0x5}, {0x2, 0x5}, {0x7, 0x4}, {0x2}, {0x4, 0x1}, {0x1, 0x4}, {0x4, 0x8}, {0x1, 0x7}, {0x3, 0x1}, {0x2, 0xa}, {0x6, 0x7}, {}, {0x6, 0x5}, {0x6, 0xa}, {0x0, 0x6}, {0x2, 0x5}, {0x7, 0x2}, {0x4, 0x7}, {0x3, 0x6}, {}, {0x6, 0x4}, {0x1, 0x9}, {0x5, 0x5}, {0x7, 0x5}, {0x4, 0x3}, {0x0, 0x3}, {0x0, 0x8}, {}, {0x3, 0x7}, {0x1, 0x6}, {0x6, 0x5}, {0x6, 0xa}, {0x2, 0x7}, {0x2, 0x2}, {0x4, 0x6}, {0x1, 0x8}, {0x3, 0x2}, {0x2, 0x1}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x3, 0x6}, {0x6, 0x4}, {0x2, 0x4}, {0x6, 0x6}, {0x5, 0x3}, {0x5, 0x2}, {0x7, 0x5}, {0x3, 0x9}, {0x7, 0x5}, {0x6, 0x6}, {0x7, 0x1}, {0x0, 0x3}, {0x6, 0x5}, {0x7, 0xa}, {0x1, 0x4}, {0x0, 0x1}, {0x5, 0x9}, {0x6, 0x6}, {0x4, 0x1}, {0x5, 0x8}, {0x6, 0x1}, {0x1, 0x6}, {0x7, 0x6}, {0x7, 0x2}, {0x4, 0x3}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x4}, {0x2, 0x8}, {0x1, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xcc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x20, 0xbc, 0xfa76, 0x20, 0x7, 0x6, 0xffff]}}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x7}, {0x7, 0x9}, {0x4, 0x9}, {0x3, 0x3}, {0x7, 0xa}, {0x6}, {0x0, 0xa}, {0x1, 0x8}, {0x6, 0x9}, {0x5, 0x8}, {0x7, 0x4}, {0x2, 0x3}, {0x5, 0x3}, {0x1, 0x1}, {0x3, 0x7}, {0x4, 0x5}, {0x0, 0x5}, {0x4, 0x1}, {0x6, 0x1}, {0x3, 0x4}, {0x7, 0x8}, {0x5, 0x2}, {0x7, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf001, 0x5, 0xe1b4, 0x7f, 0x8000, 0x5, 0x100, 0xdf]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0x2}, {0x4, 0x9}, {0x7, 0xa}, {0x7, 0x8}, {0x3, 0x2}, {0x7}, {0x4, 0x9}, {0x0, 0x9}, {0x7, 0x4}, {0x1, 0x5}, {0x1, 0x5}, {0x1, 0x1}, {0x0, 0x2}, {0x3, 0x9}, {0x3, 0x8}, {0x1, 0x2}, {0x3, 0x1}, {0x7, 0x4}, {0x4, 0x5}, {0x6}, {0x3, 0x6}, {0x5, 0xa}, {0x4, 0x8}, {0x7, 0x4}, {0x1, 0x4}, {0x4, 0x9}, {0x3, 0xa}, {0x1, 0x1}, {0x0, 0x8}, {0x2, 0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7fff, 0x4, 0x5, 0x5, 0x3, 0x1, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x0, 0xa}, {0x4, 0x3}, {0x1, 0x7}, {0x4, 0x8}, {0x5, 0xa}, {0x1, 0x5}, {0x6, 0xa}, {0x1, 0x8}, {0x2, 0x9}, {0x1, 0x2}, {0x7, 0x9}, {0x0, 0x7}, {0x0, 0xa}, {}, {0x2, 0x1}, {0x5, 0x3}, {0x2}, {0x7, 0x3}, {0x6, 0x5}, {0x2}, {0x2, 0x5}, {0x7, 0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x1, 0x1}, {0x4}, {0x0, 0x4}, {0x2, 0xa}]}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x4, 0x8}, {0x3, 0x2}, {0x0, 0x5}, {0x3, 0x7}, {0x2, 0x3}, {0x1, 0x9}, {0x3, 0x8}, {0x0, 0x4}, {0x0, 0x4}, {0x7, 0x3}, {0x7, 0x1}, {0x7, 0x6}, {0x3, 0x8}, {0x0, 0x1}, {0x7, 0x8}, {0x6, 0x5}, {0x3, 0x6}, {0x4, 0x6}, {0x2, 0x6}, {0x5, 0x7}, {0x4, 0x9}, {0x4, 0x5}, {0x1, 0x8}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0x7}, {0x6}]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x5}, {0x7, 0x2}, {0x4, 0x4}, {0x0, 0x4}, {0x5, 0x7}, {0x6, 0x6}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x4}, {0x0, 0x4}, {}, {}, {0x0, 0x3}, {0x0, 0xa}, {0x0, 0x2}, {0x5, 0x7}, {0x4, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x7, 0x5}, {0x1, 0x8}, {0x6, 0x4}, {0x3, 0x6}, {0x0, 0xa}, {0x5, 0x7}, {0x3, 0x5}, {0x0, 0x3}, {0x0, 0x1}, {0x5, 0xa}, {0x3, 0x6}, {0x0, 0x3}, {0x0, 0x1}, {0x3, 0xa}, {0x5, 0x5}, {0x3, 0x3}, {0x1, 0xa}, {0x7, 0xa}, {0x0, 0xa}, {0x0, 0x6}, {0x7, 0x2}, {0x0, 0x6}, {0x5, 0x1}, {0x6, 0x1}, {0x1, 0x5}, {0x1, 0x5}]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x3, 0x6, 0x24, 0x48, 0x5, 0x9, 0x24, 0x1b, 0x0, 0x1, 0x2, 0x24, 0x36, 0xb, 0x6c, 0x22, 0x3a, 0x18, 0xc, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x48]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x3, 0x1}, {0x3, 0xa}, {0x5, 0x3}, {0x4, 0xa}, {0x1, 0x4}, {0x2, 0x2}, {0x3}, {0x0, 0x2}, {0x1, 0x9}, {0x6, 0x4}, {0x0, 0x5}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x7}, {}, {0x6}, {0x1, 0x7}, {0x4, 0x3}, {0x7, 0x2}, {0x3, 0x9}, {0x4, 0x7}, {0x0, 0x3}, {0x1, 0x5}, {0x4, 0x8}, {0x0, 0x3}, {0x0, 0x5}, {0x4, 0x7}, {0x3, 0x3}, {0x5, 0x5}, {0x6, 0x2}, {0x1, 0xa}, {0x0, 0x2}, {0x6}, {0x1, 0x5}, {0x3, 0x9}, {0x2, 0x8}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0x5}, {0x7, 0x9}, {0x0, 0x8}, {0x2, 0x6}, {0x0, 0x3}, {0x6, 0x7}, {0x2, 0x8}, {0x1, 0x3}, {0x5, 0x5}, {0x3, 0x6}, {0x6, 0x6}, {0x2, 0x2}, {0x2, 0x9}, {}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x12, 0xb, 0x12, 0x4, 0x1, 0x48, 0x36, 0x18, 0xb, 0x2, 0x48, 0x48, 0x36, 0x4, 0x79, 0x1, 0x30, 0x65, 0x35, 0x36, 0x3, 0x30, 0x6a0073f0367e00e9, 0x16]}]}, @NL80211_BAND_6GHZ={0xf8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x2, 0x5}, {0x1, 0x7}, {0x3}, {0x6, 0x5}, {0x0, 0x6}, {0x3, 0x3}, {0x3, 0x2}, {0x2}, {0x2, 0x2}, {0x1, 0x2}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x8}, {0x1, 0x1}, {0x7, 0x5}, {0x0, 0x5}, {0x0, 0x1}, {0x1, 0x9}, {0x1, 0x4}, {0x7, 0x4}, {0x3, 0x1}, {0x0, 0x8}, {0x6, 0x2}, {0x0, 0x3}, {0x2, 0xa}, {0x3, 0xa}, {0x5, 0x7}, {0x3, 0x4}, {0x1, 0x3}, {0x5, 0x8}, {0x2, 0x9}, {0x5, 0x9}, {0x4, 0x8}, {0x3, 0x1}, {0x6, 0x9}, {0x0, 0x5}, {0x7, 0x1}, {0x0, 0x1}, {0x5, 0x4}, {0x0, 0x2}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0xb, 0x6, 0x5, 0x1b, 0x5, 0x6c, 0x6c, 0x4, 0x4, 0x36, 0x1, 0x1b, 0x48, 0x9, 0xb, 0xb, 0x1, 0x3, 0x12, 0x16, 0x1b, 0x1b, 0x12, 0x5, 0x4, 0x5, 0x16, 0x1b]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x5, 0xb, 0x18, 0x1, 0x1a, 0x16, 0x2, 0x6c, 0x2, 0x1b, 0x1b, 0x48, 0x0, 0x6c, 0x60, 0x0, 0x9, 0x3, 0x16, 0x6, 0x12, 0x6, 0x20, 0x4, 0x2, 0x5900ae9cd2a1b616, 0x1b, 0x1, 0x6]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x4, 0x6}, {0x7}, {0x5, 0x2}, {0x3, 0x8}, {0x3, 0x8}, {0x1, 0x4}, {0x6, 0x4}, {0x0, 0xa}, {0x1, 0x1}, {0x5, 0x9}, {0x2, 0x8}, {0x5, 0x9}, {0x6, 0x6}, {0x6, 0xa}, {0x3, 0x6}, {0x5, 0xa}, {0x4}, {0x5, 0x6}, {0x3, 0xa}, {0x0, 0x2}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x1}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x0, 0x7}, {0x2, 0x2}, {0x4, 0x1}, {0x1}, {0x4, 0xa}, {0x7, 0x7}, {0x4, 0x4}, {0x5, 0x4}, {0x4, 0xa}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x5}, {0x1, 0x5}, {0x0, 0x2}, {0x6, 0x5}, {0x0, 0x9}, {0x5, 0xa}, {0x1}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x36, 0x3, 0x4, 0x4, 0x18, 0x1b, 0x4, 0x30, 0x6c, 0xc, 0x3, 0xc, 0x1b, 0x36, 0x0, 0x4, 0x3, 0x5, 0x6, 0x0, 0x6, 0x12, 0x18, 0x60, 0x18, 0x12]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x47, 0x1, 0x6c, 0x9, 0x6, 0x18, 0x5, 0x16, 0xb, 0x24, 0x30, 0x24, 0xa, 0x2, 0x48, 0x2]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x24, 0xd324296e212735ab, 0x6c, 0x4, 0x6c, 0x30, 0x60, 0x6c, 0x3]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x5, 0x16, 0x5, 0x2, 0x2, 0x24, 0x1b, 0x24, 0x60, 0x6f, 0x3, 0x1b, 0x1b, 0x1b, 0x1b, 0x1, 0x4, 0x1, 0xc, 0x16, 0x895f2b7381bf1196]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x0, 0x8, 0x4, 0x9, 0x20, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0xff, 0x2, 0x0, 0x8001, 0x4, 0x401]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x523c, 0x8, 0x94, 0x3, 0x7, 0x4, 0x0, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10000}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4f}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xed}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1e}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x41992d0a}]}, {0x1f4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x24, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0x3, 0x9, 0x12, 0x3, 0xc, 0x36, 0x6c, 0x16, 0x5, 0x2, 0x12, 0x16, 0x30, 0x48, 0x60, 0x24, 0x1b, 0x1, 0x6, 0x30, 0x60, 0x1]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x27}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3c}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x72}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x194, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x5, 0x9, 0x24, 0x36, 0x18, 0x18, 0x2, 0x24, 0x24, 0x60]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6c, 0x3, 0x16, 0xb, 0x24, 0x5, 0xb, 0x30, 0x2, 0x18, 0x6]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4}, {0x3, 0x8}, {0x7}, {0x6, 0x4}, {0x7, 0x9}, {0x6, 0x3}, {0x7, 0x8}, {0x0, 0x8}, {0x5, 0x8}, {0x5, 0x7}, {0x5, 0x5}, {0x6, 0x3}, {0x2}, {0x4, 0x5}, {0x0, 0x2}, {0x7, 0x4}, {0x7, 0x5}, {0x3}, {0x0, 0x8}, {0x6, 0xa}, {0x2, 0x7}, {0x7, 0x2}, {0x5, 0x4}, {0x2, 0x8}, {0x4, 0x6}, {0x4, 0x4}, {0x1, 0x6}, {0x3, 0x9}, {0x4, 0x9}, {0x2, 0x5}, {0x1, 0x5}, {0x6, 0x8}, {0x4, 0x3}, {0x1, 0x3}, {0x3, 0x7}, {0x7, 0x1}, {0x3, 0x6}, {0x7}, {0x7, 0x2}, {0x4, 0x6}, {0x4}, {0x0, 0xa}, {0x3, 0xa}, {0x3, 0x4}, {0x6, 0x8}, {0x7, 0x8}, {0x1, 0x3}, {0x1, 0x6}, {0x4, 0x2}, {0x2, 0x7}, {0x5, 0x8}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x1}, {0x1, 0x2}, {0x2, 0x9}, {0x7, 0xa}, {0x2, 0xa}, {0x1}, {0x7, 0x1}, {0x4, 0x8}, {0x3, 0x4}, {0x2, 0x3}, {0x6, 0x7}, {0x6, 0x8}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe0e, 0x5, 0xfff, 0x100, 0x7ad, 0x57b, 0x1000, 0x1f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7f, 0xbfa, 0xa19, 0x2, 0x3f, 0x80, 0x4]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1b, 0x1b, 0x16, 0x24, 0x72, 0x18, 0x60, 0x1, 0x60, 0xc, 0x24, 0x9, 0x36, 0x9, 0x18, 0xb, 0x48, 0xc, 0x4, 0x5, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xe7, 0x2, 0x4, 0x3, 0x8, 0x1, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x3, 0xb, 0x9, 0xb, 0x36, 0x5795d98de613a74c, 0x60, 0x48, 0x30, 0x2c, 0x4, 0x1b, 0x9, 0x12, 0x24, 0x1, 0x48, 0x5, 0x24, 0xc, 0x16, 0x24, 0x36, 0x3, 0x18, 0x9, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x2, 0x9, 0xd93, 0xc3, 0xffff, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x24, 0x24, 0x2, 0x0, 0x36, 0x48, 0x4, 0x10, 0x4, 0x1b, 0x9, 0x1, 0xc, 0x18, 0x18]}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x30, 0x2, 0x48, 0x48, 0x18, 0x1b, 0x24, 0x48, 0x9, 0x60, 0x24, 0xb, 0x30, 0xc, 0x6c, 0x60, 0x4c, 0x18, 0x6]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x1, 0xa}, {0x2, 0x8}, {0x7, 0x7}, {0x4, 0x4}, {0x2}, {0x0, 0x6}, {0x1, 0x1}, {0x0, 0x5}, {0x4, 0x7}, {0x3, 0x1}, {0x7, 0x5}, {0x3, 0x3}, {0x5, 0x2}, {0x5, 0x2}, {0x0, 0x1}, {0x0, 0x5}, {0x2, 0x2}, {0x2, 0x9}, {0x6, 0x6}, {0x4}, {0x6, 0x8}, {0x0, 0x9}, {0x7, 0x9}, {0x5, 0x8}, {0x4, 0x9}, {0x4, 0x6}, {0x7, 0x8}, {0x3, 0x6}, {0x1}, {0x1, 0x5}, {0x7, 0x3}, {0x7, 0x4}, {0x5, 0x1}, {0x4}, {0x1, 0x4}, {0x3, 0x7}, {0x0, 0x7}]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x6, 0x8}, {0x7, 0x3}, {0x2, 0x7}, {0x7, 0x1}, {0x7}, {0x7, 0x7}, {0x0, 0x4}, {0x4, 0xa}, {0x3, 0x1}, {0x4, 0x7}, {0x2, 0x8}, {0x2}, {0x7, 0x8}, {0x0, 0x5}, {0x3, 0xa}, {0x7, 0x5}, {0x1, 0x9}, {0x7, 0x3}, {0x4, 0x9}, {0x0, 0x5}, {0x2, 0xa}, {0x1, 0x4}, {0x3, 0x2}, {0x1, 0x1}, {0x1, 0x5}, {0x1, 0x3}, {0x4, 0x8}, {0x6, 0x9}, {0x2, 0x5}, {0x2, 0x2}, {0x0, 0xa}, {0x1, 0x2}, {0x2, 0x3}, {0x3, 0x3}, {0x1, 0x4}, {0x3}, {0x1, 0x1b}, {0x3}, {0x2, 0x6}, {0x5, 0x8}, {0x1, 0x6}, {0x7, 0x1}, {0x2, 0xa}, {0x5, 0xa}, {0x1, 0x8}, {0x1, 0x9}, {0x2, 0x2}, {0x0, 0x7}, {0x7, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x9}, {0x2}, {0x2, 0x1}, {0x5, 0x6}, {0x6, 0x8}]}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x828}, 0x1, 0x0, 0x0, 0x80}, 0x44084) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}]}]}]}, 0x2c}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x34, 0x10, 0x70bd2b, 0x25dfdbff, {0x1}, [@generic="64c4d858cdcd151c888a11a00948bfcc6a1c841f13b62d5ab79d3a4dfa17d2d5a4da"]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x54, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xca}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) 18:32:01 executing program 4: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x6) 18:32:01 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:32:01 executing program 7: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) r2 = dup(r1) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x40, 0x0, 0x0, 0xe5, 0x0, 0x7, 0x88000, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x0, 0x3}, 0x800, 0x0, 0x6, 0x0, 0x4, 0x40, 0x4801, 0x0, 0x1}, 0x0, 0x800f, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000380)={0x5, 0x80, 0x81, 0x91, 0x3, 0x21, 0x0, 0x8, 0x0, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffff, 0x5}, 0x20020, 0x10001, 0x6, 0x2, 0x2, 0x400, 0x0, 0x0, 0x6, 0x0, 0x6}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r4) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4004000) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) 18:32:01 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r2 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x82e8997f88873560) write$vga_arbiter(r3, &(0x7f0000000000)=@other={'decodes', ' ', 'io'}, 0xb) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8c00, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r8 = signalfd(r7, &(0x7f0000000080)={[0x9]}, 0x8) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x14}, {r1, 0x8000}, {r1, 0x1}, {r0, 0x1067}, {r5, 0x24}, {r6, 0x8001}, {r7, 0x481}, {r8, 0x9002}, {}, {r1, 0x100}, {r1, 0x18}], 0x3, 0x0, 0x0, 0xfffffd5b) 18:32:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600020000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:32:01 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000480000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2357.358697] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2357.358697] program syz-executor.2 not setting count and/or reply_len properly 18:32:01 executing program 7: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) r2 = dup(r1) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x40, 0x0, 0x0, 0xe5, 0x0, 0x7, 0x88000, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x0, 0x3}, 0x800, 0x0, 0x6, 0x0, 0x4, 0x40, 0x4801, 0x0, 0x1}, 0x0, 0x800f, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000380)={0x5, 0x80, 0x81, 0x91, 0x3, 0x21, 0x0, 0x8, 0x0, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffff, 0x5}, 0x20020, 0x10001, 0x6, 0x2, 0x2, 0x400, 0x0, 0x0, 0x6, 0x0, 0x6}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r3) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4004000) [ 2357.416966] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2357.416966] program syz-executor.6 not setting count and/or reply_len properly 18:32:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600040000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:32:01 executing program 4: r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x6) 18:32:01 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c06000000004c0000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:32:01 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="030000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2357.571392] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2357.571392] program syz-executor.2 not setting count and/or reply_len properly [ 2357.580381] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2357.580381] program syz-executor.2 not setting count and/or reply_len properly 18:32:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000180)={{r0}, 0x0, 0x4, @inherit={0x68, &(0x7f00000000c0)={0x1, 0x4, 0xb9b, 0x49bb894e, {0xc, 0x0, 0x3941, 0x1}, [0xe1, 0x9, 0x8000, 0x4]}}, @name="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"}) 18:32:01 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) write$vga_arbiter(r2, &(0x7f0000000000), 0xf) clock_gettime(0x0, &(0x7f0000000380)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) close(r3) open(&(0x7f0000000040)='./file0\x00', 0x208482, 0x0) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:32:01 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c06000a0000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2357.742851] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2357.742851] program syz-executor.2 not setting count and/or reply_len properly [ 2357.763247] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2357.763247] program syz-executor.6 not setting count and/or reply_len properly 18:32:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') openat(r0, &(0x7f0000000200)='./file0\x00', 0x8400, 0x2) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0xcd, 0x81, 0x14, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x8, 0xb14, 0x9}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000001c0)={@empty, 0x18, r2}) 18:32:16 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="040000bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:32:16 executing program 7: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) r2 = dup(r1) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x40, 0x0, 0x0, 0xe5, 0x0, 0x7, 0x88000, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x0, 0x3}, 0x800, 0x0, 0x6, 0x0, 0x4, 0x40, 0x4801, 0x0, 0x1}, 0x0, 0x800f, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000380)={0x5, 0x80, 0x81, 0x91, 0x3, 0x21, 0x0, 0x8, 0x0, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffff, 0x5}, 0x20020, 0x10001, 0x6, 0x2, 0x2, 0x400, 0x0, 0x0, 0x6, 0x0, 0x6}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r3) 18:32:16 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(0xffffffffffffffff, &(0x7f0000000180)=""/4096, 0x1000, 0x6) 18:32:16 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:32:16 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000680000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:32:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600100000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:32:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x44, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xff}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xa0}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000800)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2241b8281ac5396f7be7bae0023ecf67146ce3c2f43d2d3f6f22156c894165f5223a84fdd72446225818b7a6ef34de8baf7dc30f5b884a53faca96f6bc8f9cf4fd6610412db98931aa2e94468ae7f1fe2108f864103d92f61e4f013febf22d3669b6b811ffec574488b4da9c557c333be5136f008c0af8f5cb96b01dfdb08253", @ANYRES16=r1, @ANYRES64, @ANYRESDEC=r2, @ANYBLOB="3db458d0b8d7ec9c96e0bf9250f7a858a9d3485e9a2eb57f1f58a31fe0c870ceecbfc2e1b466e85464cc428801e0559fa774a376d06fa44fbad5c2e7abfd600234bc730b09685159cf2e49b69432a9cfde2f5c3ea2206621ab03e393cd48d5ccf3294b1cb3fdf9aa15bcc949c78036a47e2891ed42fcaa3763f977b8ca9e1c17d4e5e727da5bcfc61aa5b8bb1330afa4308e80bae0354edf108bcffb1a0244153c918ddcf5bab0bbb37f22bf3bb09d53278df68221062cf385161da7fa64efc188a180f34800058c5065ab35"], 0x28}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002abd7000ffdbdf250f00000008000300", @ANYRES32=r5, @ANYBLOB="0c0006000200008fbc000000"], 0x28}, 0x1, 0x0, 0x0, 0x4804}, 0x20040000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) rt_sigsuspend(&(0x7f0000000000)={[0x200]}, 0x8) [ 2372.329529] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2372.329529] program syz-executor.2 not setting count and/or reply_len properly [ 2372.338536] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2372.338536] program syz-executor.6 not setting count and/or reply_len properly 18:32:16 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020200bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:32:16 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x8000) write$vga_arbiter(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="746160ba94fc000000000000000000e8000000910002"], 0x15) clock_gettime(0x4, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:32:16 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c06000000006c0000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:32:16 executing program 7: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) r2 = dup(r1) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x40, 0x0, 0x0, 0xe5, 0x0, 0x7, 0x88000, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x0, 0x3}, 0x800, 0x0, 0x6, 0x0, 0x4, 0x40, 0x4801, 0x0, 0x1}, 0x0, 0x800f, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000380)={0x5, 0x80, 0x81, 0x91, 0x3, 0x21, 0x0, 0x8, 0x0, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffff, 0x5}, 0x20020, 0x10001, 0x6, 0x2, 0x2, 0x400, 0x0, 0x0, 0x6, 0x0, 0x6}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 18:32:16 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020400bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:32:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030200000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:32:16 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:32:16 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(0xffffffffffffffff, &(0x7f0000000180)=""/4096, 0x1000, 0x6) 18:32:16 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/172, 0xac, 0xff) [ 2372.557931] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2372.557931] program syz-executor.6 not setting count and/or reply_len properly 18:32:16 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000740000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2372.632078] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2372.632078] program syz-executor.2 not setting count and/or reply_len properly 18:32:16 executing program 4: syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(0xffffffffffffffff, &(0x7f0000000180)=""/4096, 0x1000, 0x6) 18:32:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x3, 0x5, 0x0, 0x1f, 0x0, 0xa7062b3, 0x8c0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xaf, 0x2, @perf_config_ext={0x19, 0xf543}, 0x80, 0x1, 0x5, 0x2, 0x7, 0x7008, 0x6, 0x0, 0x41c, 0x0, 0x9}, 0xffffffffffffffff, 0xa, r0, 0x8) 18:32:16 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030300000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2372.760716] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2372.760716] program syz-executor.6 not setting count and/or reply_len properly [ 2372.836727] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2372.836727] program syz-executor.2 not setting count and/or reply_len properly 18:32:29 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) clock_gettime(0x1, &(0x7f0000000380)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001140)=""/4094, 0xffe) getdents(r1, 0x0, 0x0) write$vga_arbiter(r1, &(0x7f0000000000)=@other={'trylock', ' ', 'io'}, 0xb) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001140)=""/4094, 0xffe) getdents(r2, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000003440)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000140)=""/86, 0x56}, {&(0x7f00000001c0)=""/79, 0x4f}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/221, 0xdd}, {&(0x7f00000004c0)=""/220, 0xdc}], 0x5, &(0x7f00000002c0)}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/2, 0x2}], 0x1, &(0x7f0000000600)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000a00)=[{&(0x7f00000006c0)=""/22, 0x16}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000780)=""/200, 0xc8}, {&(0x7f0000000880)=""/167, 0xa7}, {&(0x7f0000000940)=""/180, 0xb4}], 0x5, &(0x7f0000000a80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000b40)=""/245, 0xf5}, {&(0x7f0000000c40)=""/162, 0xa2}, {&(0x7f0000000d00)=""/236, 0xec}, {&(0x7f0000000e00)=""/14, 0xe}, {&(0x7f0000000e40)=""/128, 0x80}], 0x5, &(0x7f0000000f40)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{&(0x7f0000000fc0)=@abs, 0x6e, &(0x7f0000003380)=[{&(0x7f0000001040)}, {&(0x7f0000001080)=""/117, 0x75}, {&(0x7f0000001100)=""/5, 0x5}, {&(0x7f0000003140)=""/97, 0x61}, {&(0x7f00000031c0)=""/93, 0x5d}, {&(0x7f0000003240)=""/31, 0x1f}, {&(0x7f0000003280)=""/209, 0xd1}], 0x7, &(0x7f0000003400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x20}}], 0x5, 0x0, &(0x7f0000003580)={0x77359400}) r6 = accept4$inet(r3, &(0x7f00000035c0)={0x2, 0x0, @private}, &(0x7f0000003600)=0x10, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000001040), 0xb28088, &(0x7f0000003640)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@nodevmap}, {@cache_loose}, {@version_L}, {@access_user}], [{@uid_lt={'uid<', r5}}, {@subj_type={'subj_type', 0x3d, '.\x18(-,'}}, {@dont_appraise}, {@appraise}, {@appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, ' '}}]}}) ppoll(&(0x7f0000000300)=[{r0}, {}], 0x2, 0x0, 0x0, 0x0) 18:32:29 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020800bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:32:29 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x402001, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000080)) rt_sigsuspend(&(0x7f0000000000)={[0x200]}, 0x8) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r3, 0x1, 0x0, 0x0, {0x6}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xe0}}, 0x4) io_uring_enter(r0, 0x48a7, 0x84e3, 0x1, &(0x7f00000000c0)={[0x7]}, 0x8) 18:32:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030400000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:32:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, 0x0, 0x0, 0x6) 18:32:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 18:32:29 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c06000000007a0000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:32:29 executing program 7: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) r2 = dup(r1) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x40, 0x0, 0x0, 0xe5, 0x0, 0x7, 0x88000, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x0, 0x3}, 0x800, 0x0, 0x6, 0x0, 0x4, 0x40, 0x4801, 0x0, 0x1}, 0x0, 0x800f, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000380)={0x5, 0x80, 0x81, 0x91, 0x3, 0x21, 0x0, 0x8, 0x0, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffff, 0x5}, 0x20020, 0x10001, 0x6, 0x2, 0x2, 0x400, 0x0, 0x0, 0x6, 0x0, 0x6}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 18:32:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, 0x0, 0x0, 0x6) [ 2385.926476] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2385.926476] program syz-executor.6 not setting count and/or reply_len properly [ 2385.935305] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2385.935305] program syz-executor.2 not setting count and/or reply_len properly 18:32:45 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020900bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:32:45 executing program 7: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) r2 = dup(r1) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x40, 0x0, 0x0, 0xe5, 0x0, 0x7, 0x88000, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x0, 0x3}, 0x800, 0x0, 0x6, 0x0, 0x4, 0x40, 0x4801, 0x0, 0x1}, 0x0, 0x800f, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000380)={0x5, 0x80, 0x81, 0x91, 0x3, 0x21, 0x0, 0x8, 0x0, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffff, 0x5}, 0x20020, 0x10001, 0x6, 0x2, 0x2, 0x400, 0x0, 0x0, 0x6, 0x0, 0x6}) 18:32:45 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180), 0x4) clock_gettime(0x0, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)=ANY=[@ANYBLOB="0198efd7a500000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) clock_gettime(0x0, &(0x7f0000000040)) r2 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}}, 0x4000000) epoll_pwait2(r2, &(0x7f0000000080)=[{}, {}], 0x2, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={[0x85]}, 0xf2) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 18:32:45 executing program 1: rt_sigsuspend(&(0x7f0000000000)={[0x200]}, 0x8) r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f00000000c0)={0x1, 0xd6, 0x3}) signalfd(r0, &(0x7f0000000080)={[0x5f5]}, 0x8) 18:32:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, 0x0, 0x0, 0x6) 18:32:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030500000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:32:45 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000000300664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:32:45 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) fcntl$setlease(r1, 0x400, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = signalfd(r2, &(0x7f0000000100)={[0x7]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0180000000000000b62f66696c65300091e747dedf5098008f493f0439b4affb02515a8169cdb19396fcb1bcbba8aae8a652e1c4d38297"]) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev={0xac, 0x14, 0x14, 0x4}, @in6=@dev}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) pread64(r2, &(0x7f0000000000)=""/199, 0xdd, 0x9) [ 2401.418579] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2401.418579] program syz-executor.2 not setting count and/or reply_len properly 18:32:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030600000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:32:45 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020d00bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2401.521935] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2401.521935] program syz-executor.6 not setting count and/or reply_len properly 18:32:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x0) [ 2401.567472] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2401.567472] program syz-executor.2 not setting count and/or reply_len properly 18:32:45 executing program 7: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) r1 = dup(r0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x40, 0x0, 0x0, 0xe5, 0x0, 0x7, 0x88000, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x0, 0x3}, 0x800, 0x0, 0x6, 0x0, 0x4, 0x40, 0x4801, 0x0, 0x1}, 0x0, 0x800f, r1, 0x0) 18:32:45 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xb) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000040)) 18:32:45 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030700000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:32:45 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000000500664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:32:45 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RWALK(r0, &(0x7f0000000040)={0x3d, 0x6f, 0x2, {0x4, [{0x8, 0x0, 0x1}, {0x80, 0x4, 0x8}, {0x80, 0x0, 0x8}, {0x8, 0x2}]}}, 0x3d) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='children\x00') syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 18:32:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x0) (fail_nth: 1) [ 2401.712070] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2401.712070] program syz-executor.2 not setting count and/or reply_len properly 18:32:45 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020e00bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:32:45 executing program 7: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) dup(r0) [ 2401.772477] FAULT_INJECTION: forcing a failure. [ 2401.772477] name failslab, interval 1, probability 0, space 0, times 0 [ 2401.773261] CPU: 0 PID: 15454 Comm: syz-executor.4 Not tainted 6.5.0-rc7-next-20230824 #1 [ 2401.773799] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2401.774335] Call Trace: [ 2401.774517] [ 2401.774684] dump_stack_lvl+0xc1/0xf0 [ 2401.774957] should_fail_ex+0x4b4/0x5b0 [ 2401.775249] ? kvmalloc_node+0xaa/0x200 [ 2401.775521] should_failslab+0x9/0x20 [ 2401.775792] __kmem_cache_alloc_node+0x66/0x310 [ 2401.776126] ? kvmalloc_node+0xaa/0x200 [ 2401.776403] ? kvmalloc_node+0xaa/0x200 [ 2401.776674] __kmalloc_node+0x50/0x160 [ 2401.776950] kvmalloc_node+0xaa/0x200 [ 2401.777223] seq_read_iter+0x820/0x1300 [ 2401.777517] ? __lock_acquire+0xc3f/0x6340 [ 2401.777814] seq_read+0x171/0x210 [ 2401.778065] ? __pfx_seq_read+0x10/0x10 [ 2401.778360] ? fsnotify_perm.part.0+0x248/0x680 [ 2401.778699] ? __pfx_seq_read+0x10/0x10 [ 2401.778978] proc_reg_read+0x234/0x310 [ 2401.779255] vfs_read+0x1de/0x8f0 [ 2401.779510] ? __pfx_proc_reg_read+0x10/0x10 [ 2401.779813] ? __pfx_vfs_read+0x10/0x10 [ 2401.780113] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2401.780465] ? __fget_files+0x267/0x480 [ 2401.780749] __x64_sys_pread64+0x1f6/0x250 [ 2401.781046] ? __pfx___x64_sys_pread64+0x10/0x10 [ 2401.781379] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2401.781745] do_syscall_64+0x3f/0x90 [ 2401.782007] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2401.782365] RIP: 0033:0x7f84ea1cbb19 [ 2401.782618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2401.783785] RSP: 002b:00007f84e7741188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2401.784298] RAX: ffffffffffffffda RBX: 00007f84ea2def60 RCX: 00007f84ea1cbb19 [ 2401.784766] RDX: 0000000000001000 RSI: 0000000020000180 RDI: 0000000000000003 [ 2401.785236] RBP: 00007f84e77411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2401.785706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2401.786174] R13: 00007ffcf0d97a7f R14: 00007f84e7741300 R15: 0000000000022000 [ 2401.786656] [ 2401.851573] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2401.851573] program syz-executor.6 not setting count and/or reply_len properly 18:32:59 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000300500664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:32:59 executing program 7: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) 18:32:59 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020009bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:32:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600034800000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:32:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x0) (fail_nth: 2) 18:32:59 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000000)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:32:59 executing program 1: rt_sigsuspend(&(0x7f0000000000)={[0x200]}, 0x8) rt_sigaction(0xc, &(0x7f00000000c0)={&(0x7f0000000040)="406d6647dfe8c482690ae68f48209e08c5410abd0000000066f021481d644f0fae09c44205bac266410f73d803c441e5e121", 0x3, &(0x7f0000000080)="c461f5d524b2c4817d5bb9000000008fc980012bf30f38f6a86f3a54740f71d2660ffda4796556666666f3e10067f3470f1ed9c401bdf8ec0fbe0a", {[0x1ff]}}, &(0x7f0000000180)={&(0x7f0000000100)="7618c4e1fd50e0c401b35d19dd6446053640d0dbc461465c3da5cd00008fc880a2e618c4816a5f3ac4a27d7868e8c48179103b", 0x0, &(0x7f0000000140)="c46241af614c66450f5938c401c72aa6ebf39a8e6666410f69800a00000036660fd1dc66f30f6f5800c4827d19db460f4205000060ff9c660f3835d4"}, 0x8, &(0x7f00000001c0)) 18:32:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) dup2(r0, r0) [ 2415.681848] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2415.681848] program syz-executor.2 not setting count and/or reply_len properly 18:32:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x0) (fail_nth: 3) 18:32:59 executing program 7: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) [ 2415.739321] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2415.739321] program syz-executor.6 not setting count and/or reply_len properly 18:32:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600034c00000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2415.821360] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2415.821360] program syz-executor.2 not setting count and/or reply_len properly 18:32:59 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000000600664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:32:59 executing program 7: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) 18:32:59 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="d3017907cdd497b3980ae2f106db2b62f623d56d883cb62c"], 0x68) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r4, 0x0, 0x40, &(0x7f0000000080)={@rand_addr, @remote}, 0xc) setsockopt$inet6_buf(r3, 0x29, 0x1c, &(0x7f0000000180)="0c5233e9bc63e68bf22648eb73b4c7b142b9ac4b77e8202c42c0cf1c1c4f1a2272a701a38681dfe4c3b67152785a5e2455974de899fba9e0ab895113b55c89f8a1d713e722eee055d6d09a28e6a065e35447ed9dce2b8b3afa69eb15416bfc46baa30b0fcae1ca2c35251e50049621dbfe990712f91c2c4700", 0x79) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ppoll(&(0x7f0000000000)=[{r1, 0x420}, {r1}, {r0, 0x18}], 0x3, 0x0, 0x0, 0x0) 18:32:59 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000dbf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2415.890344] FAULT_INJECTION: forcing a failure. [ 2415.890344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2415.891960] CPU: 1 PID: 15492 Comm: syz-executor.4 Not tainted 6.5.0-rc7-next-20230824 #1 [ 2415.893046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2415.894126] Call Trace: [ 2415.894494] [ 2415.894824] dump_stack_lvl+0xc1/0xf0 [ 2415.895371] should_fail_ex+0x4b4/0x5b0 [ 2415.895945] _copy_to_iter+0x463/0x1260 [ 2415.896537] ? if6_seq_stop+0x1e/0xc0 [ 2415.897082] ? __pfx__copy_to_iter+0x10/0x10 [ 2415.897700] ? __pfx_lock_release+0x10/0x10 [ 2415.898310] ? __virt_addr_valid+0x102/0x340 [ 2415.898946] ? __check_object_size+0x3d4/0x8b0 [ 2415.899604] seq_read_iter+0xdb2/0x1300 [ 2415.900204] seq_read+0x171/0x210 [ 2415.900727] ? __pfx_seq_read+0x10/0x10 [ 2415.901327] ? fsnotify_perm.part.0+0x248/0x680 [ 2415.902000] ? __pfx_seq_read+0x10/0x10 [ 2415.902560] proc_reg_read+0x234/0x310 [ 2415.903127] vfs_read+0x1de/0x8f0 [ 2415.903632] ? __pfx_proc_reg_read+0x10/0x10 [ 2415.904277] ? __pfx_vfs_read+0x10/0x10 [ 2415.904834] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 2415.905536] ? __fget_files+0x267/0x480 [ 2415.906117] __x64_sys_pread64+0x1f6/0x250 [ 2415.906720] ? __pfx___x64_sys_pread64+0x10/0x10 [ 2415.907393] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2415.908134] do_syscall_64+0x3f/0x90 [ 2415.908675] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2415.909383] RIP: 0033:0x7f84ea1cbb19 [ 2415.909901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2415.912258] RSP: 002b:00007f84e7741188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2415.913265] RAX: ffffffffffffffda RBX: 00007f84ea2def60 RCX: 00007f84ea1cbb19 [ 2415.914208] RDX: 0000000000001000 RSI: 0000000020000180 RDI: 0000000000000003 [ 2415.915143] RBP: 00007f84e77411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2415.916080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2415.917033] R13: 00007ffcf0d97a7f R14: 00007f84e7741300 R15: 0000000000022000 [ 2415.918005] 18:32:59 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600036800000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:32:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_pts(r1, 0x200180) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000100)) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000280)) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x40) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000380)) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000300)={0x5, 0xff, 0x1, 0x3f, 0x1, "c90257d44fe84709981037f52d9cf667c10d5a"}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="6a483d4bd7a4ee98e56b65457b72c3996da7afa803de620d682c1ed3ad1f6d29c0262959689594205f17a4bd53a184cbaa3d0f0eab3b6a35416d4438614a28164f62bde6c7b26f8e958017e45667055f5b88fa2a4b9be55740a9bbea40b64efade1cde0e833b0eaa9442aefbab39a9f55bcbe9d878d4eaec2d9565fc8b6a2772b3159d9a33cdbc31b6ba2d6a5d4d1ad35e93e391aeb21af64fc3f96013600ad1a77cdea9f488e04931e5bbcb32b67b3c60023060d12d51fb2f2ee3941043a1a7131f1b7bf8a5cd6169cc71da372fdc3d649651d4aa3b9b76aef4b76f00331c6e9cfcdac2bf043482fb0a78ef6fc360d6b9878f84", 0xf4}], 0x1) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_WRITE={0x17, 0x2, 0x2000, @fd=r5, 0x2, &(0x7f00000003c0)="924f097f7c70843fd14bca1a527588bbec605e", 0x13, 0xa}, 0x1000000) [ 2416.008850] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2416.008850] program syz-executor.6 not setting count and/or reply_len properly [ 2416.080573] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2416.080573] program syz-executor.2 not setting count and/or reply_len properly 18:33:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000ebf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:33:14 executing program 1: rt_sigsuspend(&(0x7f0000000000)={[0x200]}, 0x8) rt_sigaction(0x27, &(0x7f0000000100)={&(0x7f0000000040)="646567f3450fc7fc40dfd2c4a2392d1fc4a179d7ce8f8858ec800080000002c4c141564a74c4c2a9452507000000c4010dd3d1c461f1f3b5c7e3df9666430f1581d49f0000", 0x5, &(0x7f00000000c0)="f3643e2e420f0f5700b4c4811414aeffefffffc4a1f91301f345a5f0fe80b6592227c4612e5d14e60f981df0ffffff660f38026fbe450fabcbd3be03000000", {[0x5]}}, &(0x7f00000001c0)={&(0x7f0000000140)="f3a541a5f34490c4610454470845f6800c00000000c4c3c97b54100000c403697abc5e000000005dc421ff100f260fa0c461e555a600000000", 0x0, &(0x7f0000000180)="c462f52b6819660f79dbc481fe51afe734dd5af779be660f3a0eab0000000000c4239d7b7ca30a328f29e09753002ef1c4a1fb2dbd20b9ad20c482850022"}, 0x8, &(0x7f0000000200)) io_setup(0x3ff, &(0x7f0000000140)=0x0) io_destroy(r0) io_pgetevents(r0, 0x800, 0x3, &(0x7f0000000240)=[{}, {}, {}], 0x0, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) 18:33:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) r1 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_ADD_TX_TS(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x82e8997f88873560) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f00000000c0)={0xa6, @multicast2, 0x4e20, 0x1, 'ovf\x00', 0x8, 0x3, 0x3a}, 0x2c) 18:33:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600036c00000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:33:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x0) (fail_nth: 4) 18:33:14 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000000700664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:33:14 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x84a01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x13}], 0x2, 0x0, 0x0, 0x0) 18:33:14 executing program 7: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) 18:33:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020002bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2430.966246] FAULT_INJECTION: forcing a failure. [ 2430.966246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2430.967091] CPU: 0 PID: 15521 Comm: syz-executor.4 Not tainted 6.5.0-rc7-next-20230824 #1 [ 2430.967634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2430.968175] Call Trace: [ 2430.968358] [ 2430.968532] dump_stack_lvl+0xc1/0xf0 [ 2430.968810] should_fail_ex+0x4b4/0x5b0 [ 2430.969101] _copy_to_user+0x30/0xc0 [ 2430.969379] simple_read_from_buffer+0xd0/0x170 [ 2430.969708] proc_fail_nth_read+0x1a6/0x290 [ 2430.970012] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2430.970347] ? security_file_permission+0xb5/0xe0 [ 2430.970686] vfs_read+0x1de/0x8f0 [ 2430.970936] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2430.971271] ? __pfx_vfs_read+0x10/0x10 [ 2430.971536] ? __fget_files+0x267/0x480 [ 2430.971835] ksys_read+0x122/0x250 [ 2430.972089] ? __pfx_ksys_read+0x10/0x10 [ 2430.972376] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2430.972755] do_syscall_64+0x3f/0x90 [ 2430.973020] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2430.973369] RIP: 0033:0x7f84ea17e69c [ 2430.973627] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2430.974782] RSP: 002b:00007f84e7741170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2430.975281] RAX: ffffffffffffffda RBX: 0000000000000252 RCX: 00007f84ea17e69c [ 2430.975759] RDX: 000000000000000f RSI: 00007f84e77411e0 RDI: 0000000000000004 [ 2430.976266] RBP: 00007f84e77411d0 R08: 0000000000000000 R09: 0000000000000000 [ 2430.976772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2430.977286] R13: 00007ffcf0d97a7f R14: 00007f84e7741300 R15: 0000000000022000 [ 2430.977799] [ 2430.995403] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2430.995403] program syz-executor.2 not setting count and/or reply_len properly [ 2431.018415] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2431.018415] program syz-executor.6 not setting count and/or reply_len properly 18:33:14 executing program 7: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) 18:33:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x0) 18:33:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600037400000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:33:14 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/172, 0xac, 0xff) 18:33:14 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001140)=""/4094, 0xffe) getdents(r2, 0x0, 0x0) write$vga_arbiter(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="756e6c6f636b206d654e00c73536242cbee7fdd19d6f71a8eb2d9a6687781ac492edb0a8f8b8fa2bdc7ffd6883b69ec9231abb74365be2bfabebf7c9103d11e68b9254fad21fbfcf1d6b367ee220b347a0ad3f0bf85666b87e9d8227b78014e627ba186f7a5c5ed93abe2820c19ecaaca77c10b97d1ca3144bc2ee2163796e73004f8b0a5913c5edc4bab9cf2c214504d042bd36e6f0adebccf4f11b1f657d03c43e3582bd04cb4ef4969e4b56cc83ba1e80d1b7e2907fc57890d0acc3c229a9c2c15872c6a9d7368b8ca00b58972f1c6a"], 0xb) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) 18:33:14 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000053000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:33:15 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020004bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:33:15 executing program 7: syz_open_procfs(0x0, &(0x7f0000000300)='pagemap\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) [ 2431.298102] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2431.298102] program syz-executor.2 not setting count and/or reply_len properly [ 2431.318555] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2431.318555] program syz-executor.6 not setting count and/or reply_len properly [ 2431.326838] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2431.326838] program syz-executor.6 not setting count and/or reply_len properly 18:33:28 executing program 1: rt_sigsuspend(&(0x7f0000000000)={[0xfffffffffffffffa]}, 0x8) rt_sigprocmask(0x1, &(0x7f0000000040)={[0x1]}, &(0x7f0000000080), 0x8) epoll_pwait2(0xffffffffffffffff, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={[0x4]}, 0x8) 18:33:28 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) 18:33:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/4096, 0x36, 0x0) 18:33:28 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000004800664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:33:28 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020008bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:33:28 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') dup3(r0, r0, 0x0) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) pread64(r1, &(0x7f0000000180)=""/193, 0xc1, 0x3) 18:33:28 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time\x00', 0x0, 0x0) write$vga_arbiter(r1, &(0x7f0000000040), 0xf) clock_gettime(0x0, &(0x7f0000000380)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) r4 = socket$netlink(0x10, 0x3, 0xb) ppoll(&(0x7f0000000300)=[{r0}, {r4, 0xa205}], 0x2, 0x0, 0x0, 0xffffffffffffff11) 18:33:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600037a00000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2444.271073] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2444.271073] program syz-executor.6 not setting count and/or reply_len properly 18:33:28 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020009bf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:33:28 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000580)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x7fff, 0x2, 0x780, 0x400, 0x4, 0x480000, r2}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/psched\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) accept$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$BTRFS_IOC_FS_INFO(r4, 0x8400941f, &(0x7f0000000040)) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x4e23, 0x5, @mcast2}, 0x1c) [ 2444.323720] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2444.323720] program syz-executor.2 not setting count and/or reply_len properly 18:33:28 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000004c00664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:33:28 executing program 7: socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) 18:33:28 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/4096, 0x6c, 0x0) 18:33:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030003000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:33:28 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) clock_gettime(0x7, &(0x7f0000000000)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:33:28 executing program 7: socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) [ 2444.498496] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2444.498496] program syz-executor.2 not setting count and/or reply_len properly [ 2444.551451] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2444.551451] program syz-executor.6 not setting count and/or reply_len properly 18:33:40 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) r2 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) epoll_pwait2(r2, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000240)={[0x8000]}, 0x8) clock_gettime(0x3, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x4a, 0x0, "486dd500bedbf810adb7781cb2e6723bcc659f39b50ee5eada4fa000cf8b2792b998b9875260248cc28bde9b06889398a8b5d895f3cb87ad3e5dff410bc76d6f7eb6a7e608d5ce34abc68e3ca23b6dfc"}, 0xd8) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:33:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000e00)={'\x00', 0x200, 0x3}) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) r3 = syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x5, 0x5, &(0x7f0000000500)=[{&(0x7f0000000240)="692d1b78ac60ed70b10171c1ea137ac675f85f779a285cc74ca37ff8f2d51db4fd4f0249ba4a55b14d4d21c28d4151bd6ffc6502875bef966267e92504d8cc1ab2b9e1c2dceab2967484cc8f597de9b3777f03e9bc7473f96de09fc949e3", 0x5e, 0x2}, {&(0x7f00000002c0)="f43ceaa4895d7d4374780abb39bc66b9fd7fa18b30e09a52dd09e4df5969c537983692c040db1af82b30738a87e09062e06ff577fcebe6af9f103551c8a69147b134ebc7232768cdd260ff1736f2b9966fcf4bcc78a867b8f799241e6652a52fc49b15a9abc8586d", 0x68, 0x9}, {&(0x7f0000000340)="0cd90f6e87d8c4942101aca3a2d27a1417fc59b767e4d84c198a07d70c2f4227cec305b18f6bfc971fd487f39e5f73c45a2dd4c02e6e883d9497fc10601acf34a84b95300d162b22119da4cfd75e24fda941dea3f6ee7f1cd37f20494c8b9a4476549457", 0x64, 0xffffffff}, {&(0x7f00000003c0)="f24fc74a87bf94b824228b5551ad559c4826131a00f35b7f133b0a73c1b9427de4922e80463255eeaeb6529dde2636aa4655ad5f15e25dd2df7fb1a5f374194af1605cec8f5293fdd73192714bfa338997af6ee099f2bbce23d33c10842e09cbd110055a597ddaea76fd72a08fa6d81e2dd3d6a03de36d7253200246a95e6e19cc213617a6f9cd15af0bb90acfd5f004fdafd52df98bdd7156d714a1db8cc4cfc85d2bca5a352df7537bfa231efc7c52e7ad98127899bcaa", 0xb8, 0x5}, {&(0x7f0000000480)="57320aff59c015edee78007aa7949864cba078d31a39aa118e1939f6839f10397f7d1932c3796a1ddf08c151c91cbb151a32bbd00ed877ed67d0bceb0a43cc86bb489aa823823634988278b1c904539b5eff6933af61f214ca87f12e5b9bb01682b7c0d273", 0x65, 0xfffffffffffff540}], 0x1000010, &(0x7f0000000580)={[{@nodots}, {@nodots}]}) write$binfmt_elf32(r3, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x4, 0x0, 0x1, 0x3, 0x2, 0x3, 0x140000, 0x5e, 0x38, 0x353, 0x1f, 0x0, 0x20, 0x1, 0x400, 0x6857, 0x18}, [{0x0, 0x80000, 0x11034de5, 0x4, 0x1, 0x6, 0x5, 0xfffffff2}, {0x5, 0x2, 0x2, 0x8, 0x7209, 0x3, 0x1, 0x6}], "1eaae1260bd2e7f2f6a39de35376bf5de89546d3cc678fdfd23f1cd675121ad9b6fd70686b2833c6a09419978651f8f2fbd2c3c4618321208352c585c558ab113051eb691e09387ebb8813e6c3c2bd5f8d5fda056d3480046c778b7a284903dfaf21f105658b0ca96084924a8bbcad69d764773e6f7770ded91d715387189202f5127d748c4ceeaf7a7b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x802) open(&(0x7f0000000180)='./file0\x00', 0x400101, 0x0) 18:33:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000000)) 18:33:40 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000dbf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:33:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030005000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:33:40 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/4096, 0xa2, 0x0) 18:33:40 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000006800664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:33:40 executing program 7: socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000000)=0x9, 0x4) 18:33:40 executing program 1: ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000040)={0x1, 0x1, 0x6, 0x0, 0x1}) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000b40), 0x6100, 0x0) ioctl$CDROMSEEK(r0, 0x5316, &(0x7f0000000b00)={0x40, 0x2, 0x0, 0x6, 0x1, 0x81}) dup(r0) rt_sigsuspend(&(0x7f0000000000)={[0x200]}, 0x8) [ 2457.207984] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2457.207984] program syz-executor.6 not setting count and/or reply_len properly [ 2457.225789] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2457.225789] program syz-executor.2 not setting count and/or reply_len properly [ 2457.244003] syz-executor.0[15610]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 18:33:41 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000006c00664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:33:41 executing program 3: truncate(&(0x7f0000000000)='./file0\x00', 0x8000) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:33:41 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000ebf24000000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2457.341593] syz-executor.0[15617]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set 18:33:41 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0x9, 0x4) 18:33:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030006000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:33:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/4096, 0xd8, 0x0) [ 2457.478465] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2457.478465] program syz-executor.6 not setting count and/or reply_len properly 18:33:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180)) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) [ 2457.563255] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2457.563255] program syz-executor.2 not setting count and/or reply_len properly 18:33:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/4096, 0x10e, 0x0) 18:33:56 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000007400664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:33:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)) 18:33:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="deaf1830c5f110117b31ca40515542f0a9e74329b863ae4f3eb3f2e8747db5c4f51923493ffe6299981b3d9ff6e7294479b2f05491a4", 0x36, 0x80000001) pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) 18:33:56 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0x9, 0x4) 18:33:56 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24000000016d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:33:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600030007000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:33:56 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@dev}, {0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) [ 2472.645699] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2472.645699] program syz-executor.6 not setting count and/or reply_len properly 18:33:56 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000007a00664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:33:56 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf24020000026d1d59b13c0600030000000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2472.715857] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2472.715857] program syz-executor.2 not setting count and/or reply_len properly 18:33:56 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0) clock_gettime(0x0, &(0x7f0000000380)) ppoll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) 18:33:56 executing program 1: rt_sigsuspend(&(0x7f0000000000)={[0x200]}, 0x8) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x6, 0x4, &(0x7f00000000c0)={[0x2]}, 0x8) [ 2472.801461] sg_write: data in/out 512/245 bytes for SCSI command 0xf8-- guessing data in; [ 2472.801461] program syz-executor.5 not setting count and/or reply_len properly [ 2472.805925] ------------[ cut here ]------------ [ 2472.806260] WARNING: CPU: 0 PID: 15659 at lib/iov_iter.c:385 _copy_from_iter+0x2f1/0x13b0 [ 2472.806902] Modules linked in: [ 2472.807126] CPU: 0 PID: 15659 Comm: syz-executor.5 Not tainted 6.5.0-rc7-next-20230824 #1 [ 2472.807676] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2472.808244] RIP: 0010:_copy_from_iter+0x2f1/0x13b0 [ 2472.808613] Code: 7f ff ff 89 c3 e9 1f ff ff ff e8 6a e8 33 ff be 85 01 00 00 48 c7 c7 00 6b 9f 84 e8 19 aa 58 ff e9 13 fe ff ff e8 4f e8 33 ff <0f> 0b 45 31 f6 e9 67 ff ff ff e8 40 e8 33 ff 31 ff 89 ee e8 77 e3 [ 2472.809845] RSP: 0018:ffff888041257608 EFLAGS: 00010216 [ 2472.810200] RAX: 00000000000027c6 RBX: 0000000000000000 RCX: ffffc9000361e000 [ 2472.810676] RDX: 0000000000040000 RSI: ffffffff8219a881 RDI: 0000000000000001 [ 2472.811156] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 2472.811653] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000200 [ 2472.812180] R13: ffffea0000e03800 R14: 0000000000000200 R15: ffff888041257838 [ 2472.815770] FS: 00007fcec0e8f700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 2472.816298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2472.816716] CR2: 00007f3807e819e8 CR3: 000000000d900000 CR4: 0000000000350ef0 [ 2472.817219] Call Trace: [ 2472.817400] [ 2472.817581] ? show_regs+0x96/0xa0 [ 2472.817857] ? __warn+0xe6/0x340 [ 2472.818105] ? _copy_from_iter+0x2f1/0x13b0 [ 2472.818402] ? report_bug+0x2fe/0x400 [ 2472.818689] ? _copy_from_iter+0x2f1/0x13b0 [ 2472.819016] ? handle_bug+0x98/0x120 [ 2472.819282] ? exc_invalid_op+0x36/0x80 [ 2472.819584] ? asm_exc_invalid_op+0x1a/0x20 [ 2472.819946] ? _copy_from_iter+0x2f1/0x13b0 [ 2472.820272] ? _copy_from_iter+0x2f1/0x13b0 [ 2472.820617] ? _copy_from_iter+0x2f1/0x13b0 [ 2472.820981] ? __pfx__copy_from_iter+0x10/0x10 [ 2472.821328] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2472.821829] ? bio_add_hw_page+0x1bf/0x450 [ 2472.822249] ? bio_add_pc_page+0xbc/0x100 [ 2472.822666] copy_page_from_iter+0xe3/0x180 [ 2472.823116] blk_rq_map_user_iov+0xb39/0x1740 [ 2472.823601] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2472.824114] ? __mutex_lock+0x12a1/0x1a30 [ 2472.824572] blk_rq_map_user_io+0x1d1/0x200 [ 2472.825034] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2472.825524] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2472.826080] ? tick_nohz_tick_stopped+0x11/0x50 [ 2472.826565] sg_common_write.constprop.0+0xd8d/0x15f0 [ 2472.827116] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2472.827694] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2472.828227] sg_write.part.0+0x69e/0xac0 [ 2472.828670] ? __pfx_sg_write.part.0+0x10/0x10 [ 2472.829181] ? __lock_acquire+0xc3f/0x6340 [ 2472.829613] ? wake_up_q+0x9e/0x140 [ 2472.829899] ? inode_security+0x105/0x140 [ 2472.830201] ? avc_policy_seqno+0x9/0x20 [ 2472.830506] ? selinux_file_permission+0x9c/0x520 [ 2472.830883] sg_write+0x8d/0xe0 [ 2472.831138] vfs_write+0x2b9/0xda0 [ 2472.831407] ? __pfx_sg_write+0x10/0x10 [ 2472.831711] ? __pfx_vfs_write+0x10/0x10 [ 2472.832037] ? __fget_files+0x267/0x480 [ 2472.832333] ? __fget_light+0xe5/0x270 [ 2472.832643] ksys_write+0x122/0x250 [ 2472.832941] ? __pfx_ksys_write+0x10/0x10 [ 2472.833257] ? lockdep_hardirqs_on_prepare+0x27b/0x3f0 [ 2472.833643] do_syscall_64+0x3f/0x90 [ 2472.833934] entry_SYSCALL_64_after_hwframe+0x6e/0xd8 [ 2472.834309] RIP: 0033:0x7fcec3919b19 [ 2472.834589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2472.835862] RSP: 002b:00007fcec0e8f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2472.836393] RAX: ffffffffffffffda RBX: 00007fcec3a2cf60 RCX: 00007fcec3919b19 [ 2472.836950] RDX: 0000000000000125 RSI: 0000000020000400 RDI: 0000000000000003 [ 2472.837453] RBP: 00007fcec3973f6d R08: 0000000000000000 R09: 0000000000000000 [ 2472.837970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2472.838471] R13: 00007ffcb1fd025f R14: 00007fcec0e8f300 R15: 0000000000022000 [ 2472.839019] [ 2472.839196] irq event stamp: 1049 [ 2472.839444] hardirqs last enabled at (1059): [] console_unlock+0x2a8/0x2e0 [ 2472.840081] hardirqs last disabled at (1070): [] console_unlock+0x28d/0x2e0 [ 2472.840699] softirqs last enabled at (338): [] irq_exit_rcu+0x93/0xc0 [ 2472.841318] softirqs last disabled at (1089): [] irq_exit_rcu+0x93/0xc0 [ 2472.844235] ---[ end trace 0000000000000000 ]--- [ 2472.857868] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2472.857868] program syz-executor.6 not setting count and/or reply_len properly 18:33:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') pread64(r0, &(0x7f0000000180)=""/4096, 0x144, 0x0) 18:33:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600032707000000664c95d3633dc0d9172ab06dfc35f8"], 0x125) 18:33:56 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0x9, 0x4) 18:33:56 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x6c8401, 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/config\x00') pread64(r0, &(0x7f0000000000)=""/172, 0xac, 0xff) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@mcast2, @private2, @remote, 0x5, 0x3ff, 0x5fd6, 0x100, 0x2, 0x809a0080, r3}) pread64(r0, &(0x7f0000000100)=""/192, 0xc0, 0xa3d) 18:33:56 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00040300", @ANYRES32=0x0, @ANYBLOB="0c00990001000000000000000a00061025a87144e74e26f108021100f81b109586000000"], 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x82e8997f88873560) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0x5, 0x8000]) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write$vga_arbiter(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="700000646f4ad7881b29d2fbb36bf49e524ddb"], 0xb) clock_gettime(0x0, &(0x7f0000000380)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@remote}, {0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b3be82e006c101c}, {{}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}}}, 0xe8) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1f}, 0x1c) r6 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, &(0x7f00000004c0), 0x7000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) ioctl$EVIOCGABS2F(r6, 0x8018456f, &(0x7f00000001c0)=""/45) clock_gettime(0x0, &(0x7f0000000140)) clock_gettime(0x3, &(0x7f0000000040)) ppoll(&(0x7f0000000300)=[{r3}, {r4}], 0x2, 0x0, 0x0, 0x0) 18:33:56 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x2) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000bf003e0008026d1d59b13c0600000000000200664c95d3633dc0d9172ab06dfc35f8"], 0x125) [ 2473.054037] sg_write: data in/out 134233564/247 bytes for SCSI command 0xf8-- guessing data in; [ 2473.054037] program syz-executor.6 not setting count and/or reply_len properly [ 2473.099232] sg_write: data in/out 134233564/245 bytes for SCSI command 0xf8-- guessing data in; [ 2473.099232] program syz-executor.2 not setting count and/or reply_len properly VM DIAGNOSIS: 18:33:56 Registers: info registers vcpu 0 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8255ec85 RDI=ffffffff87f02b60 RBP=ffffffff87f02b20 RSP=ffff888041256fb0 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000066 R11=0000000000000001 R12=0000000000000066 R13=ffffffff87f02b20 R14=0000000000000010 R15=ffffffff8255ec70 RIP=ffffffff8255ecdd RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fcec0e8f700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3807e819e8 CR3=000000000d900000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000080000001 RBX=ffff88800c937aa0 RCX=ffffffff8113b7ff RDX=ffff888015780000 RSI=0000000000000000 RDI=0000000000000007 RBP=0000000000000000 RSP=ffff88800c937a18 R8 =0000000000000007 R9 =0000000000000000 R10=ffffffff846000e9 R11=0000000000000001 R12=0000000000000001 R13=ffffffff846000e9 R14=ffff88800c937ae1 R15=ffff88800c937b40 RIP=ffffffff814d8ad1 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555617e400 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555556187c58 CR3=0000000031084000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000ff000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000